last executing test programs: 6m34.843179745s ago: executing program 1 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_emit_ethernet(0x3ba, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000021c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r6], 0x48}}, 0x0) 6m30.552202085s ago: executing program 1 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2c, 0x25dedbff, {0x0, 0x0, 0x0, 0x0, 0x56d09, 0x41025}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10000000}, 0x40040) 6m27.551783708s ago: executing program 1 (id=22): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 6m25.503385471s ago: executing program 1 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x2c060000) unshare(0x8000400) 6m22.645003034s ago: executing program 1 (id=27): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) waitid(0x2, r2, 0x0, 0x8, 0x0) 6m11.168387974s ago: executing program 1 (id=39): r0 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000180)={0xa, 0x4}, 0xc) 5m55.531305719s ago: executing program 32 (id=39): r0 = openat(0xffffffffffffff9c, 0x0, 0x101, 0x0) writev(r0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x4000000000009) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/clocksource/clocksource0/current_clocksource\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r5, &(0x7f0000000180)={0xa, 0x4}, 0xc) 3m24.181851935s ago: executing program 2 (id=270): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x40049366, 0x0) 3m23.307870433s ago: executing program 2 (id=272): socket$packet(0x11, 0x3, 0x300) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000280)={@my=0x0}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x1000)=nil, &(0x7f0000ff1000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x3, 0xfff0}, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 3m22.064265626s ago: executing program 2 (id=274): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) getpid() syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aea", 0x4b}], 0x1) 3m21.601566455s ago: executing program 2 (id=275): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="1c0000005200010001000000fcdbdf250a00000008000100", @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x404c001}, 0x20000000) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000010029bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="8db20200211a0100140003006e657464657673696d3000000000000014001680100001800c000400070000f7"], 0x5c}, 0x1, 0x0, 0x0, 0xc1}, 0x48880) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) unshare(0x2020400) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0x2c) syz_emit_ethernet(0x0, 0x0, 0x0) 3m20.058627623s ago: executing program 2 (id=276): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x840, 0x0) r4 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) 3m17.728871293s ago: executing program 2 (id=279): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000001bc0)=@ethtool_wolinfo={0x0, 0x9, 0x8, "cc0bc6152f40"}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 3m2.678011164s ago: executing program 33 (id=279): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89b0, &(0x7f0000000240)={'team_slave_0\x00', &(0x7f0000001bc0)=@ethtool_wolinfo={0x0, 0x9, 0x8, "cc0bc6152f40"}}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000340)=""/102400, 0x19000) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 19.664022716s ago: executing program 3 (id=473): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000070000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 1 1\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) 14.736145294s ago: executing program 0 (id=477): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 14.135624743s ago: executing program 4 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102400, 0x19000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) waitid(0x2, 0x0, 0x0, 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x306c1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, r2, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 13.285583494s ago: executing program 0 (id=479): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={0x0, 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x80, 0x0, 0x0, 0x5}) 12.163416853s ago: executing program 0 (id=480): socket(0x2, 0x80805, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0, 0x50}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000002000010"], 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) writev(0xffffffffffffffff, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_io_uring_setup(0x1f96, &(0x7f0000000080)={0x0, 0x901670, 0x40000, 0x0, 0x200}, 0x0, 0x0, &(0x7f0000000000)) 11.496246576s ago: executing program 3 (id=481): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r2, &(0x7f0000000300), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r3, &(0x7f0000000380)='4', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='4096', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='1:0', 0x3) write(r5, &(0x7f00000004c0)='1:1', 0x3) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/block/md0/md/dev-ram0/slot\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='0', 0x1) r7 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r7, &(0x7f0000000640)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/block/md0/md/dev-ram3/slot\x00', 0x1, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r8, &(0x7f00000007c0)='active', 0x6) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x0, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xfffffffffffffffd, 0x80, 0x1, 0x0, 0x7, 0x4, 0x5, 0xfffffffffffffffa, 0x8000009654, 0x225c17d03, 0x808, 0x0, 0x10, 0x20007, 0x7ffffffffffffb, 0xcc0, 0x1, 0x5, 0x94d6, 0x0, 0x1ff, 0x40000809, 0x0, 0xfffffffffffffffa, 0x5, 0x2000000000004}) syz_usb_control_io(r0, 0x0, 0x0) 11.284389209s ago: executing program 0 (id=482): r0 = syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000491) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffef}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x100) fsopen(&(0x7f0000000240)='ext4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x9, 0x6, 0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f0000000080)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) 8.651106151s ago: executing program 4 (id=483): r0 = io_uring_setup(0x2f04, &(0x7f000000c480)={0x0, 0xe8e2, 0x10, 0x20001, 0x2d7}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x163882, 0x6d) readv(r1, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000900)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1e, &(0x7f0000000280)=[r0], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000140)='source\x00', &(0x7f0000000180)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='addr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000002c0)='vers\x00', &(0x7f0000000300)='4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000003c0)='timeo\x00', &(0x7f0000000400)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000240)={0x24, @none={0x0, 0x1}}, 0x14) sendmmsg(0xffffffffffffffff, &(0x7f00000196c0), 0x0, 0x400c010) 6.988130879s ago: executing program 3 (id=484): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x200c8100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x1, 0x5000003a, r4, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) read$FUSE(r5, &(0x7f0000000f40)={0x2020}, 0x2020) 6.599569709s ago: executing program 0 (id=485): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x8, 0x100, 0x3}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) r11 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r11, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) read$FUSE(r0, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ptrace$getenv(0x4201, r12, 0x1, &(0x7f0000004080)) r13 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r14 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r14, 0x4018620d, &(0x7f0000000100)) r15 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r16 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r16, 0xc0306201, 0x0) dup3(r16, r15, 0x80000) lseek(r13, 0x851, 0x0) syz_ublk_setup_queues(r10, r9, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r3}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r10, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r8, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) 6.160100085s ago: executing program 4 (id=486): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x2000090, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r1, &(0x7f0000000540), 0x0) 4.31286633s ago: executing program 0 (id=487): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='100000', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000f9a000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000c80000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x3, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1608000004"], 0x50) io_uring_enter(r4, 0x4095, 0x7721, 0x16, 0x0, 0x0) 3.971318816s ago: executing program 4 (id=488): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r2 = syz_open_dev$usbfs(0x0, 0x206, 0x20182) ioctl$USBDEVFS_BULK(r2, 0x5523, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000002600)={0x0, 0x2, "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"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.348952983s ago: executing program 4 (id=489): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xa, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, &(0x7f0000000300)='devtmpfs\x00', 0x1214040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000070000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='10 1 1\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim10/sriov_numvfs\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1\x00', 0x2) close(r1) socket$nl_route(0x10, 0x3, 0x0) 2.206301075s ago: executing program 3 (id=490): pipe2(&(0x7f00000004c0)={0xffffffffffffffff}, 0x800) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xffff) 1.445808687s ago: executing program 3 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000500)=""/102400, 0x19000) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000000c0), 0x4) waitid(0x2, 0x0, 0x0, 0x8, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x306c1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, r2, 0x200000000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.302500816s ago: executing program 4 (id=492): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$unix(r0, &(0x7f0000005b40)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000200)="68cabf2dfb58fc0a01008888ffff0200258f", 0x12}], 0x2}, 0x4000000) 0s ago: executing program 3 (id=493): r0 = syz_open_dev$video(0x0, 0x8, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x24000491) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xd, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffef}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x1, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x100a}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd25, 0x25dfdbff, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x10000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}}, 0x100) fsopen(&(0x7f0000000240)='ext4\x00', 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioperm(0x9, 0x6, 0x7) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, &(0x7f0000000080)) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000940)={0xa, 0x0, 0x3, {0xa, 0x1000, 0x4, 0x2}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. [ 92.067133][ T997] cfg80211: failed to load regulatory.db [ 92.352237][ T5572] cgroup: Unknown subsys name 'net' [ 92.611342][ T5572] cgroup: Unknown subsys name 'cpuset' [ 92.676592][ T5572] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.672687][ T5572] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.398958][ T5590] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.400985][ T5590] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.408400][ T5590] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.453364][ T5595] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.468481][ T5595] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.507074][ T5590] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.511804][ T5595] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.512270][ T5595] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.530142][ T5587] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.533157][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.575361][ T5595] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.580580][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.584063][ T5595] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.584074][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.588457][ T5595] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.590716][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.601845][ T5597] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.622070][ T5587] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.627098][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.628333][ T5587] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.630851][ T5587] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.653536][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.671852][ T5590] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.680415][ T5590] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.691397][ T5585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.708036][ T5590] Bluetooth: hci4: command tx timeout [ 99.708163][ T5590] Bluetooth: hci2: command tx timeout [ 99.786025][ T5598] Bluetooth: hci1: command tx timeout [ 99.866064][ T5590] Bluetooth: hci3: command tx timeout [ 99.866324][ T5598] Bluetooth: hci0: command tx timeout [ 100.619483][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.620662][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.620804][ T5591] bridge_slave_0: entered allmulticast mode [ 100.622884][ T5591] bridge_slave_0: entered promiscuous mode [ 100.664213][ T5583] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.664343][ T5583] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.664460][ T5583] bridge_slave_0: entered allmulticast mode [ 100.668859][ T5583] bridge_slave_0: entered promiscuous mode [ 100.729286][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.729381][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.729730][ T5591] bridge_slave_1: entered allmulticast mode [ 100.732992][ T5591] bridge_slave_1: entered promiscuous mode [ 100.772287][ T5583] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.772415][ T5583] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.772615][ T5583] bridge_slave_1: entered allmulticast mode [ 100.774831][ T5583] bridge_slave_1: entered promiscuous mode [ 100.805546][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.805671][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.805806][ T5582] bridge_slave_0: entered allmulticast mode [ 100.821095][ T5582] bridge_slave_0: entered promiscuous mode [ 100.829005][ T5584] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.829388][ T5584] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.844288][ T5584] bridge_slave_0: entered allmulticast mode [ 100.852966][ T5584] bridge_slave_0: entered promiscuous mode [ 100.877926][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.878069][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.878189][ T5586] bridge_slave_0: entered allmulticast mode [ 100.880632][ T5586] bridge_slave_0: entered promiscuous mode [ 100.918212][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.918299][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.918428][ T5582] bridge_slave_1: entered allmulticast mode [ 100.920259][ T5582] bridge_slave_1: entered promiscuous mode [ 100.921819][ T5584] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.921939][ T5584] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.922075][ T5584] bridge_slave_1: entered allmulticast mode [ 100.923958][ T5584] bridge_slave_1: entered promiscuous mode [ 100.984697][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.984822][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.985002][ T5586] bridge_slave_1: entered allmulticast mode [ 100.992680][ T5586] bridge_slave_1: entered promiscuous mode [ 101.060012][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.085122][ T5583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.131000][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.155545][ T5583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.169075][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.172449][ T5584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.207923][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.232478][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.235097][ T5584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.274772][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.331505][ T5591] team0: Port device team_slave_0 added [ 101.354395][ T5583] team0: Port device team_slave_0 added [ 101.398402][ T5591] team0: Port device team_slave_1 added [ 101.435015][ T5583] team0: Port device team_slave_1 added [ 101.442322][ T5582] team0: Port device team_slave_0 added [ 101.445562][ T5584] team0: Port device team_slave_0 added [ 101.471608][ T5586] team0: Port device team_slave_0 added [ 101.494496][ T5582] team0: Port device team_slave_1 added [ 101.499735][ T5584] team0: Port device team_slave_1 added [ 101.523605][ T5586] team0: Port device team_slave_1 added [ 101.572813][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.572826][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.572845][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.634286][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.634299][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.634318][ T5583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.698718][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.698736][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.698762][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.761613][ T5583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.761630][ T5583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.761657][ T5583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.762910][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.762922][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.762940][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.764158][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.764171][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.764197][ T5584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.787973][ T5590] Bluetooth: hci4: command tx timeout [ 101.788072][ T5598] Bluetooth: hci2: command tx timeout [ 101.837615][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.837671][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.837746][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.867586][ T5598] Bluetooth: hci1: command tx timeout [ 101.909300][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.909363][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.909437][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.938799][ T5584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.938856][ T5584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.938934][ T5584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.956030][ T5598] Bluetooth: hci0: command tx timeout [ 101.956063][ T5598] Bluetooth: hci3: command tx timeout [ 102.066488][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.066590][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.066617][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.644066][ T5591] hsr_slave_0: entered promiscuous mode [ 102.645314][ T5591] hsr_slave_1: entered promiscuous mode [ 102.693712][ T5583] hsr_slave_0: entered promiscuous mode [ 102.694658][ T5583] hsr_slave_1: entered promiscuous mode [ 102.695524][ T5583] debugfs: 'hsr0' already exists in 'hsr' [ 102.695609][ T5583] Cannot create hsr debugfs directory [ 102.755970][ T5582] hsr_slave_0: entered promiscuous mode [ 102.757082][ T5582] hsr_slave_1: entered promiscuous mode [ 102.757914][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 102.757931][ T5582] Cannot create hsr debugfs directory [ 102.777079][ T5584] hsr_slave_0: entered promiscuous mode [ 102.781289][ T5584] hsr_slave_1: entered promiscuous mode [ 102.784006][ T5584] debugfs: 'hsr0' already exists in 'hsr' [ 102.784069][ T5584] Cannot create hsr debugfs directory [ 102.820055][ T5586] hsr_slave_0: entered promiscuous mode [ 102.821079][ T5586] hsr_slave_1: entered promiscuous mode [ 102.821753][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 102.821770][ T5586] Cannot create hsr debugfs directory [ 103.866213][ T5590] Bluetooth: hci2: command tx timeout [ 103.866244][ T5590] Bluetooth: hci4: command tx timeout [ 103.892693][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 103.940502][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.958022][ T5598] Bluetooth: hci1: command tx timeout [ 103.964711][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.002710][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.011855][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.026089][ T5598] Bluetooth: hci3: command tx timeout [ 104.026120][ T5598] Bluetooth: hci0: command tx timeout [ 104.051475][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.075766][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.110921][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.254285][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.290546][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.294780][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.331956][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.342092][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.390619][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.418945][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.456792][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.596448][ T5583] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.631192][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.645655][ T5583] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.670970][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.682775][ T5583] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.711190][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.739478][ T5583] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.771461][ T5583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.902586][ T5586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.929949][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.952381][ T5586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.980062][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.997889][ T5586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.045750][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.090230][ T5586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.120597][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.199961][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.322232][ T5584] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.351750][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.379249][ T5584] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.419670][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.451676][ T5584] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.469837][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.473435][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.499006][ T5584] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.519885][ T5584] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.556515][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.556737][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.624097][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.624206][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.653418][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.798588][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.844065][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.844214][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.901592][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.904300][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.933520][ T5583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.946130][ T5598] Bluetooth: hci2: command tx timeout [ 105.946171][ T5590] Bluetooth: hci4: command tx timeout [ 106.026517][ T5590] Bluetooth: hci1: command tx timeout [ 106.106219][ T5598] Bluetooth: hci0: command tx timeout [ 106.106253][ T5598] Bluetooth: hci3: command tx timeout [ 106.137664][ T5583] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.161463][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.218221][ T2357] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.218370][ T2357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.283087][ T2357] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.284166][ T2357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.348699][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.381643][ T5584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.417958][ T3356] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.418075][ T3356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.480278][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.480415][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.554277][ T5584] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.616171][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.620887][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.693387][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.693594][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.318604][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.791867][ T5591] veth0_vlan: entered promiscuous mode [ 107.857692][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.961747][ T5591] veth1_vlan: entered promiscuous mode [ 108.249844][ T5583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.253885][ T5591] veth0_macvtap: entered promiscuous mode [ 108.275043][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.275387][ T5582] veth0_vlan: entered promiscuous mode [ 108.334810][ T5591] veth1_macvtap: entered promiscuous mode [ 108.449493][ T5582] veth1_vlan: entered promiscuous mode [ 108.549612][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.581445][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.584702][ T5584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.708117][ T5583] veth0_vlan: entered promiscuous mode [ 108.724671][ T5586] veth0_vlan: entered promiscuous mode [ 108.735289][ T5582] veth0_macvtap: entered promiscuous mode [ 108.852872][ T5582] veth1_macvtap: entered promiscuous mode [ 108.958117][ T5583] veth1_vlan: entered promiscuous mode [ 108.989174][ T5586] veth1_vlan: entered promiscuous mode [ 109.181838][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.254058][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.355781][ T5583] veth0_macvtap: entered promiscuous mode [ 109.370406][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.370433][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.474078][ T5586] veth0_macvtap: entered promiscuous mode [ 109.494054][ T5583] veth1_macvtap: entered promiscuous mode [ 109.572608][ T5586] veth1_macvtap: entered promiscuous mode [ 109.618769][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.618790][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.885072][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.984561][ T5584] veth0_vlan: entered promiscuous mode [ 109.994282][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.005808][ T5583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.047215][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.047234][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.090879][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.185671][ T5584] veth1_vlan: entered promiscuous mode [ 110.238053][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.238075][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.188819][ T5584] veth0_macvtap: entered promiscuous mode [ 111.312086][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.312105][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.344864][ T5584] veth1_macvtap: entered promiscuous mode [ 111.516215][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.516238][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.617974][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.717332][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.717354][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.772690][ T5584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.955503][ T3282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.955525][ T3282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.311255][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.674419][ T1121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.726971][ T5794] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.055274][ T3282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.116464][ T3282] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.983762][ T9] usb 3-1: device descriptor read/all, error -71 [ 118.082879][ T3374] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.083219][ T3374] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.084275][ T3374] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.117511][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.120254][ T3374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.259009][ T5810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9'. [ 118.364950][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.364988][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.482180][ T66] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.495411][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.495431][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.595923][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.615914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.625914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.635910][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.645917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.655915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.665922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.675915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.685927][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 120.695915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 121.319050][ T66] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.321564][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.321856][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.322221][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.322439][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.322922][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.711968][ T5823] netlink: 44 bytes leftover after parsing attributes in process `syz.1.14'. [ 121.733979][ T3282] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.749153][ T1121] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.750873][ T1894] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.750987][ T1894] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.751091][ T1894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.276777][ T5703] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 128.087539][ T5703] usb 3-1: Using ep0 maxpacket: 32 [ 128.089126][ T5703] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 128.225600][ T5703] usb 3-1: config index 0 descriptor too short (expected 249, got 27) [ 128.225621][ T5703] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.225635][ T5703] usb 3-1: config 0 has no interfaces? [ 128.225657][ T5703] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.093267][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888061680800: rx timeout, send abort [ 130.673103][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888061680800: abort rx timeout. Force session deactivation [ 130.811523][ T5703] usb 3-1: config 0 descriptor?? [ 130.930121][ T5703] usb 3-1: can't set config #0, error -71 [ 131.292638][ T5703] usb 3-1: USB disconnect, device number 4 [ 133.141223][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.141353][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.521263][ T5889] netlink: 20 bytes leftover after parsing attributes in process `syz.2.32'. [ 138.010115][ T5889] team0 (unregistering): Port device team_slave_0 removed [ 138.091732][ T5889] team0 (unregistering): Port device team_slave_1 removed [ 139.166004][ T5702] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 139.321880][ T5702] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 139.352615][ T5702] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 139.352725][ T5702] usb 5-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 139.352748][ T5702] usb 5-1: config 150 has no interface number 0 [ 139.352783][ T5702] usb 5-1: config 150 interface 204 has no altsetting 0 [ 139.389059][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.389089][ T5702] usb 5-1: Product: syz [ 139.389104][ T5702] usb 5-1: Manufacturer: syz [ 139.389119][ T5702] usb 5-1: SerialNumber: syz [ 139.425526][ T5722] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.646123][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 139.647924][ T5722] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 139.649562][ T5722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.649587][ T5722] usb 3-1: config 0 has no interfaces? [ 139.649618][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.739765][ T5722] usb 3-1: config 0 descriptor?? [ 139.814819][ T5702] xr_serial 5-1:150.204: skipping garbage [ 139.814842][ T5702] xr_serial 5-1:150.204: skipping garbage [ 142.374919][ T5702] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.497764][ T5896] usb 3-1: USB disconnect, device number 5 [ 142.605991][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 142.606858][ T5702] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 142.609355][ T5702] usb 4-1: config index 0 descriptor too short (expected 249, got 27) [ 142.609382][ T5702] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.609402][ T5702] usb 4-1: config 0 has no interfaces? [ 142.609432][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.700948][ T5702] usb 4-1: config 0 descriptor?? [ 142.938655][ T5717] usb 5-1: USB disconnect, device number 2 [ 143.029307][ T5922] trusted_key: syz.4.41 sent an empty control message without MSG_MORE. [ 145.364456][ T5717] usb 4-1: USB disconnect, device number 2 [ 148.546008][ T5702] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 149.145966][ T5702] usb 3-1: Using ep0 maxpacket: 8 [ 149.147708][ T5702] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.149540][ T5702] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.149592][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.201726][ T5702] usb 3-1: config 0 descriptor?? [ 149.224024][ T5702] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 151.631115][ T5722] usb 3-1: USB disconnect, device number 6 [ 152.329749][ T5722] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 152.495964][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 152.496819][ T5722] usb 3-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 152.498379][ T5722] usb 3-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 152.498427][ T5722] usb 3-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 152.498456][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.498489][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.682509][ T5722] usb 3-1: config 0 descriptor?? [ 158.428076][ T5722] usbhid 3-1:0.0: can't add hid device: -71 [ 158.428217][ T5722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 158.438695][ T5722] usb 3-1: USB disconnect, device number 7 [ 159.076178][ T5722] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.303448][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 159.303994][ T5722] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 159.305071][ T5722] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.305107][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.340143][ T5590] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 159.372682][ T5590] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 159.387662][ T5590] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 159.404029][ T5590] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 159.407463][ T5590] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 159.432711][ T5722] usb 3-1: config 0 descriptor?? [ 159.610159][ T5722] iowarrior 3-1:0.0: no interrupt-in endpoint found [ 162.369869][ T59] Bluetooth: hci5: command tx timeout [ 164.299925][ T5896] usb 3-1: USB disconnect, device number 8 [ 164.427135][ T59] Bluetooth: hci5: command tx timeout [ 165.370719][ T6034] syz.4.55 (6034): drop_caches: 2 [ 165.665312][ T6070] syz.4.76 uses obsolete (PF_INET,SOCK_PACKET) [ 167.062977][ T59] Bluetooth: hci5: command tx timeout [ 168.104954][ T6005] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.077832][ T59] Bluetooth: hci5: command tx timeout [ 169.346044][ T5703] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 169.381101][ T6005] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.496638][ T5703] usb 4-1: Using ep0 maxpacket: 8 [ 169.497524][ T5703] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 169.652050][ T5703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.652113][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.790391][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 169.790597][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 169.792319][ T5590] Bluetooth: hci2: hardware error 0x00 [ 169.872565][ T5703] usb 4-1: config 0 descriptor?? [ 169.950005][ T5703] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 170.042974][ T6087] IPVS: ip_vs_add_dest(): server weight less than zero [ 170.104896][ T5702] IPVS: starting estimator thread 0... [ 170.257226][ T6088] IPVS: using max 9 ests per chain, 21600 per kthread [ 170.336518][ T6005] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.868021][ T6101] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 172.022033][ T5896] usb 4-1: USB disconnect, device number 3 [ 172.188127][ T5590] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 173.947560][ T6102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.051855][ T6102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.130995][ T6102] bond0 (unregistering): (slave