last executing test programs: 9m24.159555486s ago: executing program 0 (id=17): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448e1, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff}, 0x6) 9m23.920885813s ago: executing program 0 (id=18): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r2, r1, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) write$tcp_congestion(r0, 0x0, 0x0) 9m23.288631648s ago: executing program 0 (id=21): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 9m22.020733405s ago: executing program 0 (id=27): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) 9m21.870733946s ago: executing program 0 (id=28): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x5a57, 0x8, 0x3, 0x400000}) r0 = io_uring_setup(0x4f73, &(0x7f00000000c0)={0x0, 0xec19, 0x80, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, 0x0, 0x1) 9m21.597594466s ago: executing program 0 (id=30): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_ACTIVATE(r2, 0x4bfa, 0xffffffffffff518a) 9m18.854063265s ago: executing program 3 (id=39): r0 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x0, 0x0) ppoll(&(0x7f0000000240)=[{r0}], 0xd8, &(0x7f0000000080)={0x0, 0x989680}, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x4, 0x38, 0x67, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @remote}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0xf7, 0x801f, {0x5, 0x4, 0x3, 0x14, 0x7ff, 0x64, 0x1ce2, 0xd9, 0xff, 0xe5c, @loopback, @loopback=0x7f000011}, "65b37c42ddedc962"}}}}}, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000240)={'fscrypt:', @auto=[0x37, 0x33, 0x62, 0x61, 0x66, 0x38, 0x34, 0x32, 0x31, 0x65, 0x36, 0x9, 0x0, 0x36, 0x30, 0x61]}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x28}, 0x48, r1) pipe2$watch_queue(&(0x7f0000000200), 0x80) keyctl$invalidate(0x15, r2) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x7}, @hci_rp_read_tx_power={{0x6}, {0x0, 0xc8, 0x2}}}}, 0xa) r3 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r3, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x48000}, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r4, 0x0) accept4$llc(r4, 0x0, 0x0, 0x0) 9m17.089857127s ago: executing program 3 (id=41): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x112, 0x3, 0x0, 0x0) 9m16.77199748s ago: executing program 3 (id=43): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x2, 0x6, 0x203, 0x4, 0x0, 0x0, 0x0}) 9m15.584129184s ago: executing program 3 (id=44): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e26, 0xedf7d184, @remote, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}, 0x1c) 9m14.959752439s ago: executing program 3 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x17000, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 9m13.660180734s ago: executing program 3 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x200, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 9m6.403360733s ago: executing program 32 (id=30): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$VT_ACTIVATE(r2, 0x4bfa, 0xffffffffffff518a) 8m58.497093344s ago: executing program 33 (id=54): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x2b8, 0xb0000010, 0x290, 0x5c8f0200, 0x388, 0x3a8, 0x3a8, 0x388, 0x3a8, 0x3, 0x0, {[{{@ipv6={@private1, @local, [], [], 'vlan1\x00', 'veth0_to_team\x00'}, 0x0, 0x200, 0x248, 0x700, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve1\x00', {0xf1, 0x0, 0x33, 0x0, 0x0, 0x1, 0x7fffffff}}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x206, 'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) 14.711953332s ago: executing program 4 (id=791): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x18, &(0x7f0000000040)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) close(0x3) fchdir(r4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) move_mount(r4, 0x0, r5, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0) 12.815943015s ago: executing program 4 (id=794): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x18, &(0x7f0000000040)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) close(0x3) fchdir(r5) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, r7) setpgid(0x0, r7) move_mount(r5, 0x0, r6, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0x9362, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) 11.532760755s ago: executing program 4 (id=797): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="57010000000000000000000000000c000300010000000000000008"], 0x38}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x38}}, 0x4000) 10.329750849s ago: executing program 2 (id=798): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000008b1ae1700000000dfc60000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 9.211734089s ago: executing program 2 (id=800): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e21, 0x5, @loopback}}}, 0x88) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 7.520237613s ago: executing program 2 (id=802): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x17) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x18, &(0x7f0000000040)=0xfffffffffffffffa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x2) close(0x3) fchdir(r4) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(0x0, r6) move_mount(r4, 0x0, r5, &(0x7f00000000c0)='./file0\x00', 0x14) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9362, 0x0) 7.50973506s ago: executing program 1 (id=803): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000001c0)={0x2, @raw_data="3ba64ef20e50eaf74e56343228a35f692073376e6e8bc64df6b2fdf24368fa0b5ca5da9b3b40ce034e4d726edecb8038508002d6dc31050bf092312cecc3e766a24bf3714949327f8e0379dacebe19e48c604788bd8b1bdc89e8c3c7fd5e68c8b32f43aa3b108968b10015c2ea5e42412355eaae0f5755b65af797317dfe3808f93c22105dc99e4043654b348631be6e3d7ceb3fc86c1244f4208a3eeee6adc5bffef7581d0b6f2e6a5332b9fe290bf91504ee974b1aa05e138386e55f5b1232d202642f573eb60e"}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d30000000000000080000000000"], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) io_uring_register$IORING_REGISTER_RING_FDS(0xffffffffffffffff, 0x13, &(0x7f0000001bc0), 0x2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) 7.272022524s ago: executing program 4 (id=804): request_key(&(0x7f0000000000)='trusted\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r0 = socket$packet(0x11, 0x3, 0x300) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000140)) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x5e, 0xa9, @random="9625d724b46e9f997b73ccbca6bd4da30a6e5c453e876b8dcb81f7296bbc78d25fb69c943eb7d1802f5b567a917aafdc3f2465ddc989ce1fe75261a666e0a1e7ba807ce680eff4d4ac6b3bc465f4ab825bb8bd116327c351b11b"}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x6}]}, 0x98}}, 0x40040) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000001c0)=0x2, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000200)={0x24, @short={0x2, 0x3, 0xaaa1}}, 0x14) sendmmsg(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)=@phonet={0x23, 0x64, 0x1, 0x6}, 0x80, 0x0}}], 0x1, 0x44841) 4.852402821s ago: executing program 1 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) sendfile(r6, r6, 0x0, 0x20000023896) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r8, 0x0, 0x0) 4.219942552s ago: executing program 1 (id=806): accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000dc0)=@polexpire={0xcc, 0x1b, 0x1, 0x0, 0x25dfdbff, {{{@in6=@local, @in6=@local, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {}, 0x0, 0x6e6bb8, 0x0, 0x1, 0x0, 0x2}, 0xfa}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1, 0x80}}]}, 0xcc}}, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000), 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) 4.219273737s ago: executing program 2 (id=807): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x13, 0x80801) ioctl$USBDEVFS_RESET(r0, 0x5514) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r2 = dup2(r1, r1) ioctl$VIDIOC_LOG_STATUS(r2, 0x5646, 0x0) read$char_usb(r2, &(0x7f0000006300)=""/205, 0xcd) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000300)=@vmx={0x3, 0x0, 0x2080, {0x58000, 0x0, {0x2}, 0x1, 0x7}, {"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", "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"}}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, 0x0) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000680)=@usbdevfs_driver={0x5, 0x6, 0x0}) pipe2(&(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/11], 0x2c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, &(0x7f0000000140)) creat(&(0x7f0000000240)='./file0\x00', 0x0) chmod(&(0x7f0000000140)='./file0\x00', 0xfeff) socket$nl_generic(0x10, 0x3, 0x10) 4.136502006s ago: executing program 4 (id=808): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RWRITE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000008b1ae1700000000dfc60000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) 2.534216147s ago: executing program 1 (id=809): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000300)=r3) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb601288763"], 0xffdd) 2.402056533s ago: executing program 2 (id=810): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8, 0x8, 0x81}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x45}, 0xc880) 2.1028425s ago: executing program 1 (id=811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fsetxattr$trusted_overlay_origin(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000440), 0x23}, 0x38) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @loopback}]}]}, 0xac}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000006680)={0x0, 0x0, &(0x7f0000006640)={&(0x7f00000065c0)={0x50, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f00000002c0)={0x4, {{0xa, 0x4e21, 0x5, @loopback}}}, 0x88) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) 2.075483613s ago: executing program 2 (id=812): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x48, 0x10, 0x401, 0xfffffffc, 0x81, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_BROADCAST={0xa, 0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) r5 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="57010000000000000000000000000c000300010000000000000008"], 0x38}}, 0x0) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r7, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_TID={0xc}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}]}, 0x38}}, 0x4000) 236.129918ms ago: executing program 1 (id=813): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = landlock_create_ruleset(0x0, 0x0, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000001080)={0x4, 0x1, {0x4, @struct={0x1, 0x9}, 0x0, 0x4, 0x6, 0xb6, 0x80000001, 0x7ff, 0x0, @struct={0x80000001}, 0x203, 0x6, [0x4, 0x7, 0x1, 0xffffffffffffffff, 0x4, 0x1]}, {0x100, @usage=0x40, 0x0, 0x401, 0x6, 0x2, 0x7ff, 0x0, 0x0, @usage=0xff, 0x6, 0x100, [0xee, 0x4, 0x1, 0x8000000000000000, 0x6, 0x258b6064]}, {0x0, @usage=0xff0, 0x0, 0x10, 0x800, 0xe1, 0x2, 0x7, 0x4, @struct={0x7f, 0x8}, 0xc0000000, 0xd, [0x7, 0x7, 0x8, 0xa118930, 0x8, 0xf8]}, {0xfffffffffffff1ac, 0x21f, 0x100}}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') unlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x0) 0s ago: executing program 4 (id=814): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r4, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$RTC_IRQP_SET(r3, 0x4008700c, 0x5) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x200000000000000) sendfile(r6, r6, 0x0, 0x20000023896) r8 = userfaultfd(0x80001) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) read(r8, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 89.067421][ T5585] cgroup: Unknown subsys name 'net' [ 89.288955][ T5585] cgroup: Unknown subsys name 'cpuset' [ 89.353132][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.305752][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.136281][ T31] cfg80211: failed to load regulatory.db [ 95.202129][ T5607] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.242920][ T5607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.243879][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.244974][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.252246][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.262131][ T5608] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.305781][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.318555][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.320965][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.330059][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.342697][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.343324][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.346737][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.347657][ T5612] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.354329][ T5613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.356490][ T5613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.360911][ T5613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.363367][ T5612] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.365342][ T5612] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.388827][ T5613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.389054][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.395117][ T5603] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.415191][ T4914] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.416262][ T4914] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.418738][ T4914] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.395320][ T5613] Bluetooth: hci2: command tx timeout [ 97.474914][ T5613] Bluetooth: hci0: command tx timeout [ 97.552878][ T5613] Bluetooth: hci1: command tx timeout [ 97.552897][ T5607] Bluetooth: hci4: command tx timeout [ 97.553040][ T5613] Bluetooth: hci3: command tx timeout [ 98.218581][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.219813][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.219954][ T5600] bridge_slave_0: entered allmulticast mode [ 98.224060][ T5600] bridge_slave_0: entered promiscuous mode [ 98.310865][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.310977][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.311106][ T5600] bridge_slave_1: entered allmulticast mode [ 98.315779][ T5600] bridge_slave_1: entered promiscuous mode [ 98.319998][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.320129][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.320293][ T5598] bridge_slave_0: entered allmulticast mode [ 98.346538][ T5598] bridge_slave_0: entered promiscuous mode [ 