last executing test programs: 21m1.644691249s ago: executing program 2 (id=502): socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x408, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x5f}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x7ff, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r5, &(0x7f0000000000), &(0x7f0000000340)=""/89}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket(0x1, 0x80802, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_batadv\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001880), r7) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000001ec0)={0x2c, r8, 0x1, 0x70bd27, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) 20m56.312543099s ago: executing program 2 (id=509): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCGIFCONF(r1, 0x8912, &(0x7f00000002c0)=@buf) 20m55.855297959s ago: executing program 2 (id=514): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(0x0, &(0x7f0000000440), &(0x7f0000000080)="13", 0x1, 0xfffffffffffffffd) keyctl$read(0xb, r3, 0x0, 0x0) 20m54.410998789s ago: executing program 2 (id=521): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0xad82, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x84c18000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x5) 20m47.535007742s ago: executing program 2 (id=539): r0 = socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000140)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private=0xffffffff}, 0x10) recvmmsg(r0, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xc}], 0x1, 0x60, 0x0) 20m45.486540772s ago: executing program 2 (id=543): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 20m30.050762755s ago: executing program 32 (id=543): rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 14m27.879246071s ago: executing program 4 (id=1185): r0 = openat$ublk_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5003, 0x81, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, &(0x7f0000000300)) 14m27.649342911s ago: executing program 4 (id=1187): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xa8}, 0x80) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 14m27.357581714s ago: executing program 4 (id=1188): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 14m26.275862143s ago: executing program 4 (id=1189): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r4, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(0xffffffffffffffff, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_gettime(0x3, 0x0) clock_settime(0x0, 0x0) 14m24.674898126s ago: executing program 4 (id=1191): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x10000, 0x440) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) socket$netlink(0x10, 0x3, 0x13) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) munlockall() madvise(&(0x7f0000737000/0xd000)=nil, 0xd000, 0x13) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000002c0)={0x9a090a, 0x937}) bpf$MAP_CREATE(0x0, 0x0, 0x48) 14m15.61896849s ago: executing program 4 (id=1203): close(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) 13m58.960249172s ago: executing program 33 (id=1203): close(0xffffffffffffffff) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) 7.592362055s ago: executing program 1 (id=2820): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 7.524260172s ago: executing program 1 (id=2822): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000c401) socket$kcm(0x2, 0xc120c39d78389a34, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) 6.509634691s ago: executing program 1 (id=2828): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x400c000) 4.91814552s ago: executing program 0 (id=2833): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4.854888961s ago: executing program 0 (id=2834): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd", @ANYRES32, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 4.669360472s ago: executing program 0 (id=2835): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x68}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000180)={0x0, 0x8427, 0x0, 0xfffffffe, 0x2f6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x40040, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x337}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 4.633766543s ago: executing program 1 (id=2836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000002180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2f, 0x6000004d, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000ac0)="4313a5e1de73ef94a52904aad04fce16f49604c1dc63d9c8cc35e6d2e21bad5f52f04dde32f51f1857b0a340996c2daaeef13787fa577badae0fbafd3f609eda08ec9ebbeddabc201ebe14f7634882897578faa4a3fc0438525683562027d26fe8d349e08100ac9f654e6e2e4b2dc800652266b0720296c690c6b47afecc028741048e97cfdd5a078b1ba3fde5b21f61b40bf334853a68f5", &(0x7f0000000a00), 0x0, 0x700}, 0x2c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1a8) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x2000c401) socket$kcm(0x2, 0xc120c39d78389a34, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0) 4.191789222s ago: executing program 0 (id=2837): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r3, &(0x7f0000002340), 0x0, 0x0) 3.94445085s ago: executing program 3 (id=2838): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80940, 0xd2) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000004500), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=fd,rfdno', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 3.879423677s ago: executing program 3 (id=2839): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000007fc0)={0x2020}, 0x2020) 3.779332351s ago: executing program 3 (id=2840): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 3.764192566s ago: executing program 3 (id=2841): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xb}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000a80)=[{{&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000cc0)="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", 0x179}, {&(0x7f0000003380)="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", 0x114}, {&(0x7f0000000c80)="331e8c48b2ab8236fae299aaccebe171a2f9d28c12776d4c6a9fd8f28ae9a98c16964f5ce289f029d188f72f8eced9", 0x2f}], 0x3}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000ec0)="bdb2600dc8d5d5b93e2de4213650aea3e35a128eaae97adbc821d6c68024e8ba1e7345e3680438f90cb68df4187da1848e88d85bdaff0a01a24b19b1674d4fdf74099172ed178e2dfa4d1c5d144a754f32f2b56cdc9103b2997a1e0d95fcaee24d775863c71c8d236f7f83560b25ea91b0d7841783123793a5121898de23da6f33664650c138cd7aef41e86f6ee4cc95a98b78ebd117b6d5c312c0e8c18ac15aa3d1e4ae6ef06af64ee5fe7962595f8eb66298ee32178596deb0968bb1252f62e3df4d1872bbfe80263bb459cf62116795aad3ce3d73aa270b4097f15c619835d8a489e9720fcf3d3650e2be50a9ce29893fdf3423700af9920dd0a84e4a92c3b86a9d781793a9a1519bb136b0e9ec242bbce698f6c7114cd9da8dc885c8a1a8988dcf14c08a005ace31a2609ab549c8c7e619b4b299809c22e81e1b04e1e65b98efe6251f3bcb43fd3f5071e1b8aba34569e52d74996031593cb741887f90d356317ad4252fbcd7d81578d5f02628adaa39df2a00417c080d46fa5f8d16dc4a088b6b618e324f6f82830d38c912e6849cc1d41a7ae0a7e945c02161bcc4ab600ad505f5d195b3f673e0de3ff8bcd9257bbdd1447d30c50963461ae865f6c0111986549bad9c4f2636f74059876d068d6552f79ad830a6028f73c90690df2ef4131eaf229a4a3c1f37e123c5d21c15aa325ee6f51bc051f45ff7f03d8318e9b89b3064fa0f10e41ba1d7c27dd38e7c3cd643af39a68a5d91680ea8c623ae71e3b14fb650691a874f1bf4aee0ee35cb2079f00e085e34bc96b30975e99bb52b40c09a4112f95e39406b581756162bee17371d209f08709b0859f0a2bf41f1d26856a677ae034a529f5e3d5eed923723732e69c024be9f0a84f8aedbf9f9d8e14621f01d482e393a88be9b3b12dc2e9a6ad2e1e745609934f2ba9c35748619f15a8e2e33c131080ea237621e35ac3113dd53bf41e187d5484c7091ee733ca79f269cd42198600a543588e69c250d4f8871e99e9ed8aee530f4384f901f7d62dd3af3aca3b8d2a5aa954477e337eb5c", 0x2ee}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000002c0)="01081d4f08d5fadbaf4c7c276eff5bee77be5b8bd77045f280ef2dc1ebea25375c3422f53407b922dea5113341087e1b39ee02b6d3a0289773776ae650ec62d7894ab6c501be6705c19a9a336a4895f8c713adb5cb9a43d6fc6184a24682db41a5b8c6e9a9c1d51eb6130acf0e6561f7eb7dd43fd002c3c99dae0ee4f53b99215d60c1902cdcf7ee2e", 0x89}, {&(0x7f0000000380)="f4395e6221e4160c2217a6f8b263e60db8165f8255fefe1294d42db03509b75c5adfccbdd257f49ec125babe70bdd804016f9f04c5590a9e847eb036ec73b8dce7de66c205b1cd627e8e45bab4b910ff8e225c744578be6f22ec9b2910d7c8", 0x5f}], 0x2}}], 0x4, 0x2000c048) 3.705541611s ago: executing program 3 (id=2842): socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1.566102459s ago: executing program 3 (id=2843): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$inet(0x2, 0x3, 0x4) socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd", @ANYRES32, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.551536367s ago: executing program 0 (id=2844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x2, 0x200, &(0x7f0000003c40)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a73090000000000001b0f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714a2e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a25978b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6dccbe2ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8294de988cd35df2cd7344aa8a9f3432b96fb889c02f484f635a0cc3466a3c2733d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000000000000000000000000f800"}) syz_emit_vhci(0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x1}, 0x8) 1.550243849s ago: executing program 1 (id=2845): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.101361276s ago: executing program 1 (id=2846): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) gettid() setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x183001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) write$snapshot(r1, 0x0, 0x0) ioctl$SNAPSHOT_FREE(r1, 0x3305) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000280)={0x2, &(0x7f0000000300)=[{0x2, 0x4, 0x8, 0x4}, {0x8, 0x9, 0xa, 0xfffffffc}]}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c7, 0x0, @vsb={0x4}}) 0s ago: executing program 0 (id=2847): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='usbip-', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/usbip-vudc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0x1d6b\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r3, &(0x7f0000000b00)='0x01', 0x4) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000002100)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): > 9 [ 966.805381][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 966.891291][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 966.903118][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 969.085392][ T5609] Bluetooth: hci5: command tx timeout [ 969.334818][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 969.334845][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1612'. [ 971.168343][ T5609] Bluetooth: hci5: command tx timeout [ 971.727489][T12363] tmpfs: Bad value for 'mpol' [ 972.742669][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1615'. [ 973.291303][ T5609] Bluetooth: hci5: command tx timeout [ 975.765497][ T5609] Bluetooth: hci5: command tx timeout [ 980.708043][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1624'. [ 982.076288][T12439] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 982.076325][T12439] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 982.076372][T12439] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 983.624970][T12308] bridge0: port 1(bridge_slave_0) entered blocking state [ 983.625090][T12308] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.625266][T12308] bridge_slave_0: entered allmulticast mode [ 983.628228][T12308] bridge_slave_0: entered promiscuous mode [ 983.637922][T12308] bridge0: port 2(bridge_slave_1) entered blocking state [ 983.638088][T12308] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.638279][T12308] bridge_slave_1: entered allmulticast mode [ 983.643059][T12308] bridge_slave_1: entered promiscuous mode [ 983.882328][T12308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.492869][T12308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 984.809624][T12077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 984.873301][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 985.851313][T12077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 985.879473][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 985.885117][T12308] team0: Port device team_slave_0 added [ 985.885460][T12077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 986.049938][T12474] tmpfs: Bad value for 'mpol' [ 986.920789][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 986.923949][T12308] team0: Port device team_slave_1 added [ 987.165439][T12077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 987.219263][T12077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 987.293508][T12308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.293537][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.293565][T12308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.469575][T12308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.469594][T12308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.469627][T12308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.738886][ T31] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 987.895126][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 987.898000][ T31] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.898043][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 987.898079][ T31] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 987.898104][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.903113][ T31] usb 2-1: config 0 descriptor?? [ 988.037261][T12308] hsr_slave_0: entered promiscuous mode [ 988.038406][T12308] hsr_slave_1: entered promiscuous mode [ 988.039185][T12308] debugfs: 'hsr0' already exists in 'hsr' [ 988.039204][T12308] Cannot create hsr debugfs directory [ 988.549252][ T31] mcp2221 0003:04D8:00DD.001A: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 989.612411][T12491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 989.616095][T12491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.267487][T12509] tmpfs: Bad value for 'mpol' [ 990.933700][T12513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1641'. [ 990.985410][T12504] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 991.279417][T11239] usb 2-1: USB disconnect, device number 25 [ 992.655336][ T50] bridge_slave_1: left allmulticast mode [ 992.655375][ T50] bridge_slave_1: left promiscuous mode [ 992.655657][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.746924][ T50] bridge_slave_0: left allmulticast mode [ 992.746962][ T50] bridge_slave_0: left promiscuous mode [ 992.747250][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 993.086807][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.403850][T12532] tmpfs: Bad value for 'mpol' [ 994.365924][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 994.405361][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 994.427042][ T50] bond0 (unregistering): Released all slaves [ 994.632902][T12540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1650'. [ 995.601078][ T50] hsr_slave_0: left promiscuous mode [ 