ip6gretap0): Releasing backup interface [ 174.229582][ T6102] bond0 (unregistering): Released all slaves [ 174.682226][ T6005] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.966870][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.967003][ T6035] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.967191][ T6035] bridge_slave_0: entered allmulticast mode [ 183.997228][ T6035] bridge_slave_0: entered promiscuous mode [ 184.121023][ T6035] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.121160][ T6035] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.121397][ T6035] bridge_slave_1: entered allmulticast mode [ 184.125172][ T6035] bridge_slave_1: entered promiscuous mode [ 184.419613][ T6035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.455159][ T6035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.646074][ T6005] bridge_slave_1: left allmulticast mode [ 184.646248][ T6005] bridge_slave_1: left promiscuous mode [ 184.678185][ T6005] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.770189][ T36] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 184.788897][ T6160] netlink: 'syz.2.98': attribute type 1 has an invalid length. [ 184.871852][ T6005] bridge_slave_0: left allmulticast mode [ 184.871899][ T6005] bridge_slave_0: left promiscuous mode [ 184.872149][ T6005] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.925971][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 184.947720][ T36] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 184.977163][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.977218][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.977263][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.025117][ T36] usb 1-1: config 0 descriptor?? [ 185.035129][ T36] iowarrior 1-1:0.0: no interrupt-in endpoint found [ 186.056635][ T6005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 186.136683][ T6005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 186.181708][ T6005] bond0 (unregistering): Released all slaves [ 186.345339][ T6160] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 188.406507][ T5896] usb 1-1: USB disconnect, device number 2 [ 189.956019][ T6182] faux_driver vgem: [drm] Unknown color mode 3; guessing buffer size. [ 192.665521][ T6035] team0: Port device team_slave_0 added [ 192.738177][ T6035] team0: Port device team_slave_1 added [ 193.206139][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.206157][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.206184][ T6035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.213937][ T6035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.213954][ T6035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.213981][ T6035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.443852][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.443933][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.811938][ T6035] hsr_slave_0: entered promiscuous mode [ 195.812944][ T6035] hsr_slave_1: entered promiscuous mode [ 195.813594][ T6035] debugfs: 'hsr0' already exists in 'hsr' [ 195.813624][ T6035] Cannot create hsr debugfs directory [ 196.430234][ T6005] hsr_slave_0: left promiscuous mode [ 196.469887][ T6005] hsr_slave_1: left promiscuous mode [ 196.473518][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.473598][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.529212][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.529258][ T6005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.813760][ T6005] veth1_macvtap: left promiscuous mode [ 198.814034][ T6005] veth0_macvtap: left promiscuous mode [ 198.814338][ T6005] veth1_vlan: left promiscuous mode [ 198.814698][ T6005] veth0_vlan: left promiscuous mode [ 200.834935][ T5695] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 201.021253][ T5695] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 201.022499][ T5695] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 201.022525][ T5695] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 201.022546][ T5695] usb 1-1: config 150 has no interface number 1 [ 201.022590][ T5695] usb 1-1: config 150 interface 204 has no altsetting 0 [ 201.069763][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.069791][ T5695] usb 1-1: Product: syz [ 201.069807][ T5695] usb 1-1: Manufacturer: syz [ 201.069821][ T5695] usb 1-1: SerialNumber: syz [ 201.353804][ T5695] xr_serial 1-1:150.204: skipping garbage [ 204.099281][ T5717] usb 1-1: USB disconnect, device number 3 [ 204.762441][ T5722] IPVS: starting estimator thread 0... [ 204.866786][ T6260] IPVS: using max 7 ests per chain, 16800 per kthread [ 209.011369][ T6005] team0 (unregistering): Port device team_slave_1 removed [ 209.087908][ T6005] team0 (unregistering): Port device team_slave_0 removed [ 210.076144][ T6279] netlink: 44 bytes leftover after parsing attributes in process `syz.2.135'. [ 210.944772][ T5247] 8021q: adding VLAN 0 to HW filter on device eth1 [ 217.966483][ T6035] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 218.106834][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 218.111136][ T6035] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.260671][ T6035] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.509441][ T5247] 8021q: adding VLAN 0 to HW filter on device eth2 [ 218.556758][ T5717] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 218.953462][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 218.966836][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.966892][ T5717] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 218.972206][ T5717] usb 5-1: config 4 has an invalid interface number: 127 but max is 0 [ 218.972230][ T5717] usb 5-1: config 4 has no interface number 0 [ 218.972262][ T5717] usb 5-1: config 4 interface 127 has no altsetting 0 [ 219.944072][ T5717] usb 5-1: string descriptor 0 read error: -22 [ 219.944236][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.125282][ T5585] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.161320][ T5585] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.177551][ T5585] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.204689][ T5585] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.230535][ T5585] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.798088][ T6341] netlink: 44 bytes leftover after parsing attributes in process `syz.3.147'. [ 222.815598][ T5585] Bluetooth: hci3: command 0x0406 tx timeout [ 222.815728][ T5585] Bluetooth: hci1: command 0x0406 tx timeout [ 222.815754][ T5585] Bluetooth: hci4: command 0x0406 tx timeout [ 222.825184][ T5585] Bluetooth: hci0: command tx timeout [ 223.369204][ T5695] usb 5-1: USB disconnect, device number 3 [ 224.906003][ T5598] Bluetooth: hci0: command tx timeout [ 226.477492][ T5247] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.986008][ T5598] Bluetooth: hci0: command tx timeout [ 229.115968][ T5598] Bluetooth: hci0: command tx timeout [ 229.355916][ T5717] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 229.517023][ T5717] usb 5-1: Using ep0 maxpacket: 16 [ 229.520842][ T5717] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.520899][ T5717] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 229.546134][ T5717] usb 5-1: config 4 has an invalid interface number: 127 but max is 0 [ 229.546160][ T5717] usb 5-1: config 4 has no interface number 0 [ 229.546193][ T5717] usb 5-1: config 4 interface 127 has no altsetting 0 [ 229.582132][ T5717] usb 5-1: string descriptor 0 read error: -22 [ 229.582276][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.416568][ T5702] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 230.637151][ T5702] usb 4-1: Using ep0 maxpacket: 8 [ 230.657145][ T5702] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 230.658781][ T5702] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.658822][ T5702] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.738427][ T5247] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.776036][ T5702] usb 4-1: config 0 descriptor?? [ 230.821927][ T5702] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 232.287336][ T10] usb 5-1: USB disconnect, device number 4 [ 233.590642][ T9] usb 4-1: USB disconnect, device number 4 [ 235.683359][ T6444] netlink: 44 bytes leftover after parsing attributes in process `syz.0.168'. [ 236.021370][ T1121] bridge_slave_1: left allmulticast mode [ 236.021397][ T1121] bridge_slave_1: left promiscuous mode [ 236.021591][ T1121] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.229431][ T1121] bridge_slave_0: left allmulticast mode [ 236.229466][ T1121] bridge_slave_0: left promiscuous mode [ 236.229753][ T1121] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.745969][ T5703] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 239.897930][ T5703] usb 3-1: Using ep0 maxpacket: 16 [ 239.906997][ T5703] usb 3-1: unable to get BOS descriptor or descriptor too short [ 239.907144][ T5703] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 239.925914][ T5703] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 239.925941][ T5703] usb 3-1: config 4 has no interface number 0 [ 239.926015][ T5703] usb 3-1: config 4 interface 127 has no altsetting 0 [ 239.952936][ T5703] usb 3-1: string descriptor 0 read error: -22 [ 239.953082][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.565982][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 241.609992][ T1121] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.725924][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 241.726777][ T10] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 241.728469][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 241.728511][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.805985][ T10] usb 4-1: config 0 descriptor?? [ 241.813646][ T1121] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.814136][ T10] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 241.911341][ T1121] bond0 (unregistering): Released all slaves [ 242.011252][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 242.233269][ T6333] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.234283][ T6333] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.234468][ T6333] bridge_slave_0: entered allmulticast mode [ 242.261117][ T6333] bridge_slave_0: entered promiscuous mode [ 242.280747][ T6333] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.281626][ T6333] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.281809][ T6333] bridge_slave_1: entered allmulticast mode [ 242.334826][ T6333] bridge_slave_1: entered promiscuous mode [ 242.545070][ T6333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.706928][ T1121] hsr_slave_0: left promiscuous mode [ 242.746870][ T1121] hsr_slave_1: left promiscuous mode [ 242.753597][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.799994][ T1121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.616564][ T6526] netlink: 44 bytes leftover after parsing attributes in process `syz.4.184'. [ 244.675956][ T9] usb 3-1: USB disconnect, device number 9 [ 244.758950][ T5702] usb 4-1: USB disconnect, device number 5 [ 246.153290][ T6541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 246.256027][ T1250] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 246.357314][ T1121] team0 (unregistering): Port device team_slave_1 removed [ 246.388997][ T1121] team0 (unregistering): Port device team_slave_0 removed [ 246.656103][ T1250] usb 4-1: Using ep0 maxpacket: 32 [ 246.657067][ T1250] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 246.662529][ T1250] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 246.662561][ T1250] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.662580][ T1250] usb 4-1: config 0 has no interface number 0 [ 246.662624][ T1250] usb 4-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 246.678524][ T1250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.678587][ T1250] usb 4-1: Product: syz [ 246.678628][ T1250] usb 4-1: Manufacturer: syz [ 246.678668][ T1250] usb 4-1: SerialNumber: syz [ 246.725855][ T1250] usb 4-1: config 0 descriptor?? [ 246.814673][ T1250] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input5 [ 246.993041][ T6333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.080067][ T6541] syz_tun: entered promiscuous mode [ 247.291938][ T1250] usb 4-1: USB disconnect, device number 6 [ 247.413587][ T6333] team0: Port device team_slave_0 added [ 247.458495][ T6333] team0: Port device team_slave_1 added [ 247.754902][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.754915][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.754932][ T6333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.798609][ T6333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.798622][ T6333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.798641][ T6333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.418263][ T6333] hsr_slave_0: entered promiscuous mode [ 248.420820][ T6333] hsr_slave_1: entered promiscuous mode [ 248.421848][ T6333] debugfs: 