98.365657][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.365949][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.369954][ T5597] bridge_slave_0: entered allmulticast mode [ 98.388522][ T5597] bridge_slave_0: entered promiscuous mode [ 98.413738][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.413889][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.414052][ T5599] bridge_slave_0: entered allmulticast mode [ 98.416110][ T5599] bridge_slave_0: entered promiscuous mode [ 98.455579][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.455726][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.455905][ T5598] bridge_slave_1: entered allmulticast mode [ 98.457970][ T5598] bridge_slave_1: entered promiscuous mode [ 98.460164][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.460257][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.460393][ T5597] bridge_slave_1: entered allmulticast mode [ 98.462276][ T5597] bridge_slave_1: entered promiscuous mode [ 98.516982][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.517126][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.517315][ T5601] bridge_slave_0: entered allmulticast mode [ 98.520268][ T5601] bridge_slave_0: entered promiscuous mode [ 98.551731][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.551861][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.553918][ T5599] bridge_slave_1: entered allmulticast mode [ 98.562020][ T5599] bridge_slave_1: entered promiscuous mode [ 98.626377][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.626497][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.626842][ T5601] bridge_slave_1: entered allmulticast mode [ 98.628686][ T5601] bridge_slave_1: entered promiscuous mode [ 98.668968][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.751131][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.767795][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.771134][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.808437][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.834384][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.837166][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.840108][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.854496][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.921217][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.947337][ T5600] team0: Port device team_slave_0 added [ 99.018253][ T5600] team0: Port device team_slave_1 added [ 99.021371][ T5598] team0: Port device team_slave_0 added [ 99.035016][ T5597] team0: Port device team_slave_0 added [ 99.057216][ T5599] team0: Port device team_slave_0 added [ 99.078681][ T5598] team0: Port device team_slave_1 added [ 99.080737][ T5597] team0: Port device team_slave_1 added [ 99.094243][ T5601] team0: Port device team_slave_0 added [ 99.096637][ T5599] team0: Port device team_slave_1 added [ 99.157224][ T5601] team0: Port device team_slave_1 added [ 99.177145][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.177158][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.177176][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.272456][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.272474][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.272501][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.276490][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.276502][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.276522][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.277756][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.277770][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.277797][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.349612][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.349678][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.349755][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.434722][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.434777][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.434863][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.453402][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.453448][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.453523][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.468890][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.468939][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.469002][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.474434][ T4914] Bluetooth: hci2: command tx timeout [ 99.480524][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.480578][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.480711][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.553990][ T4914] Bluetooth: hci0: command tx timeout [ 99.633595][ T4914] Bluetooth: hci4: command tx timeout [ 99.633628][ T4914] Bluetooth: hci1: command tx timeout [ 99.643102][ T5613] Bluetooth: hci3: command tx timeout [ 100.065351][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.065364][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.065384][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.219378][ T5600] hsr_slave_0: entered promiscuous mode [ 100.220791][ T5600] hsr_slave_1: entered promiscuous mode [ 100.298672][ T5598] hsr_slave_0: entered promiscuous mode [ 100.299762][ T5598] hsr_slave_1: entered promiscuous mode [ 100.300807][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 100.300894][ T5598] Cannot create hsr debugfs directory [ 100.327192][ T5597] hsr_slave_0: entered promiscuous mode [ 100.328186][ T5597] hsr_slave_1: entered promiscuous mode [ 100.328941][ T5597] debugfs: 'hsr0' already exists in 'hsr' [ 100.328977][ T5597] Cannot create hsr debugfs directory [ 100.371009][ T5599] hsr_slave_0: entered promiscuous mode [ 100.372089][ T5599] hsr_slave_1: entered promiscuous mode [ 100.380870][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 100.380986][ T5599] Cannot create hsr debugfs directory [ 100.404675][ T5601] hsr_slave_0: entered promiscuous mode [ 100.405617][ T5601] hsr_slave_1: entered promiscuous mode [ 100.406401][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 100.406419][ T5601] Cannot create hsr debugfs directory [ 101.471901][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.514226][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.530298][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.552737][ T5613] Bluetooth: hci2: command tx timeout [ 101.573674][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.581743][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.633969][ T5613] Bluetooth: hci0: command tx timeout [ 101.656054][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.680998][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.716691][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.723304][ T5613] Bluetooth: hci3: command tx timeout [ 101.723338][ T5613] Bluetooth: hci1: command tx timeout [ 101.723359][ T5613] Bluetooth: hci4: command tx timeout [ 101.863419][ T5598] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.907142][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.912882][ T5598] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.946217][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.950105][ T5598] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.988439][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.016991][ T5598] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.050850][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.269117][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.307996][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.326715][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.366115][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.371639][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.418715][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.450696][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.477155][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.639452][ T5601] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.679678][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.690966][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.705415][ T5601] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.738704][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.751218][ T5601] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.807233][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.857769][ T5601] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.893256][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.021917][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.102118][ T1187] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.102276][ T1187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.123145][ T5597] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.167496][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.191937][ T5597] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.230003][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.261695][ T5597] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.289040][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.311732][ T1284] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.311901][ T1284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.335845][ T5597] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.356568][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.380352][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.501739][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.561252][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.561442][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.619453][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.619606][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.636831][ T4914] Bluetooth: hci2: command tx timeout [ 103.666525][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.712628][ T4914] Bluetooth: hci0: command tx timeout [ 103.792782][ T5613] Bluetooth: hci1: command tx timeout [ 103.792815][ T5613] Bluetooth: hci3: command tx timeout [ 103.792854][ T4914] Bluetooth: hci4: command tx timeout [ 103.855652][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.910963][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.911723][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.945145][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.985810][ T2392] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.985978][ T2392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.101458][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.196343][ T2392] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.196575][ T2392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.229517][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.309561][ T2392] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.309711][ T2392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.477585][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.542703][ T1284] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.542887][ T1284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.625751][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.625887][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.828384][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.236189][ T5600] veth0_vlan: entered promiscuous mode [ 105.309962][ T5600] veth1_vlan: entered promiscuous mode [ 105.531535][ T5600] veth0_macvtap: entered promiscuous mode [ 105.567424][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.612222][ T5600] veth1_macvtap: entered promiscuous mode [ 105.780887][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.847756][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.977107][ T55] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.981270][ T55] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.011246][ T55] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.012196][ T55] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.370787][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.621928][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.677606][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.717407][ T2392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.717430][ T2392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.862918][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.862941][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.865839][ T5599] veth0_vlan: entered promiscuous mode [ 107.046224][ T5599] veth1_vlan: entered promiscuous mode [ 107.114466][ T5598] veth0_vlan: entered promiscuous mode [ 107.172224][ T5601] veth0_vlan: entered promiscuous mode [ 107.188215][ T5597] veth0_vlan: entered promiscuous mode [ 107.219901][ T5598] veth1_vlan: entered promiscuous mode [ 107.239075][ T5601] veth1_vlan: entered promiscuous mode [ 107.279892][ T5597] veth1_vlan: entered promiscuous mode [ 107.367735][ T5599] veth0_macvtap: entered promiscuous mode [ 107.396796][ T5599] veth1_macvtap: entered promiscuous mode [ 107.536937][ T5598] veth0_macvtap: entered promiscuous mode [ 107.540990][ T5601] veth0_macvtap: entered promiscuous mode [ 107.568432][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.570887][ T5597] veth0_macvtap: entered promiscuous mode [ 107.788373][ T5598] veth1_macvtap: entered promiscuous mode [ 107.833485][ T5601] veth1_macvtap: entered promiscuous mode [ 107.842045][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.300973][ T5597] veth1_macvtap: entered promiscuous mode [ 108.983693][ T1423] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.006982][ T1423] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.034842][ T1423] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.039531][ T5793] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.066833][ T1423] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.100864][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.169053][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.209129][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.245669][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.290461][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.331345][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.484963][ T1284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.554382][ T1284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.573422][ T1284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.580503][ T5796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7'. [ 109.626296][ T1284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.688640][ T1284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.729565][ T1284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.781011][ T1284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.821603][ T1284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.848973][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.848994][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.910542][ T1284] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.930460][ T1284] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.005906][ T1284] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.116725][ T1284] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.786444][ T2392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.786464][ T2392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.124456][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.124475][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.652615][ T171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.652636][ T171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.659956][ T2392] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.659978][ T2392] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.716887][ T1284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.716904][ T1284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.870303][ T5817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.14'. [ 112.940321][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.940345][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.340312][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.340334][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.257068][ T5883] binder: 5881:5883 ioctl c0306201 200000000080 returned -14 [ 118.013915][ T5883] binder: 5881:5883 ioctl c0306201 2000000009c0 returned -14 [ 121.158818][ T5911] overlayfs: overlapping lowerdir path [ 122.719184][ T5930] binder: 5929:5930 ioctl c0306201 200000000080 returned -14 [ 122.722353][ T5930] binder: 5929:5930 ioctl c0306201 2000000009c0 returned -14 [ 127.653897][ T5976] binder: 5973:5976 ioctl c0306201 2000000009c0 returned -14 [ 131.711829][ T6009] Zero length message leads to an empty skb [ 133.003782][ T6011] warning: `syz.2.70' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 133.210579][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.210682][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.664441][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.699503][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.722984][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 133.725671][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 133.727359][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.723661][ T6023] binder: 6022:6023 ioctl c0306201 200000000080 returned -14 [ 134.731320][ T6023] binder: 6022:6023 ioctl c0306201 2000000009c0 returned -14 [ 136.672540][ T5613] Bluetooth: hci5: command tx timeout [ 139.995962][ T5613] Bluetooth: hci5: command tx timeout [ 140.485872][ T4914] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 140.524008][ T4914] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 140.525026][ T4914] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 141.361542][ T4914] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 141.362506][ T4914] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 141.459995][ T55] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.363149][ T4914] Bluetooth: hci5: command tx timeout [ 142.944419][ T6081] ======================================================= [ 142.944419][ T6081] WARNING: The mand mount option has been deprecated and [ 142.944419][ T6081] and is ignored by this kernel. Remove the mand [ 142.944419][ T6081] option from the mount to silence this warning. [ 142.944419][ T6081] ======================================================= [ 142.946268][ T5730] kernel write not supported for file /vcsu (pid: 5730 comm: kworker/0:4) [ 143.472644][ T4914] Bluetooth: hci2: command tx timeout [ 143.789892][ T55] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.434609][ T4914] Bluetooth: hci5: command tx timeout [ 145.553556][ T4914] Bluetooth: hci2: command tx timeout [ 145.579044][ T55] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.669407][ T4914] Bluetooth: hci2: command tx timeout [ 148.073132][ T5730] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 148.733633][ T55] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.027611][ T6126] input: syz1 as /devices/virtual/input/input5 [ 149.716533][ T4914] Bluetooth: hci2: command tx timeout [ 152.361653][ T6012] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.361796][ T6012] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.362024][ T6012] bridge_slave_0: entered allmulticast mode [ 152.563923][ T6012] bridge_slave_0: entered promiscuous mode [ 153.313437][ T6012] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.313562][ T6012] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.313775][ T6012] bridge_slave_1: entered allmulticast mode [ 153.318195][ T6012] bridge_slave_1: entered promiscuous mode [ 155.475442][ T6012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.138150][ T6012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.450748][ T6012] team0: Port device team_slave_0 added [ 161.122505][ T5696] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 161.492544][ T5696] usb 5-1: Using ep0 maxpacket: 32 [ 161.980966][ T5696] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.981040][ T5696] usb 5-1: config 0 has no interface number 0 [ 161.981675][ T5696] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.981744][ T5696] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.982054][ T5696] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 161.982164][ T5696] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.303823][ T5696] usb 5-1: config 0 descriptor?? [ 163.350363][ T5696] usb 5-1: can't set config #0, error -71 [ 163.380883][ T55] bridge_slave_1: left allmulticast mode [ 163.381025][ T55] bridge_slave_1: left promiscuous mode [ 163.384380][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.392036][ T5696] usb 5-1: USB disconnect, device number 2 [ 163.491210][ T55] bridge_slave_0: left allmulticast mode [ 163.491245][ T55] bridge_slave_0: left promiscuous mode [ 163.491489][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.193487][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.243250][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.245343][ T6219] netlink: 'syz.1.123': attribute type 4 has an invalid length. [ 166.272165][ T55] bond0 (unregistering): Released all slaves [ 166.606528][ T6012] team0: Port device team_slave_1 added [ 167.132312][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.132330][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.132942][ T6012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.167074][ T6012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.167092][ T6012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.167119][ T6012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.532588][ T5903] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 168.682542][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 168.685038][ T5903] usb 5-1: unable to get BOS descriptor or descriptor too short [ 168.773432][ T5903] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 168.773469][ T5903] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.773498][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 168.785967][ T5903] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 168.786047][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.786104][ T5903] usb 5-1: Product: ᐆ液뭡೮֖෠跉䳘漏鞛쮬陮뙒藯翛닙岄ﻑՇꪫ絿騨㇨鿷北睡脙捑䁇眬岾꼦襜ꝳ품萇௜姻Ꮃ㘸⥾矍㣂챇ⴛ벑㛌홡҃⃑夣꯹驮畃쉢빍㵅Ꭵ銼鉕镮슘셳䏽儞ꣵ莭ꖬ驂ꪊ䨎픤铙玡뼘/ [ 168.786183][ T5903] usb 5-1: SerialNumber: syz [ 168.954471][ T6228] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 170.611200][ T5903] usb 5-1: USB disconnect, device number 3 [ 170.716162][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 171.687948][ T6012] hsr_slave_0: entered promiscuous mode [ 171.689378][ T6012] hsr_slave_1: entered promiscuous mode [ 171.690296][ T6012] debugfs: 'hsr0' already exists in 'hsr' [ 171.690321][ T6012] Cannot create hsr debugfs directory [ 180.085698][ T55] hsr_slave_0: left promiscuous mode [ 180.125526][ T55] hsr_slave_1: left promiscuous mode [ 180.146611][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.172149][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.228562][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.228593][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.397586][ T55] veth1_macvtap: left promiscuous mode [ 180.397929][ T55] veth0_macvtap: left promiscuous mode [ 180.398214][ T55] veth1_vlan: left promiscuous mode [ 180.436084][ T55] veth0_vlan: left promiscuous mode [ 184.066368][ T55] team0 (unregistering): Port device team_slave_1 removed [ 184.505384][ T55] team0 (unregistering): Port device team_slave_0 removed [ 186.012842][ T6063] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.012942][ T6063] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.013166][ T6063] bridge_slave_0: entered allmulticast mode [ 186.062098][ T6063] bridge_slave_0: entered promiscuous mode [ 186.110757][ T6063] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.110865][ T6063] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.111061][ T6063] bridge_slave_1: entered allmulticast mode [ 186.138429][ T6063] bridge_slave_1: entered promiscuous mode [ 191.483696][ T6063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.618204][ T6063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.906304][ T6063] team0: Port device team_slave_0 added [ 192.947826][ T6063] team0: Port device team_slave_1 added [ 193.183960][ T5613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.210755][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.237234][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.261749][ T5613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.276152][ T5613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.357732][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.357747][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.357781][ T6063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.408119][ T6063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.408134][ T6063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.408155][ T6063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.588574][ T6063] hsr_slave_0: entered promiscuous mode [ 193.591654][ T6063] hsr_slave_1: entered promiscuous mode [ 193.615652][ T6063] debugfs: 'hsr0' already exists in 'hsr' [ 193.615682][ T6063] Cannot create hsr debugfs directory [ 194.538879][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.538951][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.640787][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 195.970786][ T4914] Bluetooth: hci0: command tx timeout [ 196.557560][ T6388] overlayfs: failed to clone upperpath [ 198.781735][ T4914] Bluetooth: hci0: command tx timeout [ 200.843490][ T4914] Bluetooth: hci0: command tx timeout [ 201.130126][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 202.913252][ T4914] Bluetooth: hci0: command tx timeout [ 203.026086][ T5613] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 203.058283][ T5613] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 203.060956][ T5613] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 203.105958][ T5613] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 203.112232][ T5613] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.390482][ T5613] Bluetooth: hci5: command tx timeout [ 205.453853][ T5696] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 205.765582][ T5696] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 205.765611][ T5696] usb 5-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 205.765630][ T5696] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 205.765669][ T5696] usb 5-1: config 220 has no interface number 2 [ 205.765738][ T5696] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 205.765767][ T5696] usb 5-1: config 220 interface 0 has no altsetting 0 [ 205.765786][ T5696] usb 5-1: config 220 interface 76 has no altsetting 0 [ 205.765805][ T5696] usb 5-1: config 220 interface 1 has no altsetting 0 [ 205.823228][ T5696] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 205.823261][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.823284][ T5696] usb 5-1: Product: syz [ 205.823299][ T5696] usb 5-1: Manufacturer: syz [ 205.823314][ T5696] usb 5-1: SerialNumber: syz [ 206.336883][ T5696] usb 5-1: selecting invalid altsetting 0 [ 206.389455][ T5696] usb 5-1: selecting invalid altsetting 0 [ 206.389962][ T5696] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 206.390000][ T5696] uvcvideo 5-1:220.0: No valid video chain found. [ 206.436132][ T5696] usb 5-1: selecting invalid altsetting 0 [ 206.436172][ T5696] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 206.492575][ T5696] usb 5-1: USB disconnect, device number 4 [ 206.537415][ T6474] af_packet: tpacket_rcv: packet too big, clamped from 846 to 4294967286. macoff=82 [ 206.757856][ T55] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.922881][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 207.996228][ T6063] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 208.196583][ T5613] Bluetooth: hci5: command tx timeout [ 210.044819][ T55] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.375290][ T5613] Bluetooth: hci5: command tx timeout [ 212.648325][ T5613] Bluetooth: hci5: command tx timeout [ 216.182877][ T55] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.359560][ T6355] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.359689][ T6355] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.359941][ T6355] bridge_slave_0: entered allmulticast mode [ 217.388632][ T6355] bridge_slave_0: entered promiscuous mode [ 218.010487][ T6355] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.010686][ T6355] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.010876][ T6355] bridge_slave_1: entered allmulticast mode [ 219.105218][ T6355] bridge_slave_1: entered promiscuous mode [ 222.977531][ T55] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.293434][ T4914] Bluetooth: hci4: command 0x0406 tx timeout [ 224.293477][ T4914] Bluetooth: hci1: command 0x0406 tx timeout [ 224.293555][ T5613] Bluetooth: hci3: command 0x0406 tx timeout [ 225.801100][ T6355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.850077][ T6355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.171881][ T6355] team0: Port device team_slave_0 added [ 226.220825][ T6355] team0: Port device team_slave_1 added [ 226.432143][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.432160][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.432186][ T6355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.493644][ T6355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.493660][ T6355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 226.493683][ T6355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.374606][ T6355] hsr_slave_0: entered promiscuous mode [ 227.376243][ T6355] hsr_slave_1: entered promiscuous mode [ 227.377296][ T6355] debugfs: 'hsr0' already exists in 'hsr' [ 227.377321][ T6355] Cannot create hsr debugfs directory [ 228.363692][ T6607] fuse: Bad value for 'fd' [ 230.050797][ T6618] netlink: 'syz.4.203': attribute type 4 has an invalid length. [ 231.314745][ T55] bridge_slave_1: left allmulticast mode [ 231.314783][ T55] bridge_slave_1: left promiscuous mode [ 231.323605][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.383562][ T55] bridge_slave_0: left allmulticast mode [ 232.383609][ T55] bridge_slave_0: left promiscuous mode [ 232.383807][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.883022][ T55] bridge_slave_1: left allmulticast mode [ 233.883060][ T55] bridge_slave_1: left promiscuous mode [ 233.883308][ T55] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.953661][ T55] bridge_slave_0: left allmulticast mode [ 233.953688][ T55] bridge_slave_0: left promiscuous mode [ 233.953859][ T55] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.506929][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.624227][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.705314][ T55] bond0 (unregistering): Released all slaves [ 235.303639][ T55] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.383498][ T55] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.417774][ T55] bond0 (unregistering): Released all slaves [ 235.605893][ T6427] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.606021][ T6427] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.606245][ T6427] bridge_slave_0: entered allmulticast mode [ 235.611960][ T6427] bridge_slave_0: entered promiscuous mode [ 235.800903][ T6427] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.801042][ T6427] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.801290][ T6427] bridge_slave_1: entered allmulticast mode [ 235.827708][ T6427] bridge_slave_1: entered promiscuous mode [ 235.996390][ T6427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.035967][ T6427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.213581][ T6427] team0: Port device team_slave_0 added [ 237.099819][ T6427] team0: Port device team_slave_1 added [ 239.178733][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 245.140590][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.140608][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.140635][ T6427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.151666][ T6427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.151684][ T6427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.151725][ T6427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.136854][ T6703] netlink: 68 bytes leftover after parsing attributes in process `syz.1.224'. [ 248.585168][ T6427] hsr_slave_0: entered promiscuous mode [ 248.589663][ T6427] hsr_slave_1: entered promiscuous mode [ 248.605452][ T6427] debugfs: 'hsr0' already exists in 'hsr' [ 248.605480][ T6427] Cannot create hsr debugfs directory [ 248.815799][ T6355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 249.016100][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 249.045845][ T6355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 249.116962][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 249.169567][ T6355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 249.267966][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 249.328568][ T6355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 249.385872][ T6355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.653649][ T55] hsr_slave_0: left promiscuous mode [ 250.672601][ T55] hsr_slave_1: left promiscuous mode [ 250.673644][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.694837][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.872545][ T55] hsr_slave_0: left promiscuous mode [ 251.172583][ T55] hsr_slave_1: left promiscuous mode [ 251.173740][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.173766][ T55] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.168101][ T55] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.168131][ T55] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.451494][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.489714][ T55] veth1_macvtap: left promiscuous mode [ 252.489824][ T55] veth0_macvtap: left promiscuous mode [ 252.490079][ T55] veth1_vlan: left promiscuous mode [ 252.490254][ T55] veth0_vlan: left promiscuous mode [ 252.503531][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.535260][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 253.509595][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 253.511536][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 254.244554][ T55] team0 (unregistering): Port device team_slave_1 removed [ 254.314297][ T55] team0 (unregistering): Port device team_slave_0 removed [ 255.167107][ T55] team0 (unregistering): Port device team_slave_1 removed [ 255.212044][ T55] team0 (unregistering): Port device team_slave_0 removed [ 255.477630][ T6355] kthread_run failed with err -4 [ 255.552572][ T5606] Bluetooth: hci2: command tx timeout [ 255.644636][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 255.957604][ T6767] netlink: 68 bytes leftover after parsing attributes in process `syz.4.233'. [ 256.364822][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.364883][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.641539][ T6779] overlayfs: failed to resolve './file1': -2 [ 258.151861][ T5606] Bluetooth: hci2: command tx timeout [ 260.414021][ T5606] Bluetooth: hci2: command tx timeout [ 262.094854][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.136646][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.139095][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.140479][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.158985][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.442517][ T5603] Bluetooth: hci2: command tx timeout [ 263.973026][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 264.901511][ T5603] Bluetooth: hci0: command tx timeout [ 266.995538][ T5603] Bluetooth: hci0: command tx timeout [ 268.252229][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.4.248'. [ 269.083057][ T5603] Bluetooth: hci0: command tx timeout [ 269.211316][ T6750] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.223148][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.223362][ T6750] bridge_slave_0: entered allmulticast mode [ 269.226635][ T6750] bridge_slave_0: entered promiscuous mode [ 269.269204][ T6750] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.269313][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.269467][ T6750] bridge_slave_1: entered allmulticast mode [ 269.300472][ T6750] bridge_slave_1: entered promiscuous mode [ 269.690046][ T6750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.748817][ T6750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.927019][ T6750] team0: Port device team_slave_0 added [ 269.939737][ T6750] team0: Port device team_slave_1 added [ 270.046423][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.046441][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.046469][ T6750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.051191][ T6750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.051206][ T6750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.051235][ T6750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.174298][ T5603] Bluetooth: hci0: command tx timeout [ 277.297258][ T6750] hsr_slave_0: entered promiscuous mode [ 277.301316][ T6750] hsr_slave_1: entered promiscuous mode [ 277.316723][ T6750] debugfs: 'hsr0' already exists in 'hsr' [ 277.316750][ T6750] Cannot create hsr debugfs directory [ 283.337871][ T6810] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.338086][ T6810] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.338353][ T6810] bridge_slave_0: entered allmulticast mode [ 283.343027][ T6810] bridge_slave_0: entered promiscuous mode [ 283.369493][ T6810] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.369841][ T6810] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.378861][ T6810] bridge_slave_1: entered allmulticast mode [ 283.381657][ T6810] bridge_slave_1: entered promiscuous mode [ 284.090829][ T6810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.199099][ T6810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.512055][ T6810] team0: Port device team_slave_0 added [ 284.530856][ T6810] team0: Port device team_slave_1 added [ 284.736323][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.736342][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.736366][ T6810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.794822][ T6810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.794841][ T6810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.794870][ T6810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.648557][ T6810] hsr_slave_0: entered promiscuous mode [ 285.662943][ T6810] hsr_slave_1: entered promiscuous mode [ 285.667182][ T6810] debugfs: 'hsr0' already exists in 'hsr' [ 285.667212][ T6810] Cannot create hsr debugfs directory [ 289.265952][ T7023] overlayfs: failed to resolve './file0': -2 [ 291.872696][ T12] bridge_slave_1: left allmulticast mode [ 291.872734][ T12] bridge_slave_1: left promiscuous mode [ 291.873008][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.066730][ T12] bridge_slave_0: left allmulticast mode [ 292.066768][ T12] bridge_slave_0: left promiscuous mode [ 292.067070][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.512969][ T12] bridge_slave_1: left allmulticast mode [ 293.513006][ T12] bridge_slave_1: left promiscuous mode [ 293.513286][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.637189][ T12] bridge_slave_0: left allmulticast mode [ 293.637225][ T12] bridge_slave_0: left promiscuous mode [ 293.637461][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.194040][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.333461][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.591796][ T12] bond0 (unregistering): Released all slaves [ 295.268468][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.713299][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.007473][ T12] bond0 (unregistering): Released all slaves [ 297.068364][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 297.851626][ T7072] binder: 7071:7072 ioctl c0306201 200000000080 returned -14 [ 297.880140][ T7072] binder: 7071:7072 ioctl c0306201 2000000009c0 returned -14 [ 298.936045][ T12] hsr_slave_0: left promiscuous mode [ 298.972458][ T12] hsr_slave_1: left promiscuous mode [ 298.973535][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.014294][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.214217][ T12] hsr_slave_0: left promiscuous mode [ 299.269547][ T12] hsr_slave_1: left promiscuous mode [ 299.270607][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.303320][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.945028][ T12] team0 (unregistering): Port device team_slave_1 removed [ 307.003499][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.483588][ T12] team0 (unregistering): Port device team_slave_1 removed [ 307.543967][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.835400][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 308.854147][ T5603] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 310.018212][ T7157] binder: 7156:7157 ioctl c0306201 200000000080 returned -14 [ 310.041029][ T7157] binder: 7156:7157 ioctl c0306201 2000000009c0 returned -14 [ 312.052387][ T5877] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 312.204139][ T5877] usb 5-1: Using ep0 maxpacket: 16 [ 312.236394][ T5877] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.236425][ T5877] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.239405][ T5877] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.239435][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.239456][ T5877] usb 5-1: Product: syz [ 312.239470][ T5877] usb 5-1: Manufacturer: syz [ 312.239484][ T5877] usb 5-1: SerialNumber: syz [ 312.466301][ T5877] usb 5-1: 0:2 : does not exist [ 312.549866][ T5877] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 312.812457][ T5877] usb 5-1: USB disconnect, device number 5 [ 314.243562][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.274812][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.288279][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.289918][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.291124][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 315.102484][ T7135] udevd[7135]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.148144][ T5606] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 316.393875][ T5606] Bluetooth: hci5: command tx timeout [ 316.934288][ T12] bridge_slave_1: left allmulticast mode [ 316.934327][ T12] bridge_slave_1: left promiscuous mode [ 316.934591][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.144194][ T12] bridge_slave_0: left allmulticast mode [ 317.144230][ T12] bridge_slave_0: left promiscuous mode [ 317.144545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.457576][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.457647][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.432513][ T5606] Bluetooth: hci5: command tx timeout [ 318.965281][ T7223] overlayfs: failed to clone lowerpath [ 319.085108][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.144583][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.176060][ T12] bond0 (unregistering): Released all slaves [ 320.512399][ T5606] Bluetooth: hci5: command tx timeout [ 320.563519][ T5606] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 321.626553][ T12] hsr_slave_0: left promiscuous mode [ 321.667211][ T12] hsr_slave_1: left promiscuous mode [ 321.668253][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.688435][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.593712][ T5606] Bluetooth: hci5: command tx timeout [ 322.816332][ T5603] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.848996][ T5603] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 322.869978][ T5603] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 322.874948][ T5603] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 322.885837][ T5603] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.665911][ T12] team0 (unregistering): Port device team_slave_1 removed [ 323.850735][ T12] team0 (unregistering): Port device team_slave_0 removed [ 324.992418][ T5603] Bluetooth: hci2: command tx timeout [ 326.430617][ T5603] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 327.127162][ T5603] Bluetooth: hci2: command tx timeout [ 329.076282][ T5606] Bluetooth: hci1: unexpected event for opcode 0x0c2d [ 329.152522][ T5606] Bluetooth: hci2: command tx timeout [ 329.789565][ T7185] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.789692][ T7185] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.790001][ T7185] bridge_slave_0: entered allmulticast mode [ 329.855855][ T7185] bridge_slave_0: entered promiscuous mode [ 329.923232][ T7185] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.952403][ T7185] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.952712][ T7185] bridge_slave_1: entered allmulticast mode [ 329.960567][ T7185] bridge_slave_1: entered promiscuous mode [ 332.148775][ T7185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.366665][ T5606] Bluetooth: hci2: command tx timeout [ 332.533074][ T7185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.969337][ T7185] team0: Port device team_slave_0 added [ 333.213175][ T7185] team0: Port device team_slave_1 added [ 333.519514][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.519533][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.519561][ T7185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.545550][ T7185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.545607][ T7185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.545672][ T7185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.659293][ T7185] hsr_slave_0: entered promiscuous mode [ 334.666803][ T7185] hsr_slave_1: entered promiscuous mode [ 334.670994][ T7185] debugfs: 'hsr0' already exists in 'hsr' [ 334.671021][ T7185] Cannot create hsr debugfs directory [ 338.452691][ T7259] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.453018][ T7259] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.453254][ T7259] bridge_slave_0: entered allmulticast mode [ 338.466263][ T5606] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 338.493014][ T7259] bridge_slave_0: entered promiscuous mode [ 338.609611][ T7259] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.609738][ T7259] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.610068][ T7259] bridge_slave_1: entered allmulticast mode [ 338.686693][ T7259] bridge_slave_1: entered promiscuous mode [ 340.702435][ T5696] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 340.770394][ T7259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.172628][ T7259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.298195][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 341.299285][ T5696] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 341.299319][ T5696] usb 5-1: can't read configurations, error -71 [ 342.491796][ T7259] team0: Port device team_slave_0 added [ 342.527833][ T7259] team0: Port device team_slave_1 added [ 342.611729][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.611748][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.647230][ T7259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.665887][ T7259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.665904][ T7259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 342.665969][ T7259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.697215][ T7459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 343.955290][ T7259] hsr_slave_0: entered promiscuous mode [ 343.958659][ T7259] hsr_slave_1: entered promiscuous mode [ 343.961557][ T7259] debugfs: 'hsr0' already exists in 'hsr' [ 343.961585][ T7259] Cannot create hsr debugfs directory [ 345.145712][ T12] bridge_slave_1: left allmulticast mode [ 345.145747][ T12] bridge_slave_1: left promiscuous mode [ 345.146002][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.239351][ T12] bridge_slave_0: left allmulticast mode [ 345.239389][ T12] bridge_slave_0: left promiscuous mode [ 345.239659][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.462580][ T12] bridge_slave_1: left allmulticast mode [ 345.462630][ T12] bridge_slave_1: left promiscuous mode [ 345.462873][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.806489][ T12] bridge_slave_0: left allmulticast mode [ 345.829517][ T12] bridge_slave_0: left promiscuous mode [ 345.849373][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.004759][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.094508][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.137049][ T12] bond0 (unregistering): Released all slaves [ 348.485282][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.753486][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.900953][ T12] bond0 (unregistering): Released all slaves [ 349.251451][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 352.582677][ T12] hsr_slave_0: left promiscuous mode [ 352.622440][ T12] hsr_slave_1: left promiscuous mode [ 352.623690][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.663369][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 353.115015][ T12] hsr_slave_0: left promiscuous mode [ 353.153114][ T12] hsr_slave_1: left promiscuous mode [ 353.154275][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.335765][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.184123][ T12] team0 (unregistering): Port device team_slave_1 removed [ 357.219509][ T12] team0 (unregistering): Port device team_slave_0 removed [ 357.673102][ T12] team0 (unregistering): Port device team_slave_1 removed [ 357.715097][ T12] team0 (unregistering): Port device team_slave_0 removed [ 358.378525][ T7185] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 358.497128][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 358.534226][ T7185] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 359.605137][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 361.733954][ T7185] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 361.928586][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.182241][ T7185] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.224756][ T7590] binder: 7589:7590 ioctl c0306201 200000000080 returned -14 [ 363.279754][ T7590] binder: 7589:7590 ioctl c0306201 2000000009c0 returned -14 [ 363.281883][ T7185] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.639289][ T7598] capability: warning: `syz.2.391' uses deprecated v2 capabilities in a way that may be insecure [ 364.531986][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 373.184262][ T7185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.465009][ T7259] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 375.736897][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 375.768285][ T7259] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 376.375687][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 376.428264][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 376.429331][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 376.442553][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 376.460382][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 376.482612][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.545436][ T7259] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 377.608728][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.651546][ T5606] Bluetooth: hci0: command tx timeout [ 378.848746][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.848818][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.923105][ T7259] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 379.231979][ T7259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 380.695561][ T5606] Bluetooth: hci0: command tx timeout [ 382.763453][ T5606] Bluetooth: hci0: command tx timeout [ 384.315607][ T5603] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 384.341133][ T5603] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 384.354351][ T5603] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 384.356640][ T5603] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 384.357468][ T5603] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 384.944762][ T5607] Bluetooth: hci0: command tx timeout [ 389.500134][ T5603] Bluetooth: hci5: command tx timeout [ 391.608100][ T5603] Bluetooth: hci5: command tx timeout [ 393.856655][ T5603] Bluetooth: hci5: command tx timeout [ 398.013839][ T5603] Bluetooth: hci5: command tx timeout [ 404.443768][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.443977][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.444176][ T7693] bridge_slave_0: entered allmulticast mode [ 404.453261][ T7693] bridge_slave_0: entered promiscuous mode [ 405.666918][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.667045][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.667229][ T7693] bridge_slave_1: entered allmulticast mode [ 405.669352][ T7693] bridge_slave_1: entered promiscuous mode [ 405.837308][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.861886][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.171456][ T7693] team0: Port device team_slave_0 added [ 406.182964][ T7693] team0: Port device team_slave_1 added [ 407.801589][ T12] bridge_slave_1: left allmulticast mode [ 407.801626][ T12] bridge_slave_1: left promiscuous mode [ 407.804580][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.023817][ T12] bridge_slave_0: left allmulticast mode [ 408.023845][ T12] bridge_slave_0: left promiscuous mode [ 408.024102][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.685539][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.803692][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.866081][ T12] bond0 (unregistering): Released all slaves [ 409.576910][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.576945][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 409.578785][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.813738][ T7909] batadv_slave_1: entered promiscuous mode [ 410.684468][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.684489][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 410.684519][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.752083][ T7910] batadv_slave_1: left promiscuous mode [ 413.604325][ T7693] hsr_slave_0: entered promiscuous mode [ 413.605697][ T7693] hsr_slave_1: entered promiscuous mode [ 413.606621][ T7693] debugfs: 'hsr0' already exists in 'hsr' [ 413.606644][ T7693] Cannot create hsr debugfs directory [ 413.976504][ T7923] overlayfs: failed to clone upperpath [ 414.013572][ T12] hsr_slave_0: left promiscuous mode [ 414.052519][ T12] hsr_slave_1: left promiscuous mode [ 414.053639][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.080222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.968466][ T12] team0 (unregistering): Port device team_slave_1 removed [ 415.053179][ T12] team0 (unregistering): Port device team_slave_0 removed [ 416.791766][ T7769] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.791982][ T7769] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.812223][ T7769] bridge_slave_0: entered allmulticast mode [ 416.821026][ T7769] bridge_slave_0: entered promiscuous mode [ 416.865120][ T7769] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.865252][ T7769] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.865447][ T7769] bridge_slave_1: entered allmulticast mode [ 416.868429][ T7769] bridge_slave_1: entered promiscuous mode [ 417.110093][ T7769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.183563][ T7769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.345788][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 417.659480][ T7958] 9p: Bad value for 'rfdno' [ 419.218868][ T7769] team0: Port device team_slave_0 added [ 419.442407][ T5731] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 419.605290][ T7961] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.605986][ T7961] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.791358][ T7769] team0: Port device team_slave_1 added [ 421.116473][ T5731] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 421.116523][ T5731] usb 5-1: can't read configurations, error -71 [ 421.252498][ T5603] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 421.679659][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.679676][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.679699][ T7769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.738490][ T7769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.738509][ T7769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.738538][ T7769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.422180][ T7986] netlink: 20 bytes leftover after parsing attributes in process `syz.1.472'. [ 423.859538][ T7769] hsr_slave_0: entered promiscuous mode [ 423.860757][ T7769] hsr_slave_1: entered promiscuous mode [ 423.861654][ T7769] debugfs: 'hsr0' already exists in 'hsr' [ 423.861679][ T7769] Cannot create hsr debugfs directory [ 428.141995][ T7693] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 428.178814][ T8017] netlink: 16 bytes leftover after parsing attributes in process `syz.2.480'. [ 428.228353][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.505986][ T7693] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 428.551111][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.559810][ T7693] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 428.619251][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.919226][ T7693] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 428.970481][ T7693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.054838][ T8031] cgroup: Invalid name [ 431.835261][ T12] bridge_slave_1: left allmulticast mode [ 431.835298][ T12] bridge_slave_1: left promiscuous mode [ 431.873195][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.842998][ T5903] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 432.919542][ T12] bridge_slave_0: left allmulticast mode [ 432.919597][ T12] bridge_slave_0: left promiscuous mode [ 432.919853][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.980412][ T8062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'. [ 433.027033][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 433.042448][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 126, changing to 10 [ 433.042486][ T5903] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50557, setting to 1024 [ 433.042544][ T5903] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 433.042570][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.103002][ T5903] usb 5-1: config 0 descriptor?? [ 433.119940][ T8059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 433.161782][ T5903] hub 5-1:0.0: USB hub found [ 433.323501][ T5903] hub 5-1:0.0: 1 port detected [ 434.133200][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 434.227689][ T5903] usb 5-1: reset high-speed USB device number 10 using dummy_hcd [ 434.254091][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 434.345961][ T12] bond0 (unregistering): Released all slaves [ 435.025648][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 435.091562][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 435.110168][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 435.111924][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 435.142617][ T5696] usb 5-1: USB disconnect, device number 10 [ 435.150059][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 435.516447][ T12] hsr_slave_0: left promiscuous mode [ 435.595854][ T12] hsr_slave_1: left promiscuous mode [ 435.625295][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 435.683863][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.233010][ T5606] Bluetooth: hci2: command tx timeout [ 437.476379][ T12] team0 (unregistering): Port device team_slave_1 removed [ 437.784805][ T12] team0 (unregistering): Port device team_slave_0 removed [ 439.314029][ T5606] Bluetooth: hci2: command tx timeout [ 440.280088][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.280160][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.016752][ T5606] Bluetooth: hci2: command tx timeout [ 442.597925][ T7769] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 442.693510][ T7769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 442.785767][ T7769] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 442.874493][ T7769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 442.950686][ T7769] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 443.101620][ T7769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.145347][ T7769] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 443.282689][ T7769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 444.016291][ T7769] kthread_run failed with err -4 [ 444.032375][ T5606] Bluetooth: hci2: command tx timeout [ 444.428284][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 444.474749][ T5603] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 444.495197][ T5603] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 444.497097][ T5603] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 444.499550][ T5603] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 447.117258][ T5603] Bluetooth: hci0: command tx timeout [ 451.024182][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 451.024283][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.024448][ T8076] bridge_slave_0: entered allmulticast mode [ 451.026504][ T8076] bridge_slave_0: entered promiscuous mode [ 451.185265][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 451.186069][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 451.186268][ T8076] bridge_slave_1: entered allmulticast mode [ 451.203737][ T8076] bridge_slave_1: entered promiscuous mode [ 451.422384][ T5603] Bluetooth: hci0: command tx timeout [ 451.808977][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.866665][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.993327][ T8076] team0: Port device team_slave_0 added [ 452.019127][ T8076] team0: Port device team_slave_1 added [ 452.954648][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.954666][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 452.954694][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.028009][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.028024][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 453.028046][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.317721][ T8076] hsr_slave_0: entered promiscuous mode [ 453.321862][ T8076] hsr_slave_1: entered promiscuous mode [ 453.336683][ T8076] debugfs: 'hsr0' already exists in 'hsr' [ 453.336713][ T8076] Cannot create hsr debugfs directory [ 453.472400][ T5603] Bluetooth: hci0: command tx timeout [ 454.755678][ T8210] overlayfs: failed to clone upperpath [ 455.552556][ T5603] Bluetooth: hci0: command tx timeout [ 457.443571][ T5603] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 457.465974][ T12] bridge_slave_1: left allmulticast mode [ 457.466011][ T12] bridge_slave_1: left promiscuous mode [ 457.466266][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.514150][ T12] bridge_slave_0: left allmulticast mode [ 457.514187][ T12] bridge_slave_0: left promiscuous mode [ 457.514450][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.040797][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.153365][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.518395][ T12] bond0 (unregistering): Released all slaves [ 459.342857][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 459.927334][ T8137] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.927621][ T8137] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.927887][ T8137] bridge_slave_0: entered allmulticast mode [ 459.931631][ T8137] bridge_slave_0: entered promiscuous mode [ 460.930524][ T8137] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.930667][ T8137] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.930867][ T8137] bridge_slave_1: entered allmulticast mode [ 460.935632][ T8137] bridge_slave_1: entered promiscuous mode [ 463.867113][ T12] hsr_slave_0: left promiscuous mode [ 463.903184][ T12] hsr_slave_1: left promiscuous mode [ 463.904255][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.956127][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.545725][ T12] team0 (unregistering): Port device team_slave_1 removed [ 466.573010][ T12] team0 (unregistering): Port device team_slave_0 removed [ 467.964823][ T8283] netlink: 'syz.4.530': attribute type 1 has an invalid length. [ 468.050296][ T8137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.089514][ T8137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.134618][ T8309] overlayfs: failed to clone upperpath [ 470.653648][ T5696] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 473.484828][ T5696] usb 5-1: device descriptor read/all, error -71 [ 474.499060][ T8137] team0: Port device team_slave_0 added [ 474.508530][ T8137] team0: Port device team_slave_1 added [ 474.603668][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.603687][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.603849][ T8137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.611253][ T8137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.611270][ T8137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.611299][ T8137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.875626][ T8137] hsr_slave_0: entered promiscuous mode [ 475.881610][ T8137] hsr_slave_1: entered promiscuous mode [ 475.886022][ T8137] debugfs: 'hsr0' already exists in 'hsr' [ 475.886053][ T8137] Cannot create hsr debugfs directory [ 476.312202][ T8339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 480.168925][ T5730] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 480.751378][ T8361] overlayfs: failed to clone upperpath [ 482.853536][ T5730] usb 5-1: unable to get BOS descriptor or descriptor too short [ 482.854869][ T5730] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 482.854910][ T5730] usb 5-1: can't read configurations, error -71 [ 487.032476][ T8076] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.202266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 487.287808][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 487.290817][ T8076] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.398449][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 487.761693][ T8405] overlayfs: failed to clone upperpath [ 490.085248][ T8411] fuse: Unknown parameter '0x0000000000000003' [ 491.935157][ T8423] netlink: 'syz.4.563': attribute type 8 has an invalid length. [ 492.943719][ T8076] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 493.771030][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 494.222957][ T8076] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 494.248944][ T5603] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 494.416691][ T8076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 496.941504][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.979118][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.981972][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 497.016748][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 497.068638][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 501.937691][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.937766][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.961912][ T5603] Bluetooth: hci5: command tx timeout [ 503.427240][ T12] bridge_slave_1: left allmulticast mode [ 503.427279][ T12] bridge_slave_1: left promiscuous mode [ 503.427537][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.528888][ T12] bridge_slave_0: left allmulticast mode [ 503.528926][ T12] bridge_slave_0: left promiscuous mode [ 503.529234][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.653248][ T5603] Bluetooth: hci4: unexpected event for opcode 0x0c2d [ 504.032363][ T5603] Bluetooth: hci5: command tx timeout [ 504.113266][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.213343][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.284293][ T12] bond0 (unregistering): Released all slaves [ 504.313574][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 504.362470][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 504.600524][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 504.616849][ T5877] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 504.616880][ T5877] usb 5-1: can't read configurations, error -71 [ 505.032421][ T12] hsr_slave_0: left promiscuous mode [ 505.083852][ T12] hsr_slave_1: left promiscuous mode [ 505.084945][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.115274][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.194297][ T8504] capability: warning: `syz.1.579' uses 32-bit capabilities (legacy support in use) [ 505.335897][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 505.357766][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 505.362001][ T5606] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 505.423799][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 505.425888][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 506.112560][ T5603] Bluetooth: hci5: command tx timeout [ 506.233191][ T12] team0 (unregistering): Port device team_slave_1 removed [ 506.296763][ T12] team0 (unregistering): Port device team_slave_0 removed [ 508.690643][ T5603] Bluetooth: hci2: command tx timeout [ 508.695454][ T5603] Bluetooth: hci5: command tx timeout [ 510.912353][ T5603] Bluetooth: hci2: command tx timeout [ 513.009215][ T5603] Bluetooth: hci2: command tx timeout [ 513.624374][ T8584] binder: 8582:8584 ioctl c0306201 200000000080 returned -14 [ 515.078403][ T5603] Bluetooth: hci2: command tx timeout [ 516.294437][ T8603] syz.4.596 uses obsolete (PF_INET,SOCK_PACKET) [ 516.542991][ T8450] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.544690][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.544946][ T8450] bridge_slave_0: entered allmulticast mode [ 516.575040][ T8450] bridge_slave_0: entered promiscuous mode [ 516.624286][ T8450] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.624415][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.624625][ T8450] bridge_slave_1: entered allmulticast mode [ 516.629492][ T8450] bridge_slave_1: entered promiscuous mode [ 520.703684][ T8450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.737959][ T8450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.529716][ T8450] team0: Port device team_slave_0 added [ 523.639675][ T8450] team0: Port device team_slave_1 added [ 524.588161][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.588179][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.588224][ T8450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.710499][ T8450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.710518][ T8450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.710548][ T8450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.974722][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.974856][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.975071][ T8512] bridge_slave_0: entered allmulticast mode [ 526.789316][ T8512] bridge_slave_0: entered promiscuous mode [ 527.700727][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.700860][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.701108][ T8512] bridge_slave_1: entered allmulticast mode [ 527.729697][ T8512] bridge_slave_1: entered promiscuous mode [ 530.721139][ T8450] hsr_slave_0: entered promiscuous mode [ 530.735012][ T8450] hsr_slave_1: entered promiscuous mode [ 530.739084][ T8450] debugfs: 'hsr0' already exists in 'hsr' [ 530.739111][ T8450] Cannot create hsr debugfs directory [ 530.908997][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.006646][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.310851][ T8512] team0: Port device team_slave_0 added [ 531.481363][ T8512] team0: Port device team_slave_1 added [ 531.626394][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.626412][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.626440][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.745072][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.745089][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.745111][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.378955][ T12] bridge_slave_1: left allmulticast mode [ 533.378994][ T12] bridge_slave_1: left promiscuous mode [ 533.379278][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.434302][ T12] bridge_slave_0: left allmulticast mode [ 533.434345][ T12] bridge_slave_0: left promiscuous mode [ 533.434716][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.930698][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.618'. [ 