995.615317][ T50] hsr_slave_1: left promiscuous mode [ 995.616350][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.646068][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 996.185988][ T50] team0 (unregistering): Port device team_slave_1 removed [ 996.261041][ T50] team0 (unregistering): Port device team_slave_0 removed [ 996.690787][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 996.769514][T12077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 996.963197][T12077] 8021q: adding VLAN 0 to HW filter on device team0 [ 996.997631][ T1424] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.997771][ T1424] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.755619][ T163] bridge0: port 2(bridge_slave_1) entered blocking state [ 998.755775][ T163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.611358][ T5736] kernel read not supported for file /video7 (pid: 5736 comm: kworker/0:6) [ 1000.944601][T12618] tmpfs: Bad value for 'mpol' [ 1005.876262][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1005.914111][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1005.929565][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1005.961011][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1005.961814][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1007.165764][T12308] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1007.716906][T12688] tmpfs: Bad value for 'mpol' [ 1007.808289][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1007.868566][T12308] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1007.992856][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1008.124803][ T5609] Bluetooth: hci2: command tx timeout [ 1008.243951][T12308] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1008.349218][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1008.353612][T12308] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1008.546845][T12308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1011.329069][ T5609] Bluetooth: hci2: command tx timeout [ 1013.405353][ T5609] Bluetooth: hci2: command tx timeout [ 1014.725678][ T823] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1015.218062][ T823] usb 4-1: Using ep0 maxpacket: 16 [ 1016.236208][ T5609] Bluetooth: hci2: command tx timeout [ 1016.256104][ T823] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1016.256140][ T823] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1016.256214][ T823] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1016.256240][ T823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1016.261668][ T823] usb 4-1: config 0 descriptor?? [ 1017.279599][ T823] mcp2221 0003:04D8:00DD.001B: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1017.504568][T12771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1017.520306][T12771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1017.917777][T12308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1018.150048][T11239] usb 4-1: USB disconnect, device number 17 [ 1018.341871][T12308] 8021q: adding VLAN 0 to HW filter on device team0 [ 1019.123859][ T213] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.124153][ T213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1019.247223][ T213] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.248645][ T213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1019.805482][T11239] kernel read not supported for file /video7 (pid: 11239 comm: kworker/0:4) [ 1020.853541][T12679] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.853750][T12679] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.853989][T12679] bridge_slave_0: entered allmulticast mode [ 1020.879270][T12679] bridge_slave_0: entered promiscuous mode [ 1020.931233][T12679] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.931377][T12679] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.931662][T12679] bridge_slave_1: entered allmulticast mode [ 1020.960164][T12679] bridge_slave_1: entered promiscuous mode [ 1021.457452][T12679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.582825][T12679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.001881][ T50] bridge_slave_1: left allmulticast mode [ 1022.001921][ T50] bridge_slave_1: left promiscuous mode [ 1022.002233][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1022.159037][ T50] bridge_slave_0: left allmulticast mode [ 1022.159075][ T50] bridge_slave_0: left promiscuous mode [ 1022.159335][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.775903][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.693469][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.878341][ T50] bond0 (unregistering): Released all slaves [ 1029.021465][T12863] 9p: Bad value for 'rfdno' [ 1029.200937][T12679] team0: Port device team_slave_0 added [ 1029.270435][T12679] team0: Port device team_slave_1 added [ 1029.735415][T11301] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1029.759792][T12679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.759809][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.759835][T12679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.818138][T12679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.818156][T12679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.818181][T12679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.882634][T11301] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1029.928489][T11301] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1029.967310][T11301] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1029.968277][T11301] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1031.431110][T12679] hsr_slave_0: entered promiscuous mode [ 1031.437468][T12679] hsr_slave_1: entered promiscuous mode [ 1031.441796][T12679] debugfs: 'hsr0' already exists in 'hsr' [ 1031.441834][T12679] Cannot create hsr debugfs directory [ 1032.225631][T11301] Bluetooth: hci4: command tx timeout [ 1034.284969][T11301] Bluetooth: hci4: command tx timeout [ 1034.392008][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1732'. [ 1035.337746][T12921] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1732'. [ 1035.405301][ T50] hsr_slave_0: left promiscuous mode [ 1035.444862][ T50] hsr_slave_1: left promiscuous mode [ 1035.446016][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1035.486871][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1036.045792][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1036.106615][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1036.365115][T11301] Bluetooth: hci4: command tx timeout [ 1036.551807][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1038.448549][T11301] Bluetooth: hci4: command tx timeout [ 1038.842474][T12956] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1738'. [ 1038.842503][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1738'. [ 1039.268278][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1039.494297][T12964] 9p: Bad value for 'rfdno' [ 1041.830756][T12990] 9p: Bad value for 'rfdno' [ 1041.963364][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1750'. [ 1041.963394][T12994] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 1043.160119][T13023] 9p: Bad value for 'rfdno' [ 1046.901795][T12874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.902035][T12874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.902617][T12874] bridge_slave_0: entered allmulticast mode [ 1046.934406][T12874] bridge_slave_0: entered promiscuous mode [ 1046.951041][T12874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.951289][T12874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.951542][T12874] bridge_slave_1: entered allmulticast mode [ 1047.140944][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1762'. [ 1047.140973][T13050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1762'. [ 1047.254966][T12874] bridge_slave_1: entered promiscuous mode [ 1047.631066][T12874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1047.645564][T12874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.882410][T13087] tmpfs: Bad value for 'mpol' [ 1051.987066][T12874] team0: Port device team_slave_0 added [ 1052.022206][T12874] team0: Port device team_slave_1 added [ 1052.094348][T12874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.094368][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.094398][T12874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.140534][T12874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.140552][T12874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.140593][T12874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1052.257116][T12874] hsr_slave_0: entered promiscuous mode [ 1052.259109][T12874] hsr_slave_1: entered promiscuous mode [ 1052.259887][T12874] debugfs: 'hsr0' already exists in 'hsr' [ 1052.259911][T12874] Cannot create hsr debugfs directory [ 1054.527148][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1058.542927][T13130] 9p: Bad value for 'rfdno' [ 1059.948128][T13124] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.949074][T13124] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.823417][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.850563][T13124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1063.190717][T12679] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1063.237874][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.506662][T12679] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1063.552746][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.740231][T12679] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1063.801876][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.803150][T12679] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1064.188981][T12679] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.601255][T12679] kthread_run failed with err -4 [ 1064.658626][ T213] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.658668][ T213] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.664843][ T13] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.664882][ T13] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.664925][ T13] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.664954][ T13] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1064.665002][ T13] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1064.665030][ T13] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.595000][ T50] bridge_slave_1: left allmulticast mode [ 1065.595050][ T50] bridge_slave_1: left promiscuous mode [ 1065.595409][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.820312][ T50] bridge_slave_0: left allmulticast mode [ 1065.820351][ T50] bridge_slave_0: left promiscuous mode [ 1065.820602][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1066.210125][T13200] tmpfs: Bad value for 'mpol' [ 1067.023510][T13203] 9p: Bad value for 'rfdno' [ 1067.308655][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1067.365055][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1067.392275][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1067.856592][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1068.228132][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1069.155478][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1069.197957][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1069.238113][ T50] bond0 (unregistering): Released all slaves [ 1070.070288][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1070.348447][T13222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.349985][T13222] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.356219][T13222] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.480815][T11301] Bluetooth: hci2: command tx timeout [ 1070.669215][T13222] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.671637][T13222] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1070.677888][T13222] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1070.677913][T13222] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1070.683345][T13222] veth1_vlan: left promiscuous mode [ 1070.684705][T13222] veth0_vlan: left promiscuous mode [ 1070.707885][T13222] veth0_vlan: entered promiscuous mode [ 1070.711283][T13222] veth1_vlan: entered promiscuous mode [ 1070.715889][T13222] veth1_macvtap: left promiscuous mode [ 1070.716947][T13222] veth0_macvtap: left promiscuous mode [ 1070.718008][T13222] veth0_macvtap: entered promiscuous mode [ 1070.719100][T13222] veth1_macvtap: entered promiscuous mode [ 1070.727145][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1070.728686][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1070.730101][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1070.731208][T13222] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1070.927958][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.928055][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.968193][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.969942][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.514883][ T50] hsr_slave_0: left promiscuous mode [ 1071.561868][ T50] hsr_slave_1: left promiscuous mode [ 1071.562790][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.652536][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.885030][ T5875] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1072.034861][ T5875] usb 2-1: Using ep0 maxpacket: 16 [ 1072.041755][ T5875] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1072.041800][ T5875] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1072.041841][ T5875] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1072.041866][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1072.108026][ T5875] usb 2-1: config 0 descriptor?? [ 1072.179243][T13254] 9p: Bad value for 'rfdno' [ 1072.528016][T11301] Bluetooth: hci2: command tx timeout [ 1072.561748][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1072.579339][ T5875] mcp2221 0003:04D8:00DD.001C: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 1072.849554][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1072.889947][T13251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1072.890622][T13251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.172724][ T31] usb 2-1: USB disconnect, device number 26 [ 1073.715504][ T1372] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.715543][ T1372] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.785107][ T1372] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.785144][ T1372] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.785361][ T1372] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.785392][ T1372] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.785595][ T1372] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1073.785626][ T1372] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.604804][T11301] Bluetooth: hci2: command tx timeout [ 1076.404795][T13136] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1076.613261][T13136] usb 2-1: Using ep0 maxpacket: 8 [ 1076.615916][T13136] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1076.615951][T13136] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1076.615979][T13136] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1076.616005][T13136] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1076.616049][T13136] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1076.616075][T13136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1076.684808][T11301] Bluetooth: