last executing test programs: 12m43.894633161s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x39b3) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000340)=""/83, 0x53}], 0x1}, 0x81}], 0x1, 0x40010120, 0x0) 12m38.8255143s ago: executing program 4 (id=23): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0xc0d00) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, &(0x7f0000000000), 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) r2 = syz_clone(0x0, 0x0, 0xffffff36, 0x0, 0x0, 0x0) ptrace(0x10, r2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r1, 0x0, 0x0) 12m31.925715166s ago: executing program 4 (id=30): r0 = io_uring_setup(0x3c92, &(0x7f0000000100)={0x0, 0x3, 0x0, 0xffffffff, 0x2}) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000004c0)="ddbe6b0d863b713ad5db38484cddee0aa41f65210fecff70ef0300004000000000bd8a00002000008754f7fd9763633b1e85f1a932c74037fe103e20623953979b1f4b2187d4bb0b2fa57e7dcf8083338c77aef3d0c6fef3c4fff70c894202c624aabe60ff07826f13cc9cb4859a1b5a3372cadc9e305042a26ac7d1358109fb8e8bdadc7173609059492047a3ae29e590e09ab027844bf6bc1016c259c7495e61f624721421b22e7054662ae3c515487849dca269e9b2ac92900fa090ed12f2414703cc6d9cddb4c5dfdf32c0d6144cabeb97e1be92a918bd4a48fc0c6f510936acf2961fb61f4c35ca8a0da4f6175f3efe2ac448bd753e6f71abbf761415e7b87c828cdaa62b10d541a9a6f5152a4ac72d8eb2d53e7d362b1543188da18b85d5f7e0cb5401d53342d5a0147a8d7362e14ba90a059f1c9c9ff474c86bcfb59120b026e56e8d411ef0fa6a96e9f47f6e3edd3166149bb36d529cae9061c61f3e2fa0897cc7a621b08ebb807d7bdc7c69889be4297bbf2de43163a96f00b604a79801e1503262d502c6b942ad6c7772cfa0eb9def8b6cd3c4b2a549e2f18a24c644fed5783907f5aab36c1dc2f17d01c61ba02691b66358a99cfc0dd790f2b5cb29361b8b9e3c4ecfcfc2f6db2541a8369f0c14d83688812197c4446bb0fd9837d3fe0af478673dae63a3717ad06a6a9812399610b1ee16c1146a7bf1d197506cb6fdfd4663625f7a59", 0xfd48, 0x90, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 12m26.670902822s ago: executing program 4 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 12m9.756762691s ago: executing program 32 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) connect$can_j1939(r4, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0xf0}, 0x1}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) 9m45.600410517s ago: executing program 2 (id=230): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_DEL_MFC(r2, 0x29, 0xcd, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20040040) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000006c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x14, r7, 0x4c466994d56c53cd, 0x70bd27}, 0x14}}, 0x8000) 9m43.449411803s ago: executing program 2 (id=233): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000008dc0)=[{{&(0x7f00000001c0)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_ttl={{0x14, 0x0, 0x2, 0x4}}], 0x18}}], 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a01010000000000000a0000460900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d10300000800034000000001010000000008000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = syz_io_uring_setup(0x315b, &(0x7f0000000200)={0x0, 0xcfca, 0x1040, 0x0, 0x1000001, 0x0, 0x0}, &(0x7f0000000100), 0x0, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000005c0)={'sit0\x00', &(0x7f0000000500)={'tunl0\x00', 0x0, 0x7800, 0x8000, 0x7f, 0x0, {{0x6, 0x4, 0x3, 0x3, 0x18, 0x66, 0x0, 0x4, 0x66, 0x0, @rand_addr=0x64010102, @multicast1, {[@end]}}}}}) r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000005803405f9f1c00", @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf25010000000900010073797a3200000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000810}, 0x40800) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000640)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x890}, 0x4b389d13d2dacaa0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r5, 0x300, 0x70bd25, 0x25dfdbff}, 0x14}}, 0x80) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000007c0), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f0000000340)={0xe939, r6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r8}) syz_usb_connect(0x0, 0x2d, &(0x7f00000009c0)={{0x12, 0x1, 0x310, 0x72, 0x68, 0xc, 0x40, 0x100d, 0x3342, 0x99ba, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x8, 0xfe, 0x40, 0xd5, "", [{{0x9, 0x4, 0x81, 0x0, 0x0, 0xaf, 0x8e, 0xc8, 0x5}}, {{0x9, 0x4, 0x9e, 0x8, 0x0, 0x9e, 0xa1, 0x54, 0xca}}]}}]}}, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0xf000, 0x2000000, 0x13, r1, 0x100000000) 9m37.488642178s ago: executing program 2 (id=239): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000a20000/0x2000)=nil) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) creat(0x0, 0x4) unlink(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x4a40200, 0x0, 0x0, &(0x7f0000000180), {0x2e}, &(0x7f00000001c0)=""/13, 0xd, &(0x7f0000000200)=""/57, 0x0, 0x0, {r3}}, 0x58) 9m36.021620971s ago: executing program 2 (id=240): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x46, 0x2}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f00000008c0)={&(0x7f0000000600)=@name, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r5 = dup3(r3, r4, 0x0) setsockopt$TIPC_GROUP_LEAVE(r5, 0x10f, 0x88) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9m33.094914061s ago: executing program 2 (id=242): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x8}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x1, 0x7}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) r6 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r6) getsockopt$bt_hci(r0, 0x84, 0x6c, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) 9m30.487875792s ago: executing program 2 (id=245): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) 9m15.295553479s ago: executing program 33 (id=245): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) close(r3) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, 0x0, 0x0) 7m45.025565522s ago: executing program 3 (id=334): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) inotify_init1(0x80800) open$dir(0x0, 0xa0000, 0x83) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5ce000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) getdents(0xffffffffffffffff, &(0x7f0000000ec0)=""/4096, 0x1000) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000300), 0x0) 7m35.019059388s ago: executing program 3 (id=341): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000380)={0x0, 0x7, 0x0, 0x0, 0x8b, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x7, 0x40, 0xfffffffe, 0xfffffe00, 0x8, "255a5402cb0a000000000000002a7f0b2093af"}) read$FUSE(r2, &(0x7f0000005580)={0x2020}, 0x2020) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x2, 0xa, 0xe, 0x2, 0x2, 0x0, 0x70bd28, 0x25dfdbfd}, 0x10}}, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x0, 0x40055}, &(0x7f0000000100)=0x0, 0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r7, 0x0, r8, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2011}}) io_uring_enter(r6, 0x1000004, 0xfffffffd, 0x82, 0x0, 0x0) shutdown(r5, 0x1) r9 = syz_io_uring_setup(0xf00, 0x0, 0x0, &(0x7f0000000180), &(0x7f0000000080)) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c090}, 0x84) io_uring_enter(r9, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) r11 = socket(0x40000000015, 0x5, 0x0) getsockopt(r11, 0x200000000114, 0x2718, 0x0, &(0x7f00000001c0)) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="f7", 0x1}], 0x1}, 0x3) 7m32.348859027s ago: executing program 3 (id=345): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@delrng={0x10, 0x14, 0x1, 0x70bd25, 0x25dfdbfe}, 0x10}}, 0x40000) 7m32.050455106s ago: executing program 3 (id=346): timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x4}) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000002c0)={0x0, @ctrl={0x0, 0x0, @value64}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r2, 0x4020565a, &(0x7f0000000280)={0x3, 0x980900, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f00000001c0)) ioctl$VIDIOC_QUERYMENU(r2, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000240), 0x0, 0x2) ioctl$VIDIOC_QUERYMENU(r3, 0xc02c5625, &(0x7f0000000380)={0x48004000, 0x5, @name="592a3a444094cfcd5ed0b2ca913e6c71964579c74f6591c31af9bee82e389a4f"}) close(0xffffffffffffffff) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) 7m31.488666197s ago: executing program 3 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r3, &(0x7f0000000180)='./file0\x00', 0x26) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$dri(0x0, 0x9, 0x101080) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) fstat(r4, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) 7m29.576943191s ago: executing program 3 (id=349): r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) utimes(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) syz_open_dev$vivid(0x0, 0x3, 0x2) syz_open_dev$dvb_frontend(0x0, 0x9, 0x454802) close_range(r1, 0xffffffffffffffff, 0x0) 7m12.718512093s ago: executing program 34 (id=349): r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/178, 0xb2}], 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) utimes(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) syz_open_dev$vivid(0x0, 0x3, 0x2) syz_open_dev$dvb_frontend(0x0, 0x9, 0x454802) close_range(r1, 0xffffffffffffffff, 0x0) 28.868592617s ago: executing program 0 (id=1029): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in=@empty, @in=@empty, 0x4f23, 0xfffc, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f04, 0x30, 0x2f}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x100000000, 0xfffffffffffffffb, 0x3, 0x8, 0x7fff}, {0x104, 0xfffffffffffffffe, 0x4, 0x9}, 0x10001, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x210005, 0x33}, 0xa, @in=@remote, 0xfffffffe, 0x0, 0x0, 0x17, 0x5, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0) 28.687872183s ago: executing program 0 (id=1030): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x80000000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x10) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 28.520514127s ago: executing program 0 (id=1031): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573745f726169640041414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141004141414141414141414141414141414141414141414141") ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000032000000000000008a0100003801000001000000000000000000000000000000000000000000000000000000746573745f72616964004141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414100414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141414141000000000000000008000000000000000000000000000000726169640000000000000000000000007261696431203120382032202d202e2f6465762f6c6f6f7030202d202e2f6465762f6c6f6f703100") 27.938338294s ago: executing program 0 (id=1032): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000004000)=ANY=[@ANYBLOB="120100000b529708410e42416ed401020301090224000100000000090400020221f7680009050100000401ff0709050210080007"], 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x4, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0xfff2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pidfd_getfd(0xffffffffffffffff, r1, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 