last executing test programs: 8m24.733542161s ago: executing program 1 (id=2): socket$netlink(0x10, 0x3, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000100)={0x100, 0x1, 0x200, "785a9d2dc5027991e9bf99c09533b1680433494ec55c87b0a4f551a6bccae42c", 0x30395056}) userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000038c0)=""/4086, 0xff6}, {&(0x7f0000000380)=""/238, 0xee}, {&(0x7f0000000540)=""/22, 0x16}], 0x3}, 0x7ffe}], 0x2, 0x2101, 0x0) 8m19.443007979s ago: executing program 1 (id=19): mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(0x0, 0x10) 8m17.912773864s ago: executing program 1 (id=21): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) 8m2.671251126s ago: executing program 32 (id=21): openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x119) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) read$FUSE(r0, &(0x7f00000024c0)={0x2020}, 0xfffffec1) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40) socket$inet6_tcp(0xa, 0x1, 0x0) 6m31.142053422s ago: executing program 2 (id=141): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x1c0) r3 = landlock_create_ruleset(&(0x7f0000000200)={0x2081, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 6m29.15457171s ago: executing program 2 (id=143): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x22000044}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x50}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6m20.901807808s ago: executing program 2 (id=150): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) accept(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) setsockopt$packet_int(r0, 0x107, 0x14, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, 0x0}}], 0x1, 0x0) 6m10.496898342s ago: executing program 2 (id=161): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80003, 0x5) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r5, 0x0, 0x8008000000010, &(0x7f0000000100), 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) setsockopt$XDP_RX_RING(r7, 0x11b, 0x2, 0x0, 0x0) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x11}, 0x5}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 6m6.947703997s ago: executing program 2 (id=167): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x67, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x181}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 6m4.145175174s ago: executing program 2 (id=169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, 0x0, 0x0) getpeername(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="180000f6d8369d723fd7fd6437dab4cead00"], 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r3, &(0x7f0000000400), 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m46.204303425s ago: executing program 33 (id=169): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000380)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, 0x0, 0x0) getpeername(r0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="180000f6d8369d723fd7fd6437dab4cead00"], 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write(r3, &(0x7f0000000400), 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) ioctl$F2FS_IOC_GET_FEATURES(r1, 0x8004f50c, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, 0x0, 0x20000000) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x7, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time_for_children\x00') r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r5, 0x890b, 0x0) ioctl$sock_rose_SIOCDELRT(r5, 0x890c, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6, @null, @bpq0, 0x1, [@null, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default]}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) 5m31.699066899s ago: executing program 3 (id=199): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_open_dev$vim2m(&(0x7f0000000080), 0x50d65ad7, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r3, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) 5m25.936194811s ago: executing program 3 (id=204): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x400c000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r3, &(0x7f0000000040), 0x0, 0x1, 0xd) ioctl$DVB_DEMUX_DMX_STOP(r3, 0x6f2a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff00000700020000080002000a01010008000100ac14143308000300", @ANYRES8=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x458, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) getgroups(0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r5, 0xc10c5541, &(0x7f0000000040)) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) read$eventfd(r6, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 5m22.679519467s ago: executing program 3 (id=206): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xbf0fe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettimeofday(0xfffffffffffffffe, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socket(0x10, 0x803, 0x0) 5m20.461655537s ago: executing program 3 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x48}}, 0x4000) r2 = syz_io_uring_complete(0x0, 0x0) move_mount(r2, 0x0, 0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/cgroup.procs\x00', 0x40) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0xa0142, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc048aec8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) 5m18.721609799s ago: executing program 3 (id=210): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x80000, @mcast1={0xff, 0x5}}, 0x6d) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @empty}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, 0x0) write$vhost_msg_v2(r2, 0x0, 0x0) write$vhost_msg_v2(r2, &(0x7f0000002b00)={0x2, 0x0, {&(0x7f00000004c0)=""/26, 0xfffffc26, 0x0, 0x1, 0x2}}, 0x48) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) socket$kcm(0x10, 0x2, 0x10) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000600)="690ea45e73b0f0cf753118819f4495f47e6f016788d1baf8ca32cd50b4e0c5e6dba50b792c169e503a43e7dc48728495f22683f1014d66f000e5896e52249ab47aeb9c96af631ec206b3f8a848b0705b5468ef666c803350b0a857d63cb91f3389019085fe41a717db4d01ba4755a171635a0e86ccff009b66bcd9a7b4c333a53e8c04455397aef78e379cd5e13aec6c2332faaef6ca310547d38e3f94414ebf33411ace8acabb11db28b8d4a121aabc746e6654556cab1e2de77b082d2e061e3fe4c58efe4f8e0ca956bedc", 0xcc}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 5m17.610541493s ago: executing program 3 (id=212): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x404c004) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f00000021c0), 0x2, &(0x7f0000000540)}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x200}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$kcm(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 5m2.131413421s ago: executing program 34 (id=212): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x404c004) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r2, 0xc01c64a3, &(0x7f0000000340)={0x3, r3, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000000)) close(r1) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x86}, 0x0) r4 = socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000580)={&(0x7f0000000240)=@vsock={0x28, 0x0, 0x0, @my=0x1}, 0x80, &(0x7f00000021c0), 0x2, &(0x7f0000000540)}, 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r6, &(0x7f0000000280)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x200}}, 0x18) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$kcm(0x2a, 0x2, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0xf505, 0x0) 35.248490488s ago: executing program 0 (id=1034): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) writev(r1, &(0x7f0000001b80)=[{&(0x7f00000004c0)="7794ec2b03b238c846f31378a48e84482d727d2733c00c9a2e55b22ea8dd8c12323eb4e9822c564a44eb1dfa126a05c3ef28c6bee26415b18a191b8dce53fdc4cf0983e8824311a5c84ba790284929853ceea6694383d2ef97215df88ca04c005281dadec0a7bcf81ce6de325a84", 0x6e}, {&(0x7f0000000680)}, {0x0}], 0x3) 32.028213351s ago: executing program 0 (id=1049): write$binfmt_script(0xffffffffffffffff, &(0x7f00000001c0)={'#! ', './file1', [], 0xa, "8588ebbf32ecb096220d7a7e8f73b72028c9128bb4cf9d6f9466444de2947716571ec4f9a327afec7edd373d0fe28ae622a6e19b2f88fd2e58bda6add1dd9b927b202cfab6f1e5"}, 0x52) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 31.956841848s ago: executing program 4 (id=1050): r0 = io_uring_setup(0x136a, &(0x7f0000000080)={0x0, 0x1f8a, 0x0, 0x3, 0x3aa}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 31.368354308s ago: executing program 0 (id=1053): r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000240)={0x0, 0xf36e, 0x10100, 0x3}, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x5, 0xffffffffffffffff, 0x1}) 31.134475856s ago: executing program 0 (id=1056): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000001cc0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 30.76603286s ago: executing program 4 (id=1058): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x2000e8, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f00000095c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="0201140080ff18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e4a139697dd206"], 0xdd12}, {&(0x7f0000000740)=ANY=[], 0x124}], 0x2, 0x0, 0x0, 0x4040814}, 0x0) 30.76012771s ago: executing program 0 (id=1059): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000300)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001140)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x2}, 0x8) 30.390407906s ago: executing program 0 (id=1061): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 30.377724658s ago: executing program 4 (id=1062): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) 29.995663908s ago: executing program 4 (id=1066): socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f00000000c0)=0x86, 0x4) 28.919083895s ago: executing program 7 (id=1068): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) r0 = fanotify_init(0x1a, 0x800) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r0, 0x641, 0x1028, r1, 0x0) fanotify_mark(r0, 0x1, 0x48000038, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) 28.429906838s ago: executing program 7 (id=1070): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x8, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x8, 0x0) 27.418292535s ago: executing program 4 (id=1074): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 27.40987039s ago: executing program 7 (id=1075): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) time(0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2}], 0x1, 0x40800) r5 = socket(0x10, 0x80000, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f00000000c0)) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x1) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x121b41) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r7, &(0x7f00000000c0)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r7, &(0x7f0000000180)=@other={'unlock', ' ', 'io+mem'}, 0xe) ioctl$USBDEVFS_ALLOW_SUSPEND(r6, 0x5522) 27.255501686s ago: executing program 4 (id=1077): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295e", 0x46}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 26.782236922s ago: executing program 6 (id=1079): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 26.078845887s ago: executing program 6 (id=1081): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x842, 0x4}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x2, 0x2}, 0x10) close(r0) 25.705317191s ago: executing program 6 (id=1083): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x3, 0x40483) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, 0x0) 25.024422133s ago: executing program 7 (id=1084): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000012c0)="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", 0x721}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000002280)=""/4088, 0xff8}], 0x1}, 0x40002160) 24.823438538s ago: executing program 7 (id=1085): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0x0, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r2 = dup(r1) write$UHID_INPUT(r2, 0x0, 0x0) 24.495038886s ago: executing program 6 (id=1087): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x30, 0x0, 0x1fd, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 24.177685235s ago: executing program 6 (id=1089): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x303}, "d5af5be94ac7974a", '\x00\x00\x00\x00\x00\x00\x00@\x00', "5fb3d79a", "248d91565c342a30"}, 0x28) 23.705560753s ago: executing program 7 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000540)=""/4115, 0x1013}, {&(0x7f0000000240)=""/84, 0x54}], 0x3}, 0x20) 23.58268771s ago: executing program 6 (id=1093): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0020000000000000240012800b0001006d61637365630000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0xc810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="3c000380380003800c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15.054788664s ago: executing program 35 (id=1061): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x1d, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 11.982287462s ago: executing program 36 (id=1077): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1", 0x83}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d0", 0x95}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec4898205", 0xa6}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)="abc662f2a7dc713d226b612e712df36db5547daf508fb74a679224eba0fe5f05c53081ff6ebac83c264c6deeec6d4546fe7d00337f488ecee46577d71b39e24cdef94f16295e", 0x46}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.549253929s ago: executing program 37 (id=1092): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) syz_genetlink_get_family_id$batadv(&(0x7f0000000440), r0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/120, 0x78}, {&(0x7f0000000540)=""/4115, 0x1013}, {&(0x7f0000000240)=""/84, 0x54}], 0x3}, 0x20) 8.428873606s ago: executing program 38 (id=1093): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="0020000000000000240012800b0001006d61637365630000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0xc810) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fdffffff0c0000000c00018008000100", @ANYRES32=r3, @ANYBLOB="3c000380380003800c000180080001"], 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.146566757s ago: executing program 5 (id=1128): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000280)={0x0, 0x15, 0x2, "8ac6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.842846661s ago: executing program 5 (id=1129): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r2, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) 1.612155193s ago: executing program 5 (id=1130): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="10797fcd6c7704e11e05000000000000009ff075475e4b94", 0x18) r1 = accept$alg(r0, 0x0, 0x0) readv(r1, &(0x7f0000000480)=[{&(0x7f0000000340)=""/27, 0x1b}, {&(0x7f0000000380)=""/240, 0xf0}], 0x2) sendmmsg$alg(r1, &(0x7f0000003880)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)="9c98d425afe56f214f063263de94ff93031f0603", 0x14}, {&(0x7f0000000040)="0ac0d4f6e32e92fb", 0x8}], 0x2, 0x0, 0x0, 0x400c000}], 0x1, 0x0) 652.877641ms ago: executing program 5 (id=1131): r0 = socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) sendmsg$nl_route(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x18, 0x901, 0x70bd28, 0x25dfdbfd, {0x2, 0x18, 0x0, 0xfc, 0x0, 0x0, 0x0, 0xb, 0x2000000}}, 0x1c}}, 0x480c0) 116.965014ms ago: executing program 5 (id=1132): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 0s ago: executing program 5 (id=1133): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000002b80), 0x41000004, &(0x7f0000000040)) kernel console output (not intermixed with test programs): interface with an up link [ 431.228153][ T7623] team0: Port device team_slave_0 added [ 431.642372][ T7623] team0: Port device team_slave_1 added [ 431.831106][ T5482] 8021q: adding VLAN 0 to HW filter on device eth11 [ 433.485196][ T7892] Mount JFS Failure: -22 [ 433.485217][ T7892] jfs_mount failed w/return code = -22 [ 433.488939][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.488960][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.488991][ T7623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.647698][ T7623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.647718][ T7623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.647749][ T7623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.268451][ T7898] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.992677][ T7623] hsr_slave_0: entered promiscuous mode [ 435.994048][ T7623] hsr_slave_1: entered promiscuous mode [ 435.994978][ T7623] debugfs: 'hsr0' already exists in 'hsr' [ 435.995024][ T7623] Cannot create hsr debugfs directory [ 436.034663][ T7928] netlink: 4 bytes leftover after parsing attributes in process `syz.0.491'. [ 436.038167][ T7918] veth1_macvtap: left promiscuous mode [ 436.038265][ T7918] macsec0: entered promiscuous mode [ 436.038285][ T7918] macsec0: entered allmulticast mode [ 436.600051][ T7936] ieee802154 phy0 wpan0: encryption failed: -22 [ 438.255856][ T57] bridge_slave_1: left allmulticast mode [ 438.255887][ T57] bridge_slave_1: left promiscuous mode [ 438.256148][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.353713][ T57] bridge_slave_0: left allmulticast mode [ 438.353745][ T57] bridge_slave_0: left promiscuous mode [ 438.354027][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.540829][ T7963] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 438.558038][ T7965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 438.592793][ T57] bridge_slave_1: left allmulticast mode [ 438.592823][ T57] bridge_slave_1: left promiscuous mode [ 