'hsr0' already exists in 'hsr' [ 248.421870][ T6333] Cannot create hsr debugfs directory [ 248.475954][ T1250] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 248.651303][ T1250] usb 4-1: Using ep0 maxpacket: 16 [ 248.656248][ T1250] usb 4-1: unable to get BOS descriptor or descriptor too short [ 248.656401][ T1250] usb 4-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 248.678390][ T1250] usb 4-1: config 4 has an invalid interface number: 127 but max is 0 [ 248.678416][ T1250] usb 4-1: config 4 has no interface number 0 [ 248.678449][ T1250] usb 4-1: config 4 interface 127 has no altsetting 0 [ 248.783063][ T1250] usb 4-1: string descriptor 0 read error: -22 [ 248.783163][ T1250] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.557001][ T1250] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 251.700772][ T5896] usb 4-1: USB disconnect, device number 7 [ 251.723244][ T1250] usb 5-1: Using ep0 maxpacket: 16 [ 251.743848][ T1250] usb 5-1: unable to get BOS descriptor or descriptor too short [ 251.743905][ T1250] usb 5-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=f8.c6 [ 251.753087][ T1250] usb 5-1: config 3 has an invalid interface number: 227 but max is 0 [ 251.753149][ T1250] usb 5-1: config 3 has no interface number 0 [ 251.753289][ T1250] usb 5-1: config 3 interface 227 altsetting 1 bulk endpoint 0xD has invalid maxpacket 8 [ 251.753353][ T1250] usb 5-1: config 3 interface 227 has no altsetting 0 [ 251.804782][ T1250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.804810][ T1250] usb 5-1: Product: syz [ 251.804825][ T1250] usb 5-1: Manufacturer: syz [ 251.804840][ T1250] usb 5-1: SerialNumber: syz [ 251.868694][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 251.890498][ T6576] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 252.980265][ T1250] usb 5-1: USB disconnect, device number 5 [ 254.765905][ T5896] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 254.925952][ T5896] usb 1-1: Using ep0 maxpacket: 32 [ 254.932984][ T5896] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 254.934570][ T5896] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 254.934617][ T5896] usb 1-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 254.934645][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0 [ 254.934719][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.032485][ T5896] usb 1-1: config 0 descriptor?? [ 255.469522][ T5896] usbhid 1-1:0.0: can't add hid device: -71 [ 255.469645][ T5896] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 255.506774][ T5896] usb 1-1: USB disconnect, device number 4 [ 256.096833][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.096908][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.704763][ T5722] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 258.744833][ T6629] Bluetooth: MGMT ver 1.23 [ 258.866288][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 258.875308][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 258.875363][ T5722] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 258.903355][ T5722] usb 3-1: config 4 has an invalid interface number: 127 but max is 0 [ 258.906665][ T5722] usb 3-1: config 4 has no interface number 0 [ 258.906704][ T5722] usb 3-1: config 4 interface 127 has no altsetting 0 [ 258.955922][ T5722] usb 3-1: string descriptor 0 read error: -22 [ 258.956059][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.155505][ T6645] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.2147614719.218104002), cmd(2) [ 260.380330][ T6333] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 260.458996][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 260.462751][ T6333] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 260.637800][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 260.664445][ T6333] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 260.755968][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 260.763057][ T6333] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.808515][ T6333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 261.125775][ T5703] usb 3-1: USB disconnect, device number 10 [ 261.450244][ T6333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.458320][ T6333] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.022608][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.022747][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.350205][ T1121] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.350337][ T1121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.449279][ T6688] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4294967295.2147614719.218104002), cmd(2) [ 270.185679][ T6705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 276.703557][ T6333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.976093][ T5722] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 278.336036][ T6747] erspan0: entered promiscuous mode [ 279.247904][ T6767] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.2147614719.218104002), cmd(2) [ 279.567638][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.634958][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.649447][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.652067][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.676178][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 282.474179][ T59] Bluetooth: hci5: command tx timeout [ 284.506336][ T59] Bluetooth: hci5: command tx timeout [ 286.593563][ T59] Bluetooth: hci5: command tx timeout [ 288.717664][ T5598] Bluetooth: hci5: command tx timeout [ 301.440712][ T6009] bridge_slave_1: left allmulticast mode [ 301.440751][ T6009] bridge_slave_1: left promiscuous mode [ 301.441025][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.810614][ T6009] bridge_slave_0: left allmulticast mode [ 302.810647][ T6009] bridge_slave_0: left promiscuous mode [ 302.810870][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.884129][ T5846] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 304.118029][ T5846] usb 3-1: Using ep0 maxpacket: 32 [ 304.119590][ T5846] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 304.121508][ T5846] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 304.121541][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.121591][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.200961][ T5846] usb 3-1: config 0 descriptor?? [ 308.109024][ T5846] usbhid 3-1:0.0: can't add hid device: -71 [ 308.109115][ T5846] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 308.178551][ T5846] usb 3-1: USB disconnect, device number 11 [ 309.533100][ T6009] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.659571][ T6009] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.714388][ T6009] bond0 (unregistering): Released all slaves [ 310.982357][ T6009] hsr_slave_0: left promiscuous mode [ 311.027064][ T6009] hsr_slave_1: left promiscuous mode [ 311.028164][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.081775][ T6009] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.676059][ T31] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 311.856818][ T31] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 311.858421][ T31] usb 5-1: config 1 has an invalid interface number: 103 but max is 0 [ 311.858440][ T31] usb 5-1: config 1 has no interface number 0 [ 311.858472][ T31] usb 5-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 311.858491][ T31] usb 5-1: config 1 interface 103 has no altsetting 0 [ 311.862422][ T31] usb 5-1: string descriptor 0 read error: -22 [ 311.862588][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.967777][ T6956] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 312.008499][ T31] ftdi_sio 5-1:1.103: FTDI USB Serial Device converter detected [ 312.113434][ T31] ftdi_sio ttyUSB0: unknown device type: 0x7c5c [ 315.539540][ T5846] usb 5-1: USB disconnect, device number 7 [ 315.671394][ T5722] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 315.792443][ T5846] ftdi_sio 5-1:1.103: device disconnected [ 315.856058][ T5722] usb 4-1: Using ep0 maxpacket: 16 [ 315.859401][ T5722] usb 4-1: unable to get BOS descriptor or descriptor too short [ 315.859460][ T5722] usb 4-1: New USB device found, idVendor=eb1a, idProduct=a313, bcdDevice=f8.c6 [ 315.891623][ T5722] usb 4-1: config 3 has an invalid interface number: 227 but max is 0 [ 315.891653][ T5722] usb 4-1: config 3 has no interface number 0 [ 315.891687][ T5722] usb 4-1: config 3 interface 227 has no altsetting 0 [ 315.895703][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.895730][ T5722] usb 4-1: Product: syz [ 315.898683][ T5722] usb 4-1: Manufacturer: syz [ 315.898705][ T5722] usb 4-1: SerialNumber: syz [ 319.058867][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 319.059006][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.750515][ T5722] usb 4-1: USB disconnect, device number 8 [ 320.531710][ T6009] team0 (unregistering): Port device team_slave_1 removed [ 320.669803][ T6009] team0 (unregistering): Port device team_slave_0 removed [ 322.776042][ T36] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 324.857305][ T36] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 324.859950][ T36] usb 1-1: config 1 has an invalid interface number: 103 but max is 0 [ 324.859978][ T36] usb 1-1: config 1 has no interface number 0 [ 324.860023][ T36] usb 1-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 324.860048][ T36] usb 1-1: config 1 interface 103 has no altsetting 0 [ 324.998860][ T36] usb 1-1: string descriptor 0 read error: -22 [ 324.999012][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.027426][ T7001] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 325.048441][ T36] ftdi_sio 1-1:1.103: FTDI USB Serial Device converter detected [ 325.050325][ T36] ftdi_sio ttyUSB0: unknown device type: 0x7c5c [ 327.089470][ T5896] usb 1-1: USB disconnect, device number 5 [ 327.094388][ T5896] ftdi_sio 1-1:1.103: device disconnected [ 329.375153][ T6768] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.375399][ T6768] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.375617][ T6768] bridge_slave_0: entered allmulticast mode [ 329.497671][ T6768] bridge_slave_0: entered promiscuous mode [ 329.586397][ T6768] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.586490][ T6768] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.586700][ T6768] bridge_slave_1: entered allmulticast mode [ 329.621341][ T6768] bridge_slave_1: entered promiscuous mode [ 329.762920][ T6768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.840314][ T6768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.769068][ T6768] team0: Port device team_slave_0 added [ 330.802536][ T6768] team0: Port device team_slave_1 added [ 331.355375][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.355394][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.355427][ T6768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 331.378513][ T6768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 331.378557][ T6768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 331.378637][ T6768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.936733][ T6768] hsr_slave_0: entered promiscuous mode [ 331.968155][ T6768] hsr_slave_1: entered promiscuous mode [ 331.991495][ T6768] debugfs: 'hsr0' already exists in 'hsr' [ 331.991525][ T6768] Cannot create hsr debugfs directory [ 332.823610][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 332.896011][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 332.898779][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 332.914976][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 332.936170][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 335.394136][ T5598] Bluetooth: hci0: command tx timeout [ 336.761163][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 337.466920][ T5598] Bluetooth: hci0: command tx timeout [ 339.575905][ T5598] Bluetooth: hci0: command tx timeout [ 339.691863][ T5846] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 340.028783][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 340.068824][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 340.104602][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 340.117435][ T5846] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 340.143125][ T5846] usb 1-1: config 1 has an invalid interface number: 103 but max is 0 [ 340.143154][ T5846] usb 1-1: config 1 has no interface number 0 [ 340.143204][ T5846] usb 1-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 340.143232][ T5846] usb 1-1: config 1 interface 103 has no altsetting 0 [ 340.150168][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 340.159215][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.185169][ T5846] usb 1-1: string descriptor 0 read error: -22 [ 340.186229][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.267794][ T7073] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 340.410553][ T5846] ftdi_sio 1-1:1.103: FTDI USB Serial Device