26.75263894s ago: executing program 0 (id=1033): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'ip_vti0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'veth0_virt_wifi\x00'}}, 0x1e) 26.433107035s ago: executing program 0 (id=1034): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}]}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 17.950418158s ago: executing program 1 (id=1037): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) write(r1, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x14, 0x14, 0x0, 0xac4f67a53bcd6f73, 0x0, 0xfd, 0x9}}, 0x1c}, 0x1, 0x0, 0x0, 0x844}, 0x4008800) 17.812687939s ago: executing program 1 (id=1038): r0 = syz_open_dev$loop(&(0x7f0000000280), 0x10, 0x80082) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x278) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e68080b8785d960001000000000000000000007efff100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd5992861ac00", "f4bd000000017000", [0x7, 0xffffffff9673e35d]}}) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x9, 0x4, "fd94804756cdfbc00be62e7b6c2ea354ea6af7dd5711bd53ae4217c76743a55206a266e244dfddee446207a1ebfc77dd324b573f00", "6d4070c0c05f555a7811300775a78001a4faac4b9799a991e8756d70c562623dd0bf4cf957e37e47a5881031e3c146672fa16d09660622894df53300", "b60549faf18c1d66e5aae8117454658a484db0cc16561e0fa51903692a72dfc5", [0x1, 0x2]}) fallocate(r0, 0x11, 0x0, 0x5345) 16.964078739s ago: executing program 1 (id=1039): syz_io_uring_setup(0x4175, &(0x7f0000000600)={0x0, 0x7615, 0x10000, 0x3, 0x2d0}, 0x0, 0x0, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x56, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @period={0x5d, 0x5, 0xc, 0x7, 0x7ff, {0x0, 0x6, 0x4, 0x7ff}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 16.731242168s ago: executing program 1 (id=1040): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="ab", 0x1a000, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 15.709920883s ago: executing program 1 (id=1041): ioctl$HIDIOCSUSAGES(0xffffffffffffffff, 0x501c4814, &(0x7f0000001040)={{0x1, 0x1, 0x9, 0xffffffff, 0x7f, 0x9}, 0x289, [0x1, 0x4, 0x3ff, 0x65f6, 0x2, 0xfff, 0x7, 0x3, 0xf1, 0xffff, 0x0, 0x6, 0xfffffffd, 0x4, 0x0, 0x9, 0x3, 0x8, 0x8, 0xd, 0x6, 0x71, 0x8000, 0x80000001, 0xc306, 0x7f, 0x800, 0x3c, 0xb0, 0x5b0c5208, 0xb, 0x80, 0x7, 0x3ff, 0x9, 0x6, 0x800, 0xa, 0x1137, 0x6, 0x10, 0xfff, 0x7ff, 0x6, 0xea56, 0x8, 0x9, 0x6, 0xd9588000, 0x80, 0xff, 0x40964e8a, 0xe30, 0x3, 0x2, 0x40, 0x15e, 0xffff, 0xffffff81, 0x4, 0x1, 0x3, 0x2, 0xf, 0x1ff, 0x10, 0x5, 0x8, 0xcc, 0xffffffff, 0x2860cf75, 0xdca, 0x9, 0x3, 0x5, 0x2, 0x3, 0x20000000, 0x1ff, 0x4, 0xffffff67, 0x100, 0x9, 0x1, 0x530, 0x9bc, 0x8000, 0x8, 0x0, 0xf24, 0x1, 0x76, 0x3, 0x7, 0x80000000, 0x4d62, 0x3, 0x4, 0x1, 0x9, 0x80000000, 0xc, 0x3, 0x7, 0x1, 0x1, 0x5, 0xfff, 0x8001, 0x4, 0x101, 0x0, 0xffff, 0x3, 0xef2d, 0x5, 0xff, 0x4, 0x7, 0x3, 0x3, 0x5, 0x9, 0x9, 0x8, 0x7, 0x3, 0xfffffffa, 0x8002, 0xfffffff7, 0x9e00, 0x4, 0x20080, 0x8000, 0x40000000, 0x1, 0x8001, 0x1ff, 0x80, 0x9, 0x9, 0x1ad7, 0x2, 0xf, 0xd2f, 0x3e1, 0x9, 0xa3, 0x4, 0x8, 0x5, 0x4, 0x1, 0x2, 0x7, 0x100, 0x9, 0x5, 0x9, 0x2, 0x7, 0x9, 0x10, 0x401, 0x6, 0x647df837, 0x8, 0x40, 0x7446, 0xffdffffd, 0x8, 0x7, 0x6c, 0x8ca, 0x3, 0x2, 0x1, 0x5, 0xfffffff7, 0xccc, 0x101, 0x7, 0x9, 0x5, 0x1, 0x6, 0x2, 0xfffffff7, 0x1000, 0xb, 0x18f, 0xc6, 0x8000, 0x5, 0xff, 0xae7, 0x4, 0x8, 0xf8fb, 0x1, 0x1, 0x6, 0x22, 0x8, 0x1, 0x2, 0x42, 0x3, 0x40, 0x9, 0x0, 0x9, 0xfffffffa, 0x4, 0x7f, 0x7, 0x4, 0x7, 0xf, 0x9, 0xe7, 0xb, 0x6, 0x80000000, 0x8, 0x1, 0x1ff, 0x6, 0x8000, 0x3, 0x3, 0x6, 0x9, 0x7b200, 0x6, 0x10001, 0x3, 0xff, 0x0, 0x8, 0x81, 0x5, 0x8, 0x8, 0xc8b, 0x3, 0x8, 0x6, 0xf7, 0x5, 0xa0000000, 0x5, 0x5, 0x3, 0x74f, 0x8, 0x6, 0x1f, 0x2, 0x4, 0xe, 0x39f7, 0x0, 0x2, 0x2, 0xadd, 0x1, 0x8, 0x0, 0xd, 0x1, 0x5eb1, 0xd0, 0x5, 0x523f, 0x0, 0x5, 0x8, 0x5ba7fcc, 0x173d, 0x0, 0x207c, 0x6, 0x5, 0x8, 0xff, 0x5e1, 0xe6, 0x9, 0x0, 0x40, 0x0, 0x1, 0x978, 0x9, 0xffffff80, 0x9, 0x7, 0x7ff, 0xfffffff8, 0x1ff, 0x7aa4, 0x1800, 0x6, 0x8000, 0x8, 0x7, 0x80000, 0x5c, 0x100, 0x1000, 0x5, 0x8000, 0x0, 0x20000000, 0x6, 0x2, 0x8ec, 0x6, 0x8, 0x8, 0x8, 0x61, 0x133, 0x69, 0x89d, 0x5, 0x35d0, 0xe, 0xfffffff8, 0x80, 0x2, 0xfff, 0x8, 0x9, 0x3960000, 0x6, 0x7, 0x7bcff236, 0x4, 0x8001, 0x9, 0x4, 0x5, 0x1, 0x8, 0xd797, 0x5, 0x7, 0x9, 0x1, 0x4, 0x101, 0x295f, 0x2, 0x2, 0x5, 0x8000, 0x80000000, 0x100, 0xf, 0x8, 0x10001, 0x8, 0xffff, 0xfd84, 0x7, 0x7, 0x5, 0x2, 0x3, 0x3, 0x1, 0x731e, 0x1, 0xff, 0x1000, 0x7, 0x9, 0xfffffff7, 0x54d, 0x5a, 0x0, 0xa, 0x8, 0xf, 0x8, 0x40, 0xc27683f, 0x0, 0x10000, 0x7, 0x5, 0x2, 0x80, 0x7fff, 0xfffffffe, 0x8, 0x0, 0x3, 0x62da, 0xd5f, 0x38, 0x10000, 0x6, 0x7, 0xffffffff, 0xffffffff, 0x44, 0x1, 0x0, 0x3, 0x6, 0x5, 0x3ff, 0x4, 0x7fff, 0xd4, 0x4, 0x0, 0x0, 0x7, 0x80000001, 0x31, 0x7, 0x9, 0x8, 0x1, 0x8d, 0x7, 0x1, 0x100, 0x1, 0x800, 0x80000000, 0x9, 0x6, 0xfffffffd, 0x81, 0xf4ae, 0xdc, 0x2, 0x8000, 0xffff, 0x80000001, 0x9, 0x6, 0x61, 0x80000000, 0xffffffbe, 0xaae, 0x8000, 0x1, 0x80000000, 0x80, 0xb300, 0x5, 0x2, 0x9, 0x1b599e53, 0x1, 0xfffffff7, 0x6, 0xe1c, 0xc, 0x1, 0x1, 0x4b, 0x5, 0x0, 0x4, 0x8, 0x0, 0x4, 0x400, 0x5, 0x828, 0x1, 0x8, 0xfffffff9, 0x854, 0x5, 0x1, 0x9fc0, 0x4, 0xb, 0x5, 0x3, 0x7, 0x400, 0xbb3, 0x0, 0xe291, 0xffff4b0b, 0x9, 0x4, 0x80000001, 0x4, 0x8, 0x0, 0x5be4, 0x240, 0x4, 0x10001, 0xffffe450, 0xf8000000, 0x1, 0x200, 0x6, 0x3c1, 0x2, 0x2, 0x85ef, 0x5, 0x6, 0x1000000, 0x9, 0x7, 0xed9, 0x800, 0x1, 0x80000000, 0x1200, 0x0, 0x1, 0x101, 0x985, 0x8, 0x9, 0x736, 0xfffffff9, 0x3, 0x6, 0xc, 0x5, 0xfffffffd, 0x4, 0xb4, 0x8, 0x5c2b, 0x10, 0xffffffff, 0x200, 0x7fff, 0x6065, 0x1, 0x9, 0xcfc, 0x80, 0xd, 0xff, 0x1, 0x2, 0x1, 0x4, 0x80000001, 0x7, 0x1000, 0x9, 0x6, 0x0, 0x8, 0x1c1e5cb6, 0x1, 0x1, 0x0, 0x1, 0xffffffff, 0x4, 0x7f, 0x1, 0x7, 0x0, 0x8, 0x2, 0x8001, 0x9, 0xfffffbff, 0x9, 0x1, 0x2, 0x9150, 0x2, 0x8, 0xfffffffe, 0x54, 0x5, 0x6, 0x5, 0x5, 0x9, 0x10, 0x80000001, 0x0, 0x3, 0x8, 0x10, 0x20, 0x5c71, 0xf, 0x9, 0x80000000, 0x101, 0x7, 0x3, 0x7f, 0x3, 0x2, 0x2, 0x7f, 0x5, 0x10, 0x6, 0x3, 0xf, 0x5, 0x6, 0x10001, 0x0, 0x80000001, 0x4, 0x4, 0x4, 0x4, 0x5fe4, 0x3e, 0x9, 0x38, 0x80000001, 0x1, 0x20000, 0x5, 0x7, 0x8, 0x0, 0x9, 0x8, 0x5, 0x7fff, 0x3ff, 0x5, 0xe, 0xe3b295a, 0xfffffff8, 0x3, 0x101, 0xfffffff9, 0x10, 0xfb17, 0x9, 0x3, 0x3, 0x6b, 0x3, 0x800, 0x1, 0x4, 0xcf, 0x2, 0x0, 0x40, 0x82, 0x8, 0x3, 0xbf, 0x2, 0x5, 0xffff, 0x1000, 0x5, 0x8, 0x102, 0x6, 0x5a, 0x7, 0x80000000, 0x4, 0x2, 0xffff, 0xb405, 0x7ffe, 0x4, 0x2, 0x9, 0x7, 0x3, 0x0, 0x8, 0x8, 0xd0, 0xd, 0x5, 0x8, 0x0, 0xffffffff, 0x1, 0x9, 0x8e, 0x8, 0x6, 0xb47, 0x29d9b475, 0x8, 0x3cbf, 0x9, 0x9, 0x2, 0x7, 0x8, 0x25, 0x120, 0xffffffff, 0x3, 0x8, 0x7, 0x8, 0x8b4ea987, 0x3, 0x4, 0xffff, 0x3, 0x3, 0x1, 0x9, 0xfffffe00, 0x5, 0xa, 0xfffffff7, 0x3, 0x7, 0xfffffff8, 0x1, 0xfff, 0xa413, 0xbb3, 0x9, 0xf, 0x5, 0x9, 0x40, 0xd, 0x9, 0x6, 0x7f, 0x2, 0xb09, 0x9, 0x8, 0xe3, 0x7, 0x40400000, 0x200, 0x7, 0xfffffff8, 0x0, 0x6, 0xfffffffc, 0x5, 0x3, 0xa51f, 0x2, 0x8, 0x2, 0x32c, 0x2, 0xfffffffe, 0x4, 0x40, 0xbfe5, 0x6, 0x10, 0xffffffff, 0x0, 0xaa, 0x5, 0x9, 0x9, 0x6, 0x10000, 0x0, 0x1ff, 0x7, 0x1, 0x1, 0x5, 0x6, 0x4, 0x0, 0x8, 0x1000, 0x1, 0x100, 0x4, 0x6c85, 0x8, 0xb, 0x100, 0x4, 0x7ff, 0x8, 0x2eb, 0xe893, 0x9, 0x7, 0x80d4, 0x0, 0x9861, 0xf000, 0x80000000, 0x7, 0x8000, 0x7, 0x2, 0x80, 0x6, 0x8, 0x8, 0x9, 0x7, 0x9, 0x5, 0x3, 0x2e8, 0x80004, 0x10, 0xffffffb9, 0x0, 0x1, 0x1000, 0x5, 0x40, 0x7, 0x100, 0x9, 0x8a0, 0xfa, 0x9, 0x4, 0x45, 0x1c, 0x0, 0xda, 0x6, 0x3, 0x4, 0x4, 0xef7e, 0x40, 0x9, 0x1, 0xf243, 0x7, 0x9, 0x9, 0x2, 0x0, 0x2000000, 0x620f, 0x6, 0x3, 0x0, 0x8, 0x2, 0x5, 0x3, 0xfffffffa, 0x3, 0x0, 0xf0f8, 0x4, 0x7, 0x5, 0x7, 0x4, 0x4, 0x5, 0x1e, 0x1, 0x401, 0x81, 0xfffffff2, 0x9, 0x4, 0x7ff, 0x5, 0x7, 0x7, 0xfffff52f, 0x2, 0x5, 0x6, 0x7, 0x0, 0x3, 0x2, 0xd7, 0x5e58, 0x9, 0xa, 0x8, 0x8000, 0x9, 0x800, 0xa95, 0x0, 0x8, 0x1, 0x5, 0x1, 0x7, 0x8, 0x3, 0x9, 0x7, 0x10000, 0xd, 0xc, 0x6, 0x825, 0x6, 0x101, 0x8, 0x80, 0x4, 0x10, 0x9, 0x7fffffff, 0x140, 0x7, 0x1, 0x9, 0x101, 0x0, 0x101, 0x4, 0xa33, 0x7, 0x3, 0x10001, 0xf, 0x2, 0xe724, 0x3, 0x200, 0x5, 0x9, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, 0x0, 0x6, 0x1, 0x3, 0x4, 0x0, 0x9, 0x100, 0x3, 0x95f, 0x6, 0x9, 0x3, 0x8001, 0x1, 0x0, 0x3, 0x0, 0x3, 0x97, 0x7, 0x400, 0xffffff78, 0xa, 0x800, 0x5, 0x7, 0x79b, 0x8, 0x10000, 0x6, 0x3, 0xfd340000, 0xa61, 0xfffffffc, 0x1ff, 0x3, 0x3, 0xffff0000, 0x8001, 0x4, 0x0, 0x6, 0x78da, 0x40004, 0x200, 0x650, 0x3c, 0x80000001, 0x6, 0x9, 0xa1, 0x10, 0x8000, 0xfffff800, 0x8, 0x0, 0x2, 0x0, 0x8, 0x0, 0x7, 0x6, 0xf3b, 0x2, 0x4, 0x7, 0xd157, 0x8, 0xe3, 0x0, 0x2, 0xccf1]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc013fd03, &(0x7f0000001000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") ioctl(r0, 0xc013fd04, &(0x7f0000003000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000070") 15.45455966s ago: executing program 1 (id=1042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000500, 0x0, 0x1, r2, 0x5}) 11.020755497s ago: executing program 35 (id=1034): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000100)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0xc519ea7f13a9b11e, 0x0, 0x0, '\x00', {0xd, 0x6, "2318d3", 0xf51, 0x0, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [@fragment={0x3a, 0x0, 0x81, 0x0, 0x0, 0x1, 0x65}]}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000080)=[{{0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x1000}], 0x1, 0x40012040, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) 0s ago: executing program 36 (id=1042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x901, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r2, 0x1}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x27800000500, 0x0, 0x1, r2, 0x5}) kernel console output (not intermixed with test programs): 2-1: vub300 testing BULK IN EndPoint(0) 81 [ 600.425911][ T5951] usb 2-1: vub300 testing BULK OUT EndPoint(1) 02 [ 600.425933][ T5951] usb 2-1: vub300 testing BULK IN EndPoint(2) 83 [ 600.425953][ T5951] usb 2-1: vub300 testing BULK OUT EndPoint(3) 04 [ 600.425974][ T5951] usb 2-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 600.752129][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.752447][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.752773][ T8326] bridge_slave_0: entered allmulticast mode [ 600.794586][ T8326] bridge_slave_0: entered promiscuous mode [ 600.820441][ T5951] vub300 2-1:1.0: probe with driver vub300 failed with error -71 [ 600.872491][ T5951] usb 2-1: USB disconnect, device number 8 [ 600.903091][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.903228][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 600.903407][ T8326] bridge_slave_1: entered allmulticast mode [ 600.906450][ T8326] bridge_slave_1: entered promiscuous mode [ 600.946026][ T8313] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.946161][ T8313] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.946353][ T8313] bridge_slave_0: entered allmulticast mode [ 601.016216][ T8313] bridge_slave_0: entered promiscuous mode [ 601.201294][ T8313] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.201525][ T8313] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.201736][ T8313] bridge_slave_1: entered allmulticast mode [ 601.233102][ T8313] bridge_slave_1: entered promiscuous mode [ 601.847361][ T8503] key id 000004d2 not found [ 602.083162][ T8326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.243423][ T8326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.270258][ T8313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 602.328575][ T8313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.438427][ T1237] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 604.447026][ T1237] usb 2-1: unable to get BOS descriptor or descriptor too short [ 604.447104][ T1237] usb 2-1: New USB device found, idVendor=046d, idProduct=092b, bcdDevice=6b.72 [ 604.465377][ T1237] usb 2-1: config 114 has an invalid interface number: 183 but max is 0 [ 604.465411][ T1237] usb 2-1: config 114 has no interface number 0 [ 604.465448][ T1237] usb 2-1: config 114 interface 183 has no altsetting 0 [ 604.474727][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.474762][ T1237] usb 2-1: Product: syz [ 604.474780][ T1237] usb 2-1: Manufacturer: syz [ 604.474799][ T1237] usb 2-1: SerialNumber: syz [ 604.646542][ T8326] team0: Port device team_slave_0 added [ 604.743157][ T8326] team0: Port device team_slave_1 added [ 604.779565][ T1237] gspca_main: spca561-2.14.0 probing 046d:092b [ 604.781422][ T1237] spca561 2-1:114.183: probe with driver spca561 failed with error -22 [ 604.849358][ T1237] usb 2-1: USB disconnect, device number 9 [ 604.940761][ T8313] team0: Port device team_slave_0 added [ 604.996099][ T8313] team0: Port device team_slave_1 added [ 605.074008][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.074037][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.074068][ T8326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.123441][ T8408] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.123585][ T8408] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.123788][ T8408] bridge_slave_0: entered allmulticast mode [ 605.126722][ T8408] bridge_slave_0: entered promiscuous mode [ 605.319977][ T8326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.319998][ T8326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.320030][ T8326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.321604][ T8408] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.321689][ T8408] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.321819][ T8408] bridge_slave_1: entered allmulticast mode [ 605.323794][ T8408] bridge_slave_1: entered promiscuous mode [ 605.327352][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.327368][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.327401][ T8313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.541049][ T8313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.541069][ T8313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 605.541098][ T8313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.653425][ T8408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.693826][ T8408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.756333][ T8326] hsr_slave_0: entered promiscuous mode [ 607.757571][ T8326] hsr_slave_1: entered promiscuous mode [ 607.771784][ T8326] debugfs: 'hsr0' already exists in 'hsr' [ 607.771819][ T8326] Cannot create hsr debugfs directory [ 608.011388][ T8408] team0: Port device team_slave_0 added [ 608.064683][ T8313] hsr_slave_0: entered promiscuous mode [ 608.065799][ T8313] hsr_slave_1: entered promiscuous mode [ 608.066573][ T8313] debugfs: 'hsr0' already exists in 'hsr' [ 608.066594][ T8313] Cannot create hsr debugfs directory [ 608.140184][ T8408] team0: Port device team_slave_1 added [ 608.502813][ T8535] key id 000004d2 not found [ 609.428044][ T1237] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 609.463505][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 609.463524][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.463552][ T8408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 609.574377][ T8408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 609.574398][ T8408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 609.574431][ T8408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 609.604411][ T1237] usb 2-1: New USB device found, idVendor=10b8, idProduct=1e6e, bcdDevice=9f.db [ 609.660426][ T1237] usb 2-1: config 8 has an invalid interface number: 33 but max is 0 [ 609.660448][ T1237] usb 2-1: config 8 has no interface number 0 [ 609.660471][ T1237] usb 2-1: config 8 interface 33 has no altsetting 0 [ 609.663700][ T1237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.663729][ T1237] usb 2-1: Product: syz [ 609.663740][ T1237] usb 2-1: Manufacturer: syz [ 609.663749][ T1237] usb 2-1: SerialNumber: syz [ 609.997241][ T1237] dvb-usb: found a 'DiBcom TFE7790P reference design' in cold state, will try to load a firmware [ 610.210569][ T1237] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 610.210710][ T1237] dib0700: firmware download failed at 7 with -22 [ 610.238064][ T1237] usb 2-1: USB disconnect, device number 10 [ 610.663516][ T8408] hsr_slave_0: entered promiscuous mode [ 610.664765][ T8408] hsr_slave_1: entered promiscuous mode [ 610.694700][ T8408] debugfs: 'hsr0' already exists in 'hsr' [ 610.694735][ T8408] Cannot create hsr debugfs directory [ 610.869741][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 610.870384][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.832371][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 616.905182][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 616.905203][ T37] audit: type=1326 audit(1789722284.256:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8613 comm="syz.1.517" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1fd214e159 code=0x0 [ 624.405964][ T5598] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 624.461381][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.461459][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.864808][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 632.436605][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 632.961319][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.014909][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.041218][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.076279][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.087547][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 633.234448][ T5829] bridge_slave_1: left allmulticast mode [ 633.234485][ T5829] bridge_slave_1: left promiscuous mode [ 633.234746][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.405867][ T5829] bridge_slave_0: left allmulticast mode [ 633.405904][ T5829] bridge_slave_0: left promiscuous mode [ 633.406376][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.733785][ T5598] Bluetooth: hci2: unexpected event for opcode 0x2003 [ 635.258064][ T5598] Bluetooth: hci0: command tx timeout [ 636.700363][ T5829] bridge_slave_1: left allmulticast mode [ 636.700400][ T5829] bridge_slave_1: left promiscuous mode [ 636.700638][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.886025][ T5829] bridge_slave_0: left allmulticast mode [ 636.886065][ T5829] bridge_slave_0: left promiscuous mode [ 636.886330][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.026893][ T8734] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 637.027209][ T8734] block device autoloading is deprecated and will be removed. [ 637.179914][ T5829] bridge_slave_1: left allmulticast mode [ 637.179952][ T5829] bridge_slave_1: left promiscuous mode [ 637.180200][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.342425][ T5598] Bluetooth: hci0: command tx timeout [ 637.390277][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 637.423677][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 637.878649][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 638.021479][ T5829] bridge_slave_0: left allmulticast mode [ 638.021524][ T5829] bridge_slave_0: left promiscuous mode [ 638.022111][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 638.023200][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 638.028561][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.003650][ T5605] Bluetooth: hci0: command tx timeout [ 640.218036][ T5598] Bluetooth: hci6: command tx timeout [ 640.296222][ T8763] ecryptfs: Unknown parameter 'ecŒ|}«' [ 641.438776][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.559147][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 641.625222][ T5829] bond0 (unregistering): Released all slaves [ 642.304794][ T5598] Bluetooth: hci6: command tx timeout [ 642.757840][ T5598] Bluetooth: hci0: command tx timeout [ 642.955122][ T8785] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 644.164174][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.281381][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.340839][ T5829] bond0 (unregistering): Released all slaves [ 644.377774][ T5598] Bluetooth: hci6: command tx timeout [ 645.220275][ T8797] key id 000004d2 not found [ 645.271937][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 645.390066][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 645.679734][ T5829] bond0 (unregistering): Released all slaves [ 645.788370][ T8802] ubi0: attaching mtd0 [ 645.814959][ T8802] ubi0: scanning is finished [ 645.815279][ T8802] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 646.445644][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 646.467766][ T5598] Bluetooth: hci6: command tx timeout [ 646.991000][ T8802] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 647.837915][ T5829] hsr_slave_0: left promiscuous mode [ 647.877894][ T5829] hsr_slave_1: left promiscuous mode [ 647.879205][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 647.908579][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.099299][ T5829] hsr_slave_0: left promiscuous mode [ 648.139022][ T5829] hsr_slave_1: left promiscuous mode [ 648.140058][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.188656][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.358871][ T5829] hsr_slave_0: left promiscuous mode [ 648.407909][ T5829] hsr_slave_1: left promiscuous mode [ 648.409150][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.469003][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.006087][ T8845] key id 000004d2 not found [ 649.085858][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 649.129774][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 649.159741][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 649.188241][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 649.189951][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 649.749912][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 649.798476][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 650.339682][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 650.391271][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 650.869131][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 