438.593066][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.600371][ T7969] picdev_read: 19 callbacks suppressed [ 438.600393][ T7969] kvm: pic: non byte read [ 438.600652][ T7969] kvm: pic: non byte read [ 438.600906][ T7969] kvm: pic: non byte read [ 438.601148][ T7969] kvm: pic: non byte read [ 438.601407][ T7969] kvm: pic: non byte read [ 438.601654][ T7969] kvm: pic: non byte read [ 438.601899][ T7969] kvm: pic: non byte read [ 438.602140][ T7969] kvm: pic: non byte read [ 438.603727][ T7969] kvm: pic: non byte read [ 438.604235][ T7969] kvm: pic: non byte read [ 438.604599][ T7969] kvm: pic: single mode not supported [ 438.604624][ T7969] kvm: pic: level sensitive irq not supported [ 438.610692][ T7969] kvm: pic: single mode not supported [ 438.610720][ T7969] kvm: pic: level sensitive irq not supported [ 438.628910][ T7969] kvm: pic: level sensitive irq not supported [ 438.637366][ T7969] kvm: pic: level sensitive irq not supported [ 438.644788][ T7969] kvm: pic: single mode not supported [ 438.649422][ T7969] kvm: pic: level sensitive irq not supported [ 438.652434][ T7969] kvm: pic: single mode not supported [ 438.652814][ T7969] kvm: pic: level sensitive irq not supported [ 438.660142][ T7969] kvm: pic: level sensitive irq not supported [ 438.688319][ T7969] kvm: pic: level sensitive irq not supported [ 438.703191][ T7963] random: crng reseeded on system resumption [ 438.706162][ T7969] kvm: pic: single mode not supported [ 438.706195][ T7969] kvm: pic: level sensitive irq not supported [ 438.706687][ T7969] kvm: pic: level sensitive irq not supported [ 438.716059][ T7969] kvm: pic: single mode not supported [ 438.864712][ T57] bridge_slave_0: left allmulticast mode [ 438.864743][ T57] bridge_slave_0: left promiscuous mode [ 438.865003][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.072900][ T57] bridge_slave_1: left allmulticast mode [ 439.072929][ T57] bridge_slave_1: left promiscuous mode [ 439.073255][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.144337][ T57] bridge_slave_0: left allmulticast mode [ 439.144363][ T57] bridge_slave_0: left promiscuous mode [ 439.144584][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.543555][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.623625][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 439.688342][ T57] bond0 (unregistering): Released all slaves [ 439.873648][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 439.953587][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.018355][ T57] bond0 (unregistering): Released all slaves [ 440.238873][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.323985][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.387108][ T57] bond0 (unregistering): Released all slaves [ 440.447301][ T5482] 8021q: adding VLAN 0 to HW filter on device eth12 [ 440.454793][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.454868][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.612716][ T57] hsr_slave_0: left promiscuous mode [ 441.679571][ T57] hsr_slave_1: left promiscuous mode [ 441.691059][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 441.723690][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 441.858727][ T5838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 441.933623][ T57] hsr_slave_0: left promiscuous mode [ 441.972747][ T57] hsr_slave_1: left promiscuous mode [ 441.973889][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.018447][ T5838] usb 5-1: config 0 has an invalid interface number: 117 but max is 0 [ 442.018479][ T5838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.018501][ T5838] usb 5-1: config 0 has no interface number 0 [ 442.018558][ T5838] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 442.018586][ T5838] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 442.021557][ T5838] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 442.021589][ T5838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.021625][ T5838] usb 5-1: Product: syz [ 442.021641][ T5838] usb 5-1: Manufacturer: syz [ 442.021657][ T5838] usb 5-1: SerialNumber: syz [ 442.144283][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.187943][ T5838] usb 5-1: config 0 descriptor?? [ 442.342860][ T57] hsr_slave_0: left promiscuous mode [ 442.362955][ T57] hsr_slave_1: left promiscuous mode [ 442.363991][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.413680][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.883603][ T57] team0 (unregistering): Port device team_slave_1 removed [ 442.933665][ T57] team0 (unregistering): Port device team_slave_0 removed [ 443.513489][ T57] team0 (unregistering): Port device team_slave_1 removed [ 443.583458][ T57] team0 (unregistering): Port device team_slave_0 removed [ 444.133426][ T57] team0 (unregistering): Port device team_slave_1 removed [ 444.183566][ T57] team0 (unregistering): Port device team_slave_0 removed [ 444.434623][ T7460] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 444.488407][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 444.511063][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 444.548594][ T31] usb 5-1: USB disconnect, device number 6 [ 444.674024][ T7999] netlink: 4 bytes leftover after parsing attributes in process `syz.0.509'. [ 444.674056][ T7999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.762005][ T5482] 8021q: adding VLAN 0 to HW filter on device eth13 [ 444.772706][ T7460] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 444.898155][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.416705][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 445.517840][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 445.522018][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 445.549338][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 445.551356][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 445.815727][ T7460] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 445.848866][ T7460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.154247][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 447.549028][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 447.550583][ T31] usb 1-1: config 1 has an invalid descriptor of length 96, skipping remainder of the config [ 447.550610][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 447.584066][ T31] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 447.584171][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.584238][ T31] usb 1-1: Product: syz [ 447.584283][ T31] usb 1-1: Manufacturer: syz [ 447.584323][ T31] usb 1-1: SerialNumber: syz [ 447.654123][ T5831] Bluetooth: hci2: command tx timeout [ 447.697276][ T31] usb 1-1: selecting invalid altsetting 1 [ 447.710254][ T31] usb 1-1: unit 6 not found! [ 447.879446][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 447.953491][ T5842] usb 1-1: USB disconnect, device number 10 [ 447.999067][ T6432] udevd[6432]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 448.758973][ T8021] chnl_net:caif_netlink_parms(): no params data found [ 449.210116][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.210246][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.210638][ T8021] bridge_slave_0: entered allmulticast mode [ 449.216784][ T8021] bridge_slave_0: entered promiscuous mode [ 449.431732][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.431845][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.432068][ T8021] bridge_slave_1: entered allmulticast mode [ 449.457593][ T8021] bridge_slave_1: entered promiscuous mode [ 449.732788][ T5831] Bluetooth: hci2: command tx timeout [ 450.008784][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 450.040979][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 450.054808][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 450.079050][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 450.080342][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.468719][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.519036][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.860272][ T8021] team0: Port device team_slave_0 added [ 450.888226][ T8021] team0: Port device team_slave_1 added [ 451.483951][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.483970][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.484000][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.802901][ T59] Bluetooth: hci2: command tx timeout [ 451.811901][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.811915][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.811936][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.305807][ T59] Bluetooth: hci5: command tx timeout [ 454.407310][ T59] Bluetooth: hci2: command tx timeout [ 454.407358][ T59] Bluetooth: hci5: command tx timeout [ 455.431593][ T8021] hsr_slave_0: entered promiscuous mode [ 455.433671][ T8021] hsr_slave_1: entered promiscuous mode [ 455.434919][ T8021] debugfs: 'hsr0' already exists in 'hsr' [ 455.434947][ T8021] Cannot create hsr debugfs directory [ 455.919775][ T8140] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 455.919819][ T8140] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 455.919841][ T8140] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 456.441123][ T7623] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 456.443628][ T5831] Bluetooth: hci5: command tx timeout [ 456.498067][ T7623] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 456.862503][ T5831] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 457.119433][ T7623] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 457.354700][ T7623] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 458.154927][ T7623] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 458.360839][ T8183] netlink: 588 bytes leftover after parsing attributes in process `syz.0.556'. [ 458.378384][ T7623] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 458.522816][ T5831] Bluetooth: hci5: command tx timeout [ 458.546513][ T8183] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.565903][ T8183] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 458.566789][ T7623] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 458.609834][ T7623] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 459.153359][ T8089] chnl_net:caif_netlink_parms(): no params data found [ 459.440882][ T31] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 459.602681][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 459.605095][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.605129][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.607156][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.607188][ T31] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 459.607219][ T31] usb 5-1: Product: syz [ 459.607232][ T31] usb 5-1: Manufacturer: syz [ 459.677294][ T31] hub 5-1:4.0: USB hub found [ 459.900659][ T31] hub 5-1:4.0: 11 ports detected [ 459.901357][ T31] hub 5-1:4.0: insufficient power available to use all downstream ports [ 461.321234][ T31] hub 5-1:4.0: set hub depth failed [ 461.348282][ T31] usb 5-1: USB disconnect, device number 7 [ 461.753076][ T5935] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 461.944537][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 461.944572][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 461.944590][ T5935] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 461.944606][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 461.948295][ T5935] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 461.948331][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.948346][ T5935] usb 1-1: Product: syz [ 461.948356][ T5935] usb 1-1: Manufacturer: syz [ 461.948367][ T5935] usb 1-1: SerialNumber: syz [ 462.033443][ T31] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 462.088121][ T5935] usb 1-1: config 0 descriptor?? [ 462.108218][ T8089] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.108317][ T8089] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.108548][ T8089] bridge_slave_0: entered allmulticast mode [ 462.154605][ T8089] bridge_slave_0: entered promiscuous mode [ 462.177204][ T5935] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 462.312720][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 462.328350][ T31] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 462.328380][ T31] usb 5-1: config 0 has no interface number 0 [ 462.328425][ T31] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.328453][ T31] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 462.384452][ T31] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 462.384484][ T31] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 462.384506][ T31] usb 5-1: Product: syz [ 462.384522][ T31] usb 5-1: SerialNumber: syz [ 462.443397][ T31] usb 5-1: config 0 descriptor?? [ 462.512824][ T31] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 462.521463][ T5935] ums-isd200 1-1:0.0: probe with driver ums-isd200 failed with error -22 [ 462.564197][ T5935] usb 1-1: USB disconnect, device number 11 [ 462.669196][ T5838] usb 5-1: USB disconnect, device number 8 [ 462.756315][ T8089] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.756470][ T8089] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.756668][ T8089] bridge_slave_1: entered allmulticast mode [ 462.758809][ T8089] bridge_slave_1: entered promiscuous mode [ 463.209801][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.219354][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.248297][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.275933][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.281973][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.478828][ T8089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.560089][ T8089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.742703][ T5934] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 463.902729][ T5934] usb 5-1: Using ep0 maxpacket: 32 [ 463.908052][ T5934] usb 5-1: unable to get BOS descriptor or descriptor too short [ 463.912169][ T5934] usb 5-1: config 128 has an invalid interface number: 127 but max is 3 [ 463.912201][ T5934] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 463.912222][ T5934] usb 5-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 463.912245][ T5934] usb 5-1: config 128 has no interface number 0 [ 463.912293][ T5934] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 463.912322][ T5934] usb 5-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 463.912347][ T5934] usb 5-1: config 128 interface 127 has no altsetting 0 [ 464.007677][ T5934] usb 5-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 464.007712][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.007736][ T5934] usb 5-1: Product: syz [ 464.007752][ T5934] usb 5-1: Manufacturer: syz [ 464.007768][ T5934] usb 5-1: SerialNumber: syz [ 464.471838][ T8089] team0: Port device team_slave_0 added [ 465.427086][ T5831] Bluetooth: hci0: command tx timeout [ 466.073590][ T5934] usb 5-1: USB disconnect, device number 9 [ 466.237355][ T8089] team0: Port device team_slave_1 added [ 466.322234][ T6432] udevd[6432]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 466.893791][ T5838] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 467.020330][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.020349][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.020378][ T8089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.044900][ T5838] usb 1-1: Using ep0 maxpacket: 8 [ 467.105787][ T5838] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 467.105819][ T5838] usb 1-1: config 179 has no interface number 0 [ 467.105859][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 467.105879][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 467.105927][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 467.105955][ T5838] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 467.105975][ T5838] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 467.106009][ T5838] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 467.106030][ T5838] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.206035][ T8089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.206048][ T8089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 467.206069][ T8089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.312288][ T8266] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 467.484458][ T5831] Bluetooth: hci0: command tx timeout [ 467.837238][ T57] bridge_slave_1: left allmulticast mode [ 467.837274][ T57] bridge_slave_1: left promiscuous mode [ 467.837548][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.848771][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 467.848921][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 467.889825][ T5838] usb 1-1: USB disconnect, device number 12 [ 467.954579][ T57] bridge_slave_0: left allmulticast mode [ 467.954611][ T57] bridge_slave_0: left promiscuous mode [ 467.957761][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.126858][ T57] bridge_slave_1: left allmulticast mode [ 468.126882][ T57] bridge_slave_1: left promiscuous mode [ 468.127054][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.193982][ T57] bridge_slave_0: left allmulticast mode [ 468.194007][ T57] bridge_slave_0: left promiscuous mode [ 468.194219][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.563048][ T5831] Bluetooth: hci0: command tx timeout [ 469.593424][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.674564][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.735342][ T57] bond0 (unregistering): Released all slaves [ 469.964010][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.073462][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.135355][ T57] bond0 (unregistering): Released all slaves [ 470.527105][ T8089] hsr_slave_0: entered promiscuous mode [ 470.528464][ T8089] hsr_slave_1: entered promiscuous mode [ 470.529181][ T8089] debugfs: 'hsr0' already exists in 'hsr' [ 470.529206][ T8089] Cannot create hsr debugfs directory [ 470.756710][ T8021] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 470.826124][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.878580][ T8021] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 471.026833][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.103036][ T8021] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 471.643415][ T5831] Bluetooth: hci0: command tx timeout [ 471.832449][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.117750][ T8021] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 472.151745][ T8021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 472.302877][ T57] hsr_slave_0: left promiscuous mode [ 472.322765][ T57] hsr_slave_1: left promiscuous mode [ 472.323649][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.367085][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.512794][ T57] hsr_slave_0: left promiscuous mode [ 472.532926][ T57] hsr_slave_1: left promiscuous mode [ 472.533772][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 472.588141][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 473.074499][ T57] team0 (unregistering): Port device team_slave_1 removed [ 473.133690][ T57] team0 (unregistering): Port device team_slave_0 removed [ 473.704616][ T57] team0 (unregistering): Port device team_slave_1 removed [ 473.753483][ T57] team0 (unregistering): Port device team_slave_0 removed [ 474.062876][ T8310] batadv0: entered promiscuous mode [ 474.063134][ T8310] vlan2: entered promiscuous mode [ 474.520336][ T8240] chnl_net:caif_netlink_parms(): no params data found [ 474.857979][ T8328] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 476.896699][ T8240] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.896786][ T8240] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.897314][ T8240] bridge_slave_0: entered allmulticast mode [ 476.899444][ T8240] bridge_slave_0: entered promiscuous mode [ 476.989643][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.989914][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.990113][ T8240] bridge_slave_1: entered allmulticast mode [ 477.028060][ T8240] bridge_slave_1: entered promiscuous mode [ 477.576163][ T8240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.581917][ T8240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.417745][ T8240] team0: Port device team_slave_0 added [ 478.516910][ T8240] team0: Port device team_slave_1 added [ 478.770219][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.770236][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 478.770260][ T8240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.340136][ T8240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.340157][ T8240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.340190][ T8240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.275683][ T8347] syz.4.606 (8347): drop_caches: 2 [ 480.341974][ T8240] hsr_slave_0: entered promiscuous mode [ 480.352328][ T8240] hsr_slave_1: entered promiscuous mode [ 480.364415][ T8240] debugfs: 'hsr0' already exists in 'hsr' [ 480.364449][ T8240] Cannot create hsr debugfs directory [ 480.687806][ T8375] ipvlan2: entered promiscuous mode [ 480.687844][ T8375] ipvlan2: entered allmulticast mode [ 480.687860][ T8375] dummy0: entered allmulticast mode [ 480.953881][ T8021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.014110][ T8387] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 485.331667][ T8411] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 486.322296][ T8021] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.825745][ T8089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 486.871774][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.892100][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.912403][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.961756][ T8089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.099302][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.158261][ T8089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 488.006342][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 488.070270][ T3627] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.070616][ T3627] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.071377][ T8089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 488.397092][ T8089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 488.615186][ T8440] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 489.577541][ T57] bridge_slave_1: left allmulticast mode [ 489.577575][ T57] bridge_slave_1: left promiscuous mode [ 489.577871][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.674943][ T57] bridge_slave_0: left allmulticast mode [ 489.674995][ T57] bridge_slave_0: left promiscuous mode [ 489.676530][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.763035][ T8237] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 489.816169][ T8468] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 489.922905][ T8237] usb 1-1: Using ep0 maxpacket: 16 [ 489.926777][ T8237] usb 1-1: config 1 interface 0 altsetting 39 bulk endpoint 0x1 has invalid maxpacket 8 [ 489.926806][ T8237] usb 1-1: config 1 interface 0 has no altsetting 0 [ 489.929509][ T8237] usb 1-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 489.929551][ T8237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.929568][ T8237] usb 1-1: Product: syz [ 489.929579][ T8237] usb 1-1: Manufacturer: syz [ 489.929590][ T8237] usb 1-1: SerialNumber: syz [ 490.058530][ T8463] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 490.361044][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.371191][ T8237] usb 1-1: USB disconnect, device number 13 [ 490.483789][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 490.550627][ T57] bond0 (unregistering): Released all slaves [ 491.319354][ T8237] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 491.434233][ T8475] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 491.515961][ T8237] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 491.516006][ T8237] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 491.516028][ T8237] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 491.516077][ T8237] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.516129][ T8237] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 491.517848][ T8237] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 491.517871][ T8237] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 491.517886][ T8237] usb 1-1: Product: syz [ 491.517896][ T8237] usb 1-1: Manufacturer: syz [ 491.612756][ T57] hsr_slave_0: left promiscuous mode [ 491.614261][ T8237] cdc_wdm 1-1:1.0: skipping garbage [ 491.614285][ T8237] cdc_wdm 1-1:1.0: skipping garbage [ 491.677539][ T57] hsr_slave_1: left promiscuous mode [ 491.678719][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 491.719833][ T8237] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 491.719901][ T8237] cdc_wdm 1-1:1.0: Unknown control protocol [ 491.774179][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.852073][ T8473] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 491.862310][ T6082] usb 1-1: USB disconnect, device number 14 [ 492.317037][ T57] team0 (unregistering): Port device team_slave_1 removed [ 492.368870][ T57] team0 (unregistering): Port device team_slave_0 removed [ 493.609858][ T8021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.106098][ T8089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 494.184463][ T8089] 8021q: adding VLAN 0 to HW filter on device team0 [ 494.260930][ T3195] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.261177][ T3195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 494.365801][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.411378][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 495.679013][ T8021] veth0_vlan: entered promiscuous mode [ 495.945839][ T8021] veth1_vlan: entered promiscuous mode [ 496.255563][ T8021] veth0_macvtap: entered promiscuous mode [ 496.350152][ T8021] veth1_macvtap: entered promiscuous mode [ 496.395557][ T8089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 497.278390][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 498.193621][ T8021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 498.382730][ T3578] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.386546][ T3578] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.388272][ T3578] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.390658][ T3578] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 498.490756][ T8240] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 498.579450][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.617870][ T8240] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 498.657124][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.673862][ T8240] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 498.736626][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.752128][ T8240] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 499.747373][ T8240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.151964][ T8604] netlink: 8 bytes leftover after parsing attributes in process `syz.4.673'. [ 500.229803][ T8605] netlink: 36 bytes leftover after parsing attributes in process `syz.0.672'. [ 501.231973][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.231997][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.243175][ T6082] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 501.268670][ T8089] veth0_vlan: entered promiscuous mode [ 501.350726][ T8089] veth1_vlan: entered promiscuous mode [ 501.416703][ T6082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.416744][ T6082] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.416769][ T6082] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 501.416814][ T6082] usb 1-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 501.416840][ T6082] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.485917][ T6082] usb 1-1: config 0 descriptor?? [ 501.814615][ T1030] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 501.814641][ T1030] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 501.842657][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 501.898719][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.898798][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.002702][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 502.004956][ T9] usb 5-1: config 8 has an invalid interface number: 111 but max is 0 [ 502.004984][ T9] usb 5-1: config 8 has no interface number 0 [ 502.005037][ T9] usb 5-1: config 8 interface 111 altsetting 0 endpoint 0xB has invalid maxpacket 2007, setting to 1024 [ 502.005066][ T9] usb 5-1: config 8 interface 111 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 502.056086][ T9] usb 5-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=4b.99 [ 502.056116][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.056133][ T9] usb 5-1: Product: syz [ 502.056146][ T9] usb 5-1: Manufacturer: syz [ 502.056158][ T9] usb 5-1: SerialNumber: syz [ 502.209850][ T6082] steelseries 0003:1038:1410.0002: missing HID_OUTPUT_REPORT 0 [ 502.241655][ T6082] usb 1-1: USB disconnect, device number 15 [ 502.344869][ T8089] veth0_macvtap: entered promiscuous mode [ 502.371797][ T8622] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 502.612993][ T8089] veth1_macvtap: entered promiscuous mode [ 502.640931][ T9] aircable 5-1:8.111: aircable converter detected [ 502.724426][ T8240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.810539][ T8089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.978319][ T8089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.995203][ T9] usb 5-1: aircable converter now attached to ttyUSB0 [ 503.058068][ T8240] 8021q: adding VLAN 0 to HW filter on device team0 [ 503.115070][ T3556] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.119692][ T3556] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.150580][ T9] usb 5-1: USB disconnect, device number 10 [ 503.209111][ T3556] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.323869][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.324021][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 503.333079][ T3556] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.574316][ T153] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.574439][ T153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.853256][ T5894] kernel read not supported for file /swradio9 (pid: 5894 comm: kworker/1:4) [ 504.442398][ T9] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 504.544554][ T9] aircable 5-1:8.111: device disconnected [ 504.871769][ T8637] netlink: set zone limit has 4 unknown bytes [ 507.271956][ T8663] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 507.360310][ T1285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.360334][ T1285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.889574][ T3578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.889599][ T3578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.538586][ T6013] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 508.695642][ T6013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.695680][ T6013] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.695705][ T6013] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 508.695753][ T6013] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 508.695779][ T6013] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.797479][ T6013] usb 5-1: config 0 descriptor?? [ 509.129638][ T8703] netlink: 'syz.7.691': attribute type 1 has an invalid length. [ 509.129666][ T8703] netlink: 92 bytes leftover after parsing attributes in process `syz.7.691'. [ 509.129695][ T8703] netlink: 658 bytes leftover after parsing attributes in process `syz.7.691'. [ 509.270591][ T8240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 509.431887][ T6013] plantronics 0003:047F:FFFF.0003: item 0 4 0 11 parsing failed [ 509.513414][ T6013] plantronics 0003:047F:FFFF.0003: parse failed [ 509.513544][ T6013] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 509.692866][ T6013] usb 5-1: USB disconnect, device number 11 [ 511.018016][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 511.033866][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 511.074673][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 511.083109][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 511.086057][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 512.279311][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.393488][ T5831] Bluetooth: hci1: command tx timeout [ 513.996870][ T8240] veth0_vlan: entered promiscuous mode [ 514.100126][ T8786] random: crng reseeded on system resumption [ 514.768035][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.403076][ T5831] Bluetooth: hci1: command tx timeout [ 516.019497][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 516.548032][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 516.609946][ T8240] veth1_vlan: entered promiscuous mode [ 516.742915][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 516.772306][ T31] usb 8-1: config index 0 descriptor too short (expected 30, got 18) [ 516.783784][ T31] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 516.783820][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.783844][ T31] usb 8-1: Product: syz [ 516.783861][ T31] usb 8-1: Manufacturer: syz [ 516.783878][ T31] usb 8-1: SerialNumber: syz [ 516.884783][ T31] usb 8-1: config 0 descriptor?? [ 517.058562][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 517.058639][ T31] usb 8-1: setting power ON [ 517.063188][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 517.081310][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 517.082316][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 517.082377][ T31] usb 8-1: media controller created [ 517.119671][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 517.158528][ T31] usb 8-1: selecting invalid altsetting 6 [ 517.158568][ T31] usb 8-1: digital interface selection failed (-22) [ 517.158587][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 517.160063][ T31] usb 8-1: setting power OFF [ 517.163558][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 517.163587][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 517.163603][ T31] (NULL device *): no alternate interface [ 517.482867][ T5831] Bluetooth: hci1: command tx timeout [ 517.540596][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 517.621178][ T31] usb 8-1: USB disconnect, device number 2 [ 517.989157][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 518.032693][ T5934] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 518.223692][ T5934] usb 1-1: Using ep0 maxpacket: 16 [ 518.226014][ T5934] usb 1-1: config index 0 descriptor too short (expected 67, got 36) [ 518.226075][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 518.226103][ T5934] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 518.226142][ T5934] usb 1-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 518.226167][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.392797][ T5934] usb 1-1: config 0 descriptor?? [ 518.425392][ T8240] veth0_macvtap: entered promiscuous mode [ 518.598255][ T8734] chnl_net:caif_netlink_parms(): no params data found [ 519.553047][ T8240] veth1_macvtap: entered promiscuous mode [ 519.572733][ T5831] Bluetooth: hci1: command tx timeout [ 