hci2: command tx timeout [ 1076.950789][T13136] usb 2-1: GET_CAPABILITIES returned 0 [ 1076.950844][T13136] usbtmc 2-1:16.0: can't read capabilities [ 1077.174004][T13291] usbtmc 2-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 1077.191000][ T5725] usb 2-1: USB disconnect, device number 27 [ 1081.932605][T13367] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1825'. [ 1082.925869][T13363] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.956764][T13363] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.436750][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1083.442792][T13363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1086.407511][ T8104] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.407551][ T8104] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.407625][ T8104] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.407656][ T8104] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.407696][ T8104] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.407725][ T8104] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.407764][ T8104] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1086.407791][ T8104] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1086.408886][T13206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.409028][T13206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1086.410813][T13206] bridge_slave_0: entered allmulticast mode [ 1086.432371][T13206] bridge_slave_0: entered promiscuous mode [ 1087.030585][T13206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.030732][T13206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1087.030999][T13206] bridge_slave_1: entered allmulticast mode [ 1087.046669][T13206] bridge_slave_1: entered promiscuous mode [ 1087.068709][T12874] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1087.170201][T12874] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.305192][T12874] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1087.454026][T12874] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1087.536961][T12874] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1087.574062][T12874] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1087.619810][T13206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.638238][T12874] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1087.674452][T12874] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1087.692942][T13206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1087.860475][T13206] team0: Port device team_slave_0 added [ 1087.870229][T13206] team0: Port device team_slave_1 added [ 1089.548717][T13206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.548736][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.548770][T13206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.590567][T13206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.590621][T13206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.590706][T13206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.626337][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1090.672439][T13434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1090.674162][T13434] 8021q: adding VLAN 0 to HW filter on device team0 [ 1090.677807][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1090.682586][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1090.780418][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1090.783901][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1090.907620][T13434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.224226][T13434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1091.236574][T13434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1091.256737][T13434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1091.256768][T13434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1091.305131][T13434] veth1_vlan: left promiscuous mode [ 1091.307579][T13434] veth0_vlan: left promiscuous mode [ 1091.312059][T13434] veth0_vlan: entered promiscuous mode [ 1091.342888][T13434] veth1_vlan: entered promiscuous mode [ 1091.360052][T13434] veth1_macvtap: left promiscuous mode [ 1091.361624][T13434] veth0_macvtap: left promiscuous mode [ 1091.363112][T13434] veth0_macvtap: entered promiscuous mode [ 1091.382130][T13434] veth1_macvtap: entered promiscuous mode [ 1091.397204][T13434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1091.398859][T13434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1091.400842][T13434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1091.403614][T13434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1091.440593][T13434] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1091.459893][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1091.460127][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1091.482699][ T1490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1091.482839][ T1490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.018554][T11301] Bluetooth: hci5: command tx timeout [ 1093.426757][T13206] hsr_slave_0: entered promiscuous mode [ 1093.438677][T13206] hsr_slave_1: entered promiscuous mode [ 1093.451657][T13206] debugfs: 'hsr0' already exists in 'hsr' [ 1093.451692][T13206] Cannot create hsr debugfs directory [ 1093.935461][ T50] bridge_slave_1: left allmulticast mode [ 1093.935504][ T50] bridge_slave_1: left promiscuous mode [ 1093.935797][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.026776][ T50] bridge_slave_0: left allmulticast mode [ 1094.026817][ T50] bridge_slave_0: left promiscuous mode [ 1094.027119][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.585691][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.676746][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.737185][ T50] bond0 (unregistering): Released all slaves [ 1094.867831][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1095.090051][T11301] Bluetooth: hci5: command tx timeout [ 1095.614439][ T50] hsr_slave_0: left promiscuous mode [ 1095.634827][ T50] hsr_slave_1: left promiscuous mode [ 1095.636164][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.686508][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1096.115608][ T50] team0 (unregistering): Port device team_slave_1 removed [ 1096.168747][ T50] team0 (unregistering): Port device team_slave_0 removed [ 1097.265644][T11301] Bluetooth: hci5: command tx timeout [ 1098.475397][T10531] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.475438][T10531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.476308][T10531] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.476369][T10531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.532349][T10531] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.532391][T10531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1098.880809][ T8104] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1098.880850][ T8104] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1099.386453][T11301] Bluetooth: hci5: command tx timeout [ 1100.955386][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1102.368528][T13561] tmpfs: Bad value for 'mpol' [ 1103.195208][T13384] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1103.354768][T13384] usb 2-1: Using ep0 maxpacket: 32 [ 1103.357967][T13384] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1103.358001][T13384] usb 2-1: config 0 has no interface number 0 [ 1103.358061][T13384] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1103.358093][T13384] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1103.361272][T13384] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1103.361307][T13384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.361330][T13384] usb 2-1: Product: syz [ 1103.361345][T13384] usb 2-1: Manufacturer: syz [ 1103.361361][T13384] usb 2-1: SerialNumber: syz [ 1103.469600][T13384] usb 2-1: config 0 descriptor?? [ 1104.459138][T13384] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1104.459179][T13384] em28xx 2-1:0.89: Video interface 89 found: [ 1104.670536][T13384] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1105.199875][T13440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.200036][T13440] bridge0: port 1(bridge_slave_0) entered disabled state [ 1105.200311][T13440] bridge_slave_0: entered allmulticast mode [ 1105.204971][T13440] bridge_slave_0: entered promiscuous mode [ 1105.309368][T13440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.309537][T13440] bridge0: port 2(bridge_slave_1) entered disabled state [ 1105.309831][T13440] bridge_slave_1: entered allmulticast mode [ 1105.312267][T13440] bridge_slave_1: entered promiscuous mode [ 1105.852723][T13384] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1105.852757][T13384] em28xx 2-1:0.89: board has no eeprom [ 1105.989559][T13440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1105.998203][T13384] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1105.998236][T13384] em28xx 2-1:0.89: analog set to bulk mode. [ 1105.999684][T13385] em28xx 2-1:0.89: Registering V4L2 extension [ 1106.051699][T13384] usb 2-1: USB disconnect, device number 28 [ 1106.077062][T13440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.085008][T13384] em28xx 2-1:0.89: Disconnecting em28xx [ 1106.442253][T13385] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 1106.442282][T13385] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1106.442299][T13385] em28xx 2-1:0.89: No AC97 audio processor [ 1106.489942][T13385] usb 2-1: Decoder not found [ 1106.489964][T13385] em28xx 2-1:0.89: failed to create media graph [ 1106.489996][T13385] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1107.448818][T13385] em28xx 2-1:0.89: Registering snapshot button... [ 1107.462466][T13385] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input12 [ 1107.637900][T13385] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1107.637969][T13384] em28xx 2-1:0.89: Closing input extension [ 1107.637993][T13384] em28xx 2-1:0.89: Deregistering snapshot button [ 1107.733751][T13440] team0: Port device team_slave_0 added [ 1107.816907][T13384] em28xx 2-1:0.89: Freeing device [ 1108.106758][T13440] team0: Port device team_slave_1 added [ 1109.339771][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1876'. [ 1110.503549][T13440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1110.503570][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.503603][T13440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1110.762673][T13440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1110.762694][T13440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1110.762730][T13440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.304703][T13440] hsr_slave_0: entered promiscuous mode [ 1112.308984][T13440] hsr_slave_1: entered promiscuous mode [ 1112.313909][T13440] debugfs: 'hsr0' already exists in 'hsr' [ 1112.313945][T13440] Cannot create hsr debugfs directory [ 1112.338790][T13206] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1112.382417][T13206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1112.401885][T13206] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1112.639746][T13206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1112.699029][T13206] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1112.791577][T13206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1113.005861][T13206] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1113.417026][T13206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1115.364956][ T68] bridge_slave_1: left allmulticast mode [ 1115.364997][ T68] bridge_slave_1: left promiscuous mode [ 1115.365301][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.927813][ T68] bridge_slave_0: left allmulticast mode [ 1115.927929][ T68] bridge_slave_0: left promiscuous mode [ 1115.928309][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 1115.987843][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.849247][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1887'. [ 1116.897048][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1116.995540][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1117.058621][ T68] bond0 (unregistering): Released all slaves [ 1119.957588][ T68] hsr_slave_0: left promiscuous mode [ 1119.996020][ T68] hsr_slave_1: left promiscuous mode [ 1119.997081][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1120.199611][T13710] tmpfs: Bad value for 'mpol' [ 1120.232091][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1121.606530][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1121.688334][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1122.146374][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1122.892193][T13206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.261068][T13734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.261901][T13734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.567760][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1124.573981][T13734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.344827][ T1372] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.344866][ T1372] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.344910][ T1372] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.344939][ T1372] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.344978][ T1372] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.345007][ T1372] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.345046][ T1372] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1126.345074][ T1372] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1128.746332][T13440] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1128.813299][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1128.864059][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1128.947672][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1128.952902][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1128.975934][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1128.978709][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1129.217146][T13799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.243696][T13440] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1129.293153][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1129.333367][T13440] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1129.383725][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1131.131641][T11301] Bluetooth: hci2: command tx timeout [ 1131.694522][T13440] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1131.746757][T13440] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1133.096049][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.096174][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.494702][T11301] Bluetooth: hci2: command tx timeout [ 1133.650777][T13874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.651435][T13874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.069143][T13874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1134.074346][T13874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1135.576379][T11301] Bluetooth: hci2: command tx timeout [ 1137.499065][T13901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.644729][T11301] Bluetooth: hci2: command tx timeout [ 1137.762455][T13910] block nbd0: NBD_DISCONNECT [ 1137.765827][T13910] block nbd0: Disconnected due to user request. [ 1137.765845][T13910] block nbd0: shutting down sockets [ 1138.118474][T13919] trusted_key: syz.0.1931 sent an empty control message without MSG_MORE. [ 1139.494912][T13440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1140.693582][T13440] 8021q: adding VLAN 0 to HW filter on device team0 [ 1140.848353][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.849645][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1140.989692][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.989908][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1141.379950][ T156] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.379989][ T156] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.380203][ T156] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.380231][ T156] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1141.428329][ T156] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.428382][ T156] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.486750][T13961] Can't find ip_set type hash:net,n [ 1145.216510][ T1424] bridge_slave_1: left allmulticast mode [ 1145.216552][ T1424] bridge_slave_1: left promiscuous mode [ 1145.216834][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.396433][ T1424] bridge_slave_0: left allmulticast mode [ 1145.396488][ T1424] bridge_slave_0: left promiscuous mode [ 1145.396773][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.332986][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.428938][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.477226][ T1424] bond0 (unregistering): Released all slaves [ 1146.793694][T13803] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.793880][T13803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1146.794112][T13803] bridge_slave_0: entered allmulticast mode [ 1146.823836][T13803] bridge_slave_0: entered promiscuous mode [ 1146.920308][T13803] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.920454][T13803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1146.920697][T13803] bridge_slave_1: entered allmulticast mode [ 1146.949598][T13803] bridge_slave_1: entered promiscuous mode [ 1148.004363][T14013] tmpfs: Bad value for 'mpol' [ 1148.464942][ T1424] hsr_slave_0: left promiscuous mode [ 1148.504728][ T1424] hsr_slave_1: left promiscuous mode [ 1148.506916][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1148.545867][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1148.644675][T13888] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1148.794830][T13888] usb 4-1: Using ep0 maxpacket: 32 [ 1148.799424][T13888] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1148.799454][T13888] usb 4-1: config 0 has no interface number 0 [ 1148.799501][T13888] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1148.799526][T13888] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1148.802064][T13888] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1148.802099][T13888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.802114][T13888] usb 4-1: Product: syz [ 1148.802124][T13888] usb 4-1: Manufacturer: syz [ 1148.802135][T13888] usb 4-1: SerialNumber: syz [ 1148.873100][T13888] usb 4-1: config 0 descriptor?? [ 1148.884553][T13888] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1148.884756][T13888] em28xx 4-1:0.89: Video interface 89 found: [ 1149.165568][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1149.236758][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1149.490501][T13888] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1150.581435][T13803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1150.612040][T13803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1150.741667][T13803] team0: Port device team_slave_0 added [ 1150.756192][T13803] team0: Port device team_slave_1 added [ 1150.971499][T13803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1150.971518][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1150.971546][T13803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1151.068542][T13888] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1151.068571][T13888] em28xx 4-1:0.89: board has no eeprom [ 1151.125291][T13888] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1151.125324][T13888] em28xx 4-1:0.89: analog set to bulk mode. [ 1151.128764][T13803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1151.128779][T13803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1151.128808][T13803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1151.131095][T13386] em28xx 4-1:0.89: Registering V4L2 extension [ 1151.211514][T13888] usb 4-1: USB disconnect, device number 18 [ 1151.275285][T13888] em28xx 4-1:0.89: Disconnecting em28xx [ 1151.277066][T13386] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1151.277090][T13386] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1151.277105][T13386] em28xx 4-1:0.89: No AC97 audio processor [ 1151.312422][T13386] usb 4-1: Decoder not found [ 1151.312443][T13386] em28xx 4-1:0.89: failed to create media graph [ 1151.312476][T13386] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1151.342030][T13386] em28xx 4-1:0.89: Registering snapshot button... [ 1151.358223][T13386] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input13 [ 1151.386541][T13386] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1151.386607][T13888] em28xx 4-1:0.89: Closing input extension [ 1151.386630][T13888] em28xx 4-1:0.89: Deregistering snapshot button [ 1151.690042][T13888] em28xx 4-1:0.89: Freeing device [ 1151.822486][T14049] 9p: Bad value for 'wfdno' [ 1152.130579][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1152.150035][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1152.153033][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1152.213745][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1152.216154][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1152.251468][T13803] hsr_slave_0: entered promiscuous mode [ 1152.266565][T13803] hsr_slave_1: entered promiscuous mode [ 1152.267464][T13803] debugfs: 'hsr0' already exists in 'hsr' [ 1152.267486][T13803] Cannot create hsr debugfs directory [ 1152.814389][ T60] Bluetooth: min 0 < 6 [ 1154.794715][ T60] Bluetooth: hci4: command tx timeout [ 1155.128610][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 1155.441253][T14103] 9p: Bad value for 'rfdno' [ 1156.139365][ T213] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1156.139502][ T213] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1156.779951][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1156.848663][ T60] Bluetooth: hci4: command tx timeout [ 1159.051374][ T60] Bluetooth: hci4: command tx timeout [ 1159.893057][T14133] 9p: Bad value for 'wfdno' [ 1161.089805][ T60] Bluetooth: hci4: command tx timeout [ 1162.332649][T14179] 9p: Bad value for 'rfdno' [ 1162.772201][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1165.099873][T14204] 9p: Bad value for 'rfdno' [ 1165.631182][T14054] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.631447][T14054] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.631580][T14054] bridge_slave_0: entered allmulticast mode [ 1165.633698][T14054] bridge_slave_0: entered promiscuous mode [ 1165.668272][T14054] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.668651][T14054] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.668840][T14054] bridge_slave_1: entered allmulticast mode [ 1165.671685][T14054] bridge_slave_1: entered promiscuous mode [ 1165.898436][T14219] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2012'. [ 1166.079968][T14054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.172164][T14054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1169.254623][T14054] team0: Port device team_slave_0 added [ 1169.264425][T14054] team0: Port device team_slave_1 added [ 1169.336177][T14054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1169.336197][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.336226][T14054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1169.343579][T14054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1169.343595][T14054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1169.343625][T14054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1169.637608][T14241] 9p: Bad value for 'rfdno' [ 1170.012997][T14054] hsr_slave_0: entered promiscuous mode [ 1170.021852][T14054] hsr_slave_1: entered promiscuous mode [ 1170.024152][T14054] debugfs: 'hsr0' already exists in 'hsr' [ 1170.024177][T14054] Cannot create hsr debugfs directory [ 1170.065331][T14250] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2021'. [ 1174.565562][T13803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1174.893983][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1175.048153][T13803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1175.199750][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1175.303683][T14303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2030'. [ 1175.365846][ T1424] bridge_slave_1: left allmulticast mode [ 1175.365991][ T1424] bridge_slave_1: left promiscuous mode [ 1175.366250][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1176.706084][ T1424] bridge_slave_0: left allmulticast mode [ 1176.706126][ T1424] bridge_slave_0: left promiscuous mode [ 1176.706367][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1177.623879][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.450760][T14332] tmpfs: Bad value for 'mpol' [ 1179.665525][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1179.745525][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1179.767007][ T1424] bond0 (unregistering): Released all slaves [ 1179.855051][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 1179.899194][T13803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1179.965064][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1179.984214][T13803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1180.060785][T13803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1181.734121][T13803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1181.811135][T13803] 8021q: adding VLAN 0 to HW filter on device team0 [ 1181.841283][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1181.841420][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1181.934797][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1181.934949][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1185.064753][ T1424] hsr_slave_0: left promiscuous mode [ 1185.108843][ T1424] hsr_slave_1: left promiscuous mode [ 1185.109999][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.145631][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1186.245397][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1186.306927][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1186.722487][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1189.066284][T14431] 9p: Bad value for 'rfdno' [ 1190.273634][T11301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1190.320530][T11301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1190.347252][T11301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1190.348684][T11301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1190.349538][T11301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1191.829806][T14457] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1191.829829][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2059'. [ 1192.649017][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 1193.079339][T14484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2062'. [ 1193.455992][T14494] 9p: Bad value for 'rfdno' [ 1193.564909][T11301] Bluetooth: hci2: command tx timeout [ 1194.841236][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2068'. [ 1194.841260][T14505] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2068'. [ 1195.653015][T11301] Bluetooth: hci2: command tx timeout [ 1195.865684][T14054] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1195.901376][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.100488][T14516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2072'. [ 1196.252830][T14054] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1196.298004][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.338941][T14054] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1196.448485][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1196.469675][T14521] 9p: Bad value for 'rfdno' [ 1196.487652][T14054] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1196.509162][T14054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1196.584427][T14531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'. [ 1196.584453][T14531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'. [ 1197.739086][T11301] Bluetooth: hci2: command tx timeout [ 1199.809403][T11301] Bluetooth: hci2: command tx timeout [ 1201.800850][T14586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2089'. [ 1201.800875][T14586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 1202.195606][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2091'. [ 1202.790529][T14595] tmpfs: Bad value for 'mpol' [ 1204.346267][T14054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.428389][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2099'. [ 1204.428422][T14616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 1204.544937][ T1424] bridge_slave_1: left allmulticast mode [ 1204.544973][ T1424] bridge_slave_1: left promiscuous mode [ 1204.545338][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.657525][ T1424] bridge_slave_0: left allmulticast mode [ 1205.657813][ T1424] bridge_slave_0: left promiscuous mode [ 1205.660966][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.745509][T14630] overlayfs: failed to resolve './file1': -2 [ 1209.355501][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1209.435446][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1209.457101][ T1424] bond0 (unregistering): Released all slaves [ 1209.588564][T14436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.588695][T14436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.588936][T14436] bridge_slave_0: entered allmulticast mode [ 1209.591683][T14436] bridge_slave_0: entered promiscuous mode [ 1209.629845][T14436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.629988][T14436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.630235][T14436] bridge_slave_1: entered allmulticast mode [ 1209.646740][T14436] bridge_slave_1: entered promiscuous mode [ 1209.821641][T14054] 8021q: adding VLAN 0 to HW filter on device team0 [ 1209.911994][T14436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.990647][T14436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.748910][ T1490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.749052][ T1490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1210.876692][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.878425][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1210.957408][T14436] team0: Port device team_slave_0 added [ 1211.031208][T14436] team0: Port device team_slave_1 added [ 1211.193614][T14667] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2113'. [ 1211.384815][ T1424] hsr_slave_0: left promiscuous mode [ 1211.424769][ T1424] hsr_slave_1: left promiscuous mode [ 1211.425703][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1211.466736][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1211.985984][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1212.046721][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1212.234100][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1212.274469][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1212.288722][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1212.309413][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1212.313326][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1212.833338][T14436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.833353][T14436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.833374][T14436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.361829][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1213.587263][T14436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.587282][T14436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.587315][T14436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.823911][T14436] hsr_slave_0: entered promiscuous mode [ 1213.835301][T14436] hsr_slave_1: entered promiscuous mode [ 1213.836074][T14436] debugfs: 'hsr0' already exists in 'hsr' [ 1213.836095][T14436] Cannot create hsr debugfs directory [ 1214.137161][T14695] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2118'. [ 1214.137187][T14695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2118'. [ 1214.383197][T11301] Bluetooth: hci5: command tx timeout [ 1216.744978][T11301] Bluetooth: hci5: command tx timeout [ 1216.763807][T14733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2126'. [ 1218.217679][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1218.877563][T11301] Bluetooth: hci5: command tx timeout [ 1222.170335][T14779] tmpfs: Bad value for 'mpol' [ 1222.473687][T11301] Bluetooth: hci5: command tx timeout [ 1223.067692][T14774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2133'. [ 1225.679764][T14810] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2140'. [ 1225.718634][T14811] block nbd3: NBD_DISCONNECT [ 1225.719635][T14808] block nbd3: Disconnected due to user request. [ 1225.719654][T14808] block nbd3: shutting down sockets [ 1225.957360][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2143'. [ 1227.646843][T14828] tmpfs: Bad value for 'mpol' [ 1228.095987][T14823] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2145'. [ 1230.056191][T14677] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.056314][T14677] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.056556][T14677] bridge_slave_0: entered allmulticast mode [ 1230.058755][T14677] bridge_slave_0: entered promiscuous mode [ 1230.097275][T14677] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.097498][T14677] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.097709][T14677] bridge_slave_1: entered allmulticast mode [ 1230.112448][T14677] bridge_slave_1: entered promiscuous mode [ 1230.595755][T14677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.643887][T14677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.728915][T14677] team0: Port device team_slave_0 added [ 1231.070961][T14677] team0: Port device team_slave_1 added [ 1231.807899][T14677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.807919][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.807951][T14677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1231.871197][T14677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1231.871213][T14677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.871235][T14677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1233.357722][T14677] hsr_slave_0: entered promiscuous mode [ 1233.368324][T14677] hsr_slave_1: entered promiscuous mode [ 1233.380455][T14677] debugfs: 'hsr0' already exists in 'hsr' [ 1233.380498][T14677] Cannot create hsr debugfs directory [ 1235.870530][T14436] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1235.925007][T14436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1236.264883][ T1424] bridge_slave_1: left allmulticast mode [ 1236.264942][ T1424] bridge_slave_1: left promiscuous mode [ 1236.265246][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.486750][ T1424] bridge_slave_0: left allmulticast mode [ 1236.486785][ T1424] bridge_slave_0: left promiscuous mode [ 1236.487015][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1239.351317][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.526896][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.845461][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.888141][ T1424] bond0 (unregistering): Released all slaves [ 1244.215334][T14436] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1244.372281][T14436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1244.918764][T14436] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1245.471095][T14436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1245.744420][T14436] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1245.802263][T14436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1250.224828][ T1424] hsr_slave_0: left promiscuous mode [ 1250.369153][ T1424] hsr_slave_1: left promiscuous mode [ 1250.370228][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1250.405579][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1250.863757][T15056] 9p: Could not find request transport: fd0x0000000000000004 [ 1251.283618][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1251.945909][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1251.954143][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1251.960983][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1251.963014][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1252.216769][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1252.317536][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1252.975557][T15083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2203'. [ 1254.269736][ T60] Bluetooth: hci4: command tx timeout [ 1255.209714][T15096] 9pnet_fd: Insufficient options for proto=fd [ 1256.360742][ T60] Bluetooth: hci4: command tx timeout [ 1258.000357][T15134] 9pnet_fd: Insufficient options for proto=fd [ 1258.364643][T15141] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 1259.518644][ T60] Bluetooth: hci4: command tx timeout [ 1260.602672][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1261.575228][ T60] Bluetooth: hci4: command tx timeout [ 1266.311029][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.312975][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1266.313217][T15060] bridge_slave_0: entered allmulticast mode [ 1266.328646][T15060] bridge_slave_0: entered promiscuous mode [ 1266.350846][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.350973][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.351200][T15060] bridge_slave_1: entered allmulticast mode [ 1266.360039][T15060] bridge_slave_1: entered promiscuous mode [ 1267.855241][T15250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 1268.118029][T15253] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2240'. [ 1268.284315][T15060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1268.308971][T15060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1268.351105][T14677] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1268.388439][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1268.764044][T14677] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1268.829025][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1268.835504][T15060] team0: Port device team_slave_0 added [ 1269.087299][T14677] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1270.129642][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1270.142561][T15060] team0: Port device team_slave_1 added [ 1274.363377][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2249'. [ 1274.415309][T15284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2249'. [ 1275.636521][T11301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1275.674225][T11301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1275.691443][T11301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1275.727728][T11301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1275.728754][T11301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1276.251607][T14677] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1276.340775][T14677] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1276.543158][T15060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1276.543177][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.543207][T15060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1276.664585][T15060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1276.664603][T15060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1276.664635][T15060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1276.790177][T15060] hsr_slave_0: entered promiscuous mode [ 1276.791638][T15060] hsr_slave_1: entered promiscuous mode [ 1276.792659][T15060] debugfs: 'hsr0' already exists in 'hsr' [ 1276.792685][T15060] Cannot create hsr debugfs directory [ 1277.459477][T15318] Bluetooth: MGMT ver 1.23 [ 1277.970959][T11301] Bluetooth: hci2: command tx timeout [ 1280.054656][T11301] Bluetooth: hci2: command tx timeout [ 1281.596818][ T1424] bridge_slave_1: left allmulticast mode [ 1281.596874][ T1424] bridge_slave_1: left promiscuous mode [ 1281.597147][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.238472][T11301] Bluetooth: hci2: command tx timeout [ 1282.707409][ T1424] bridge_slave_0: left allmulticast mode [ 1282.707450][ T1424] bridge_slave_0: left promiscuous mode [ 1282.707746][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.354697][T11301] Bluetooth: hci2: command tx timeout [ 1284.855396][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1284.936328][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1284.998806][ T1424] bond0 (unregistering): Released all slaves [ 1287.324708][T15401] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2285'. [ 1288.794832][ T1424] hsr_slave_0: left promiscuous mode [ 1288.864664][ T1424] hsr_slave_1: left promiscuous mode [ 1288.866984][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.065937][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1292.355212][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1292.398232][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1292.711871][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1298.089240][T15286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.093129][T15286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.093368][T15286] bridge_slave_0: entered allmulticast mode [ 1298.100829][T15286] bridge_slave_0: entered promiscuous mode [ 1298.111734][T15286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.112643][T15286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.113250][T15286] bridge_slave_1: entered allmulticast mode [ 1298.121528][T15286] bridge_slave_1: entered promiscuous mode [ 1299.312691][T15286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.368524][T15286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.602455][T15286] team0: Port device team_slave_0 added [ 1299.611264][T15286] team0: Port device team_slave_1 added [ 1299.702010][T15286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.702029][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.702060][T15286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.709163][T15286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.709179][T15286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.709210][T15286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1300.422480][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.853648][T15521] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2309'. [ 1303.047201][T15286] hsr_slave_0: entered promiscuous mode [ 1303.048648][T15286] hsr_slave_1: entered promiscuous mode [ 1303.050149][T15286] debugfs: 'hsr0' already exists in 'hsr' [ 1303.050191][T15286] Cannot create hsr debugfs directory [ 1304.404028][T15060] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1304.713086][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1304.765822][T15060] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1305.019724][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1305.065645][T15060] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1305.344687][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1305.373245][T15060] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1306.397914][T15060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1308.117037][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2318'. [ 1309.498972][T15060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1309.585815][T15060] 8021q: adding VLAN 0 to HW filter on device team0 [ 1309.614258][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1309.624029][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1309.685250][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1309.685541][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1313.659276][ T60] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1313.722270][ T60] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1313.733584][ T60] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1313.744762][ T60] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1313.781749][ T60] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1314.031157][T15587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2326'. [ 1315.852582][T15594] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2328'. [ 1316.003583][T11301] Bluetooth: hci4: command tx timeout [ 1318.295092][T11301] Bluetooth: hci4: command tx timeout [ 1319.244941][ T1424] bridge_slave_1: left allmulticast mode [ 1319.244979][ T1424] bridge_slave_1: left promiscuous mode [ 1319.245262][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1319.412909][ T1424] bridge_slave_0: left allmulticast mode [ 1319.412949][ T1424] bridge_slave_0: left promiscuous mode [ 1319.413278][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1320.372235][T11301] Bluetooth: hci4: command tx timeout [ 1322.863440][T11301] Bluetooth: hci4: command tx timeout [ 1325.127910][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1325.310555][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1325.383563][ T1424] bond0 (unregistering): Released all slaves [ 1326.067190][T15580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.067421][T15580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.067663][T15580] bridge_slave_0: entered allmulticast mode [ 1326.084749][T15580] bridge_slave_0: entered promiscuous mode [ 1326.087931][T15580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.088105][T15580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.088585][T15580] bridge_slave_1: entered allmulticast mode [ 