650.918427][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 651.134976][ T5247] 8021q: adding VLAN 0 to HW filter on device eth16 [ 651.190176][ T8843] team0: entered allmulticast mode [ 651.190201][ T8843] team_slave_0: entered allmulticast mode [ 651.190221][ T8843] team_slave_1: entered allmulticast mode [ 651.190854][ T8843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 651.372015][ T5598] Bluetooth: hci7: command tx timeout [ 652.413742][ T8870] key id 000004d2 not found [ 652.660704][ T8879] netlink: 'syz.0.574': attribute type 3 has an invalid length. [ 652.660737][ T8879] netlink: 'syz.0.574': attribute type 3 has an invalid length. [ 653.363855][ T8888] key id 000004d2 not found [ 653.427988][ T5598] Bluetooth: hci7: command tx timeout [ 655.434399][ T5598] Bluetooth: hci2: Malformed LE Event: 0x1b [ 655.510691][ T5598] Bluetooth: hci7: command tx timeout [ 656.761718][ T8920] key id 000004d2 not found [ 657.234785][ T8931] key id 000004d2 not found [ 657.577819][ T5598] Bluetooth: hci7: command tx timeout [ 657.707053][ T8749] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.707296][ T8749] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.707499][ T8749] bridge_slave_0: entered allmulticast mode [ 657.721334][ T8749] bridge_slave_0: entered promiscuous mode [ 657.730689][ T8713] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.731082][ T8713] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.731579][ T8713] bridge_slave_0: entered allmulticast mode [ 657.764317][ T8713] bridge_slave_0: entered promiscuous mode [ 657.778348][ T8749] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.778527][ T8749] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.778714][ T8749] bridge_slave_1: entered allmulticast mode [ 657.782350][ T8749] bridge_slave_1: entered promiscuous mode [ 657.784362][ T8713] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.784740][ T8713] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.784913][ T8713] bridge_slave_1: entered allmulticast mode [ 657.791889][ T8713] bridge_slave_1: entered promiscuous mode [ 658.335907][ T8749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.369795][ T8713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 658.868277][ T8749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.895514][ T8944] key id 000004d2 not found [ 659.058356][ T8952] key id 000004d2 not found [ 659.783606][ T8713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.134128][ T8749] team0: Port device team_slave_0 added [ 660.147094][ T8713] team0: Port device team_slave_0 added [ 660.162671][ T8749] team0: Port device team_slave_1 added [ 660.167581][ T8713] team0: Port device team_slave_1 added [ 660.185464][ T8959] ±ÿ: renamed from lo (while UP) [ 660.357909][ T5598] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 660.357970][ T5598] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 660.948612][ T5829] bridge_slave_1: left allmulticast mode [ 660.948741][ T5829] bridge_slave_1: left promiscuous mode [ 660.949023][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.093602][ T5829] bridge_slave_0: left allmulticast mode [ 661.093639][ T5829] bridge_slave_0: left promiscuous mode [ 661.094762][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.799321][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.921045][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 661.939428][ T8971] netlink: 'syz.0.607': attribute type 10 has an invalid length. [ 662.013473][ T5829] bond0 (unregistering): Released all slaves [ 662.338876][ T8966] ±ÿ: renamed from hsr0 (while UP) [ 664.447969][ T8971] macvlan1: entered promiscuous mode [ 664.448003][ T8971] macvlan1: entered allmulticast mode [ 664.529970][ T8971] veth1_vlan: entered allmulticast mode [ 664.566343][ T8971] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 664.572571][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.572617][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.572695][ T8749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.646407][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.646424][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.646446][ T8713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.682987][ T8749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.683045][ T8749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.683107][ T8749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 664.790553][ T8713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.790584][ T8713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.790615][ T8713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.358305][ T8978] key id 000004d2 not found [ 665.507982][ T5829] hsr_slave_0: left promiscuous mode [ 665.553289][ T5829] hsr_slave_1: left promiscuous mode [ 665.554571][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 665.598792][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.460385][ T8993] key id 000004d2 not found [ 666.819644][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 666.888650][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 669.706950][ T8749] hsr_slave_0: entered promiscuous mode [ 669.725797][ T8749] hsr_slave_1: entered promiscuous mode [ 669.733664][ T8749] debugfs: 'hsr0' already exists in 'hsr' [ 669.733689][ T8749] Cannot create hsr debugfs directory [ 670.065663][ T8713] hsr_slave_0: entered promiscuous mode [ 670.186322][ T9023] key id 000004d2 not found [ 670.452805][ T8713] hsr_slave_1: entered promiscuous mode [ 670.455429][ T8713] debugfs: 'hsr0' already exists in 'hsr' [ 670.455449][ T8713] Cannot create hsr debugfs directory [ 670.534711][ T8847] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.534961][ T8847] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.535163][ T8847] bridge_slave_0: entered allmulticast mode [ 670.564785][ T8847] bridge_slave_0: entered promiscuous mode [ 670.627884][ T8847] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.633716][ T8847] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.633900][ T8847] bridge_slave_1: entered allmulticast mode [ 670.661307][ T8847] bridge_slave_1: entered promiscuous mode [ 671.066784][ T8847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.195247][ T8847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.525749][ T8847] team0: Port device team_slave_0 added [ 671.555945][ T8847] team0: Port device team_slave_1 added [ 672.273417][ T9038] key id 000004d2 not found [ 672.330477][ T5829] bridge_slave_1: left allmulticast mode [ 672.330518][ T5829] bridge_slave_1: left promiscuous mode [ 672.330762][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.585918][ T5829] bridge_slave_0: left allmulticast mode [ 672.585959][ T5829] bridge_slave_0: left promiscuous mode [ 672.586331][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.209766][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 674.420163][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 674.525451][ T5829] bond0 (unregistering): Released all slaves [ 674.686869][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.686885][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.686907][ T8847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.250106][ T8847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.250127][ T8847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.250160][ T8847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.560167][ T5829] hsr_slave_0: left promiscuous mode [ 675.600088][ T5829] hsr_slave_1: left promiscuous mode [ 675.601437][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 675.638944][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 676.447004][ T9057] key id 000004d2 not found [ 677.054172][ T9066] key id 000004d2 not found [ 677.519669][ T9069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.630'. [ 677.596028][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 677.658590][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 678.225166][ T8847] hsr_slave_0: entered promiscuous mode [ 678.226128][ T8847] hsr_slave_1: entered promiscuous mode [ 678.240843][ T8847] debugfs: 'hsr0' already exists in 'hsr' [ 678.240864][ T8847] Cannot create hsr debugfs directory [ 678.578928][ T9084] key id 000004d2 not found [ 680.490540][ T9093] key id 000004d2 not found [ 681.323414][ T9111] comedi comedi0: das-1801st: a I/O base address must be specified [ 682.603295][ T5829] bridge_slave_1: left allmulticast mode [ 682.603348][ T5829] bridge_slave_1: left promiscuous mode [ 682.603606][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.720658][ T5829] bridge_slave_0: left allmulticast mode [ 682.720698][ T5829] bridge_slave_0: left promiscuous mode [ 682.720995][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 683.303057][ T9124] key id 000004d2 not found [ 683.938674][ T5829] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 684.070259][ T5829] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 684.163860][ T5829] bond0 (unregistering): Released all slaves [ 685.168512][ T5829] hsr_slave_0: left promiscuous mode [ 685.207981][ T5829] hsr_slave_1: left promiscuous mode [ 685.209244][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.258865][ T5829] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.818587][ T5605] Bluetooth: hci4: Opcode 0x206a failed: -110 [ 685.818644][ T5605] Bluetooth: hci4: command 0x0406 tx timeout [ 685.923640][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.923715][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.290339][ T5829] team0 (unregistering): Port device team_slave_1 removed [ 686.368743][ T5829] team0 (unregistering): Port device team_slave_0 removed [ 686.935129][ T8847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 687.058155][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 687.078314][ T8847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 687.275069][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 687.300336][ T8847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 687.335329][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 687.587480][ T8847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 687.637111][ T8847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 688.354772][ T9216] netlink: 'syz.1.668': attribute type 1 has an invalid length. [ 689.217755][ T8847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 689.260287][ T8847] 8021q: adding VLAN 0 to HW filter on device team0 [ 689.290912][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 689.291144][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 689.319772][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 689.319999][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 689.776898][ T8749] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 689.824914][ T8749] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 689.912055][ T8749] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 689.981709][ T8749] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 690.009891][ T8749] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 690.038920][ T8749] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 690.043379][ T8749] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 690.140505][ T8749] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 690.998754][ T8713] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 691.072403][ T8713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 691.077141][ T8713] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 691.145394][ T8713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 691.194192][ T8713] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 691.257011][ T8713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 691.269329][ T8713] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 691.307837][ T9275] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 691.308482][ T9275] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 691.312908][ T8713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 691.344511][ T9277] netlink: 300 bytes leftover after parsing attributes in process `syz.1.678'. [ 691.770511][ T8749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 691.953357][ T8749] 8021q: adding VLAN 0 to HW filter on device team0 [ 692.095821][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.102403][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 692.118353][ T8847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 692.300923][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.302142][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 692.701777][ T8713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 693.306669][ T9315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 693.307327][ T9315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 693.611836][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 693.680373][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 693.684138][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 693.686351][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 693.724178][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 695.802954][ T8847] veth0_vlan: entered promiscuous mode [ 696.059217][ T5598] Bluetooth: hci1: command tx timeout [ 696.475102][ T8847] veth1_vlan: entered promiscuous mode [ 697.166171][ T9352] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 697.589097][ T8847] veth0_macvtap: entered promiscuous mode [ 697.652463][ T8847] veth1_macvtap: entered promiscuous mode [ 697.702548][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 698.981563][ T5598] Bluetooth: hci1: command tx timeout [ 699.836645][ T5605] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 699.890069][ T5605] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 699.926063][ T5605] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 699.927289][ T5605] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 700.005428][ T5605] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 700.613941][ T8847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.983304][ T9377] ubi0: attaching mtd0 [ 700.990119][ T9377] ubi0: scanning is finished [ 700.990161][ T9377] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 701.018599][ T5598] Bluetooth: hci1: command tx timeout [ 701.322864][ T9377] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 701.698869][ T9391] 9pnet_virtio: no channels available for device syz [ 702.223281][ T5598] Bluetooth: hci0: command tx timeout [ 702.590972][ T9400] capability: warning: `syz.1.705' uses 32-bit capabilities (legacy support in use) [ 703.732146][ T5598] Bluetooth: hci1: command tx timeout [ 704.337496][ T5598] Bluetooth: hci0: command tx timeout [ 704.640587][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.640613][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.085375][ T9316] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.085507][ T9316] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.085721][ T9316] bridge_slave_0: entered allmulticast mode [ 706.124774][ T9316] bridge_slave_0: entered promiscuous mode [ 706.246863][ T9316] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.246997][ T9316] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.247229][ T9316] bridge_slave_1: entered allmulticast mode [ 706.275489][ T9316] bridge_slave_1: entered promiscuous mode [ 706.378187][ T5598] Bluetooth: hci0: command tx timeout [ 706.714167][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 706.714194][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 706.857341][ T9316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.024463][ T9316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.300986][ T13] bridge_slave_1: left allmulticast mode [ 707.301025][ T13] bridge_slave_1: left promiscuous mode [ 707.301303][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.003445][ T9433] key id 000004d2 not found [ 708.274795][ T13] bridge_slave_0: left allmulticast mode [ 708.274825][ T13] bridge_slave_0: left promiscuous mode [ 708.275061][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.459342][ T5598] Bluetooth: hci0: command tx timeout [ 711.747576][ T5605] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 711.772039][ T5605] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 711.776580][ T5605] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 711.795980][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.796606][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.861420][ T5605] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 711.865206][ T5605] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 712.590130][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 712.697928][ T8726] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 713.222502][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.239982][ T9461] key id 000004d2 not found [ 713.304045][ T8726] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 713.321136][ T8726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.321167][ T8726] usb 2-1: Product: syz [ 713.321182][ T8726] usb 2-1: Manufacturer: syz [ 713.321198][ T8726] usb 2-1: SerialNumber: syz [ 713.352338][ T13] bond0 (unregistering): Released all slaves [ 713.386006][ T8726] usb 2-1: config 0 descriptor?? [ 713.404137][ T8726] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 713.625845][ T8726] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 713.627170][ T8726] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 713.627308][ T8726] usb 2-1: media controller created [ 713.676008][ T9316] team0: Port device team_slave_0 added [ 713.711077][ T9316] team0: Port device team_slave_1 added [ 713.953929][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.953948][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 713.953994][ T9316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.954234][ T8726] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 714.057811][ T5605] Bluetooth: hci3: command tx timeout [ 714.302719][ T9316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.302738][ T9316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.302765][ T9316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.110929][ T13] hsr_slave_0: left promiscuous mode [ 715.208775][ T13] hsr_slave_1: left promiscuous mode [ 715.211665][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.251940][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.275141][ T8726] DVB: Unable to find symbol mt352_attach() [ 715.494882][ T8726] DVB: Unable to find symbol nxt6000_attach() [ 715.494987][ T8726] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 715.608781][ T8726] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 715.958924][ T8726] dvb-usb: schedule remote query interval to 1000 msecs. [ 715.958951][ T8726] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 715.959424][ T8726] dvb-usb: bulk message failed: -22 (7/0) [ 715.959446][ T8726] dvb-usb: bulk message failed: -22 (7/0) [ 716.049503][ T8726] usb 2-1: USB disconnect, device number 11 [ 716.212949][ T5605] Bluetooth: hci3: command tx timeout [ 717.298907][ T8726] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 717.334162][ T13] team0 (unregistering): Port device team_slave_1 removed [ 717.398491][ T13] team0 (unregistering): Port device team_slave_0 removed [ 718.309267][ T5605] Bluetooth: hci3: command tx timeout [ 718.491671][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 718.492306][ T9516] tipc: Started in network mode [ 718.492336][ T9516] tipc: Node identity ac14140f, cluster identity 4711 [ 718.535054][ T9516] tipc: Enabled bearer , priority 10 [ 718.770777][ T9316] hsr_slave_0: entered promiscuous mode [ 718.775250][ T9316] hsr_slave_1: entered promiscuous mode [ 718.776453][ T9316] debugfs: 'hsr0' already exists in 'hsr' [ 718.776479][ T9316] Cannot create hsr debugfs directory [ 718.828531][ T9535] ubi0: attaching mtd0 [ 718.831471][ T9535] ubi0: scanning is finished [ 718.831520][ T9535] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 719.832435][ T8726] tipc: Node number set to 2886997007 [ 719.874146][ T9535] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 720.139821][ T9365] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.140074][ T9365] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.140270][ T9365] bridge_slave_0: entered allmulticast mode [ 720.144355][ T9365] bridge_slave_0: entered promiscuous mode [ 720.209706][ T9365] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.209872][ T9365] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.210088][ T9365] bridge_slave_1: entered allmulticast mode [ 720.241126][ T9365] bridge_slave_1: entered promiscuous mode [ 720.383085][ T5605] Bluetooth: hci3: command tx timeout [ 720.420228][ T9365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.467539][ T9365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.557851][ T6316] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 720.707744][ T6316] usb 2-1: Using ep0 maxpacket: 16 [ 720.708619][ T6316] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 720.711052][ T6316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.711087][ T6316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.711113][ T6316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 720.711160][ T6316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 720.757476][ T9564] ubi0: attaching mtd0 [ 720.782321][ T9564] ubi0: scanning is finished [ 720.782380][ T9564] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 720.834138][ T6316] usb 2-1: config 0 descriptor?? [ 721.170233][ T9564] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 721.264724][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 721.268278][ T9365] team0: Port device team_slave_0 added [ 721.331058][ T9365] team0: Port device team_slave_1 added [ 721.378037][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378080][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378110][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378139][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378168][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378198][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378240][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378266][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378293][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.378320][ T6316] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 721.579125][ T6316] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input12 [ 721.953644][ T6316] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 721.983129][ T6316] usb 2-1: USB disconnect, device number 12 [ 722.121111][ T9567] fido_id[9567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 723.597541][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.597562][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.598549][ T9365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.653220][ T9365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.653240][ T9365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.653270][ T9365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.465242][ T9583] ubi0: attaching mtd0 [ 724.468067][ T9583] ubi0: scanning is finished [ 724.468132][ T9583] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 724.964224][ T9583] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 726.014380][ T9365] hsr_slave_0: entered promiscuous mode [ 726.026929][ T9365] hsr_slave_1: entered promiscuous mode [ 726.039697][ T9365] debugfs: 'hsr0' already exists in 'hsr' [ 726.039718][ T9365] Cannot create hsr debugfs directory [ 727.507032][ T9447] bridge0: port 1(bridge_slave_0) entered blocking state [ 727.507171][ T9447] bridge0: port 1(bridge_slave_0) entered disabled state [ 727.507396][ T9447] bridge_slave_0: entered allmulticast mode [ 727.538261][ T9447] bridge_slave_0: entered promiscuous mode [ 727.885500][ T9447] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.885832][ T9447] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.886148][ T9447] bridge_slave_1: entered allmulticast mode [ 727.910594][ T9447] bridge_slave_1: entered promiscuous mode [ 728.139029][ T9447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.225116][ T9447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 729.495715][ T9622] key id 000004d2 not found [ 729.748005][ T9630] key id 000004d2 not found [ 730.095698][ T9447] team0: Port device team_slave_0 added [ 730.163302][ T9447] team0: Port device team_slave_1 added [ 730.537929][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.537947][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.537982][ T9447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.813336][ T9447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.813357][ T9447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.813392][ T9447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 731.208255][ T10] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 731.387003][ T10] usb 2-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 731.392254][ T10] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 731.392294][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 731.392332][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.608179][ T10] usb 2-1: config 0 descriptor?? [ 731.855604][ T9316] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 733.158897][ T9659] key id 000004d2 not found [ 734.090239][ T10] usb 2-1: string descriptor 0 read error: -71 [ 734.090828][ T10] uclogic 0003:5543:0081.0002: failed retrieving string descriptor #200: -71 [ 734.090895][ T10] uclogic 0003:5543:0081.0002: failed retrieving pen parameters: -71 [ 734.090909][ T10] uclogic 0003:5543:0081.0002: failed probing pen v2 parameters: -71 [ 734.090967][ T10] uclogic 0003:5543:0081.0002: failed probing parameters: -71 [ 734.091044][ T10] uclogic 0003:5543:0081.0002: probe with driver uclogic failed with error -71 [ 734.170970][ T10] usb 2-1: USB disconnect, device number 13 [ 734.237674][ T9316] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 734.294600][ T9447] hsr_slave_0: entered promiscuous mode [ 734.297571][ T9447] hsr_slave_1: entered promiscuous mode [ 734.313826][ T9447] debugfs: 'hsr0' already exists in 'hsr' [ 734.313851][ T9447] Cannot create hsr debugfs directory [ 734.350691][ T9316] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 734.897412][ T9662] key id 000004d2 not found [ 735.025834][ T9316] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.242352][ T9316] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 736.344126][ T9316] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.377236][ T9316] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 736.551264][ T9316] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.117917][ T8726] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 737.300443][ T8726] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 737.302606][ T8726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.302643][ T8726] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.302686][ T8726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.355613][ T8726] usb 2-1: config 0 descriptor?? [ 737.941944][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.941984][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.942012][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.942083][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.942111][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.991335][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.991372][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.991400][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.991428][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 737.991455][ T8726] sony 0003:054C:024B.0003: unknown main item tag 0x0 [ 738.039484][ T8726] sony 0003:054C:024B.0003: unexpected long global item [ 738.040158][ T8726] sony 0003:054C:024B.0003: parse failed [ 738.040264][ T8726] sony 0003:054C:024B.0003: probe with driver sony failed with error -22 [ 738.120258][ T8726] usb 2-1: USB disconnect, device number 14 [ 739.377019][ T9735] key id 000004d2 not found [ 739.873553][ T9740] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 740.249782][ T9316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 740.421136][ T9316] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.504928][ T993] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.505167][ T993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.589195][ T993] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.589289][ T993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 741.005015][ T13] bridge_slave_1: left allmulticast mode [ 741.005055][ T13] bridge_slave_1: left promiscuous mode [ 741.005350][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.196168][ T13] bridge_slave_0: left allmulticast mode [ 741.196210][ T13] bridge_slave_0: left promiscuous mode [ 741.236071][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.406328][ T9764] overlayfs: missing 'lowerdir' [ 741.532674][ T13] bridge_slave_1: left allmulticast mode [ 741.532713][ T13] bridge_slave_1: left promiscuous mode [ 741.533002][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.739881][ T13] bridge_slave_0: left allmulticast mode [ 741.739920][ T13] bridge_slave_0: left promiscuous mode [ 741.740182][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.005742][ T9772] key id 000004d2 not found [ 743.827861][ T1594] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 743.868366][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.948411][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.970454][ T13] bond0 (unregistering): Released all slaves [ 744.020294][ T1594] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 744.021605][ T1594] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 744.021633][ T1594] usb 2-1: config 0 has no interface number 0 [ 744.021681][ T1594] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 744.021714][ T1594] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 744.021762][ T1594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.026049][ T1594] usb 2-1: config 0 descriptor?? [ 744.487342][ T1594] prodikeys 0003:041E:2801.0004: collection stack underflow [ 744.487379][ T1594] prodikeys 0003:041E:2801.0004: item 0 1 0 12 parsing failed [ 744.504605][ T1594] prodikeys 0003:041E:2801.0004: hid parse failed [ 744.504725][ T1594] prodikeys 0003:041E:2801.0004: probe with driver prodikeys failed with error -22 [ 744.689571][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.712136][ T9674] usb 2-1: USB disconnect, device number 15 [ 744.788642][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.830303][ T13] bond0 (unregistering): Released all slaves [ 745.268589][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 745.272081][ T9774] tipc: Started in network mode [ 745.272119][ T9774] tipc: Node identity fe80000000000000000000000000002d, cluster identity 4711 [ 745.384918][ T9774] tipc: Enabling of bearer rejected, failed to enable media [ 746.927806][ T36] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 747.089464][ T36] usb 2-1: unable to get BOS descriptor or descriptor too short [ 747.089527][ T36] usb 2-1: New USB device found, idVendor=10f5, idProduct=0200, bcdDevice= 0.40 [ 747.090907][ T36] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 747.128356][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.128839][ T36] usb 2-1: Product: syz [ 747.128859][ T36] usb 2-1: Manufacturer: syz [ 747.128876][ T36] usb 2-1: SerialNumber: syz [ 747.361631][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.361792][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.651896][ T36] usb 2-1: unit 4 not found! [ 747.889716][ T36] usb 2-1: USB disconnect, device number 16 [ 748.284814][ T13] hsr_slave_0: left promiscuous mode [ 748.315144][ T13] hsr_slave_1: left promiscuous mode [ 748.316972][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 748.316999][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.361983][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 748.362013][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.529867][ T9778] udevd[9778]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 748.599847][ T13] hsr_slave_0: left promiscuous mode [ 748.648600][ T13] hsr_slave_1: left promiscuous mode [ 748.649883][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 748.702009][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 749.212351][ T13] veth1_macvtap: left promiscuous mode [ 749.212470][ T13] veth0_macvtap: left promiscuous mode [ 749.212761][ T13] veth1_vlan: left promiscuous mode [ 749.212968][ T13] veth0_vlan: left promiscuous mode [ 749.761206][ T9846] netlink: 'syz.0.803': attribute type 3 has an invalid length. [ 749.873873][ T5605] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 750.858832][ T13] team0 (unregistering): Port device team_slave_1 removed [ 750.898933][ T13] team0 (unregistering): Port device team_slave_0 removed [ 750.957816][ T8726] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 751.107891][ T8726] usb 2-1: Using ep0 maxpacket: 16 [ 751.108760][ T8726] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 751.110345][ T8726] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.110373][ T8726] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 751.110413][ T8726] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 751.173356][ T8726] usb 2-1: config 0 descriptor?? [ 751.498615][ T13] team0 (unregistering): Port device team_slave_1 removed [ 751.548800][ T13] team0 (unregistering): Port device team_slave_0 removed [ 751.800269][ T5951] usb 2-1: USB disconnect, device number 17 [ 753.780045][ T9365] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 753.957194][ T9365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 753.974997][ T9365] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 754.109642][ T9365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 754.132402][ T9365] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 754.206349][ T9365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 754.266293][ T9365] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 754.319794][ T9365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 754.468678][ T5605] Bluetooth: hci2: unexpected event for opcode 0x080c [ 754.580366][ T5598] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 754.641843][ T5598] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 754.644572][ T5598] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 754.647117][ T5598] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 754.712148][ T5598] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 755.202444][ T9447] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 755.263647][ T9914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 755.265714][ T9447] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 755.278365][ T9914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 755.768051][ T9447] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 755.825289][ T9447] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 755.838607][ T9447] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 755.887510][ T9447] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 755.898348][ T9447] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 756.036389][ T9447] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 756.066038][ T9365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.126985][ T9925] syz.1.824 (9925) used obsolete PPPIOCDETACH ioctl [ 756.323218][ T9935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 756.352494][ T9935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 756.446364][ T9365] 8021q: adding VLAN 0 to HW filter on device team0 [ 756.555645][ T9510] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.555862][ T9510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.630820][ T9510] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.643832][ T9510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 756.937876][ T5605] Bluetooth: hci5: command tx timeout [ 758.427744][ T1594] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 758.589595][ T1594] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 758.593190][ T1594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.593223][ T1594] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.593247][ T1594] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 758.593289][ T1594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.663230][ T1594] usb 2-1: config 0 descriptor?? [ 759.019042][ T5605] Bluetooth: hci5: command tx timeout [ 759.384505][ T5598] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 759.387549][ T5598] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 759.445643][ T5598] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 759.486345][ T5598] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 759.492173][ T5598] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 759.915101][ T1594] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 759.979774][ T1594] usb 2-1: USB disconnect, device number 18 [ 760.092297][ T9964] fido_id[9964]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 760.493968][ T9978] netlink: 68 bytes leftover after parsing attributes in process `syz.1.838'. [ 761.003938][ T9447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.094590][ T9447] 8021q: adding VLAN 0 to HW filter on device team0 [ 761.104909][ T5605] Bluetooth: hci5: command tx timeout [ 761.219999][ T1317] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.220234][ T1317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.453652][ T1317] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.455287][ T1317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.737900][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.738019][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.738485][ T9902] bridge_slave_0: entered allmulticast mode [ 761.741234][ T9902] bridge_slave_0: entered promiscuous mode [ 761.794722][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.794863][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 761.795046][ T9902] bridge_slave_1: entered allmulticast mode [ 761.821916][ T9902] bridge_slave_1: entered promiscuous mode [ 761.915633][ T5605] Bluetooth: hci1: command tx timeout [ 762.462254][T10009] key id 000004d2 not found [ 762.515805][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.588924][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.147528][ T9902] team0: Port device team_slave_0 added [ 763.187745][ T5605] Bluetooth: hci5: command tx timeout [ 763.269892][ T9902] team0: Port device team_slave_1 added [ 763.397378][ T13] bridge_slave_1: left allmulticast mode [ 763.397408][ T13] bridge_slave_1: left promiscuous mode [ 763.418605][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.476739][T10024] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 763.523472][ T13] bridge_slave_0: left allmulticast mode [ 763.523515][ T13] bridge_slave_0: left promiscuous mode [ 763.523788][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 764.060907][ T5605] Bluetooth: hci1: command tx timeout [ 765.317294][ T5605] Bluetooth: hci2: ACL packet too small [ 766.138385][ T5605] Bluetooth: hci1: command tx timeout [ 766.577318][T10038] key id 000004d2 not found [ 766.710110][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.788592][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.810304][ T13] bond0 (unregistering): Released all slaves [ 767.177190][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.177212][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.177244][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.251941][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.251963][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.251995][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.519103][ T13] hsr_slave_0: left promiscuous mode [ 768.566124][ T13] hsr_slave_1: left promiscuous mode [ 768.567109][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 768.618052][ T5605] Bluetooth: hci1: command tx timeout [ 768.624874][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.256917][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.327427][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.342240][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.345655][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.346499][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.872472][T10086] kvm [10085]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010001) = 0x7 [ 772.964013][ T13] team0 (unregistering): Port device team_slave_1 removed [ 773.054788][ T13] team0 (unregistering): Port device team_slave_0 removed [ 774.865170][ T5605] Bluetooth: hci0: command tx timeout [ 775.388873][ T9902] hsr_slave_0: entered promiscuous mode [ 775.390358][ T9902] hsr_slave_1: entered promiscuous mode [ 775.400670][ T9902] debugfs: 'hsr0' already exists in 'hsr' [ 775.400748][ T9902] Cannot create hsr debugfs directory [ 775.996950][T10112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.013055][T10112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.938790][ T5605] Bluetooth: hci0: command tx timeout [ 777.570759][ T6316] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 777.721969][ T6316] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 777.727556][ T6316] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 777.747314][ T6316] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 777.747370][ T6316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.259904][ T6316] gud 2-1:1.0: No supported pixel formats found [ 778.259944][ T6316] gud 2-1:1.0: probe with driver gud failed with error -22 [ 778.336348][ T9957] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.336523][ T9957] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.336685][ T9957] bridge_slave_0: entered allmulticast mode [ 778.354146][ T9957] bridge_slave_0: entered promiscuous mode [ 778.433035][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 778.458270][ T36] usb 2-1: USB disconnect, device number 19 [ 778.881848][T10145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 778.882702][T10145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 778.925056][ T9957] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.925196][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.925356][ T9957] bridge_slave_1: entered allmulticast mode [ 778.927239][ T9957] bridge_slave_1: entered promiscuous mode [ 779.017909][ T5605] Bluetooth: hci0: command tx timeout [ 779.276024][ T9957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.296921][ T9957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.482738][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.486139][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.521952][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.523122][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.621870][ T9957] team0: Port device team_slave_0 added [ 779.697818][ T8726] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 779.730097][T10152] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.730867][T10152] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.860220][ T9957] team0: Port device team_slave_1 added [ 779.873951][ T8726] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 779.875197][ T8726] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 779.875252][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 779.875284][ T8726] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.875304][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 779.875324][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 779.876520][ T8726] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 779.876591][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 779.876612][ T8726] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.876632][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 779.876652][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 779.975227][ T8726] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 779.975396][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 779.975489][ T8726] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 779.975570][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 779.975648][ T8726] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 780.054814][ T8726] usb 2-1: string descriptor 0 read error: -22 [ 780.054933][ T8726] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.210122][ T8726] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 780.345911][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.345930][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.345958][ T9957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.413469][ T8726] usb 2-1: USB disconnect, device number 20 [ 780.720272][ T9957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.720288][ T9957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.720309][ T9957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.098302][ T5605] Bluetooth: hci0: command tx timeout [ 781.414644][ T9957] hsr_slave_0: entered promiscuous mode [ 781.435726][ T9957] hsr_slave_1: entered promiscuous mode [ 781.436778][ T9957] debugfs: 'hsr0' already exists in 'hsr' [ 781.436806][ T9957] Cannot create hsr debugfs directory [ 784.287429][T10187] program syz.0.