519.725813][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.725855][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.725883][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.725910][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.725938][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.725965][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.725992][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.726017][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.726044][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 519.726072][ T5934] apple 0003:05AC:0247.0004: unknown main item tag 0x0 [ 520.288782][ T8871] netlink: 100 bytes leftover after parsing attributes in process `syz.7.736'. [ 520.290767][ T8734] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.290981][ T8734] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.291257][ T8734] bridge_slave_0: entered allmulticast mode [ 520.371990][ T8734] bridge_slave_0: entered promiscuous mode [ 520.390940][ T5934] apple 0003:05AC:0247.0004: hidraw0: USB HID v0.00 Device [HID 05ac:0247] on usb-dummy_hcd.0-1/input0 [ 520.429483][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 520.431345][ T8734] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.431444][ T8734] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.431630][ T8734] bridge_slave_1: entered allmulticast mode [ 520.444212][ T31] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 520.515884][ T8734] bridge_slave_1: entered promiscuous mode [ 520.598691][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 520.608220][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.608255][ T31] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 520.624489][ T31] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 520.624525][ T31] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 520.624549][ T31] usb 5-1: Product: syz [ 520.624565][ T31] usb 5-1: Manufacturer: syz [ 520.688132][ T5934] usb 1-1: USB disconnect, device number 16 [ 520.846206][ T8240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 520.872368][ T31] hub 5-1:4.0: USB hub found [ 521.057445][ T31] hub 5-1:4.0: 2 ports detected [ 521.279937][ T31] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 521.279964][ T31] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 521.334015][ T31] usb 5-1: USB disconnect, device number 12 [ 521.451080][ T5934] kernel read not supported for file /dsp1 (pid: 5934 comm: kworker/0:5) [ 521.515259][ T8734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.719738][ T8734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.786916][ T1016] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.886382][ T1016] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.000161][ T1016] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.019558][ T8734] team0: Port device team_slave_0 added [ 522.058892][ T1016] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.201121][ T8734] team0: Port device team_slave_1 added [ 523.029578][ T66] bridge_slave_1: left allmulticast mode [ 523.029609][ T66] bridge_slave_1: left promiscuous mode [ 523.029856][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.245418][ T66] bridge_slave_0: left allmulticast mode [ 523.245448][ T66] bridge_slave_0: left promiscuous mode [ 523.249881][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.973570][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 524.191655][ T31] usb 8-1: Using ep0 maxpacket: 8 [ 524.200698][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.200734][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.200760][ T31] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 524.200805][ T31] usb 8-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 524.200833][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.211463][ T31] usb 8-1: config 0 descriptor?? [ 524.334281][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 524.369465][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 524.407863][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 524.455234][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 524.456459][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 524.490714][ T8907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.564952][ T8907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.786900][ T31] hid_parser_main: 139 callbacks suppressed [ 524.786926][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x4 [ 524.786958][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x6 [ 524.786986][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x5 [ 524.787013][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.787040][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.787077][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.787103][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.787131][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.787158][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.787186][ T31] elecom 0003:056E:00FE.0005: unknown main item tag 0x0 [ 524.880703][ T31] elecom 0003:056E:00FE.0005: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.7-1/input0 [ 525.053676][ T8237] usb 8-1: USB disconnect, device number 3 [ 525.276620][ T8918] fido_id[8918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 525.442792][ T5894] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 525.533664][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.595731][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 525.595771][ T5894] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.595813][ T5894] usb 5-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 525.595839][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.616609][ T5894] usb 5-1: config 0 descriptor?? [ 525.670845][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.708237][ T66] bond0 (unregistering): Released all slaves [ 525.766570][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.766590][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.766621][ T8734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.840049][ T8734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.841041][ T8734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.841067][ T8734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 526.522618][ T5831] Bluetooth: hci5: command tx timeout [ 526.559075][ T8734] hsr_slave_0: entered promiscuous mode [ 526.560770][ T8734] hsr_slave_1: entered promiscuous mode [ 526.562025][ T8734] debugfs: 'hsr0' already exists in 'hsr' [ 526.562050][ T8734] Cannot create hsr debugfs directory [ 526.672388][ T5894] aquacomputer_d5next 0003:0C70:F0B6.0006: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.4-1/input0 [ 527.112983][ T8933] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 527.186499][ T8933] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 527.330616][ T5894] usb 5-1: USB disconnect, device number 13 [ 527.554617][ T8940] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 528.236673][ T5894] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 528.400804][ T5894] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.400836][ T5894] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.406447][ T5894] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.406528][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.406586][ T5894] usb 5-1: SerialNumber: syz [ 528.602771][ T5831] Bluetooth: hci5: command tx timeout [ 528.739505][ T5894] usb 5-1: 0:2 : does not exist [ 529.180915][ T5894] usb 5-1: USB disconnect, device number 14 [ 529.630937][ T6432] udevd[6432]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 530.681929][ T8965] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 530.841162][ T5831] Bluetooth: hci5: command tx timeout [ 532.005840][ T8979] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 532.226362][ T8978] random: crng reseeded on system resumption [ 532.514910][ T66] hsr_slave_0: left promiscuous mode [ 532.552783][ T66] hsr_slave_1: left promiscuous mode [ 532.558909][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.558943][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.630950][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.631098][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.760756][ T66] veth1_macvtap: left promiscuous mode [ 532.760875][ T66] veth0_macvtap: left promiscuous mode [ 532.761169][ T66] veth1_vlan: left promiscuous mode [ 532.761351][ T66] veth0_vlan: left promiscuous mode [ 532.842619][ T5831] Bluetooth: hci5: command tx timeout [ 534.103644][ T66] team0 (unregistering): Port device team_slave_1 removed [ 534.167551][ T66] team0 (unregistering): Port device team_slave_0 removed [ 534.531883][ T9012] tap0: tun_chr_ioctl cmd 1074025677 [ 534.532078][ T9012] tap0: linktype set to 773 [ 535.169913][ T5831] Bluetooth: hci2: Malformed HCI Event [ 535.355724][ T5895] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 535.544877][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 535.544913][ T5895] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 535.544953][ T5895] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.00 [ 535.544977][ T5895] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.622222][ T5895] usb 5-1: config 0 descriptor?? [ 535.623777][ T9021] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 535.753348][ T5934] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 535.932715][ T5934] usb 8-1: Using ep0 maxpacket: 8 [ 535.941157][ T5934] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 535.941218][ T5934] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 535.941243][ T5934] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.986363][ T5934] usb 8-1: config 0 descriptor?? [ 536.059237][ T5895] hid_parser_main: 47 callbacks suppressed [ 536.059265][ T5895] sigmamicro 0003:1C4F:0059.0007: unknown main item tag 0x0 [ 536.059296][ T5895] sigmamicro 0003:1C4F:0059.0007: unknown main item tag 0x0 [ 536.059326][ T5895] sigmamicro 0003:1C4F:0059.0007: unknown main item tag 0x0 [ 536.059354][ T5895] sigmamicro 0003:1C4F:0059.0007: unknown main item tag 0x0 [ 536.059384][ T5895] sigmamicro 0003:1C4F:0059.0007: unknown main item tag 0x0 [ 536.059413][ T5895] sigmamicro 0003:1C4F:0059.0007: unknown main item tag 0x0 [ 536.059446][ T5895] sigmamicro 0003:1C4F:0059.0007: collection stack underflow [ 536.059471][ T5895] sigmamicro 0003:1C4F:0059.0007: item 0 2 0 12 parsing failed [ 536.085004][ T5895] sigmamicro 0003:1C4F:0059.0007: probe with driver sigmamicro failed with error -22 [ 536.320278][ T5934] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 536.387972][ T5894] usb 5-1: USB disconnect, device number 15 [ 536.840556][ T5894] usb 8-1: USB disconnect, device number 4 [ 537.097691][ T8916] chnl_net:caif_netlink_parms(): no params data found [ 537.887392][ T37] kauditd_printk_skb: 101 callbacks suppressed [ 537.887415][ T37] audit: type=1326 audit(1776998580.181:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.887462][ T37] audit: type=1326 audit(1776998580.181:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.889019][ T37] audit: type=1326 audit(1776998580.191:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.889377][ T37] audit: type=1326 audit(1776998580.191:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.889910][ T37] audit: type=1326 audit(1776998580.191:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.890063][ T37] audit: type=1326 audit(1776998580.191:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.890222][ T37] audit: type=1326 audit(1776998580.191:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.890841][ T37] audit: type=1326 audit(1776998580.191:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.891002][ T37] audit: type=1326 audit(1776998580.191:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 537.891947][ T37] audit: type=1326 audit(1776998580.191:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9050 comm="syz.7.801" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 538.382181][ T8916] bridge0: port 1(bridge_slave_0) entered blocking state [ 538.382374][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.386585][ T8916] bridge_slave_0: entered allmulticast mode [ 538.427501][ T8916] bridge_slave_0: entered promiscuous mode [ 538.503478][ T9058] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.615079][ T8916] bridge0: port 2(bridge_slave_1) entered blocking state [ 538.615190][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.615398][ T8916] bridge_slave_1: entered allmulticast mode [ 538.617736][ T8916] bridge_slave_1: entered promiscuous mode [ 539.022654][ T6082] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 539.187476][ T6082] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 539.187505][ T6082] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 539.187538][ T6082] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 539.187555][ T6082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.253408][ T6082] usb 5-1: config 0 descriptor?? [ 539.255872][ T9064] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 539.590032][ T66] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.943279][ T6082] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 539.943319][ T6082] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 539.943342][ T6082] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 539.943366][ T6082] lenovo 0003:17EF:6047.0008: unknown main item tag 0x0 [ 540.003337][ T6082] lenovo 0003:17EF:6047.0008: hidraw0: USB HID v0.05 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 540.099266][ T6082] usb 5-1: USB disconnect, device number 16 [ 540.207018][ T8916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.244683][ T8916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.300616][ T9073] fido_id[9073]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 541.459647][ T8916] team0: Port device team_slave_0 added [ 541.941408][ T66] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.017195][ T6082] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 542.058225][ T8916] team0: Port device team_slave_1 added [ 542.201614][ T6082] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 542.201651][ T6082] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 542.201704][ T6082] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 542.201725][ T6082] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 542.201757][ T6082] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 542.201774][ T6082] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.289612][ T6082] usb 8-1: config 0 descriptor?? [ 543.148723][ T6082] plantronics 0003:047F:FFFF.0009: item fetching failed at offset 11/15 [ 543.161924][ T6082] plantronics 0003:047F:FFFF.0009: parse failed [ 543.162020][ T6082] plantronics 0003:047F:FFFF.0009: probe with driver plantronics failed with error -22 [ 543.356964][ T5934] usb 8-1: USB disconnect, device number 5 [ 543.522233][ T66] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.756453][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.756473][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 543.756504][ T8916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.417668][ T66] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.446930][ T9109] vcan0: tx drop: invalid da for name 0x0000000000000033 [ 544.758582][ T8916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.758599][ T8916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 544.758625][ T8916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.560717][ T9120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.827'. [ 546.681244][ T8916] hsr_slave_0: entered promiscuous mode [ 546.689961][ T8916] hsr_slave_1: entered promiscuous mode [ 546.690871][ T8916] debugfs: 'hsr0' already exists in 'hsr' [ 546.690898][ T8916] Cannot create hsr debugfs directory [ 546.762906][ T8734] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 546.828088][ T8734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 546.852340][ T9127] trusted_key: encrypted_key: keyword 'upw' not recognized [ 546.924728][ T8734] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 547.018717][ T8734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.183188][ T9135] sctp: [Deprecated]: syz.0.833 (pid 9135) Use of int in maxseg socket option. [ 547.183188][ T9135] Use struct sctp_assoc_value instead [ 547.445056][ T8734] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 547.554640][ T8734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.612141][ T8734] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 547.719831][ T8734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.848685][ T6082] kernel read not supported for file /dsp (pid: 6082 comm: kworker/1:7) [ 549.069062][ T9133] Set syz1 is full, maxelem 6117 reached [ 549.139846][ T66] bridge_slave_1: left allmulticast mode [ 549.139877][ T66] bridge_slave_1: left promiscuous mode [ 549.140146][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 549.194799][ T9166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.844'. [ 549.267640][ T66] bridge_slave_0: left allmulticast mode [ 549.267671][ T66] bridge_slave_0: left promiscuous mode [ 549.267907][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.623053][ T8503] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 549.788267][ T8503] usb 8-1: unable to get BOS descriptor or descriptor too short [ 549.790062][ T8503] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.790092][ T8503] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 549.866425][ T8503] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 549.866450][ T8503] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.866465][ T8503] usb 8-1: Product: syz [ 549.866476][ T8503] usb 8-1: Manufacturer: syz [ 549.866487][ T8503] usb 8-1: SerialNumber: syz [ 549.968047][ T8503] usb 8-1: selecting invalid altsetting 1 [ 549.968732][ T8503] usb 8-1: unit 6 not found! [ 550.515990][ T8503] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 550.565678][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.622951][ T8503] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 550.626640][ T8503] usb 8-1: USB disconnect, device number 6 [ 550.661522][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.684536][ T6432] udevd[6432]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 550.743216][ T66] bond0 (unregistering): Released all slaves [ 550.903908][ T9173] bridge0: port 3(team0) entered disabled state [ 550.926424][ T9173] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.926729][ T9173] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.096228][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.0.848'. [ 551.096259][ T9175] netlink: 20 bytes leftover after parsing attributes in process `syz.0.848'. [ 552.928643][ T66] hsr_slave_0: left promiscuous mode [ 552.964165][ T66] hsr_slave_1: left promiscuous mode [ 552.965336][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 552.965365][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.025264][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.025396][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.397467][ T66] veth1_macvtap: left promiscuous mode [ 553.402177][ T66] veth0_macvtap: left promiscuous mode [ 553.408489][ T66] veth1_vlan: left promiscuous mode [ 553.409054][ T66] veth0_vlan: left promiscuous mode [ 555.423521][ T66] team0 (unregistering): Port device team_slave_1 removed [ 555.484785][ T66] team0 (unregistering): Port device team_slave_0 removed [ 555.751208][ T9219] tipc: Started in network mode [ 555.751253][ T9219] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 555.848885][ T9219] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:04bb [ 555.849492][ T9219] tipc: Enabled bearer , priority 10 [ 556.751280][ T9240] netlink: 16 bytes leftover after parsing attributes in process `syz.0.873'. [ 557.302204][ T8503] tipc: Node number set to 1 [ 557.363235][ T9247] loop2: detected capacity change from 0 to 7 [ 557.611433][ T9247] Dev loop2: unable to read RDB block 7 [ 557.611484][ T9247] loop2: unable to read partition table [ 557.612423][ T9247] loop2: partition table beyond EOD, truncated [ 557.617047][ T9247] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 557.689009][ T8734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.103643][ T8734] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.168028][ T3195] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.168151][ T3195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.576235][ T1030] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.576388][ T1030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.101607][ T8734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.693691][ T5935] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 560.852591][ T9317] batadv_slave_1: entered promiscuous mode [ 560.857434][ T9316] batadv_slave_1: left promiscuous mode [ 560.875015][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 560.875050][ T5935] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 560.878715][ T5935] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 560.878749][ T5935] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.878772][ T5935] usb 5-1: Product: syz [ 560.878788][ T5935] usb 5-1: Manufacturer: syz [ 560.878805][ T5935] usb 5-1: SerialNumber: syz [ 560.974354][ T5935] usb 5-1: config 0 descriptor?? [ 560.975187][ T9309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 560.975318][ T9309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.203550][ T9309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.203666][ T9309] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 561.269792][ T9323] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 561.279725][ T31] IPVS: starting estimator thread 0... [ 561.411922][ T9328] IPVS: using max 7 ests per chain, 16800 per kthread [ 561.621684][ T5935] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 561.775964][ T9334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 561.965356][ T9337] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 561.998953][ T8916] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 562.032595][ T5935] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 562.056151][ T9337] picdev_read: 26 callbacks suppressed [ 562.056168][ T9337] kvm: pic: non byte read [ 562.079575][ T9337] kvm: pic: non byte read [ 562.079852][ T9337] kvm: pic: non byte read [ 562.080211][ T9337] kvm: pic: non byte read [ 562.081503][ T9337] kvm: pic: non byte read [ 562.081766][ T9337] kvm: pic: non byte read [ 562.081887][ T9339] random: crng reseeded on system resumption [ 562.082039][ T9337] kvm: pic: non byte read [ 562.082280][ T9337] kvm: pic: non byte read [ 562.101156][ T9337] kvm: pic: non byte read [ 562.101506][ T9337] kvm: pic: non byte read [ 562.101874][ T9337] kvm: pic: single mode not supported [ 562.101882][ T9337] pic_ioport_write: 1 callbacks suppressed [ 562.101899][ T9337] kvm: pic: level sensitive irq not supported [ 562.102429][ T9337] kvm: pic: single mode not supported [ 562.102448][ T9337] kvm: pic: level sensitive irq not supported [ 562.186009][ T9337] kvm: pic: level sensitive irq not supported [ 562.196026][ T9337] kvm: pic: level sensitive irq not supported [ 562.196527][ T9337] kvm: pic: single mode not supported [ 562.196539][ T9337] kvm: pic: level sensitive irq not supported [ 562.197040][ T9337] kvm: pic: single mode not supported [ 562.197052][ T9337] kvm: pic: level sensitive irq not supported [ 562.201834][ T9337] kvm: pic: level sensitive irq not supported [ 562.202203][ T9337] kvm: pic: level sensitive irq not supported [ 562.202393][ T9337] kvm: pic: single mode not supported [ 562.202401][ T9337] kvm: pic: level sensitive irq not supported [ 562.251006][ T9337] kvm: pic: level sensitive irq not supported [ 562.251548][ T9337] kvm: pic: single mode not supported [ 562.274351][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.279701][ T8916] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 562.352330][ T5935] usb 5-1: USB disconnect, device number 17 [ 562.370351][ T5831] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 562.370613][ T5831] Bluetooth: hci2: Injecting HCI hardware error event [ 562.374728][ T59] Bluetooth: hci2: hardware error 0x00 [ 562.438802][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.448873][ T8916] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 562.499864][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 562.515119][ T8916] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 562.610346][ T8916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 562.631652][ T9343] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 562.796709][ T8734] veth0_vlan: entered promiscuous mode [ 563.024949][ T8734] veth1_vlan: entered promiscuous mode [ 564.101514][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.101577][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.293560][ T8734] veth0_macvtap: entered promiscuous mode [ 564.386016][ T8734] veth1_macvtap: entered promiscuous mode [ 564.637431][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.683549][ T59] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 564.744505][ T8734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.877596][ T3578] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.894286][ T3578] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.900748][ T8916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.901169][ T3578] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.934389][ T3578] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.178253][ T8916] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.518157][ T1524] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.518298][ T1524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.854083][ T3195] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.856587][ T3195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.610878][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.610901][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.768620][ T37] kauditd_printk_skb: 10 callbacks suppressed [ 566.768635][ T37] audit: type=1326 audit(1776998609.061:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.768672][ T37] audit: type=1326 audit(1776998609.061:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.768705][ T37] audit: type=1326 audit(1776998609.071:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.768737][ T37] audit: type=1326 audit(1776998609.071:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.768791][ T37] audit: type=1326 audit(1776998609.071:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=239 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.768822][ T37] audit: type=1326 audit(1776998609.071:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.768878][ T37] audit: type=1326 audit(1776998609.071:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.857406][ T37] audit: type=1326 audit(1776998609.081:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.857600][ T37] audit: type=1326 audit(1776998609.121:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 566.857804][ T37] audit: type=1326 audit(1776998609.121:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9405 comm="syz.7.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f4028b3cdd9 code=0x7ffc0000 [ 567.111044][ T1524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.111070][ T1524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.293143][ T9409] loop8: detected capacity change from 0 to 8 [ 567.682353][ T9409] Dev loop8: unable to read RDB block 8 [ 567.682402][ T9409] loop8: unable to read partition table [ 567.695014][ T9409] loop8: partition table beyond EOD, truncated [ 567.695178][ T9409] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 568.616847][ T8916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.692679][ T8237] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 568.862608][ T8237] usb 1-1: Using ep0 maxpacket: 32 [ 568.866783][ T8237] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 568.866813][ T8237] usb 1-1: config 0 has no interface number 0 [ 568.931444][ T8237] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 568.931480][ T8237] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.931503][ T8237] usb 1-1: Product: syz [ 568.931519][ T8237] usb 1-1: Manufacturer: syz [ 568.931534][ T8237] usb 1-1: SerialNumber: syz [ 568.985424][ T8237] usb 1-1: config 0 descriptor?? [ 569.479591][ T8237] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 569.479628][ T8237] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 569.715626][ T8237] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 569.715948][ T8237] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 569.797397][ T8237] usb 1-1: USB disconnect, device number 17 [ 570.216311][ T8916] veth0_vlan: entered promiscuous mode [ 570.387221][ T8916] veth1_vlan: entered promiscuous mode [ 570.698168][ T8916] veth0_macvtap: entered promiscuous mode [ 570.719771][ T8916] veth1_macvtap: entered promiscuous mode [ 570.801326][ T8916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.971426][ T8916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 571.079311][ T8780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.079611][ T8780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.080162][ T8780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.080418][ T8780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.442669][ T31] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 571.602620][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 571.606349][ T31] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 571.606383][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 571.606405][ T31] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 571.606428][ T31] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 571.606469][ T31] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 571.606492][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.888187][ T9471] netlink: 20 bytes leftover after parsing attributes in process `syz.5.944'. [ 571.925453][ T31] usb 1-1: GET_CAPABILITIES returned 0 [ 571.925515][ T31] usbtmc 1-1:16.0: can't read capabilities [ 572.358503][ T31] usb 1-1: USB disconnect, device number 18 [ 573.653221][ T8503] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 573.762586][ T3627] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 573.762618][ T3627] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 573.823453][ T8503] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 573.823511][ T8503] usb 8-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 573.823551][ T8503] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 573.866510][ T31] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 573.882931][ T8503] usb 8-1: config 0 descriptor?? [ 573.900807][ T9487] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 574.062213][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 574.069768][ T31] usb 1-1: config 0 interface 0 altsetting 2 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 574.069844][ T31] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x86 has an invalid bInterval 51, changing to 9 [ 574.069876][ T31] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x86 has invalid maxpacket 33540, setting to 1024 [ 574.069945][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 574.070013][ T31] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 574.070064][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.232135][ T31] usb 1-1: config 0 descriptor?? [ 574.496936][ T8503] hid (null): unknown global tag 0xd [ 574.539722][ T8503] hid_parser_main: 33 callbacks suppressed [ 574.539749][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539785][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539814][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539844][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539873][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539902][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539947][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.539977][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.584077][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.584129][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown main item tag 0x0 [ 574.650748][ T8503] logitech-djreceiver 0003:046D:C71F.000A: unknown global tag 0xd [ 574.650776][ T8503] logitech-djreceiver 0003:046D:C71F.000A: item 0 4 1 13 parsing failed [ 574.680757][ T8503] logitech-djreceiver 0003:046D:C71F.000A: logi_dj_probe: parse failed [ 574.692354][ T8503] logitech-djreceiver 0003:046D:C71F.000A: probe with driver logitech-djreceiver failed with error -22 [ 574.718060][ T31] hid (null): unknown global tag 0xe [ 574.718093][ T31] hid (null): unknown global tag 0xe [ 574.718211][ T31] hid (null): unknown global tag 0x63 [ 574.718256][ T31] hid (null): unknown global tag 0x40 [ 574.718367][ T31] hid (null): bogus close delimiter [ 574.747887][ T31] hid (null): invalid report_size 43024 [ 574.748182][ T31] hid (null): unknown global tag 0xd [ 574.748522][ T31] hid (null): unknown global tag 0x52 [ 574.748567][ T31] hid (null): unknown global tag 0xe [ 574.748745][ T31] hid (null): invalid report_size 222345300 [ 574.879729][ T8503] usb 8-1: USB disconnect, device number 7 [ 575.095928][ T31] usb 1-1: USB disconnect, device number 19 [ 575.325320][ T8779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 575.325345][ T8779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 575.411003][ T9502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.953'. [ 575.659417][ T9504] CUSE: zero length info key specified [ 576.770889][ T9534] netlink: 16 bytes leftover after parsing attributes in process `syz.0.965'. [ 587.354654][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 588.371960][ T9704] netlink: 'syz.0.1014': attribute type 1 has an invalid length. [ 588.371978][ T9704] netlink: 'syz.0.1014': attribute type 2 has an invalid length. [ 589.444281][ T1659] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 589.605056][ T1659] usb 7-1: Using ep0 maxpacket: 32 [ 589.950789][ T9733] netlink: 'syz.5.1024': attribute type 29 has an invalid length. [ 589.972770][ T9733] netlink: 'syz.5.1024': attribute type 29 has an invalid length. [ 589.979464][ T9733] netlink: 'syz.5.1024': attribute type 32 has an invalid length. [ 590.002840][ T9733] netlink: 500 bytes leftover after parsing attributes in process `syz.5.1024'. [ 590.319511][ T1659] usb 7-1: unable to get BOS descriptor or descriptor too short [ 590.328424][ T1659] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 590.328468][ T1659] usb 7-1: can't read configurations, error -71 [ 591.190456][ T9752] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 591.190489][ T9752] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 591.190691][ T9752] overlayfs: failed to get uuid (408/file1, err=-13); falling back to uuid=null. [ 591.814148][ T5935] hid_parser_main: 243 callbacks suppressed [ 591.814178][ T5935] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 592.043266][ T5935] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 594.427281][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1046'. [ 596.132138][ T9847] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1057'. [ 596.210958][ T9847] netem: incorrect gi model size [ 596.211003][ T9847] netem: change failed [ 599.527912][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 