converter detected [ 340.468563][ T5846] ftdi_sio ttyUSB0: unknown device type: 0x7c5c [ 341.816066][ T5598] Bluetooth: hci0: command tx timeout [ 342.425977][ T5598] Bluetooth: hci6: command tx timeout [ 342.631190][ T5591] syz_tun (unregistering): left promiscuous mode [ 343.069883][ T10] usb 1-1: USB disconnect, device number 6 [ 343.190233][ T10] ftdi_sio 1-1:1.103: device disconnected [ 343.771433][ T7109] Bluetooth: MGMT ver 1.23 [ 344.505896][ T5598] Bluetooth: hci6: command tx timeout [ 346.218514][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 346.585930][ T5598] Bluetooth: hci6: command tx timeout [ 347.496829][ T3356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.677874][ T5598] Bluetooth: hci6: command tx timeout [ 348.835916][ T5896] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 348.996721][ T5896] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 349.020130][ T5896] usb 5-1: config 1 has an invalid interface number: 103 but max is 0 [ 349.020159][ T5896] usb 5-1: config 1 has no interface number 0 [ 349.020209][ T5896] usb 5-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 349.020236][ T5896] usb 5-1: config 1 interface 103 has no altsetting 0 [ 349.078479][ T5896] usb 5-1: string descriptor 0 read error: -22 [ 349.078630][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.132082][ T7138] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 349.162755][ T5896] ftdi_sio 5-1:1.103: FTDI USB Serial Device converter detected [ 349.229380][ T5896] ftdi_sio ttyUSB0: unknown device type: 0x7c5c [ 350.769966][ T3356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.715473][ T5896] usb 5-1: USB disconnect, device number 8 [ 351.772694][ T5896] ftdi_sio 5-1:1.103: device disconnected [ 354.521926][ T7162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.320'. [ 356.472678][ T3356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.335317][ T3356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.534381][ T7037] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.534602][ T7037] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.534843][ T7037] bridge_slave_0: entered allmulticast mode [ 361.576074][ T7037] bridge_slave_0: entered promiscuous mode [ 361.583617][ T7037] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.584235][ T7037] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.584449][ T7037] bridge_slave_1: entered allmulticast mode [ 361.605530][ T7037] bridge_slave_1: entered promiscuous mode [ 361.768302][ T3356] bridge_slave_1: left allmulticast mode [ 361.768432][ T3356] bridge_slave_1: left promiscuous mode [ 361.768710][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.965970][ T5846] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 362.060962][ T3356] bridge_slave_0: left allmulticast mode [ 362.060989][ T3356] bridge_slave_0: left promiscuous mode [ 362.061212][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.126972][ T5846] usb 5-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 362.128105][ T5846] usb 5-1: config 1 has an invalid interface number: 103 but max is 0 [ 362.128123][ T5846] usb 5-1: config 1 has no interface number 0 [ 362.128178][ T5846] usb 5-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 362.128206][ T5846] usb 5-1: config 1 interface 103 has no altsetting 0 [ 362.133150][ T5846] usb 5-1: string descriptor 0 read error: -22 [ 362.133272][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.630121][ T5846] usb 5-1: can't set config #1, error -71 [ 365.696714][ T5846] usb 5-1: USB disconnect, device number 9 [ 367.370466][ T7210] netlink: 8 bytes leftover after parsing attributes in process `syz.4.330'. [ 367.650864][ T7037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.735403][ T7037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.059016][ T7037] team0: Port device team_slave_0 added [ 368.643192][ T7037] team0: Port device team_slave_1 added [ 371.886238][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.886457][ T7077] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.886713][ T7077] bridge_slave_0: entered allmulticast mode [ 371.892361][ T7077] bridge_slave_0: entered promiscuous mode [ 371.895481][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.895496][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.895531][ T7037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.906150][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.906483][ T7077] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.965527][ T7077] bridge_slave_1: entered allmulticast mode [ 372.062266][ T7077] bridge_slave_1: entered promiscuous mode [ 372.157293][ T7037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.157306][ T7037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 372.157325][ T7037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.000613][ T7077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.066469][ T7077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.446394][ T7037] hsr_slave_0: entered promiscuous mode [ 373.451188][ T7037] hsr_slave_1: entered promiscuous mode [ 373.455257][ T7037] debugfs: 'hsr0' already exists in 'hsr' [ 373.455284][ T7037] Cannot create hsr debugfs directory [ 373.483804][ T7077] team0: Port device team_slave_0 added [ 373.665988][ T3356] hsr_slave_0: left promiscuous mode [ 373.947770][ T3356] hsr_slave_1: left promiscuous mode [ 374.129324][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.129355][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.166976][ T3356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.167010][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.404394][ T3356] veth1_macvtap: left promiscuous mode [ 374.404502][ T3356] veth0_macvtap: left promiscuous mode [ 374.444370][ T3356] veth1_vlan: left promiscuous mode [ 374.444584][ T3356] veth0_vlan: left promiscuous mode [ 374.635919][ T5896] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 374.806878][ T5896] usb 4-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 374.808659][ T5896] usb 4-1: config 1 has an invalid interface number: 103 but max is 0 [ 374.808685][ T5896] usb 4-1: config 1 has no interface number 0 [ 374.808733][ T5896] usb 4-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 374.808761][ T5896] usb 4-1: config 1 interface 103 has no altsetting 0 [ 377.538572][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.643716][ T5896] usb 4-1: can't set config #1, error -71 [ 377.678912][ T5896] usb 4-1: USB disconnect, device number 9 [ 378.505222][ T5247] 8021q: adding VLAN 0 to HW filter on device eth8 [ 378.534378][ T7077] team0: Port device team_slave_1 added [ 378.758807][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.758825][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.758853][ T7077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.833494][ T7077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.833511][ T7077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.833539][ T7077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.810458][ T7077] hsr_slave_0: entered promiscuous mode [ 380.813517][ T7077] hsr_slave_1: entered promiscuous mode [ 384.357620][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.357680][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.780771][ T3356] bridge_slave_1: left allmulticast mode [ 385.780808][ T3356] bridge_slave_1: left promiscuous mode [ 385.781076][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.421005][ T3356] bridge_slave_0: left allmulticast mode [ 387.421045][ T3356] bridge_slave_0: left promiscuous mode [ 387.453832][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.670355][ T5717] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 391.472190][ T5717] usb 1-1: device descriptor read/all, error -71 [ 391.599209][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 391.748163][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.600659][ T3356] bond0 (unregistering): Released all slaves [ 393.801360][ T7371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 393.831547][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 393.910138][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 393.915402][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 393.924038][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 393.936671][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 394.890390][ T3356] hsr_slave_0: left promiscuous mode [ 394.929123][ T3356] hsr_slave_1: left promiscuous mode [ 394.930177][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.984269][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 396.111078][ T59] Bluetooth: hci4: command tx timeout [ 398.366569][ T5702] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 398.565913][ T5702] usb 1-1: Using ep0 maxpacket: 32 [ 398.567609][ T5702] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 398.569757][ T5702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 398.569780][ T5702] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.573682][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.573707][ T5702] usb 1-1: Product: syz [ 398.573722][ T5702] usb 1-1: Manufacturer: syz [ 398.573738][ T5702] usb 1-1: SerialNumber: syz [ 398.699446][ T59] Bluetooth: hci4: command tx timeout [ 398.773738][ T5702] usb 1-1: config 0 descriptor?? [ 400.845927][ T59] Bluetooth: hci4: command tx timeout [ 401.270529][ T5871] usb 1-1: USB disconnect, device number 9 [ 401.283108][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 401.418854][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 403.171086][ T59] Bluetooth: hci4: command tx timeout [ 403.172872][ T5871] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 403.860610][ T5871] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01a8, bcdDevice=7c.5c [ 403.862135][ T5871] usb 1-1: config 1 has an invalid interface number: 103 but max is 0 [ 403.862160][ T5871] usb 1-1: config 1 has no interface number 0 [ 403.862208][ T5871] usb 1-1: config 1 interface 103 altsetting 5 endpoint 0xD has invalid maxpacket 32, setting to 8 [ 403.862234][ T5871] usb 1-1: config 1 interface 103 has no altsetting 0 [ 403.972197][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 404.015129][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 404.019704][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 404.041531][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 404.046086][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 404.425414][ T7438] qrtr: Invalid version 0 [ 404.872749][ T5247] 8021q: adding VLAN 0 to HW filter on device eth5 [ 405.846980][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.005270][ T5871] usb 1-1: can't set config #1, error -71 [ 406.078525][ T5871] usb 1-1: USB disconnect, device number 10 [ 406.341080][ T7456] syz.3.377 (7456) used greatest stack depth: 18880 bytes left [ 407.879741][ T5871] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 407.879921][ T59] Bluetooth: hci0: command tx timeout [ 408.039211][ T5871] usb 1-1: Using ep0 maxpacket: 32 [ 408.040074][ T5871] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 408.041774][ T5871] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 408.041799][ T5871] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.041818][ T5871] usb 1-1: config 0 has no interface number 0 [ 408.046433][ T5871] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.046500][ T5871] usb 1-1: Product: syz [ 408.046542][ T5871] usb 1-1: Manufacturer: syz [ 408.046583][ T5871] usb 1-1: SerialNumber: syz [ 408.301816][ T5871] usb 1-1: config 0 descriptor?? [ 408.569778][ T5871] usb 1-1: USB disconnect, device number 11 [ 408.720690][ T7471] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 409.751873][ T7487] qrtr: Invalid version 0 [ 409.956068][ T59] Bluetooth: hci0: command tx timeout [ 410.040194][ T5247] 8021q: adding VLAN 0 to HW filter on device eth6 [ 413.417476][ T5598] Bluetooth: hci0: command tx timeout [ 415.465974][ T5598] Bluetooth: hci0: command tx timeout [ 415.759792][ T7539] qrtr: Invalid version 0 [ 416.871101][ T7548] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7549] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[7548] [ 418.937989][ T7553] binder: 7545:7553 ioctl 4018620d 0 returned -22 [ 422.184804][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.184989][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.185221][ T7369] bridge_slave_0: entered allmulticast mode [ 422.286391][ T7369] bridge_slave_0: entered promiscuous mode [ 422.328860][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.329006][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.329234][ T7369] bridge_slave_1: entered allmulticast mode [ 422.358359][ T5871] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 422.370423][ T7369] bridge_slave_1: entered promiscuous mode [ 422.529283][ T5871] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 422.531104][ T5871] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 