1326.093101][T15580] bridge_slave_1: entered promiscuous mode [ 1327.686124][T15580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.707737][T15580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1328.349072][T15580] team0: Port device team_slave_0 added [ 1328.373208][T15580] team0: Port device team_slave_1 added [ 1328.555020][ T1424] hsr_slave_0: left promiscuous mode [ 1328.594785][ T1424] hsr_slave_1: left promiscuous mode [ 1328.597395][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1328.669862][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1332.186700][T15731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2361'. [ 1332.187783][T15731] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2361'. [ 1333.770493][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1333.845694][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1334.378527][T15747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2368'. [ 1335.532673][T15580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1335.532695][T15580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.532726][T15580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.584855][T15580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.584885][T15580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.584917][T15580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1335.907732][T15286] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1336.037010][T15286] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1336.160866][T15580] hsr_slave_0: entered promiscuous mode [ 1336.161906][T15580] hsr_slave_1: entered promiscuous mode [ 1336.162641][T15580] debugfs: 'hsr0' already exists in 'hsr' [ 1336.162662][T15580] Cannot create hsr debugfs directory [ 1336.967707][T15758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2370'. [ 1336.968782][T15758] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2370'. [ 1337.287249][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1337.378143][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1337.382368][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1337.422550][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1337.423513][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1340.202629][T15784] random: crng reseeded on system resumption [ 1340.692497][T11301] Bluetooth: hci2: command tx timeout [ 1342.432063][T15801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2382'. [ 1342.433074][T15801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2382'. [ 1342.631135][T15805] 9p: Bad value for 'wfdno' [ 1343.015163][T11301] Bluetooth: hci2: command tx timeout [ 1345.711384][T11301] Bluetooth: hci2: command tx timeout [ 1346.026981][T15828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2391'. [ 1346.028328][T15828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2391'. [ 1347.150111][T15836] 9p: Bad value for 'wfdno' [ 1347.807884][T11301] Bluetooth: hci2: command tx timeout [ 1355.197191][T15901] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2415'. [ 1355.561622][T15906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2415'. [ 1360.505621][T15763] bridge0: port 1(bridge_slave_0) entered blocking state [ 1360.505874][T15763] bridge0: port 1(bridge_slave_0) entered disabled state [ 1360.506115][T15763] bridge_slave_0: entered allmulticast mode [ 1360.512854][T15763] bridge_slave_0: entered promiscuous mode [ 1360.546811][T15580] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1360.659149][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1360.659825][T15763] bridge0: port 2(bridge_slave_1) entered blocking state [ 1360.660041][T15763] bridge0: port 2(bridge_slave_1) entered disabled state [ 1360.660282][T15763] bridge_slave_1: entered allmulticast mode [ 1360.663185][T15763] bridge_slave_1: entered promiscuous mode [ 1360.980123][T15580] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1361.559029][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'. [ 1361.752231][T15948] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2428'. [ 1361.759061][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.016814][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1362.114159][T15580] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1362.234191][T15958] random: crng reseeded on system resumption [ 1362.278040][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1362.300055][T15763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.305522][T15580] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1362.546278][T15580] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1362.636657][T15963] Restarting kernel threads ... [ 1362.654724][T15963] Done restarting kernel threads. [ 1362.731368][T15959] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 1363.130469][T15763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.589344][T15763] team0: Port device team_slave_0 added [ 1363.623054][T15763] team0: Port device team_slave_1 added [ 1363.719276][T15976] random: crng reseeded on system resumption [ 1364.000418][T15982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2436'. [ 1364.813457][T15763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1364.813475][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.813505][T15763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1364.836406][T15763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1364.836422][T15763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1364.836447][T15763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.825674][T15985] tmpfs: Bad value for 'mpol' [ 1368.696742][T15998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2440'. [ 1368.883811][T15763] hsr_slave_0: entered promiscuous mode [ 1368.892658][T15763] hsr_slave_1: entered promiscuous mode [ 1368.894414][T15763] debugfs: 'hsr0' already exists in 'hsr' [ 1368.894444][T15763] Cannot create hsr debugfs directory [ 1368.994785][ T1424] bridge_slave_1: left allmulticast mode [ 1368.994828][ T1424] bridge_slave_1: left promiscuous mode [ 1368.995160][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.085779][T16012] random: crng reseeded on system resumption [ 1369.114024][T16012] Restarting kernel threads ... [ 1369.125645][T16012] Done restarting kernel threads. [ 1369.346206][ T1424] bridge_slave_0: left allmulticast mode [ 1369.346243][ T1424] bridge_slave_0: left promiscuous mode [ 1369.346523][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.624776][ T1424] bridge_slave_1: left allmulticast mode [ 1369.624814][ T1424] bridge_slave_1: left promiscuous mode [ 1369.625073][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1370.344317][T16033] tmpfs: Bad value for 'mpol' [ 1371.104426][ T1424] bridge_slave_0: left allmulticast mode [ 1371.113346][ T1424] bridge_slave_0: left promiscuous mode [ 1371.113605][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.735475][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1371.801315][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.847877][ T1424] bond0 (unregistering): Released all slaves [ 1372.416424][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.465474][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.488383][ T1424] bond0 (unregistering): Released all slaves [ 1372.515322][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2447'. [ 1372.571163][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1373.514614][ T1424] hsr_slave_0: left promiscuous mode [ 1373.554719][ T1424] hsr_slave_1: left promiscuous mode [ 1373.555815][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.595623][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1373.874661][ T1424] hsr_slave_0: left promiscuous mode [ 1373.914690][ T1424] hsr_slave_1: left promiscuous mode [ 1373.915550][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1373.946429][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1374.405764][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1374.455454][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1374.790644][T16066] random: crng reseeded on system resumption [ 1374.958071][T16070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1375.006082][T16070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1375.013822][T16070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1375.023778][T16070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1375.120903][T16070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1375.227586][T16072] Restarting kernel threads ... [ 1375.237920][T16072] Done restarting kernel threads. [ 1376.184430][T16040] udevd[16040]: inotify_add_watch(7, /dev/loop0, 10) failed: No such file or directory [ 1376.557410][T16088] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 1376.664280][T16089] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2459'. [ 1377.119050][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1378.008971][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1378.214628][T16070] Bluetooth: hci4: command tx timeout [ 1379.722524][T16107] random: crng reseeded on system resumption [ 1379.818879][ T5257] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1380.284613][T16070] Bluetooth: hci4: command tx timeout [ 1382.404653][T16070] Bluetooth: hci4: command tx timeout [ 1385.211729][T16070] Bluetooth: hci4: command tx timeout [ 1397.288647][T16068] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.288901][T16068] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.289520][T16068] bridge_slave_0: entered allmulticast mode [ 1397.292656][T16068] bridge_slave_0: entered promiscuous mode [ 1397.323633][T16068] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.323852][T16068] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.324117][T16068] bridge_slave_1: entered allmulticast mode [ 1397.351422][T16068] bridge_slave_1: entered promiscuous mode [ 1397.416640][T16068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.421535][T16068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.494269][T16068] team0: Port device team_slave_0 added [ 1397.505484][T16068] team0: Port device team_slave_1 added [ 1397.556849][T16068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.556869][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.556901][T16068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.559774][T16068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.559792][T16068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.559823][T16068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1397.739721][T16068] hsr_slave_0: entered promiscuous mode [ 1397.741227][T16068] hsr_slave_1: entered promiscuous mode [ 1397.742271][T16068] debugfs: 'hsr0' already exists in 'hsr' [ 1397.742299][T16068] Cannot create hsr debugfs directory [ 1400.717656][T16266] random: crng reseeded on system resumption [ 1401.220634][T16271] Restarting kernel threads ... [ 1401.229027][T16271] Done restarting kernel threads. [ 1401.763275][T11301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1402.864738][T11301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1403.052725][T11301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1403.054358][T11301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1403.069528][T11301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1405.384924][T11301] Bluetooth: hci5: command tx timeout [ 1407.518942][T11301] Bluetooth: hci5: command tx timeout [ 1409.892842][T11301] Bluetooth: hci5: command tx timeout [ 1412.991599][T16363] overlayfs: failed to resolve './file0': -2 [ 1413.966505][T16367] random: crng reseeded on system resumption [ 1414.313072][T11301] Bluetooth: hci5: command tx timeout [ 1414.396415][T16370] Restarting kernel threads ... [ 1414.419959][T16370] Done restarting kernel threads. [ 1415.638090][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 1421.414622][ T5875] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1421.544203][T16420] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 1421.564723][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 1421.567088][ T5875] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1421.567119][ T5875] usb 2-1: config 0 has no interface number 0 [ 1421.567167][ T5875] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1421.567193][ T5875] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1421.570232][ T5875] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1421.570264][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.570287][ T5875] usb 2-1: Product: syz [ 1421.570303][ T5875] usb 2-1: Manufacturer: syz [ 1421.570319][ T5875] usb 2-1: SerialNumber: syz [ 1421.591345][ T5875] usb 2-1: config 0 descriptor?? [ 1421.662347][T16421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2528'. [ 1421.706252][ T5875] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1421.706279][ T5875] em28xx 2-1:0.89: Video interface 89 found: [ 1423.269197][ T5875] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 1423.400578][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.282032][T16428] fuse: Bad value for 'fd' [ 1425.493995][T16272] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.494256][T16272] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.509382][T16272] bridge_slave_0: entered allmulticast mode [ 1425.522938][T16272] bridge_slave_0: entered promiscuous mode [ 1425.538451][T16272] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.539434][T16272] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.539701][T16272] bridge_slave_1: entered allmulticast mode [ 1425.566693][T16272] bridge_slave_1: entered promiscuous mode [ 1425.731085][T16272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.768095][T16272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.819469][T16412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1425.825159][T16412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1425.867505][ T5875] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1425.867543][ T5875] em28xx 2-1:0.89: board has no eeprom [ 1425.924606][ T5875] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 1425.924637][ T5875] em28xx 2-1:0.89: analog set to bulk mode. [ 1425.925036][ T4976] em28xx 2-1:0.89: Registering V4L2 extension [ 1425.998355][T16272] team0: Port device team_slave_0 added [ 1426.024720][ T4976] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 1426.025140][ T4976] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 1426.025534][ T4976] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 1426.025926][ T4976] em28xx 2-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 1426.027201][ T4976] em28xx 2-1:0.89: Config register raw data: 0xfffffffb [ 1426.027702][ T4976] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 1426.027719][ T4976] em28xx 2-1:0.89: No AC97 audio processor [ 1426.095766][T16272] team0: Port device team_slave_1 added [ 1426.118197][ T5875] usb 2-1: USB disconnect, device number 29 [ 1426.227519][ T5875] em28xx 2-1:0.89: Disconnecting em28xx [ 1426.278435][ T4976] usb 2-1: Decoder not found [ 1426.278458][ T4976] em28xx 2-1:0.89: failed to create media graph [ 1426.278493][ T4976] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 1426.290829][ T4976] em28xx 2-1:0.89: Registering snapshot