599.527935][ T37] audit: type=1326 audit(1776998641.831:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.528176][ T37] audit: type=1326 audit(1776998641.831:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.601694][ T37] audit: type=1326 audit(1776998641.901:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.603624][ T37] audit: type=1326 audit(1776998641.901:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.620562][ T37] audit: type=1326 audit(1776998641.911:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.648390][ T37] audit: type=1326 audit(1776998641.941:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.676343][ T37] audit: type=1326 audit(1776998641.951:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.691619][ T37] audit: type=1326 audit(1776998641.991:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.725341][ T37] audit: type=1326 audit(1776998642.021:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 599.770409][ T37] audit: type=1326 audit(1776998642.061:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9905 comm="syz.6.1076" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b7de0cdd9 code=0x7ffc0000 [ 600.120957][ T9916] netlink: 'syz.6.1079': attribute type 1 has an invalid length. [ 600.199656][ T9916] bond1: entered promiscuous mode [ 600.200190][ T9916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 600.387090][ T9919] bond1: (slave bridge1): making interface the new active one [ 600.387228][ T9919] bridge1: entered promiscuous mode [ 600.466597][ T9919] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 602.705140][ T9958] tls_set_device_offload_rx: netdev not found [ 606.672114][ T1659] Process accounting resumed [ 606.779646][T10015] Process accounting resumed [ 610.564191][T10048] netlink: 'syz.5.1109': attribute type 4 has an invalid length. [ 610.564217][T10048] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1109'. [ 611.276752][T10070] netlink: 'syz.5.1112': attribute type 1 has an invalid length. [ 611.456113][T10070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 611.589885][T10072] bond1: (slave ip6erspan0): making interface the new active one [ 611.610390][T10072] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 612.150152][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 612.197588][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 612.263482][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 612.267755][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 612.272198][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 613.248967][T10083] chnl_net:caif_netlink_parms(): no params data found [ 613.475522][T10083] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.475710][T10083] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.475915][T10083] bridge_slave_0: entered allmulticast mode [ 613.478929][T10083] bridge_slave_0: entered promiscuous mode [ 613.526451][T10083] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.526582][T10083] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.526839][T10083] bridge_slave_1: entered allmulticast mode [ 613.531396][T10083] bridge_slave_1: entered promiscuous mode [ 613.610294][T10083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.631006][T10083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.691508][T10083] team0: Port device team_slave_0 added [ 613.720817][T10083] team0: Port device team_slave_1 added [ 613.769671][T10083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.769692][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.769723][T10083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.772310][T10083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.772335][T10083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.772367][T10083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.939067][T10083] hsr_slave_0: entered promiscuous mode [ 613.940466][T10083] hsr_slave_1: entered promiscuous mode [ 613.941438][T10083] debugfs: 'hsr0' already exists in 'hsr' [ 613.941465][T10083] Cannot create hsr debugfs directory [ 614.443294][ T59] Bluetooth: hci0: command tx timeout [ 615.246548][ T5831] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 615.328162][ T5831] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 615.352937][ T5831] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 615.378390][ T5831] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 615.381241][ T5831] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 616.912960][ T59] Bluetooth: hci0: command tx timeout [ 617.483100][ T5831] Bluetooth: hci6: command tx timeout [ 617.586571][T10099] chnl_net:caif_netlink_parms(): no params data found [ 617.821294][T10099] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.821530][T10099] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.821739][T10099] bridge_slave_0: entered allmulticast mode [ 617.829429][T10099] bridge_slave_0: entered promiscuous mode [ 617.841127][T10099] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.841836][T10099] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.845672][T10099] bridge_slave_1: entered allmulticast mode [ 617.855394][T10099] bridge_slave_1: entered promiscuous mode [ 617.959021][T10099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 618.003792][T10099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.231782][T10099] team0: Port device team_slave_0 added [ 618.247186][T10099] team0: Port device team_slave_1 added [ 618.717977][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 618.739522][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 618.778352][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 618.781423][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 618.793514][T10099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 618.793568][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 618.793658][T10099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 618.821041][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 618.929756][ T59] Bluetooth: hci0: command tx timeout [ 619.033338][T10099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.033358][T10099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.033392][T10099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.295894][ T5831] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 619.335484][ T5831] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 619.344205][ T5831] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 619.392988][ T5831] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 619.399471][ T5831] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 619.552040][T10099] hsr_slave_0: entered promiscuous mode [ 619.562360][T10099] hsr_slave_1: entered promiscuous mode [ 619.562688][ T5831] Bluetooth: hci6: command tx timeout [ 619.595328][T10099] debugfs: 'hsr0' already exists in 'hsr' [ 619.595358][T10099] Cannot create hsr debugfs directory [ 621.002607][ T5831] Bluetooth: hci0: command tx timeout [ 621.082826][ T5831] Bluetooth: hci7: command tx timeout [ 621.563281][ T5831] Bluetooth: hci8: command tx timeout [ 621.642789][T10124] Bluetooth: hci6: command tx timeout [ 622.882645][ T5842] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 622.958709][T10118] chnl_net:caif_netlink_parms(): no params data found [ 623.032751][ T5842] usb 6-1: Using ep0 maxpacket: 32 [ 623.035270][ T5842] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 623.035297][ T5842] usb 6-1: config 0 has no interface number 0 [ 623.035447][ T5842] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 623.038726][ T5842] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 623.038755][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.038775][ T5842] usb 6-1: Product: syz [ 623.038789][ T5842] usb 6-1: Manufacturer: syz [ 623.038803][ T5842] usb 6-1: SerialNumber: syz [ 623.044867][ T5842] usb 6-1: config 0 descriptor?? [ 623.046330][T10142] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 623.164584][T10124] Bluetooth: hci7: command tx timeout [ 623.284555][T10142] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 623.643917][T10124] Bluetooth: hci8: command tx timeout [ 623.727385][T10124] Bluetooth: hci6: command tx timeout [ 624.111767][ T5842] asix 6-1:0.188 (unnamed net_device) (uninitialized): invalid PHY address: 198 [ 624.327554][ T5842] usb 6-1: USB disconnect, device number 2 [ 624.357090][T10122] chnl_net:caif_netlink_parms(): no params data found [ 624.716610][T10118] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.717023][T10118] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.717590][T10118] bridge_slave_0: entered allmulticast mode [ 624.720568][T10118] bridge_slave_0: entered promiscuous mode [ 624.773170][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.773246][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.784693][T10118] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.784847][T10118] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.785419][T10118] bridge_slave_1: entered allmulticast mode [ 624.801472][T10118] bridge_slave_1: entered promiscuous mode [ 625.015132][T10118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.077003][T10118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.077268][T10122] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.077464][T10122] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.077628][T10122] bridge_slave_0: entered allmulticast mode [ 625.100797][T10122] bridge_slave_0: entered promiscuous mode [ 625.181530][T10122] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.181650][T10122] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.181811][T10122] bridge_slave_1: entered allmulticast mode [ 625.205289][T10122] bridge_slave_1: entered promiscuous mode [ 625.242875][T10124] Bluetooth: hci7: command tx timeout [ 625.289822][T10118] team0: Port device team_slave_0 added [ 625.325534][T10118] team0: Port device team_slave_1 added [ 625.343339][T10122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.431838][T10122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.502379][T10118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.505654][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.505681][T10118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.631191][T10118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.631211][T10118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.631242][T10118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.702726][T10122] team0: Port device team_slave_0 added [ 625.740317][T10124] Bluetooth: hci8: command tx timeout [ 625.769174][T10122] team0: Port device team_slave_1 added [ 625.921676][T10122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.921696][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.921727][T10122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.044390][T10118] hsr_slave_0: entered promiscuous mode [ 626.046117][T10118] hsr_slave_1: entered promiscuous mode [ 626.047266][T10118] debugfs: 'hsr0' already exists in 'hsr' [ 626.047293][T10118] Cannot create hsr debugfs directory [ 626.051213][T10122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.051230][T10122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 626.051263][T10122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.571643][T10122] hsr_slave_0: entered promiscuous mode [ 626.578991][T10122] hsr_slave_1: entered promiscuous mode [ 626.580566][T10122] debugfs: 'hsr0' already exists in 'hsr' [ 626.580595][T10122] Cannot create hsr debugfs directory [ 627.323601][T10124] Bluetooth: hci7: command tx timeout [ 627.803165][T10124] Bluetooth: hci8: command tx timeout [ 637.082666][ T5137] Bluetooth: hci1: command 0x0406 tx timeout [ 647.339663][T10124] Bluetooth: hci5: command 0x0406 tx timeout [ 672.066793][T10124] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 672.176177][T10124] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 672.178387][T10124] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 672.179658][T10124] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 672.217501][T10124] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 672.825710][T10509] chnl_net:caif_netlink_parms(): no params data found [ 673.031538][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.031780][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.032034][T10509] bridge_slave_0: entered allmulticast mode [ 673.041535][T10509] bridge_slave_0: entered promiscuous mode [ 673.050776][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.051464][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.059437][T10509] bridge_slave_1: entered allmulticast mode [ 673.081387][T10509] bridge_slave_1: entered promiscuous mode [ 673.145425][T10509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.149468][T10509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.215859][T10509] team0: Port device team_slave_0 added [ 673.219997][T10509] team0: Port device team_slave_1 added [ 673.275661][T10509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.275681][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.275711][T10509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.278449][T10509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.278466][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.278498][T10509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.444782][T10509] hsr_slave_0: entered promiscuous mode [ 673.446286][T10509] hsr_slave_1: entered promiscuous mode [ 673.447300][T10509] debugfs: 'hsr0' already exists in 'hsr' [ 673.447328][T10509] Cannot create hsr debugfs directory [ 674.285739][ T5137] Bluetooth: hci9: command tx timeout [ 675.497919][T10124] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 675.546981][T10124] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 675.560857][T10124] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 675.567375][T10124] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 675.582266][T10124] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 676.108011][T10520] chnl_net:caif_netlink_parms(): no params data found [ 676.311158][T10520] bridge0: port 1(bridge_slave_0) entered blocking state [ 676.311408][T10520] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.312268][T10520] bridge_slave_0: entered allmulticast mode [ 676.320664][T10520] bridge_slave_0: entered promiscuous mode [ 676.338535][T10520] bridge0: port 2(bridge_slave_1) entered blocking state [ 676.339204][T10520] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.340315][T10520] bridge_slave_1: entered allmulticast mode [ 676.348178][T10520] bridge_slave_1: entered promiscuous mode [ 676.374321][ T5137] Bluetooth: hci9: command tx timeout [ 676.423200][T10520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.427367][T10520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 676.500112][T10520] team0: Port device team_slave_0 added [ 676.510483][T10520] team0: Port device team_slave_1 added [ 676.563040][T10520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.563061][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.563091][T10520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.567392][T10520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.567410][T10520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 676.567442][T10520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.738076][T10520] hsr_slave_0: entered promiscuous mode [ 676.739594][T10520] hsr_slave_1: entered promiscuous mode [ 676.740610][T10520] debugfs: 'hsr0' already exists in 'hsr' [ 676.740637][T10520] Cannot create hsr debugfs directory [ 677.642756][ T5137] Bluetooth: hci10: command tx timeout [ 678.442584][ T5137] Bluetooth: hci9: command tx timeout [ 678.551721][T10124] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 678.629933][T10124] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 678.641779][T10124] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 678.650594][T10124] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 678.671740][T10124] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 679.100437][T10124] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 679.168735][T10124] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 679.171663][T10124] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 679.184482][T10124] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 679.210538][T10124] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 679.709550][T10529] chnl_net:caif_netlink_parms(): no params data found [ 679.722710][T10124] Bluetooth: hci10: command tx timeout [ 680.032132][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.033694][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.034513][T10529] bridge_slave_0: entered allmulticast mode [ 680.044676][T10529] bridge_slave_0: entered promiscuous mode [ 680.080577][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.080709][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.080992][T10529] bridge_slave_1: entered allmulticast mode [ 680.103101][T10529] bridge_slave_1: entered promiscuous mode [ 680.228268][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.264293][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.330283][T10529] team0: Port device team_slave_0 added [ 680.340744][T10529] team0: Port device team_slave_1 added [ 680.395528][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 680.395549][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.395580][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 680.398132][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 680.398149][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 680.398180][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 