422.531129][ T5871] usb 4-1: config 0 has no interface number 0 [ 422.579605][ T5871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.579633][ T5871] usb 4-1: Product: syz [ 422.579648][ T5871] usb 4-1: Manufacturer: syz [ 422.579663][ T5871] usb 4-1: SerialNumber: syz [ 422.652843][ T5871] usb 4-1: config 0 descriptor?? [ 423.132611][ T5247] 8021q: adding VLAN 0 to HW filter on device eth7 [ 423.195184][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.225495][ T7433] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.233455][ T7433] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.246782][ T7433] bridge_slave_0: entered allmulticast mode [ 423.261301][ T7433] bridge_slave_0: entered promiscuous mode [ 423.344634][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.349859][ T7433] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.350073][ T7433] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.350406][ T7433] bridge_slave_1: entered allmulticast mode [ 423.378733][ T7433] bridge_slave_1: entered promiscuous mode [ 426.185529][ T5871] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected [ 426.252181][ T5871] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81 [ 426.252324][ T5871] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1 [ 426.252409][ T5871] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2 [ 426.940263][ T7369] team0: Port device team_slave_0 added [ 427.227586][ T7433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 427.247367][ T7369] team0: Port device team_slave_1 added [ 427.277737][ T5871] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 427.400317][ T5871] usb 4-1: USB disconnect, device number 10 [ 427.582300][ T5871] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 427.610304][ T7433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.693946][ T5871] keyspan 4-1:0.133: device disconnected [ 428.289266][ T7599] qrtr: Invalid version 0 [ 428.316593][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.316610][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.316636][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.379618][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.379637][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 428.379664][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.431610][ T7433] team0: Port device team_slave_0 added [ 429.601137][ T7433] team0: Port device team_slave_1 added [ 431.807496][ T3356] bridge_slave_1: left allmulticast mode [ 431.807532][ T3356] bridge_slave_1: left promiscuous mode [ 431.807831][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.372769][ T3356] bridge_slave_0: left allmulticast mode [ 433.372799][ T3356] bridge_slave_0: left promiscuous mode [ 433.406179][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.411052][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.557770][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 436.677814][ T3356] bond0 (unregistering): Released all slaves [ 438.231913][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.231931][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.231960][ T7433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.432715][ T7433] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.432728][ T7433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 438.432747][ T7433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.527463][ T7369] hsr_slave_0: entered promiscuous mode [ 438.528440][ T7369] hsr_slave_1: entered promiscuous mode [ 438.529098][ T7369] debugfs: 'hsr0' already exists in 'hsr' [ 438.529116][ T7369] Cannot create hsr debugfs directory [ 439.016031][ T3356] hsr_slave_0: left promiscuous mode [ 439.056629][ T3356] hsr_slave_1: left promiscuous mode [ 439.057509][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.102871][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.657612][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 441.736882][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 445.326655][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.326732][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.489345][ T7433] hsr_slave_0: entered promiscuous mode [ 445.490705][ T7433] hsr_slave_1: entered promiscuous mode [ 445.492543][ T7433] debugfs: 'hsr0' already exists in 'hsr' [ 445.492568][ T7433] Cannot create hsr debugfs directory [ 452.368136][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 452.404560][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 452.424185][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 452.425377][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 452.432542][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 454.204827][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9 [ 454.585914][ T5598] Bluetooth: hci5: command tx timeout [ 456.748897][ T5598] Bluetooth: hci5: command tx timeout [ 459.585313][ T5598] Bluetooth: hci5: command tx timeout [ 460.643387][ T5247] 8021q: adding VLAN 0 to HW filter on device eth10 [ 460.718952][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.722988][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.723251][ T7686] bridge_slave_0: entered allmulticast mode [ 460.774575][ T7686] bridge_slave_0: entered promiscuous mode [ 460.956118][ T3356] bridge_slave_1: left allmulticast mode [ 460.956144][ T3356] bridge_slave_1: left promiscuous mode [ 460.956349][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.139308][ T3356] bridge_slave_0: left allmulticast mode [ 461.139335][ T3356] bridge_slave_0: left promiscuous mode [ 461.139516][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.400337][ T5598] Bluetooth: hci5: command tx timeout [ 463.588423][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 463.681075][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 463.715106][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 463.724713][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 463.743520][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 463.744736][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 463.924814][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.003464][ T3356] bond0 (unregistering): Released all slaves [ 464.066922][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.067062][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.067346][ T7686] bridge_slave_1: entered allmulticast mode [ 464.077727][ T7686] bridge_slave_1: entered promiscuous mode [ 464.229825][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.233554][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.542870][ T59] Bluetooth: hci4: command tx timeout [ 466.590867][ T7686] team0: Port device team_slave_0 added [ 466.806620][ T7686] team0: Port device team_slave_1 added [ 466.955259][ T3356] hsr_slave_0: left promiscuous mode [ 466.987627][ T3356] hsr_slave_1: left promiscuous mode [ 466.989683][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.036653][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.477565][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 467.538550][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 468.735161][ T59] Bluetooth: hci4: command tx timeout [ 469.179640][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.179658][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.179683][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.243241][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.243258][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.243284][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.026780][ T1121] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 470.562730][ T7686] hsr_slave_0: entered promiscuous mode [ 470.571500][ T7686] hsr_slave_1: entered promiscuous mode [ 470.756610][ T59] Bluetooth: hci4: command tx timeout [ 473.507633][ T59] Bluetooth: hci4: command tx timeout [ 474.090097][ T3356] bridge_slave_1: left allmulticast mode [ 474.090134][ T3356] bridge_slave_1: left promiscuous mode [ 474.090395][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.317604][ T3356] bridge_slave_0: left allmulticast mode [ 474.317632][ T3356] bridge_slave_0: left promiscuous mode [ 474.375546][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.196686][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.407354][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.568520][ T3356] bond0 (unregistering): Released all slaves [ 478.062359][ T5247] 8021q: adding VLAN 0 to HW filter on device eth11 [ 478.336141][ T3356] hsr_slave_0: left promiscuous mode [ 478.385857][ T3356] hsr_slave_1: left promiscuous mode [ 478.387226][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 478.438941][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.830070][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 480.887023][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 480.995824][ T5702] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 481.149039][ T5702] usb 5-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 481.150417][ T5702] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.150474][ T5702] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.152910][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.152933][ T5702] usb 5-1: Product: syz [ 481.152947][ T5702] usb 5-1: Manufacturer: syz [ 481.152961][ T5702] usb 5-1: SerialNumber: syz [ 482.332704][ T5702] ttusb_dec_send_command: command bulk message failed: error -71 [ 482.332951][ T5702] ttusb-dec 5-1:1.0: probe with driver ttusb-dec failed with error -71 [ 482.388533][ T5702] usb 5-1: USB disconnect, device number 10 [ 489.006352][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.006488][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.006729][ T7772] bridge_slave_0: entered allmulticast mode [ 489.014045][ T7772] bridge_slave_0: entered promiscuous mode [ 489.061063][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.061193][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.061420][ T7772] bridge_slave_1: entered allmulticast mode [ 489.098862][ T7772] bridge_slave_1: entered promiscuous mode [ 489.156574][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 489.160978][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.439367][ T3356] bridge_slave_1: left allmulticast mode [ 489.439403][ T3356] bridge_slave_1: left promiscuous mode [ 489.439673][ T3356] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.601276][ T3356] bridge_slave_0: left allmulticast mode [ 489.601314][ T3356] bridge_slave_0: left promiscuous mode [ 489.601604][ T3356] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.416918][ T3356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.589210][ T3356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.729054][ T9] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 492.092310][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 492.710758][ T9] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 492.710838][ T9] usb 1-1: config 0 has no interface number 0 [ 492.769178][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.769206][ T9] usb 1-1: Product: syz [ 492.769266][ T9] usb 1-1: Manufacturer: syz [ 492.769322][ T9] usb 1-1: SerialNumber: syz [ 493.062664][ T9] usb 1-1: config 0 descriptor?? [ 493.420125][ T9] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 493.423354][ T3356] bond0 (unregistering): Released all slaves [ 493.464488][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 493.464611][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 493.464667][ T9] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 493.514120][ T9] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 493.558437][ T7772] team0: Port device team_slave_0 added [ 493.621564][ T9] usb 1-1: USB disconnect, device number 12 [ 493.689176][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 493.691578][ T9] keyspan 1-1:0.133: device disconnected [ 493.879517][ T7772] team0: Port device team_slave_1 added [ 496.115966][ T3356] hsr_slave_0: left promiscuous mode [ 496.157964][ T3356] hsr_slave_1: left promiscuous mode [ 496.200976][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.237479][ T3356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 497.330856][ T3356] team0 (unregistering): Port device team_slave_1 removed [ 497.398638][ T3356] team0 (unregistering): Port device team_slave_0 removed [ 497.660434][ T7960] binder: 7956:7960 ioctl c0306201 0 returned -14 [ 501.405627][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.405641][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.410286][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 501.605428][ T59] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 501.672238][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 501.672255][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 501.672281][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 502.057250][ T7686] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 502.092366][ T7686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.137343][ T7686] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 502.266880][ T7686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.328862][ T7772] hsr_slave_0: entered promiscuous mode [ 502.329782][ T7772] hsr_slave_1: entered promiscuous mode [ 502.359836][ T7772] debugfs: 'hsr0' already exists in 'hsr' [ 502.359856][ T7772] Cannot create hsr debugfs directory [ 502.360777][ T7686] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 502.462225][ T7686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 502.495195][ T7686] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 502.525993][ T31] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 502.534636][ T7686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.696987][ T31] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 502.699121][ T31] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 502.699149][ T31] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 502.699189][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.846178][ T31] spcp8x5 4-1:1.0: SPCP8x5 converter detected [ 502.950849][ T31] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 503.799002][ T7992] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 503.808585][ T7992] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 504.141871][ T7992] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 505.626168][ T59] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 505.639188][ T7980] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 505.670061][ T59] Bluetooth: hci3: Injecting HCI hardware error event [ 505.680112][ T5598] Bluetooth: hci3: hardware error 0x00 [ 506.492467][ T7980] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 506.548171][ T5702] usb 4-1: USB disconnect, device number 11 [ 506.659672][ T5702] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 506.660529][ T5702] spcp8x5 4-1:1.0: device disconnected [ 506.748647][ T1328] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.748714][ T1328] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.415438][ T8019] binder: 8014:8019 ioctl c0306201 0 returned -14 [ 508.101069][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.266025][ T5598] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 509.353630][ T7686] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.524571][ T6002] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.524717][ T6002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.957177][ T6018] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.989030][ T6018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.583125][ T7772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 511.682532][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.734768][ T7772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 511.888912][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.894411][ T7772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 511.952886][ T8034] syz.0.487 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 512.037348][ T8034] CPU: 0 UID: 0 PID: 8034 Comm: syz.0.487 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 512.037384][ T8034] Tainted: [L]=SOFTLOCKUP [ 512.037393][ T8034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.037410][ T8034] Call Trace: [ 512.037490][ T8034] [ 512.037557][ T8034] dump_stack_lvl+0xe8/0x150 [ 512.037727][ T8034] dump_header+0xd3/0x4b0 [ 512.037766][ T8034] oom_kill_process+0x3ab/0x970 [ 512.037858][ T8034] out_of_memory+0x1064/0x1480 [ 512.037901][ T8034] ? __pfx_out_of_memory+0x10/0x10 [ 512.037957][ T8034] ? lockdep_hardirqs_on+0x7a/0x110 [ 512.038082][ T8034] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 512.038137][ T8034] ? _mutex_lock_killable+0x152/0x1d0 [ 512.038174][ T8034] ? try_charge_memcg+0xbb6/0x15b0 [ 512.038268][ T8034] try_charge_memcg+0xc75/0x15b0 [ 512.038308][ T8034] ? __pfx_try_charge_memcg+0x10/0x10 [ 512.038352][ T8034] ? charge_memcg+0x20/0x2b0 [ 512.038384][ T8034] charge_memcg+0x19c/0x2b0 [ 512.038408][ T8034] ? mem_cgroup_swapin_charge_folio+0x2b/0x390 [ 512.038432][ T8034] mem_cgroup_swapin_charge_folio+0x25a/0x390 [ 512.038461][ T8034] swap_cache_alloc_folio+0x372/0x5a0 [ 512.038533][ T8034] swap_cache_read_folio+0x44/0x120 [ 512.038571][ T8034] swap_cluster_readahead+0x3a0/0x640 [ 512.038611][ T8034] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 512.038658][ T8034] ? get_vma_policy+0x27b/0x3c0 [ 512.038710][ T8034] swapin_readahead+0x19a/0xc10 [ 512.038747][ T8034] ? swap_table_get+0x1e/0x260 [ 512.038777][ T8034] ? swap_table_get+0x1e/0x260 [ 512.038809][ T8034] ? __pfx_swapin_readahead+0x10/0x10 [ 512.038843][ T8034] ? swap_table_get+0x1e/0x260 [ 512.038884][ T8034] ? swap_table_get+0x1e/0x260 [ 512.038910][ T8034] ? swap_table_get+0x1e/0x260 [ 512.038939][ T8034] ? swap_table_get+0x219/0x260 [ 512.038969][ T8034] ? swap_cache_get_folio+0x2e8/0x2f0 [ 512.039006][ T8034] do_swap_page+0x3be/0x3ea0 [ 512.039103][ T8034] ? rcu_is_watching+0x15/0xb0 [ 512.039170][ T8034] ? do_swap_page+0xcc/0x3ea0 [ 512.039204][ T8034] ? pte_offset_map_rw_nolock+0xea/0x160 [ 512.039268][ T8034] handle_mm_fault+0xae9/0x13f0 [ 512.039311][ T8034] ? handle_mm_fault+0xe8/0x13f0 [ 512.039345][ T8034] ? __pfx_handle_mm_fault+0x10/0x10 [ 512.039379][ T8034] ? lock_vma_under_rcu+0x45a/0x500 [ 512.039401][ T8034] ? lock_acquire+0x106/0x350 [ 512.039505][ T8034] do_user_addr_fault+0xa4d/0x1340 [ 512.039613][ T8034] ? trace_page_fault_user+0x84/0x1e0 [ 512.039651][ T8034] exc_page_fault+0x6a/0xc0 [ 512.039680][ T8034] asm_exc_page_fault+0x26/0x30 [ 512.039728][ T8034] RIP: 0033:0x7f477a17e0e1 [ 512.039783][ T8034] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 512.039802][ T8034] RSP: 002b:00007f4778394028 EFLAGS: 00010217 [ 512.039858][ T8034] RAX: 0000000000000000 RBX: 00007f477a406180 RCX: 00007f477a17e0d9 [ 512.039872][ T8034] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 512.039885][ T8034] RBP: 00007f477a215024 R08: 0000000000000000 R09: 0000000000000000 [ 512.039899][ T8034] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.039912][ T8034] R13: 00007f477a406218 R14: 00007f477a406180 R15: 00007ffedb00b5b8 [ 512.039947][ T8034] [ 512.090215][ T8034] memory: usage 96kB, limit 96kB, failcnt 71 [ 512.090276][ T8034] memory+swap: usage 112kB, limit 9007199254740988kB, failcnt 0 [ 512.090310][ T8034] kmem: usage 84kB, limit 9007199254740988kB, failcnt 0 [ 512.090350][ T8034] Memory cgroup stats for /syz0/test: [ 512.207951][ T8034] cache 0 [ 512.207979][ T8034] rss 16384 [ 512.208009][ T8034] shmem 0 [ 512.208036][ T8034] mapped_file 0 [ 512.208070][ T8034] dirty 0 [ 512.208084][ T8034] writeback 0 [ 512.208105][ T8034] workingset_refault_anon 0 [ 512.208140][ T8034] workingset_refault_file 0 [ 512.208162][ T8034] swap 8192 [ 512.208216][ T8034] swapcached 12288 [ 512.208238][ T8034] pgpgin 7 [ 512.208258][ T8034] pgpgout 2 [ 512.208278][ T8034] pgfault 11 [ 512.208298][ T8034] pgmajfault 0 [ 512.220806][ T8034] inactive_anon 4096 [ 512.220850][ T8034] active_anon 0 [ 512.220870][ T8034] inactive_file 0 [ 512.220891][ T8034] active_file 0 [ 512.220912][ T8034] unevictable 0 [ 512.220926][ T8034] hierarchical_memory_limit 98304 [ 512.220950][ T8034] hierarchical_memsw_limit 9223372036854771712 [ 512.220957][ T8034] total_cache 0 [ 512.220994][ T8034] total_rss 16384 [ 512.221019][ T8034] total_shmem 0 [ 512.221039][ T8034] total_mapped_file 0 [ 512.221059][ T8034] total_dirty 0 [ 512.221080][ T8034] total_writeback 0 [ 512.221087][ T8034] total_workingset_refault_anon 0 [ 512.221109][ T8034] total_workingset_refault_file 0 [ 512.221130][ T8034] total_swap 8192 [ 512.221152][ T8034] total_swapcached 12288 [ 512.221174][ T8034] total_pgpgin 7 [ 512.221194][ T8034] total_pgpgout 2 [ 512.221214][ T8034] total_pgfault 11 [ 512.221234][ T8034] total_pgmajfault 0 [ 512.221249][ T8034] total_inactive_anon 4096 [ 512.221271][ T8034] total_active_anon 0 [ 512.221298][ T8034] total_inactive_file 0 [ 512.221321][ T8034] total_active_file 0 [ 512.221349][ T8034] total_unevictable 0 [ 512.221369][ T8034] anon_cost 33 [ 512.221383][ T8034] file_cost 0 [ 512.221412][ T8034] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0/test,task_memcg=/syz0/test,task=syz.0.487,pid=8028,uid=0 [ 512.261115][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 512.558249][ T7772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 512.562424][ T8034] Memory cgroup out of memory: Killed process 8028 (syz.0.487) total-vm:108668kB, anon-rss:1432kB, file-rss:23520kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 512.852686][ T7772] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.880981][ T8028] kcov: kcov: vm_insert_page() failed [ 513.999718][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 514.092919][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 514.095928][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 514.138492][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 514.140515][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 514.849160][ T39] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 514.849184][ T39] in_atomic(): 0, irqs_disabled(): 0, non_block: 1, pid: 39, name: oom_reaper [ 514.849201][ T39] preempt_count: 0, expected: 0 [ 514.849214][ T39] RCU nest depth: 0, expected: 0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 514.849242][ T39] 4 locks held by oom_reaper/39: [ 514.849314][ T39] #0: ffff8880647d91b0 (&mm->mmap_lock){++++}-{4:4}, at: oom_reaper+0x2b4/0xc10 [ 514.849440][ T39] #1: ffffffff8e300e80 (mmu_notifier_invalidate_range_start){+.+.}-{0:0}, at: zap_vma_for_reaping+0x193/0x380 [ 514.849500][ T39] #2: ffffffff8e300ed8 (srcu){.+.+}-{0:0}, at: __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 514.849570][ T39] #3: ffff888052811360 (&kvm->mn_invalidate_lock){+.+.}-{3:3}, at: kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 514.849685][ T39] CPU: 0 UID: 0 PID: 39 Comm: oom_reaper Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 514.849712][ T39] Tainted: [L]=SOFTLOCKUP [ 514.849718][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 514.849730][ T39] Call Trace: [ 514.849738][ T39] [ 514.849747][ T39] dump_stack_lvl+0xe8/0x150 [ 514.849781][ T39] __might_resched+0x329/0x480 [ 514.849851][ T39] rt_spin_lock+0xc2/0x400 [ 514.849891][ T39] ? __pfx_rt_spin_lock+0x10/0x10 [ 514.849931][ T39] ? __lock_acquire+0x683/0x2ce0 [ 514.849958][ T39] kvm_mmu_notifier_invalidate_range_start+0x1b6/0xc10 [ 514.850006][ T39] ? __pfx_kvm_mmu_notifier_invalidate_range_start+0x10/0x10 [ 514.850034][ T39] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 514.850086][ T39] __mmu_notifier_invalidate_range_start+0x709/0xb80 [ 514.850139][ T39] ? __mmu_notifier_invalidate_range_start+0x5c6/0xb80 [ 514.850176][ T39] ? __pfx___mmu_notifier_invalidate_range_start+0x10/0x10 [ 514.850212][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 514.850251][ T39] ? zap_vma_for_reaping+0x193/0x380 [ 514.850282][ T39] zap_vma_for_reaping+0x1f7/0x380 [ 514.850314][ T39] ? __pfx_zap_vma_for_reaping+0x10/0x10 [ 514.850381][ T39] oom_reaper+0x519/0xc10 [ 514.850411][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 514.850454][ T39] ? __pfx_oom_reaper+0x10/0x10 [ 514.850499][ T39] ? __pfx_autoremove_wake_function+0x10/0x10 [ 514.850574][ T39] ? __kthread_parkme+0x71/0x1f0 [ 514.850645][ T39] ? __kthread_parkme+0x196/0x1f0 [ 514.850678][ T39] kthread+0x388/0x470 [ 514.850732][ T39] ? __pfx_oom_reaper+0x10/0x10 [ 514.850760][ T39] ? __pfx_kthread+0x10/0x10 [ 514.850792][ T39] ret_from_fork+0x514/0xb70 [ 514.850861][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 514.850894][ T39] ? __switch_to+0xc89/0x1420 [ 514.850950][ T39] ? __pfx_kthread+0x10/0x10 [ 514.850985][ T39] ret_from_fork_asm+0x1a/0x30 [ 514.851038][ T39] [ 515.240588][ T39] oom_reaper: reaped process 8028 (syz.0.487), now anon-rss:0kB, file-rss:21888kB, shmem-rss:0kB [ 516.185860][ T59] Bluetooth: hci0: command tx timeout [ 521.881099][ T3282] bridge_slave_1: left allmulticast mode [ 521.881138][ T3282] bridge_slave_1: left promiscuous mode [ 521.883544][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.037788][ T3282] bridge_slave_0: left allmulticast mode [ 522.037824][ T3282] bridge_slave_0: left promiscuous mode [ 522.038078][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.876707][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 522.956786][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.000332][ T3282] bond0 (unregistering): Released all slaves [ 523.475952][ T3282] hsr_slave_0: left promiscuous mode [ 523.516614][ T3282] hsr_slave_1: left promiscuous mode [ 523.517676][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.566805][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.076657][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 524.126873][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 524.321702][ T5247] 8021q: adding VLAN 0 to HW filter on device eth9