button... [ 1426.463034][ T4976] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input14 [ 1426.498650][ T4976] em28xx 2-1:0.89: Remote control support is not available for this card. [ 1426.498722][ T5875] em28xx 2-1:0.89: Closing input extension [ 1426.498745][ T5875] em28xx 2-1:0.89: Deregistering snapshot button [ 1426.541872][T16451] random: crng reseeded on system resumption [ 1427.749634][ T5875] em28xx 2-1:0.89: Freeing device [ 1427.817474][ T1424] bridge_slave_1: left allmulticast mode [ 1427.817513][ T1424] bridge_slave_1: left promiscuous mode [ 1427.817803][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.196268][ T1424] bridge_slave_0: left allmulticast mode [ 1429.196306][ T1424] bridge_slave_0: left promiscuous mode [ 1429.196587][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1429.415116][ T1424] bridge_slave_1: left allmulticast mode [ 1429.415161][ T1424] bridge_slave_1: left promiscuous mode [ 1429.415419][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1429.526740][ T1424] bridge_slave_0: left allmulticast mode [ 1429.526779][ T1424] bridge_slave_0: left promiscuous mode [ 1429.527218][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1430.075567][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.159582][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.216853][ T1424] bond0 (unregistering): Released all slaves [ 1430.329138][T16467] fuse: Bad value for 'fd' [ 1430.596772][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1430.716703][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1430.776898][ T1424] bond0 (unregistering): Released all slaves [ 1430.986938][T16272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1430.986951][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1430.986971][T16272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1431.063649][T16272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1431.063665][T16272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1431.063691][T16272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1431.220344][T16272] hsr_slave_0: entered promiscuous mode [ 1431.221793][T16272] hsr_slave_1: entered promiscuous mode [ 1431.222623][T16272] debugfs: 'hsr0' already exists in 'hsr' [ 1431.222727][T16272] Cannot create hsr debugfs directory [ 1435.174627][ T1424] hsr_slave_0: left promiscuous mode [ 1435.214703][ T1424] hsr_slave_1: left promiscuous mode [ 1435.215813][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.265447][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.444921][ T1424] hsr_slave_0: left promiscuous mode [ 1435.464722][ T1424] hsr_slave_1: left promiscuous mode [ 1435.465476][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1435.516366][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1435.905592][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1435.955781][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1436.436437][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1436.495812][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1436.763450][T16496] fuse: Bad value for 'fd' [ 1436.853168][T16457] Restarting kernel threads ... [ 1436.861120][T16457] Done restarting kernel threads. [ 1437.106767][T16070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1437.150705][T16070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1437.152362][T16070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.169086][T16070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.171386][T16070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.925986][T16272] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1438.114107][T16272] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1438.131511][T16272] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1438.174623][ T4976] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1438.326904][ T4976] usb 2-1: Using ep0 maxpacket: 32 [ 1438.332451][ T4976] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 1438.332478][ T4976] usb 2-1: config 0 has no interface number 0 [ 1438.332521][ T4976] usb 2-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1438.332545][ T4976] usb 2-1: config 0 interface 89 has no altsetting 0 [ 1438.376186][ T4976] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1438.376217][ T4976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.376238][ T4976] usb 2-1: Product: syz [ 1438.376253][ T4976] usb 2-1: Manufacturer: syz [ 1438.376269][ T4976] usb 2-1: SerialNumber: syz [ 1439.337994][T16070] Bluetooth: hci2: command tx timeout [ 1440.330430][ T4976] usb 2-1: config 0 descriptor?? [ 1441.537911][T16529] tmpfs: Unknown parameter 'N' [ 1441.602037][T11301] Bluetooth: hci2: command tx timeout [ 1442.095412][T16272] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1442.096241][T16526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2554'. [ 1442.223618][T16272] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1442.308075][T16272] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1442.415552][ T4976] usb 2-1: can't set config #0, error -71 [ 1442.423104][ T4976] usb 2-1: USB disconnect, device number 30 [ 1442.549935][T16272] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1442.673912][T16272] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1444.928756][T11301] Bluetooth: hci2: command tx timeout [ 1447.442182][T11301] Bluetooth: hci2: command tx timeout [ 1447.882827][T16272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1449.087452][T16272] 8021q: adding VLAN 0 to HW filter on device team0 [ 1449.201621][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.201830][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1449.229234][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.229423][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.230008][T16500] bridge_slave_0: entered allmulticast mode [ 1449.258193][T16500] bridge_slave_0: entered promiscuous mode [ 1449.295693][ T5929] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.295918][ T5929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1449.296820][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.296933][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.297120][T16500] bridge_slave_1: entered allmulticast mode [ 1449.303706][T16500] bridge_slave_1: entered promiscuous mode [ 1449.472470][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.973270][ T1372] kworker/u8:9 (1372) used greatest stack depth: 15072 bytes left [ 1449.988300][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.436144][T16500] team0: Port device team_slave_0 added [ 1450.601224][T16500] team0: Port device team_slave_1 added [ 1452.500804][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.500822][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.500853][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.873820][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.873839][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.873871][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1453.777254][T16500] hsr_slave_0: entered promiscuous mode [ 1453.778711][T16500] hsr_slave_1: entered promiscuous mode [ 1453.779791][T16500] debugfs: 'hsr0' already exists in 'hsr' [ 1453.779817][T16500] Cannot create hsr debugfs directory [ 1455.744400][T16272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1461.527383][T16660] vlan2: entered allmulticast mode [ 1461.991820][T16673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2588'. [ 1461.991847][T16673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2588'. [ 1462.135511][T16070] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1462.192151][T16070] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1462.222638][T16070] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1462.239291][T16070] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1462.294735][T16070] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1463.788250][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2594'. [ 1465.351889][T16070] Bluetooth: hci4: command tx timeout [ 1466.496366][T16713] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1466.496392][T16713] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2598'. [ 1467.870296][T16070] Bluetooth: hci4: command tx timeout [ 1469.884979][T16070] Bluetooth: hci4: command tx timeout [ 1472.623217][T16070] Bluetooth: hci4: command tx timeout [ 1474.404685][T16768] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2609'. [ 1475.503675][T16678] bridge0: port 1(bridge_slave_0) entered blocking state [ 1475.522904][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 1475.523188][T16678] bridge_slave_0: entered allmulticast mode [ 1475.546283][T16678] bridge_slave_0: entered promiscuous mode [ 1475.562509][T16678] bridge0: port 2(bridge_slave_1) entered blocking state [ 1475.562732][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.562969][T16678] bridge_slave_1: entered allmulticast mode [ 1475.582512][T16678] bridge_slave_1: entered promiscuous mode [ 1475.714821][T16678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1475.719671][T16678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1475.781147][T16678] team0: Port device team_slave_0 added [ 1475.784279][T16678] team0: Port device team_slave_1 added [ 1475.838692][T16678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1475.838709][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.838736][T16678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1475.841035][T16678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1475.841048][T16678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1475.841076][T16678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1476.004209][T16678] hsr_slave_0: entered promiscuous mode [ 1476.011858][T16678] hsr_slave_1: entered promiscuous mode [ 1476.013026][T16678] debugfs: 'hsr0' already exists in 'hsr' [ 1476.013051][T16678] Cannot create hsr debugfs directory [ 1479.344089][T16795] 9pnet_fd: Insufficient options for proto=fd [ 1480.026905][T16798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2620'. [ 1483.090330][T16816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2626'. [ 1483.200602][T16818] tmpfs: Bad value for 'mpol' [ 1484.715885][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1489.325377][T16836] tmpfs: Bad value for 'mpol' [ 1490.169717][ T1424] bridge_slave_1: left allmulticast mode [ 1490.169744][ T1424] bridge_slave_1: left promiscuous mode [ 1490.169926][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1490.269624][T16838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2631'. [ 1490.315897][ T1424] bridge_slave_0: left allmulticast mode [ 1490.315923][ T1424] bridge_slave_0: left promiscuous mode [ 1490.316142][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1490.685308][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1490.765581][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1490.826383][ T1424] bond0 (unregistering): Released all slaves [ 1490.846072][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2630'. [ 1491.387454][T16850] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2634'. [ 1491.616081][ T1424] hsr_slave_0: left promiscuous mode [ 1491.655232][ T1424] hsr_slave_1: left promiscuous mode [ 1491.656380][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1491.696797][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.147837][T16876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2640'. [ 1495.160686][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1495.225830][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1495.454037][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1495.752608][T16881] binder: BINDER_SET_CONTEXT_MGR already set [ 1495.752622][T16881] binder: 16880:16881 ioctl 4018620d 2000000000c0 returned -16 [ 1500.119139][T11301] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1500.184074][T11301] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1500.204647][T11301] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1500.206348][T11301] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1500.208463][T11301] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1500.911457][T16956] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2651'. [ 1501.296652][T16962] binder: BINDER_SET_CONTEXT_MGR already set [ 1501.296667][T16962] binder: 16961:16962 ioctl 4018620d 200000000040 returned -16 [ 1502.312061][T16969] fuse: Bad value for 'group_id' [ 1502.312081][T16969] fuse: Bad value for 'group_id' [ 1502.364676][T16070] Bluetooth: hci2: command tx timeout [ 1504.520304][T16070] Bluetooth: hci2: command tx timeout [ 1504.570173][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2660'. [ 1506.722983][T16070] Bluetooth: hci2: command tx timeout [ 1508.006722][T17003] fuse: Bad value for 'group_id' [ 1508.006744][T17003] fuse: Bad value for 'group_id' [ 1508.977160][T16070] Bluetooth: hci2: command tx timeout [ 1509.214892][ T1424] bridge_slave_1: left allmulticast mode [ 1509.214932][ T1424] bridge_slave_1: left promiscuous mode [ 1509.215204][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1509.358142][ T1424] bridge_slave_0: left allmulticast mode [ 1509.358183][ T1424] bridge_slave_0: left promiscuous mode [ 1509.358467][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.815678][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1511.009250][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1511.078324][ T1424] bond0 (unregistering): Released all slaves [ 1512.637364][ T1424] hsr_slave_0: left promiscuous mode [ 1512.694594][ T1424] hsr_slave_1: left promiscuous mode [ 1512.695704][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1512.736932][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1512.771980][T17035] fuse: Bad value for 'group_id' [ 1512.772000][T17035] fuse: Bad value for 'group_id' [ 1514.515498][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1514.543505][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1514.977408][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 1515.016968][T17053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2684'. [ 1515.282465][T16678] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1515.315914][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1515.319234][T16678] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1515.427123][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1515.432378][T16678] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1515.508810][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1515.581796][T16678] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1515.643733][T16678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1516.033177][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 1516.033857][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 1516.034009][T16941] bridge_slave_0: entered allmulticast mode [ 1516.037273][T16941] bridge_slave_0: entered promiscuous mode [ 1516.052599][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 1516.052799][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.052998][T16941] bridge_slave_1: entered allmulticast mode [ 1516.057446][T16941] bridge_slave_1: entered promiscuous mode [ 