680.524073][T10532] chnl_net:caif_netlink_parms(): no params data found [ 680.542592][T10124] Bluetooth: hci9: command tx timeout [ 680.763181][T10124] Bluetooth: hci11: command tx timeout [ 680.832774][T10529] hsr_slave_0: entered promiscuous mode [ 680.834412][T10529] hsr_slave_1: entered promiscuous mode [ 680.835514][T10529] debugfs: 'hsr0' already exists in 'hsr' [ 680.835541][T10529] Cannot create hsr debugfs directory [ 681.025091][T10532] bridge0: port 1(bridge_slave_0) entered blocking state [ 681.025323][T10532] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.025929][T10532] bridge_slave_0: entered allmulticast mode [ 681.028978][T10532] bridge_slave_0: entered promiscuous mode [ 681.065846][T10532] bridge0: port 2(bridge_slave_1) entered blocking state [ 681.065977][T10532] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.066618][T10532] bridge_slave_1: entered allmulticast mode [ 681.070602][T10532] bridge_slave_1: entered promiscuous mode [ 681.193005][T10532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 681.227361][T10532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.355094][T10532] team0: Port device team_slave_0 added [ 681.386496][T10532] team0: Port device team_slave_1 added [ 681.402705][T10124] Bluetooth: hci12: command tx timeout [ 681.532282][T10532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.532303][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.532335][T10532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.566221][T10532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.566273][T10532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.566352][T10532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.802740][T10124] Bluetooth: hci10: command tx timeout [ 681.920382][T10532] hsr_slave_0: entered promiscuous mode [ 681.934881][T10532] hsr_slave_1: entered promiscuous mode [ 681.936015][T10532] debugfs: 'hsr0' already exists in 'hsr' [ 681.936149][T10532] Cannot create hsr debugfs directory [ 682.842740][T10124] Bluetooth: hci11: command tx timeout [ 683.482982][T10124] Bluetooth: hci12: command tx timeout [ 683.885120][T10124] Bluetooth: hci10: command tx timeout [ 684.923007][T10124] Bluetooth: hci11: command tx timeout [ 685.562588][T10124] Bluetooth: hci12: command tx timeout [ 686.221451][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.221527][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.002668][T10124] Bluetooth: hci11: command tx timeout [ 687.642605][T10124] Bluetooth: hci12: command tx timeout [ 732.205983][ T5137] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 732.255386][ T5137] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 732.256872][ T5137] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 732.258392][ T5137] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 732.259507][ T5137] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 732.831345][T10557] chnl_net:caif_netlink_parms(): no params data found [ 732.998124][T10557] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.998361][T10557] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.998963][T10557] bridge_slave_0: entered allmulticast mode [ 733.001981][T10557] bridge_slave_0: entered promiscuous mode [ 733.039824][T10557] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.040005][T10557] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.040275][T10557] bridge_slave_1: entered allmulticast mode [ 733.064340][T10557] bridge_slave_1: entered promiscuous mode [ 733.120325][T10557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.136717][T10557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.200391][T10557] team0: Port device team_slave_0 added [ 733.211064][T10557] team0: Port device team_slave_1 added [ 733.288248][T10557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 733.288267][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.288298][T10557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 733.290729][T10557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 733.290745][T10557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 733.290777][T10557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.470024][T10557] hsr_slave_0: entered promiscuous mode [ 733.471720][T10557] hsr_slave_1: entered promiscuous mode [ 733.484900][T10557] debugfs: 'hsr0' already exists in 'hsr' [ 733.484933][T10557] Cannot create hsr debugfs directory [ 734.605563][T10124] Bluetooth: hci13: command tx timeout [ 735.659845][ T5137] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 735.702807][ T5137] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 735.738122][ T5137] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 735.777301][ T5137] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 735.778193][ T5137] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 736.401351][T10567] chnl_net:caif_netlink_parms(): no params data found [ 736.597541][T10567] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.597790][T10567] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.598130][T10567] bridge_slave_0: entered allmulticast mode [ 736.601265][T10567] bridge_slave_0: entered promiscuous mode [ 736.632704][T10567] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.632999][T10567] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.633325][T10567] bridge_slave_1: entered allmulticast mode [ 736.636596][T10567] bridge_slave_1: entered promiscuous mode [ 736.682572][T10124] Bluetooth: hci13: command tx timeout [ 736.719177][T10567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 736.733342][T10567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.789498][T10567] team0: Port device team_slave_0 added [ 736.799718][T10567] team0: Port device team_slave_1 added [ 736.942137][T10567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.942157][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.942188][T10567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.954406][T10567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.954466][T10567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.954587][T10567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 737.103147][T10567] hsr_slave_0: entered promiscuous mode [ 737.104836][T10567] hsr_slave_1: entered promiscuous mode [ 737.105889][T10567] debugfs: 'hsr0' already exists in 'hsr' [ 737.105916][T10567] Cannot create hsr debugfs directory [ 737.972533][ T5137] Bluetooth: hci14: command tx timeout [ 738.772630][ T5137] Bluetooth: hci13: command tx timeout [ 738.852132][T10577] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 738.951821][T10577] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 738.973880][T10577] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 738.996086][T10577] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 738.999935][T10577] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 739.483604][ T5137] Bluetooth: hci0: command 0x0406 tx timeout [ 739.486830][T10577] Bluetooth: hci6: command 0x0406 tx timeout [ 740.052694][T10124] Bluetooth: hci14: command tx timeout [ 740.148632][ T5831] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 740.228669][ T5831] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 740.248715][ T5831] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 740.250154][ T5831] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 740.250942][ T5831] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 740.547127][T10576] chnl_net:caif_netlink_parms(): no params data found [ 740.842657][T10124] Bluetooth: hci13: command tx timeout [ 740.916803][T10576] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.917253][T10576] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.917903][T10576] bridge_slave_0: entered allmulticast mode [ 740.920988][T10576] bridge_slave_0: entered promiscuous mode [ 740.987349][T10576] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.987519][T10576] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.988135][T10576] bridge_slave_1: entered allmulticast mode [ 740.991692][T10576] bridge_slave_1: entered promiscuous mode [ 741.180045][T10576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 741.200141][T10576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.241588][T10581] chnl_net:caif_netlink_parms(): no params data found [ 741.243142][T10124] Bluetooth: hci15: command tx timeout [ 741.320626][T10576] team0: Port device team_slave_0 added [ 741.354883][T10576] team0: Port device team_slave_1 added [ 741.620999][T10576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.621020][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.621051][T10576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.683605][T10576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.683633][T10576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.683659][T10576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.780830][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.781060][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.781304][T10581] bridge_slave_0: entered allmulticast mode [ 741.798825][T10581] bridge_slave_0: entered promiscuous mode [ 741.862289][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.863199][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.884876][T10581] bridge_slave_1: entered allmulticast mode [ 741.888029][T10581] bridge_slave_1: entered promiscuous mode [ 741.974510][T10576] hsr_slave_0: entered promiscuous mode [ 741.976257][T10576] hsr_slave_1: entered promiscuous mode [ 741.977490][T10576] debugfs: 'hsr0' already exists in 'hsr' [ 741.977518][T10576] Cannot create hsr debugfs directory [ 742.027068][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 742.050770][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 742.122703][T10124] Bluetooth: hci14: command tx timeout [ 742.183198][T10581] team0: Port device team_slave_0 added [ 742.208514][T10581] team0: Port device team_slave_1 added [ 742.303662][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.303679][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.303704][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.362847][T10124] Bluetooth: hci16: command tx timeout [ 742.364984][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.365001][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 742.365025][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.856310][T10581] hsr_slave_0: entered promiscuous mode [ 742.858113][T10581] hsr_slave_1: entered promiscuous mode [ 742.859368][T10581] debugfs: 'hsr0' already exists in 'hsr' [ 742.859396][T10581] Cannot create hsr debugfs directory [ 743.322972][ T5831] Bluetooth: hci15: command tx timeout [ 744.227291][ T5831] Bluetooth: hci14: command tx timeout [ 744.449017][ T5831] Bluetooth: hci16: command tx timeout [ 744.608642][ T5831] Bluetooth: hci8: command 0x0406 tx timeout [ 744.608684][ T5831] Bluetooth: hci7: command 0x0406 tx timeout [ 745.412620][ T5137] Bluetooth: hci15: command tx timeout [ 746.522620][ T5137] Bluetooth: hci16: command tx timeout [ 747.482800][ T5137] Bluetooth: hci15: command tx timeout [ 747.650380][ T1334] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.650455][ T1334] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.602657][ T5137] Bluetooth: hci16: command tx timeout [ 758.522932][ T38] INFO: task syz.4.1077:9914 blocked for more than 143 seconds. [ 758.522967][ T38] Tainted: G L syzkaller #0 [ 758.522980][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.522993][ T38] task:syz.4.1077 state:D stack:27872 pid:9914 tgid:9909 ppid:5826 task_flags:0x400040 flags:0x00080002 [ 758.523092][ T38] Call Trace: [ 758.523101][ T38] [ 758.523117][ T38] __schedule+0x1681/0x54c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 758.523183][ T38] ? __pfx___schedule+0x10/0x10 [ 758.523233][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 758.523283][ T38] rt_mutex_schedule+0x76/0xf0 [ 758.523320][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 758.523367][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 758.523406][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 758.523445][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 758.523483][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 758.523532][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.523565][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.523608][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.523632][ T38] mutex_lock_nested+0x168/0x1d0 [ 758.523668][ T38] ? radix_tree_lookup+0x243/0x290 [ 758.523710][ T38] genl_rcv_msg+0x10b/0x7a0 [ 758.523744][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.523769][ T38] ? ref_tracker_free+0x673/0x820 [ 758.523806][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.523838][ T38] ? __asan_memcpy+0x40/0x70 [ 758.523870][ T38] ? __skb_clone+0x63/0x7a0 [ 758.523903][ T38] netlink_rcv_skb+0x232/0x4b0 [ 758.523939][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.523968][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.524017][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.524052][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.524092][ T38] genl_rcv+0x28/0x40 [ 758.524117][ T38] netlink_unicast+0x780/0x920 [ 758.524196][ T38] netlink_sendmsg+0x813/0xb40 [ 758.524244][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.524291][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.524328][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.524366][ T38] __sys_sendto+0x67f/0x710[ 758.524366][ T38] __sys_sendto+0x67f/0x710 [ 758.524410][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 758.524475][ T38] ? exc_page_fault+0x6a/0xc0 [ 758.524508][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 758.524537][ T38] __x64_sys_sendto+0xde/0x100 [ 758.524574][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.524609][ T38] do_syscall_64+0x15f/0xf80 [ 758.524637][ T38] ? trace_irq_disable+0x3b/0x140 [ 758.524663][ T38] ? clear_bhb_loop+0x40/0x90 [ 758.524694][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.524727][ T38] RIP: 0033:0x7f5a08ced60e [ 758.524753][ T38] RSP: 002b:00007f5a06f63e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.524778][ T38] RAX: ffffffffffffffda RBX: 00007f5a06f656c0 RCX: 00007f5a08ced60e [ 758.524796][ T38] RDX: 0000000000000020 RSI: 00007f5a06f64000 RDI: 000000000000000a [ 758.524811][ T38] RBP: 0000000000000000 R08: 00007f5a06f63f04 R09: 000000000000000c [ 758.524825][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 758.524839][ T38] R13: 00007f5a06f63f58 R14: 00007f5a06f64000 R15: 0000000000000000 [ 758.524875][ T38] [ 758.524887][ T38] INFO: task syz.7.1092:9970 blocked for more than 143 seconds. [ 758.524907][ T38] Tainted: G L syzkaller #0 [ 758.524920][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.524931][ T38] task:syz.7.1092 state:D stack:25664 pid:9970 tgid:9968 ppid:8021 task_flags:0x400040 flags:0x00080002 [ 758.524999][ T38] Call Trace: [ 758.525007][ T38] [ 758.525021][ T38] __schedule+0x1681/0x54c0 [ 758.525046][ T38] ? nlmon_xmit+0xb0/0x100 [ 758.525116][ T38] ? __pfx___schedule+0x10/0x10 [ 758.525159][ T38] rt_mutex_schedule+0x76/0xf0 [ 758.525194][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 758.525251][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 758.525289][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 758.525328][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 758.525378][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.525409][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.525442][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.525466][ T38] mutex_lock_nested+0x168/0x1d0 [ 758.525501][ T38] ? radix_tree_lookup+0x243/0x290 [ 758.525542][ T38] genl_rcv_msg+0x10b/0x7a0 [ 758.525575][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.525606][ T38] ? ref_tracker_free+0x673/0x820 [ 758.525641][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.525671][ T38] ? __asan_memcpy+0x40/0x70 [ 758.525702][ T38] ? __skb_clone+0x63/0x7a0 [ 758.525734][ T38] netlink_rcv_skb+0x232/0x4b0 [ 758.525769][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.525798][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.525847][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.525883][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.525924][ T38] genl_rcv+0x28/0x40 [ 758.525948][ T38] netlink_unicast+0x780/0x920 [ 758.525993][ T38] netlink_sendmsg+0x813/0xb40 [ 758.526040][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.526086][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.526120][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.526157][ T38] __sys_sendto+0x67f/0x710 [ 758.526200][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 758.526264][ T38] ? exc_page_fault+0x6a/0xc0 [ 758.526296][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 758.526324][ T38] __x64_sys_sendto+0xde/0x100 [ 758.526361][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.526388][ T38] do_syscall_64+0x15f/0xf80 [ 758.526414][ T38] ? trace_irq_disable+0x3b/0x140 [ 758.526439][ T38] ? clear_bhb_loop+0x40/0x90 [ 758.526469][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.526493][ T38] RIP: 0033:0x7f4028afd60e [ 758.526512][ T38] RSP: 002b:00007f4026d94e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.526536][ T38] RAX: ffffffffffffffda RBX: 00007f4026d966c0 RCX: 00007f4028afd60e [ 758.526553][ T38] RDX: 0000000000000020 RSI: 00007f4026d95000 RDI: 0000000000000003 [ 758.526568][ T38] RBP: 0000000000000000 R08: 00007f4026d94f04 R09: 000000000000000c [ 758.526588][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 758.526603][ T38] R13: 00007f4026d94f58 R14: 00007f4026d95000 R15: 0000000000000000 [ 758.526640][ T38] [ 758.526649][ T38] INFO: task