536.943040][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.023319][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.094117][ T12] bond0 (unregistering): Released all slaves [ 537.464734][ T8741] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.466130][ T8741] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.028642][ T8741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 540.034456][ T8741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.672642][ T2379] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.783522][ T2379] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.832483][ T12] hsr_slave_0: left promiscuous mode [ 544.855098][ T12] hsr_slave_1: left promiscuous mode [ 544.856033][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.876165][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.432241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 546.232231][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 546.773572][ T12] team0 (unregistering): Port device team_slave_1 removed [ 546.835197][ T12] team0 (unregistering): Port device team_slave_0 removed [ 547.063323][ T2379] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.290861][ T2379] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.351044][ T8512] hsr_slave_0: entered promiscuous mode [ 547.366628][ T8512] hsr_slave_1: entered promiscuous mode [ 547.371851][ T8512] debugfs: 'hsr0' already exists in 'hsr' [ 547.371879][ T8512] Cannot create hsr debugfs directory [ 551.704025][ T8812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.636'. [ 552.807523][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 552.807805][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.896591][ T8821] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 555.343964][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 555.349186][ T8813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.165731][ T8669] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.676729][ T8844] netlink: 'syz.1.644': attribute type 8 has an invalid length. [ 557.803046][ T8669] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.832485][ T8669] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.838793][ T8669] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.648917][ T8853] random: crng reseeded on system resumption [ 558.877420][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.935737][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 558.937714][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 558.948798][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.978448][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 560.542262][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 561.817053][ T5603] Bluetooth: hci0: command tx timeout [ 561.882506][ T12] bridge_slave_1: left allmulticast mode [ 561.882559][ T12] bridge_slave_1: left promiscuous mode [ 561.882827][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.243446][ T12] bridge_slave_0: left allmulticast mode [ 562.243474][ T12] bridge_slave_0: left promiscuous mode [ 562.243685][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.154849][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.154929][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.872366][ T5603] Bluetooth: hci0: command tx timeout [ 563.953889][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.033366][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.105852][ T12] bond0 (unregistering): Released all slaves [ 565.172434][ T12] hsr_slave_0: left promiscuous mode [ 565.214382][ T12] hsr_slave_1: left promiscuous mode [ 565.215142][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.263086][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.833077][ T12] team0 (unregistering): Port device team_slave_1 removed [ 565.883188][ T12] team0 (unregistering): Port device team_slave_0 removed [ 565.952307][ T5603] Bluetooth: hci0: command tx timeout [ 567.578018][ T5606] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 567.620284][ T5606] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 567.621712][ T5606] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 567.646964][ T5606] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 567.647981][ T5606] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 569.248769][ T5603] Bluetooth: hci0: command tx timeout [ 569.704688][ T8934] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.662'. [ 569.792432][ T5603] Bluetooth: hci5: command tx timeout [ 570.162251][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 570.182257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 570.192266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 570.202255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 570.212245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 570.222240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 572.029317][ T5603] Bluetooth: hci5: command tx timeout [ 572.086487][ T8512] netdevsim netdevsim6: probe with driver netdevsim failed with error -12 [ 573.134652][ T8849] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.134871][ T8849] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.135075][ T8849] bridge_slave_0: entered allmulticast mode [ 573.139975][ T8849] bridge_slave_0: entered promiscuous mode [ 573.206078][ T8849] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.206228][ T8849] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.206426][ T8849] bridge_slave_1: entered allmulticast mode [ 573.209320][ T8849] bridge_slave_1: entered promiscuous mode [ 573.347816][ T12] bridge_slave_1: left allmulticast mode [ 573.347855][ T12] bridge_slave_1: left promiscuous mode [ 573.348125][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.934495][ T12] bridge_slave_0: left allmulticast mode [ 573.934523][ T12] bridge_slave_0: left promiscuous mode [ 573.934705][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.032378][ T5603] Bluetooth: hci5: command tx timeout [ 575.772363][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.347192][ T5603] Bluetooth: hci5: command tx timeout [ 576.358792][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.434389][ T12] bond0 (unregistering): Released all slaves [ 580.509731][ T8849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 581.534464][ T12] hsr_slave_0: left promiscuous mode [ 581.572396][ T12] hsr_slave_1: left promiscuous mode [ 581.573469][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.624612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.729510][ T12] team0 (unregistering): Port device team_slave_1 removed [ 583.834868][ T12] team0 (unregistering): Port device team_slave_0 removed [ 585.429275][ T8849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.561626][ T8849] team0: Port device team_slave_0 added [ 585.575838][ T8849] team0: Port device team_slave_1 added [ 585.621481][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.621500][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.621527][ T8849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.668628][ T8849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.668646][ T8849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.668676][ T8849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.840040][ T9041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.687'. [ 587.801912][ T8849] hsr_slave_0: entered promiscuous mode [ 587.809013][ T8849] hsr_slave_1: entered promiscuous mode [ 587.816506][ T8849] debugfs: 'hsr0' already exists in 'hsr' [ 587.816581][ T8849] Cannot create hsr debugfs directory [ 587.949603][ T9061] 9p: Bad value for 'rfdno' [ 588.295047][ T9063] random: crng reseeded on system resumption [ 591.902437][ T12] bridge_slave_1: left allmulticast mode [ 591.902476][ T12] bridge_slave_1: left promiscuous mode [ 591.902757][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.105229][ T12] bridge_slave_0: left allmulticast mode [ 593.105269][ T12] bridge_slave_0: left promiscuous mode [ 593.105538][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.243897][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.808074][ T9099] netlink: 156 bytes leftover after parsing attributes in process `syz.1.699'. [ 597.224099][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.359567][ T9] libceph: connect (1)[c::]:6789 error -101 [ 597.394013][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 597.431962][ T9] libceph: connect (1)[c::]:6789 error -101 [ 597.449238][ T9094] ceph: No mds server is up or the cluster is laggy [ 597.461808][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 597.476200][ T12] bond0 (unregistering): Released all slaves [ 598.471939][ T9] libceph: connect (1)[c::]:6789 error -101 [ 598.472132][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 599.071951][ T9] libceph: connect (1)[c::]:6789 error -101 [ 599.072153][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 600.208706][ T9] libceph: connect (1)[c::]:6789 error -101 [ 600.208906][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 601.005251][ T12] hsr_slave_0: left promiscuous mode [ 601.042684][ T12] hsr_slave_1: left promiscuous mode [ 602.505723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.140773][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.383835][ T12] team0 (unregistering): Port device team_slave_1 removed [ 607.480539][ T12] team0 (unregistering): Port device team_slave_0 removed [ 607.799326][ T9162] fuse: fd is not a fuse device [ 609.476066][ T9155] netlink: 88 bytes leftover after parsing attributes in process `syz.1.711'. [ 612.796393][ T8910] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.796613][ T8910] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.796830][ T8910] bridge_slave_0: entered allmulticast mode [ 612.803034][ T8910] bridge_slave_0: entered promiscuous mode [ 613.155464][ T8910] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.155588][ T8910] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.155785][ T8910] bridge_slave_1: entered allmulticast mode [ 613.192826][ T8910] bridge_slave_1: entered promiscuous mode [ 613.428625][ T8910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.436347][ T8849] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 614.181902][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 614.212475][ T8910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.542982][ T8849] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 614.849603][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 614.979826][ T8849] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 615.053529][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 615.088528][ T8849] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 615.116839][ T8849] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 615.120562][ T8910] team0: Port device team_slave_0 added [ 615.143692][ T8910] team0: Port device team_slave_1 added [ 615.492947][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.492966][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.492997][ T8910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.561690][ T8910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.561706][ T8910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 615.561729][ T8910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.796071][ T8910] hsr_slave_0: entered promiscuous mode [ 615.797542][ T8910] hsr_slave_1: entered promiscuous mode [ 615.798665][ T8910] debugfs: 'hsr0' already exists in 'hsr' [ 615.798688][ T8910] Cannot create hsr debugfs directory [ 615.910985][ T9210] 9p: Bad value for 'rfdno' [ 617.829488][ T8910] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 617.874083][ T8910] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 617.877439][ T8910] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 617.962644][ T8910] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.206046][ T8910] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 619.353752][ T8910] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 619.456737][ T5606] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 619.507651][ T5606] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 619.509471][ T5606] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 619.510709][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 619.517877][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 619.809431][ T8910] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 620.703023][ T8910] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 622.041702][ T5603] Bluetooth: hci0: command tx timeout [ 622.577551][ T9250] 9p: Bad value for 'rfdno' [ 624.114698][ T5603] Bluetooth: hci0: command tx timeout [ 624.636563][ T1336] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.636636][ T1336] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.160591][ T9287] fuse: fd is not a fuse device [ 626.192324][ T5603] Bluetooth: hci0: command tx timeout [ 628.263032][ T5606] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 628.300733][ T5606] Bluetooth: hci0: command tx timeout [ 628.329802][ T5606] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 628.333950][ T9308] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 628.389927][ T5606] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 628.390976][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 629.581742][ T9319] futex_wake_op: syz.4.741 tries to shift op by 144; fix this program [ 630.238749][ T9320] syz.4.741 (9320) used greatest stack depth: 17992 bytes left [ 630.457894][ T5606] Bluetooth: hci2: command tx timeout [ 630.991092][ T9294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.058126][ T9294] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.166751][ T9332] netlink: 'syz.2.744': attribute type 4 has an invalid length. [ 632.308155][ T9294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.522583][ T5606] Bluetooth: hci2: command tx timeout [ 632.676495][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 632.700966][ T9294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 632.748209][ T9294] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 632.748237][ T9294] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.801554][ T9294] veth1_vlan: left promiscuous mode [ 632.810785][ T9294] veth0_vlan: left promiscuous mode [ 632.818034][ T9294] veth0_vlan: entered promiscuous mode [ 632.876075][ T9294] veth1_vlan: entered promiscuous mode [ 632.950415][ T9294] veth1_macvtap: left promiscuous mode [ 632.961060][ T9294] veth0_macvtap: left promiscuous mode [ 632.972497][ T9294] veth0_macvtap: entered promiscuous mode [ 632.980808][ T9294] veth1_macvtap: entered promiscuous mode [ 633.028293][ T9294] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 633.038488][ T9294] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 633.056108][ T9294] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 633.069730][ T9294] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 634.676526][ T5606] Bluetooth: hci2: command tx timeout [ 634.709737][ T1377] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.709965][ T1377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.721457][ T1377] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.721825][ T1377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 636.191135][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.591965][ T5877] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 636.616513][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.755862][ T5606] Bluetooth: hci2: command tx timeout [ 636.772019][ T1377] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.823943][ T1377] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 636.893733][ T5877] usb 5-1: Using ep0 maxpacket: 8 [ 636.913215][ T5877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 636.917598][ T5877] usb 5-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 636.917628][ T5877] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 636.917657][ T5877] usb 5-1: config 1 interface 0 has no altsetting 0 [ 636.952365][ T5877] usb 5-1: string descriptor 0 read error: -22 [ 636.952500][ T5877] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 636.952524][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.047622][ T9354] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 637.716481][ T9368] futex_wake_op: syz.2.750 tries to shift op by 144; fix this program [ 638.642620][ T104] bridge_slave_1: left allmulticast mode [ 638.642658][ T104] bridge_slave_1: left promiscuous mode [ 638.642957][ T104] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.715642][ T104] bridge_slave_0: left allmulticast mode [ 638.715689][ T104] bridge_slave_0: left promiscuous mode [ 638.715959][ T104] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.873110][ T10] usb 5-1: USB disconnect, device number 17 [ 639.797576][ T104] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.022061][ T9386] fuse: fd is not a fuse device [ 640.225945][ T104] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.125230][ T104] bond0 (unregistering): Released all slaves [ 641.420789][ T171] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.421071][ T171] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.444552][ T5696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 641.834389][ T5903] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 641.902491][ T5696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 642.222103][ T9393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 642.271407][ T9393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 642.362565][ T5696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 642.486962][ T104] hsr_slave_0: left promiscuous mode [ 642.544331][ T104] hsr_slave_1: left promiscuous mode [ 642.546342][ T104] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 642.595276][ T104] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 645.152393][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 646.316703][ T5903] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 646.316739][ T5903] usb 5-1: can't read configurations, error -71 [ 646.494962][ T104] team0 (unregistering): Port device team_slave_1 removed [ 646.573083][ T104] team0 (unregistering): Port device team_slave_0 removed [ 649.263148][ T9227] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.263295][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.263491][ T9227] bridge_slave_0: entered allmulticast mode [ 649.273622][ T9227] bridge_slave_0: entered promiscuous mode [ 649.287410][ T9449] overlayfs: failed to clone lowerpath [ 649.385751][ T9227] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.387498][ T9227] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.387720][ T9227] bridge_slave_1: entered allmulticast mode [ 649.400424][ T9227] bridge_slave_1: entered promiscuous mode [ 650.908249][ T9227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.492510][ T9227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.501781][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 652.757932][ T9227] team0: Port device team_slave_0 added [ 652.771385][ T9227] team0: Port device team_slave_1 added [ 653.403196][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 653.925657][ T9227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.925676][ T9227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.925704][ T9227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.033612][ T9227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.033630][ T9227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.033660][ T9227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 655.416625][ T9510] overlayfs: failed to clone lowerpath [ 656.587395][ T9227] hsr_slave_0: entered promiscuous mode [ 656.627741][ T9227] hsr_slave_1: entered promiscuous mode [ 656.628869][ T9227] debugfs: 'hsr0' already exists in 'hsr' [ 656.628894][ T9227] Cannot create hsr debugfs directory [ 657.242614][ T9305] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.242754][ T9305] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.243002][ T9305] bridge_slave_0: entered allmulticast mode [ 657.252344][ T9305] bridge_slave_0: entered promiscuous mode [ 657.368841][ T9305] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.369053][ T9305] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.369280][ T9305] bridge_slave_1: entered allmulticast mode [ 657.399555][ T9305] bridge_slave_1: entered promiscuous mode [ 657.463718][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 657.717915][ T9305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.760878][ T9305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.484998][ T9557] macsec1: entered promiscuous mode [ 660.485023][ T9557] bridge0: entered promiscuous mode [ 661.068996][ T9565] 9p: Bad value for 'rfdno' [ 662.998511][ T9305] team0: Port device team_slave_0 added [ 663.140024][ T9305] team0: Port device team_slave_1 added [ 667.323582][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 667.323603][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 667.323631][ T9305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 667.395308][ T9603] 9p: Bad value for 'rfdno' [ 668.324713][ T9593] macsec1: entered promiscuous mode [ 668.324733][ T9593] bridge0: entered promiscuous mode [ 668.328986][ T9305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.329002][ T9305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 668.329029][ T9305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 668.876313][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 668.899841][ T9609] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.801'. [ 668.900335][ T9609] netlink: ct family unspecified [ 671.232335][ T5877] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 672.945758][ T5877] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 672.945787][ T5877] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.005623][ T5877] usb 5-1: config 0 descriptor?? [ 673.090384][ T5877] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 673.090904][ T5877] [drm:udl_init] *ERROR* Selecting channel failed [ 673.285178][ T5877] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 673.285206][ T5877] [drm] Initialized udl on minor 2 [ 673.338333][ T5877] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 673.376264][ T5877] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 673.437483][ T5877] usb 5-1: USB disconnect, device number 20 [ 673.457217][ T9105] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 673.458369][ T9105] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 677.986823][ T9305] hsr_slave_0: entered promiscuous mode [ 677.991269][ T9305] hsr_slave_1: entered promiscuous mode [ 677.995992][ T9305] debugfs: 'hsr0' already exists in 'hsr' [ 677.996018][ T9305] Cannot create hsr debugfs directory [ 680.452237][ T9105] ------------[ cut here ]------------ [ 680.452252][ T9105] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 680.452275][ T9105] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:2/9105 [ 680.452319][ T9105] Modules linked in: [ 680.452356][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.452381][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.452395][ T9105] Workqueue: events drm_fb_helper_damage_work [ 680.452428][ T9105] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 680.452466][ T9105] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a af d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 680.452483][ T9105] RSP: 0018:ffffc90003e478c0 EFLAGS: 00010246 [ 680.452500][ T9105] RAX: 1ffff11004a98e00 RBX: ffffffff8f93e460 RCX: 0000000000000000 [ 680.452514][ T9105] RDX: ffffffff8bc048e0 RSI: ffffffff8bc21000 RDI: ffffffff8f93e460 [ 680.452529][ T9105] RBP: ffffc90003e479a8 R08: 0000000000000000 R09: 0000000000000000 [ 680.452542][ T9105] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffffffff8bc21000 [ 680.452556][ T9105] R13: ffff8880254c7000 R14: 0000000000000000 R15: ffffffff8bc048e0 [ 680.452570][ T9105] FS: 0000000000000000(0000) GS:ffff888126179000(0000) knlGS:0000000000000000 [ 680.452586][ T9105] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 680.452600][ T9105] CR2: 0000200000404030 CR3: 0000000072bfe000 CR4: 00000000003526f0 [ 680.452617][ T9105] Call Trace: [ 680.452626][ T9105] [ 680.452645][ T9105] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 680.452669][ T9105] ? rt_spin_unlock+0x14f/0x200 [ 680.452700][ T9105] ? __pfx_autoremove_wake_function+0x10/0x10 [ 680.452729][ T9105] ? rt_spin_unlock+0x160/0x200 [ 680.452762][ T9105] ? drm_vblank_get+0x147/0x260 [ 680.452787][ T9105] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 680.452825][ T9105] drm_fb_helper_damage_work+0x131/0x6f0 [ 680.452853][ T9105] ? process_scheduled_works+0xa70/0x1860 [ 680.452882][ T9105] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 680.452911][ T9105] ? process_scheduled_works+0xa70/0x1860 [ 680.452934][ T9105] ? process_scheduled_works+0xa70/0x1860 [ 680.452959][ T9105] process_scheduled_works+0xb5d/0x1860 [ 680.453016][ T9105] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.453047][ T9105] ? assign_work+0x3d5/0x5e0 [ 680.453076][ T9105] worker_thread+0xa53/0xfc0 [ 680.453129][ T9105] kthread+0x388/0x470 [ 680.453158][ T9105] ? __pfx_worker_thread+0x10/0x10 [ 680.453180][ T9105] ? __pfx_kthread+0x10/0x10 [ 680.453210][ T9105] ret_from_fork+0x514/0xb70 [ 680.453238][ T9105] ? __pfx_ret_from_fork+0x10/0x10 [ 680.453262][ T9105] ? __switch_to+0xc79/0x1410 [ 680.453298][ T9105] ? __pfx_kthread+0x10/0x10 [ 680.453327][ T9105] ret_from_fork_asm+0x1a/0x30 [ 680.453372][ T9105] [ 680.453382][ T9105] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 680.453397][ T9105] CPU: 0 UID: 0 PID: 9105 Comm: kworker/0:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 680.453437][ T9105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.453451][ T9105] Workqueue: events drm_fb_helper_damage_work [ 680.453475][ T9105] Call Trace: [ 680.453484][ T9105] [ 680.453492][ T9105] vpanic+0x56c/0xa60 [ 680.453520][ T9105] ? __pfx__printk+0x10/0x10 [ 680.453554][ T9105] ? __pfx_vpanic+0x10/0x10 [ 680.453579][ T9105] ? is_bpf_text_address+0x292/0x2b0 [ 680.453609][ T9105] ? is_bpf_text_address+0x26/0x2b0 [ 680.453655][ T9105] panic+0xc5/0xd0 [ 680.453683][ T9105] ? __pfx_panic+0x10/0x10 [ 680.453721][ T9105] ? ret_from_fork_asm+0x1a/0x30 [ 680.453757][ T9105] __warn+0x315/0x4c0 [ 680.453783][ T9105] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 680.453826][ T9105] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 680.453851][ T9105] __report_bug+0x29a/0x540 [ 680.453881][ T9105] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 680.453905][ T9105] ? __pfx___report_bug+0x10/0x10 [ 680.453950][ T9105] report_bug_entry+0x19a/0x290 [ 680.453991][ T9105] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 680.454014][ T9105] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 680.454039][ T9105] handle_bug+0xce/0x200 [ 680.454069][ T9105] exc_invalid_op+0x1a/0x50 [ 680.454098][ T9105] asm_exc_invalid_op+0x1a/0x20 [ 680.454131][ T9105] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 680.454155][ T9105] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a af d0 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 680.454172][ T9105] RSP: 0018:ffffc90003e478c0 EFLAGS: 00010246 [ 680.454188][ T9105] RAX: 1ffff11004a98e00 RBX: ffffffff8f93e460 RCX: 0000000000000000 [ 680.454203][ T9105] RDX: ffffffff8bc048e0 RSI: ffffffff8bc21000 RDI: ffffffff8f93e460 [ 680.454218][ T9105] RBP: ffffc90003e479a8 R08: 0000000000000000 R09: 0000000000000000 [ 680.454231][ T9105] R10: dffffc0000000000 R11: fffffbfff1f11c3f R12: ffffffff8bc21000 [ 680.454246][ T9105] R13: ffff8880254c7000 R14: 0000000000000000 R15: ffffffff8bc048e0 [ 680.454282][ T9105] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 680.454305][ T9105] ? rt_spin_unlock+0x14f/0x200 [ 680.454335][ T9105] ? __pfx_autoremove_wake_function+0x10/0x10 [ 680.454364][ T9105] ? rt_spin_unlock+0x160/0x200 [ 680.454398][ T9105] ? drm_vblank_get+0x147/0x260 [ 680.454423][ T9105] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 680.454458][ T9105] drm_fb_helper_damage_work+0x131/0x6f0 [ 680.454485][ T9105] ? process_scheduled_works+0xa70/0x1860 [ 680.454513][ T9105] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 680.454543][ T9105] ? process_scheduled_works+0xa70/0x1860 [ 680.454565][ T9105] ? process_scheduled_works+0xa70/0x1860 [ 680.454590][ T9105] process_scheduled_works+0xb5d/0x1860 [ 680.454653][ T9105] ? __pfx_process_scheduled_works+0x10/0x10 [ 680.454684][ T9105] ? assign_work+0x3d5/0x5e0 [ 680.454713][ T9105] worker_thread+0xa53/0xfc0 [ 680.454766][ T9105] kthread+0x388/0x470 [ 680.454795][ T9105] ? __pfx_worker_thread+0x10/0x10 [ 680.454816][ T9105] ? __pfx_kthread+0x10/0x10 [ 680.454847][ T9105] ret_from_fork+0x514/0xb70 [ 680.454874][ T9105] ? __pfx_ret_from_fork+0x10/0x10 [ 680.454899][ T9105] ? __switch_to+0xc79/0x1410 [ 680.454933][ T9105] ? __pfx_kthread+0x10/0x10 [ 680.454983][ T9105] ret_from_fork_asm+0x1a/0x30 [ 680.455030][ T9105] [ 680.455620][ T9105] Kernel Offset: disabled