1516.989709][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1517.424247][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1517.679251][T16941] team0: Port device team_slave_0 added [ 1517.704881][T16941] team0: Port device team_slave_1 added [ 1519.593270][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1519.593289][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.593318][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1519.815828][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1519.815847][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1519.815878][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1520.303058][T16678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1521.369424][T16941] hsr_slave_0: entered promiscuous mode [ 1521.372383][T16941] hsr_slave_1: entered promiscuous mode [ 1521.373330][T16941] debugfs: 'hsr0' already exists in 'hsr' [ 1521.373356][T16941] Cannot create hsr debugfs directory [ 1522.124843][ T1424] bridge_slave_1: left allmulticast mode [ 1522.124873][ T1424] bridge_slave_1: left promiscuous mode [ 1522.125082][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.246186][ T1424] bridge_slave_0: left allmulticast mode [ 1522.246214][ T1424] bridge_slave_0: left promiscuous mode [ 1522.246426][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1522.647032][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1522.745338][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1522.826925][ T1424] bond0 (unregistering): Released all slaves [ 1524.853255][T11301] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1525.224912][ T1424] hsr_slave_0: left promiscuous mode [ 1525.942820][T11301] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1525.948705][T11301] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1525.949903][T11301] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1525.951728][T11301] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1526.286347][ T1424] hsr_slave_1: left promiscuous mode [ 1526.287333][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1526.911611][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1528.455299][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1528.519899][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1528.932501][T11301] Bluetooth: hci5: command tx timeout [ 1530.224311][T17184] 9p: Bad value for 'wfdno' [ 1531.004622][T11301] Bluetooth: hci5: command tx timeout [ 1531.788582][T16941] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1531.824701][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1531.855493][T16941] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1531.909756][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1531.924681][T16941] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1531.979198][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1532.002200][T16941] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1532.032229][T16941] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1532.085573][T17210] 9p: Bad value for 'rfdno' [ 1532.532697][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1533.046312][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 1533.117317][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.117505][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1533.204500][T11301] Bluetooth: hci5: command tx timeout [ 1533.287980][ T156] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.288123][ T156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1533.359074][T17139] bridge0: port 1(bridge_slave_0) entered blocking state [ 1533.359203][T17139] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.359419][T17139] bridge_slave_0: entered allmulticast mode [ 1533.364347][T17139] bridge_slave_0: entered promiscuous mode [ 1533.406879][T17139] bridge0: port 2(bridge_slave_1) entered blocking state [ 1533.407011][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.407248][T17139] bridge_slave_1: entered allmulticast mode [ 1533.419793][T17139] bridge_slave_1: entered promiscuous mode [ 1533.656084][T17139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1533.712180][T17139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1533.927148][T17242] 9p: Bad value for 'rfdno' [ 1534.518537][T17254] fuse: Unknown parameter 'grou00000000000000000000' [ 1534.584176][T17139] team0: Port device team_slave_0 added [ 1534.600199][T17139] team0: Port device team_slave_1 added [ 1534.785407][T17139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1534.785420][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.785439][T17139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1534.789104][T17139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1534.789115][T17139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1534.789134][T17139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.078924][T11301] Bluetooth: hci5: command tx timeout [ 1537.665982][T17272] fuse: Unknown parameter 'grou00000000000000000000' [ 1539.860452][T17139] hsr_slave_0: entered promiscuous mode [ 1539.861599][T17139] hsr_slave_1: entered promiscuous mode [ 1539.862404][T17139] debugfs: 'hsr0' already exists in 'hsr' [ 1539.862428][T17139] Cannot create hsr debugfs directory [ 1539.885434][ T822] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1540.894523][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 1540.896667][ T822] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 1540.896694][ T822] usb 4-1: config 0 has no interface number 0 [ 1540.896737][ T822] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1540.896767][ T822] usb 4-1: config 0 interface 89 has no altsetting 0 [ 1540.899605][ T822] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 1540.899635][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.899657][ T822] usb 4-1: Product: syz [ 1540.899673][ T822] usb 4-1: Manufacturer: syz [ 1540.899689][ T822] usb 4-1: SerialNumber: syz [ 1540.989269][ T822] usb 4-1: config 0 descriptor?? [ 1541.017627][ T822] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 1541.017664][ T822] em28xx 4-1:0.89: Video interface 89 found: [ 1542.258539][T17306] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2757'. [ 1542.905174][ T822] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 1542.980194][ T822] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 1542.980226][ T822] em28xx 4-1:0.89: board has no eeprom [ 1543.034502][ T822] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 1543.034532][ T822] em28xx 4-1:0.89: analog set to bulk mode. [ 1543.037318][ T5875] em28xx 4-1:0.89: Registering V4L2 extension [ 1543.082909][ T822] usb 4-1: USB disconnect, device number 19 [ 1543.100057][ T822] em28xx 4-1:0.89: Disconnecting em28xx [ 1543.220736][ T5875] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 1543.220761][ T5875] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 1543.220775][ T5875] em28xx 4-1:0.89: No AC97 audio processor [ 1543.261026][ T5875] usb 4-1: Decoder not found [ 1543.261048][ T5875] em28xx 4-1:0.89: failed to create media graph [ 1543.261079][ T5875] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 1543.287808][ T5875] em28xx 4-1:0.89: Registering snapshot button... [ 1543.294206][ T5875] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input16 [ 1543.315026][ T5875] em28xx 4-1:0.89: Remote control support is not available for this card. [ 1543.315095][ T822] em28xx 4-1:0.89: Closing input extension [ 1543.315118][ T822] em28xx 4-1:0.89: Deregistering snapshot button [ 1543.664964][ T822] em28xx 4-1:0.89: Freeing device [ 1543.748568][T17328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2767'. [ 1545.720638][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.046505][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.061840][T17371] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2776'. [ 1547.334359][ T1424] bridge_slave_1: left allmulticast mode [ 1547.334437][ T1424] bridge_slave_1: left promiscuous mode [ 1547.334706][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 1547.334768][T17400] 9p: Bad value for 'rfdno' [ 1547.492024][T17405] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2785'. [ 1547.571381][ T1424] bridge_slave_0: left allmulticast mode [ 1547.571418][ T1424] bridge_slave_0: left promiscuous mode [ 1547.571903][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.926944][T17432] 9p: Bad value for 'rfdno' [ 1550.048339][T17438] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2795'. [ 1551.155742][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1551.276440][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1551.360413][ T1424] bond0 (unregistering): Released all slaves [ 1551.430947][ T5257] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1552.225752][T17458] 9pnet_fd: Insufficient options for proto=fd [ 1552.441249][T17462] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2805'. [ 1552.744104][T17475] 9pnet_fd: Insufficient options for proto=fd [ 1552.796110][ T1424] hsr_slave_0: left promiscuous mode [ 1552.834643][ T1424] hsr_slave_1: left promiscuous mode [ 1552.835769][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1552.885616][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1553.879378][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 1553.941186][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2817'. [ 1554.035669][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 1555.004202][T17494] 9pnet_fd: Insufficient options for proto=fd [ 1555.476047][T16941] veth0_vlan: entered promiscuous mode [ 1555.566684][T16941] veth1_vlan: entered promiscuous mode [ 1557.213645][T16941] veth0_macvtap: entered promiscuous mode [ 1557.214241][T17528] 9pnet_fd: Insufficient options for proto=fd [ 1557.227517][T16941] veth1_macvtap: entered promiscuous mode [ 1557.384859][T16941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1557.430742][T16941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1557.512007][T17536] random: crng reseeded on system resumption [ 1557.845230][T17536] Restarting kernel threads ... [ 1557.846462][T17536] Done restarting kernel threads. [ 1558.764351][T17560] 9pnet_fd: Insufficient options for proto=fd [ 1559.336991][ T163] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.337035][ T163] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.337068][ T163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1559.355409][ T67] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1562.661363][T17619] random: crng reseeded on system resumption [ 1562.940720][T16070] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1563.055135][T16070] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1563.061180][T16070] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1563.102701][T16070] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1563.121541][T16070] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1563.567928][T17627] Oops: general protection fault, probably for non-canonical address 0xdfff[ 1563.567928][T17627] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000016: 0000 [#1] SMP KASAN PTI [ 1563.568080][T17627] KASAN: null-ptr-deref in range [0x00000000000000b0-0x00000000000000b7] [ 1563.568111][T17627] CPU: 1 UID: 0 PID: 17627 Comm: syz.0.2847 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1563.568137][T17627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1563.568155][T17627] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 1563.568357][T17627] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 8e e8 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 66 e8 c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 1563.568377][T17627] RSP: 0018:ffffc90004387c80 EFLAGS: 00010202 [ 1563.568437][T17627] RAX: 0000000000000016 RBX: ffff88803ac7fd48 RCX: dffffc0000000000 [ 1563.568454][T17627] RDX: 0000000000000006 RSI: ffffffff8d8871aa RDI: 00000000ffffffff [ 1563.568469][T17627] RBP: ffffc90004387d88 R08: ffffffff8fafa237 R09: 1ffffffff1f5f446 [ 1563.568486][T17627] R10: dffffc0000000000 R11: fffffbfff1f5f447 R12: 00000000000000b0 [ 1563.568502][T17627] R13: 0000000000000000 R14: ffffffff8c224928 R15: 1ffff92000870fa0 [ 1563.568518][T17627] FS: 00007fc645d346c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1563.568537][T17627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.568551][T17627] CR2: 00007fcd1a107180 CR3: 000000004032c000 CR4: 00000000003526f0 [ 1563.568571][T17627] Call Trace: [ 1563.568602][T17627] [ 1563.568648][T17627] ? __pfx_configfs_symlink+0x10/0x10 [ 1563.568710][T17627] ? bpf_lsm_inode_symlink+0x9/0x20 [ 1563.568821][T17627] vfs_symlink+0x18b/0x330 [ 1563.568916][T17627] ? security_path_symlink+0xfd/0x360 [ 1563.569028][T17627] filename_symlinkat+0x1cd/0x420 [ 1563.569064][T17627] ? __pfx_filename_symlinkat+0x10/0x10 [ 1563.569099][T17627] ? do_getname+0x151/0x250 [ 1563.569157][T17627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.569208][T17627] __se_sys_symlinkat+0x4e/0x2b0 [ 1563.569241][T17627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.569264][T17627] do_syscall_64+0x174/0x580 [ 1563.569386][T17627] ? trace_irq_disable+0x3b/0x140 [ 1563.569477][T17627] ? clear_bhb_loop+0x40/0x90 [ 1563.569504][T17627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1563.569525][T17627] RIP: 0033:0x7fc647b1e019 [ 1563.569552][T17627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1563.569571][T17627] RSP: 002b:00007fc645d34028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 1563.569595][T17627] RAX: ffffffffffffffda RBX: 00007fc647da6180 RCX: 00007fc647b1e019 [ 1563.569612][T17627] RDX: 0000200000001c00 RSI: ffffffffffffff9c RDI: 0000200000001b00 [ 1563.569629][T17627] RBP: 00007fc647bb500c R08: 0000000000000000 R09: 0000000000000000 [ 1563.569644][T17627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1563.569658][T17627] R13: 00007fc647da6218 R14: 00007fc647da6180 R15: 00007ffd59fa4c78 [ 1563.569684][T17627] [ 1563.569696][T17627] Modules linked in: [ 1563.569742][T17627] ---[ end trace 0000000000000000 ]--- [ 1563.571834][ T1424] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.579813][T17627] RIP: 0010:configfs_symlink+0x5fc/0x1030 [ 1563.579945][T17627] Code: 03 42 80 3c 20 00 74 08 48 89 df e8 8e e8 c2 ff 41 bc b0 00 00 00 4c 03 23 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 e7 e8 66 e8 c2 ff 4d 8b 2c 24 4c 89 ef e8 [ 1563.579998][T17627] RSP: 0018:ffffc90004387c80 EFLAGS: 00010202 [ 1563.580053][T17627] RAX: 0000000000000016 RBX: ffff88803ac7fd48 RCX: dffffc0000000000 [ 1563.580103][T17627] RDX: 0000000000000006 RSI: ffffffff8d8871aa RDI: 00000000ffffffff [ 1563.581836][T17627] RBP: ffffc90004387d88 R08: ffffffff8fafa237 R09: 1ffffffff1f5f446 [ 1563.581887][T17627] R10: dffffc0000000000 R11: fffffbfff1f5f447 R12: 00000000000000b0 [ 1563.581936][T17627] R13: 0000000000000000 R14: ffffffff8c224928 R15: 1ffff92000870fa0 [ 1563.581977][T17627] FS: 00007fc645d346c0(0000) GS:ffff888125d3e000(0000) knlGS:0000000000000000 [ 1563.582029][T17627] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1563.582070][T17627] CR2: 00007fcd1a107180 CR3: 000000004032c000 CR4: 00000000003526f0 [ 1563.582217][T17627] Kernel panic - not syncing: Fatal exception [ 1563.582833][T17627] Kernel Offset: disabled