syz.7.1092:9971 blocked for more than 143 seconds. [ 758.526669][ T38] Tainted: G L syzkaller #0 [ 758.526682][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.526692][ T38] task:syz.7.1092 state:D stack:27872 pid:9971 tgid:9968 ppid:8021 task_flags:0x400040 flags:0x00080002 [ 758.526761][ T38] Call Trace: [ 758.526768][ T38] [ 758.526781][ T38] __schedule+0x1681/0x54c0 [ 758.526806][ T38] ? nlmon_xmit+0xb0/0x100 [ 758.526873][ T38] ? __pfx___schedule+0x10/0x10 [ 758.526916][ T38] rt_mutex_schedule+0x76/0xf0 [ 758.526950][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 758.527005][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 758.527043][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 758.527081][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 758.527131][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.527162][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.527194][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.527219][ T38] mutex_lock_nested+0x168/0x1d0 [ 758.527253][ T38] ? radix_tree_lookup+0x243/0x290 [ 758.527293][ T38] genl_rcv_msg+0x10b/0x7a0 [ 758.527326][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.527352][ T38] ? ref_tracker_free+0x673/0x820 [ 758.527388][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.527419][ T38] ? __asan_memcpy+0x40/0x70 [ 758.527449][ T38] ? __skb_clone+0x63/0x7a0 [ 758.527481][ T38] netlink_rcv_skb+0x232/0x4b0 [ 758.527516][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.527545][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.527602][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.527635][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.527675][ T38] genl_rcv+0x28/0x40 [ 758.527699][ T38] netlink_unicast+0x780/0x920 [ 758.527742][ T38] netlink_sendmsg+0x813/0xb40 [ 758.527788][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.527833][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.527867][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.527905][ T38] __sys_sendto+0x67f/0x710 [ 758.527947][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 758.528011][ T38] ? exc_page_fault+0x6a/0xc0 [ 758.528043][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 758.528071][ T38] __x64_sys_sendto+0xde/0x100 [ 758.528108][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.528133][ T38] do_syscall_64+0x15f/0xf80 [ 758.528159][ T38] ? trace_irq_disable+0x3b/0x140 [ 758.528184][ T38] ? clear_bhb_loop+0x40/0x90 [ 758.528213][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.528237][ T38] RIP: 0033:0x7f4028afd60e [ 758.528256][ T38] RSP: 002b:00007f4026d73e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.528279][ T38] RAX: ffffffffffffffda RBX: 00007f4026d756c0 RCX: 00007f4028afd60e [ 758.528297][ T38] RDX: 0000000000000020 RSI: 00007f4026d74000 RDI: 0000000000000003 [ 758.528312][ T38] RBP: 0000000000000000 R08: 00007f4026d73f04 R09: 000000000000000c [ 758.528327][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 758.528342][ T38] R13: 00007f4026d73f58 R14: 00007f4026d74000 R15: 0000000000000000 [ 758.528378][ T38] [ 758.528388][ T38] INFO: task syz.6.1093:9976 blocked for more than 143 seconds. [ 758.528407][ T38] Tainted: G L syzkaller #0 [ 758.528419][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 758.528430][ T38] task:syz.6.1093 state:D stack:27872 pid:9976 tgid:9972 ppid:8916 task_flags:0x400040 flags:0x00080002 [ 758.528497][ T38] Call Trace: [ 758.528505][ T38] [ 758.528519][ T38] __schedule+0x1681/0x54c0 [ 758.528543][ T38] ? nlmon_xmit+0xb0/0x100 [ 758.528616][ T38] ? __pfx___schedule+0x10/0x10 [ 758.528671][ T38] rt_mutex_schedule+0x76/0xf0 [ 758.528703][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 758.528757][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 758.528794][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 758.528829][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 758.528876][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.528906][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.528937][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 758.528961][ T38] mutex_lock_nested+0x168/0x1d0 [ 758.528994][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 758.529019][ T38] ? radix_tree_lookup+0x243/0x290 [ 758.529058][ T38] genl_rcv_msg+0x10b/0x7a0 [ 758.529090][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.529113][ T38] ? ref_tracker_free+0x673/0x820 [ 758.529148][ T38] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.529191][ T38] netlink_rcv_skb+0x232/0x4b0 [ 758.529226][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.529253][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.529311][ T38] genl_rcv+0x28/0x40 [ 758.529334][ T38] netlink_unicast+0x780/0x920 [ 758.529376][ T38] netlink_sendmsg+0x813/0xb40 [ 758.529421][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.529465][ T38] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.529498][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.529533][ T38] __sys_sendto+0x67f/0x710 [ 758.529574][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 758.529643][ T38] ? exc_page_fault+0x6a/0xc0 [ 758.529674][ T38] ? do_user_addr_fault+0xc6f/0x1340 [ 758.529701][ T38] __x64_sys_sendto+0xde/0x100 [ 758.529735][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.529761][ T38] do_syscall_64+0x15f/0xf80 [ 758.529787][ T38] ? trace_irq_disable+0x3b/0x140 [ 758.529809][ T38] ? clear_bhb_loop+0x40/0x90 [ 758.529846][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.529869][ T38] RIP: 0033:0x7f7b7ddcd60e [ 758.529887][ T38] RSP: 002b:00007f7b7c05ce88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 758.529909][ T38] RAX: ffffffffffffffda RBX: 00007f7b7c05e6c0 RCX: 00007f7b7ddcd60e [ 758.529926][ T38] RDX: 0000000000000020 RSI: 00007f7b7c05d000 RDI: 0000000000000004 [ 758.529940][ T38] RBP: 0000000000000000 R08: 00007f7b7c05cf04 R09: 000000000000000c [ 758.529955][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 758.529968][ T38] R13: 00007f7b7c05cf58 R14: 00007f7b7c05d000 R15: 0000000000000000 [ 758.530003][ T38] [ 758.530067][ T38] [ 758.530067][ T38] Showing all locks held in the system: [ 758.530081][ T38] 1 lock held by khungtaskd/38: [ 758.530093][ T38] #0: ffffffff8dfc80c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 758.530183][ T38] 2 locks held by getty/5573: [ 758.530195][ T38] #0: ffff88803799d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 758.530259][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 758.530328][ T38] 2 locks held by syz.0.1061/9867: [ 758.530342][ T38] 2 locks held by syz.4.1077/9914: [ 758.530355][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.530408][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.530462][ T38] 2 locks held by syz.7.1092/9970: [ 758.530474][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.530527][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.530588][ T38] 2 locks held by syz.7.1092/9971: [ 758.530601][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.530653][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.530723][ T38] 2 locks held by syz.6.1093/9976: [ 758.530736][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.530788][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.530843][ T38] 2 locks held by syz-executor/10083: [ 758.530856][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.530908][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.530963][ T38] 2 locks held by syz-executor/10099: [ 758.530976][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531029][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531084][ T38] 2 locks held by syz-executor/10118: [ 758.531097][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531149][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531204][ T38] 2 locks held by syz-executor/10122: [ 758.531217][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531269][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531326][ T38] 2 locks held by syz-executor/10509: [ 758.531339][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531391][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531446][ T38] 2 locks held by syz-executor/10520: [ 758.531459][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531511][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531566][ T38] 2 locks held by syz-executor/10529: [ 758.531578][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531637][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531692][ T38] 2 locks held by syz-executor/10532: [ 758.531704][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531756][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531812][ T38] 2 locks held by syz-executor/10557: [ 758.531825][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531877][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.531933][ T38] 2 locks held by syz-executor/10567: [ 758.531945][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.531997][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.532053][ T38] 2 locks held by syz-executor/10576: [ 758.532065][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.532117][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.532172][ T38] 2 locks held by syz-executor/10581: [ 758.532185][ T38] #0: ffffffff8f3db640 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 758.532237][ T38] #1: ffffffff8f3db458 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 758.532292][ T38] [ 758.532298][ T38] ============================================= [ 758.532298][ T38] [ 758.532319][ T38] NMI backtrace for cpu 1 [ 758.532348][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.532376][ T38] Tainted: [L]=SOFTLOCKUP [ 758.532383][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.532396][ T38] Call Trace: [ 758.532404][ T38] [ 758.532412][ T38] dump_stack_lvl+0xe8/0x150 [ 758.532449][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 758.532484][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 758.532520][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 758.532558][ T38] sys_info+0x135/0x170 [ 758.532594][ T38] watchdog+0xfd3/0x1030 [ 758.532624][ T38] ? watchdog+0x1c9/0x1030 [ 758.532652][ T38] kthread+0x388/0x470 [ 758.532679][ T38] ? __pfx_watchdog+0x10/0x10 [ 758.532698][ T38] ? __pfx_kthread+0x10/0x10 [ 758.532742][ T38] ret_from_fork+0x514/0xb70 [ 758.532766][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 758.532788][ T38] ? __switch_to+0xc79/0x1410 [ 758.532822][ T38] ? __pfx_kthread+0x10/0x10 [ 758.532850][ T38] ret_from_fork_asm+0x1a/0x30 [ 758.532891][ T38] [ 758.532970][ T38] Sending NMI from CPU 1 to CPUs 0: [ 758.533005][ C0] NMI backtrace for cpu 0 [ 758.533023][ C0] CPU: 0 UID: 0 PID: 9867 Comm: syz.0.1061 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.533048][ C0] Tainted: [L]=SOFTLOCKUP [ 758.533054][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.533065][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x80 [ 758.533095][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d b4 99 c9 0b 48 89 de 5b e9 53 d6 5b 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0d 98 b9 ad 10 65 8b 35 b9 b9 ad [ 758.533111][ C0] RSP: 0018:ffffc9000483e858 EFLAGS: 00000202 [ 758.533126][ C0] RAX: ffffffff8ac9d630 RBX: 0000000000000001 RCX: ffff888026740000 [ 758.533140][ C0] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000000 [ 758.533150][ C0] RBP: ffffc9000483e950 R08: 0000000000000000 R09: 0000000000000000 [ 758.533161][ C0] R10: 0000000000000100 R11: 0000000000000003 R12: 0000000000000000 [ 758.533171][ C0] R13: dffffc0000000000 R14: 1ffff11007611a39 R15: ffff88805f5ee000 [ 758.533185][ C0] FS: 00007f8b467f66c0(0000) GS:ffff8881260fb000(0000) knlGS:0000000000000000 [ 758.533200][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 758.533212][ C0] CR2: 0000555a3b0e0660 CR3: 000000003e010000 CR4: 00000000003526f0 [ 758.533228][ C0] Call Trace: [ 758.533235][ C0] [ 758.533240][ C0] tipc_sk_lookup+0x30d/0x920 [ 758.533269][ C0] ? tipc_sk_lookup+0xb5/0x920 [ 758.533293][ C0] ? __pfx_tipc_sk_lookup+0x10/0x10 [ 758.533318][ C0] ? __nla_parse+0x40/0x60 [ 758.533354][ C0] tipc_nl_publ_dump+0x2c9/0xcd0 [ 758.533388][ C0] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 758.533413][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 758.533434][ C0] ? irqentry_exit+0x218/0x730 [ 758.533453][ C0] ? rcu_is_watching+0x15/0xb0 [ 758.533484][ C0] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 758.533514][ C0] __tipc_nl_compat_dumpit+0x472/0xbe0 [ 758.533542][ C0] ? do_syscall_64+0x15f/0xf80 [ 758.533562][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.533589][ C0] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 758.533628][ C0] ? rcu_is_watching+0x15/0xb0 [ 758.533659][ C0] ? __asan_memcpy+0x40/0x70 [ 758.533684][ C0] ? nla_put+0xd0/0x150 [ 758.533712][ C0] tipc_nl_compat_sk_dump+0x6c2/0x8b0 [ 758.533745][ C0] ? __pfx_tipc_nl_publ_dump+0x10/0x10 [ 758.533770][ C0] ? __pfx___tipc_nl_compat_publ_dump+0x10/0x10 [ 758.533799][ C0] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 758.533833][ C0] ? rhashtable_walk_stop+0x260/0x290 [ 758.533867][ C0] ? __nla_parse+0x40/0x60 [ 758.533894][ C0] __tipc_nl_compat_dumpit+0x5d8/0xbe0 [ 758.533935][ C0] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 758.533973][ C0] ? rcu_is_watching+0x15/0xb0 [ 758.534005][ C0] ? __asan_memset+0x22/0x50 [ 758.534028][ C0] ? __nlmsg_put+0xef/0x1b0 [ 758.534054][ C0] tipc_nl_compat_dumpit+0x566/0x7b0 [ 758.534085][ C0] tipc_nl_compat_recv+0x899/0xcf0 [ 758.534112][ C0] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 758.534138][ C0] ? __pfx_tipc_nl_sk_dump+0x10/0x10 [ 758.534161][ C0] ? __pfx_tipc_nl_compat_sk_dump+0x10/0x10 [ 758.534188][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 758.534215][ C0] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 758.534242][ C0] genl_family_rcv_msg_doit+0x22a/0x330 [ 758.534266][ C0] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 758.534293][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 758.534314][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 758.534346][ C0] genl_rcv_msg+0x61c/0x7a0 [ 758.534368][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.534387][ C0] ? ref_tracker_free+0x673/0x820 [ 758.534411][ C0] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 758.534437][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 758.534461][ C0] ? __asan_memcpy+0x40/0x70 [ 758.534483][ C0] ? __skb_clone+0x63/0x7a0 [ 758.534505][ C0] netlink_rcv_skb+0x232/0x4b0 [ 758.534531][ C0] ? __pfx_genl_rcv_msg+0x10/0x10 [ 758.534551][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 758.534584][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.534611][ C0] ? netlink_deliver_tap+0x2e/0x1b0 [ 758.534639][ C0] genl_rcv+0x28/0x40 [ 758.534656][ C0] netlink_unicast+0x780/0x920 [ 758.534686][ C0] netlink_sendmsg+0x813/0xb40 [ 758.534718][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 758.534749][ C0] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 758.534778][ C0] ____sys_sendmsg+0x94c/0x9c0 [ 758.534800][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 758.534823][ C0] ? import_iovec+0x73/0xa0 [ 758.534851][ C0] ___sys_sendmsg+0x2a5/0x360 [ 758.534868][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 758.534891][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 758.534912][ C0] ? futex_wake+0x4af/0x580 [ 758.534955][ C0] ? __fget_files+0x2a/0x420 [ 758.534979][ C0] ? __fget_files+0x3a6/0x420 [ 758.535009][ C0] __x64_sys_sendmsg+0x1c3/0x2a0 [ 758.535028][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 758.535051][ C0] ? rcu_is_watching+0x15/0xb0 [ 758.535079][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.535098][ C0] do_syscall_64+0x15f/0xf80 [ 758.535119][ C0] ? trace_irq_disable+0x3b/0x140 [ 758.535136][ C0] ? clear_bhb_loop+0x40/0x90 [ 758.535157][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 758.535175][ C0] RIP: 0033:0x7f8b4859cdd9 [ 758.535191][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 758.535206][ C0] RSP: 002b:00007f8b467f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 758.535224][ C0] RAX: ffffffffffffffda RBX: 00007f8b48815fa0 RCX: 00007f8b4859cdd9 [ 758.535237][ C0] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000004 [ 758.535248][ C0] RBP: 00007f8b48632d69 R08: 0000000000000000 R09: 0000000000000000 [ 758.535259][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 758.535269][ C0] R13: 00007f8b48816038 R14: 00007f8b48815fa0 R15: 00007ffee76b82d8 [ 758.535292][ C0] [ 758.736563][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 758.736642][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 758.736734][ T38] Tainted: [L]=SOFTLOCKUP [ 758.736757][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 758.736797][ T38] Call Trace: [ 758.736828][ T38] [ 758.736866][ T38] vpanic+0x56c/0xa60 [ 758.737194][ T38] ? __pfx___schedule+0x10/0x10 [ 758.737537][ T38] ? __pfx_vpanic+0x10/0x10 [ 758.737656][ T38] panic+0xc5/0xd0 [ 758.737723][ T38] ? __pfx_panic+0x10/0x10 [ 758.737789][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 758.737889][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 758.738011][ T38] watchdog+0x102c/0x1030 [ 758.738092][ T38] ? watchdog+0x1c9/0x1030 [ 758.738167][ T38] kthread+0x388/0x470 [ 758.738252][ T38] ? __pfx_watchdog+0x10/0x10 [ 758.738314][ T38] ? __pfx_kthread+0x10/0x10 [ 758.738396][ T38] ret_from_fork+0x514/0xb70 [ 758.738464][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 758.738528][ T38] ? __switch_to+0xc79/0x1410 [ 758.738628][ T38] ? __pfx_kthread+0x10/0x10 [ 758.738705][ T38] ret_from_fork_asm+0x1a/0x30 [ 758.738823][ T38] [ 758.739465][ T38] Kernel Offset: disabled