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 785.543308][T10077] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.543415][T10077] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.543557][T10077] bridge_slave_0: entered allmulticast mode [ 785.545647][T10077] bridge_slave_0: entered promiscuous mode [ 785.726184][T10077] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.726301][T10077] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.726650][T10077] bridge_slave_1: entered allmulticast mode [ 785.741625][T10077] bridge_slave_1: entered promiscuous mode [ 786.737784][T10209] use of bytesused == 0 is deprecated and will be removed in the future, [ 786.737812][T10209] use the actual size instead. [ 786.949495][T10077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.019532][T10077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.019891][ T9902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 787.073140][ T9902] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 787.162466][ T9902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 787.323014][ T9902] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 787.426478][ T9902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 787.548161][ T9902] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 788.445263][T10077] team0: Port device team_slave_0 added [ 788.493929][ T9902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 788.599720][ T9902] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 788.651508][T10077] team0: Port device team_slave_1 added [ 789.234884][T10225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 789.280524][T10225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 790.669273][T10077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.669294][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.669334][T10077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.758008][T10077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.758029][T10077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.758064][T10077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.880778][T10077] hsr_slave_0: entered promiscuous mode [ 792.887021][T10077] hsr_slave_1: entered promiscuous mode [ 792.900150][T10077] debugfs: 'hsr0' already exists in 'hsr' [ 792.900181][T10077] Cannot create hsr debugfs directory [ 793.636561][ T5247] 8021q: adding VLAN 0 to HW filter on device eth16 [ 795.763037][ T57] bridge_slave_1: left allmulticast mode [ 795.763078][ T57] bridge_slave_1: left promiscuous mode [ 795.763357][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.957255][ T57] bridge_slave_0: left allmulticast mode [ 795.957295][ T57] bridge_slave_0: left promiscuous mode [ 795.975247][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.442457][ T57] bridge_slave_1: left allmulticast mode [ 796.442500][ T57] bridge_slave_1: left promiscuous mode [ 796.442760][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.633608][ T57] bridge_slave_0: left allmulticast mode [ 796.633645][ T57] bridge_slave_0: left promiscuous mode [ 796.633900][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.882559][T10300] input: syz0 as /devices/virtual/input/input13 [ 800.060814][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 800.150513][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.430452][ T57] bond0 (unregistering): Released all slaves [ 802.811342][T10338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.811786][T10338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.804335][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 803.884768][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 803.927364][ T57] bond0 (unregistering): Released all slaves [ 804.188629][T10351] netlink: 56 bytes leftover after parsing attributes in process `syz.0.927'. [ 804.817924][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 804.961677][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 805.632152][ T57] hsr_slave_0: left promiscuous mode [ 805.670424][ T57] hsr_slave_1: left promiscuous mode [ 805.675750][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 805.720679][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.939087][ T57] hsr_slave_0: left promiscuous mode [ 805.980958][ T57] hsr_slave_1: left promiscuous mode [ 805.984303][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.031129][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.519814][ T57] team0 (unregistering): Port device team_slave_1 removed [ 807.608477][ T57] team0 (unregistering): Port device team_slave_0 removed [ 807.664327][T10386] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 807.839562][T10388] kvm [10387]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010006) = 0xb [ 808.278585][ T57] team0 (unregistering): Port device team_slave_1 removed [ 808.338557][ T57] team0 (unregistering): Port device team_slave_0 removed [ 808.599400][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.655852][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 808.772108][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 808.772271][ T5827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 808.801394][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.801449][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.830287][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 808.830456][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 810.179444][ T145] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 810.676879][ T145] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 811.119196][T10441] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.121363][T10441] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.249404][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 811.290116][ T9902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.630109][ T10] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 811.789177][ T10] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 811.790660][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 811.790735][ T10] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 811.790764][ T10] usb 2-1: config 1 interface 0 altsetting 1 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 811.793923][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.793954][ T10] usb 2-1: Product: syz [ 811.793972][ T10] usb 2-1: Manufacturer: syz [ 811.793990][ T10] usb 2-1: SerialNumber: syz [ 812.482683][ C0] usb 2-1: received EP1 urb->status = -2 [ 812.483197][ T10] usb 2-1: unable to init card! (ret=-110) [ 812.526788][ T10] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -110 [ 812.591306][ T1594] usb 2-1: USB disconnect, device number 21 [ 813.255615][ T9902] veth0_vlan: entered promiscuous mode [ 813.313180][ T9902] veth1_vlan: entered promiscuous mode [ 813.553267][ T9902] veth0_macvtap: entered promiscuous mode [ 813.568424][ T9902] veth1_macvtap: entered promiscuous mode [ 813.710809][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 813.771924][ T9902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 813.797685][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 813.948477][ T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 813.950036][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 813.950109][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.014663][ T10] usb 2-1: config 0 descriptor?? [ 814.756699][ T10] ath6kl: mismatched byte count 0 vs. expected 12 [ 814.851731][ T68] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.852216][ T68] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.923067][ T1508] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.923306][ T1508] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 815.002749][ T10] ath6kl: Failed to init ath6kl core: -22 [ 815.004084][ T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 815.161771][ T1594] usb 2-1: USB disconnect, device number 22 [ 816.401569][ T5598] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 816.440674][ T5598] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 816.443530][ T5598] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 816.445781][ T5598] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 816.475449][ T5598] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 817.204460][ T9957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 817.294543][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 817.311844][ T9957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 817.560982][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 817.993233][ T9957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 818.050208][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.073644][ T9957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.156333][ T9957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.635468][T10555] Invalid logical block size (2709) [ 818.714187][ T5598] Bluetooth: hci3: command tx timeout [ 819.366554][ T68] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.862919][ T68] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.950648][T10077] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 819.985518][T10077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 820.170964][T10077] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 820.226285][T10077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 820.385172][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 820.424803][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 820.437487][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 820.491424][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 820.542337][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 820.777697][ T5598] Bluetooth: hci3: command tx timeout [ 820.925838][ T68] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.982989][T10077] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 821.053823][T10077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 821.334211][T10583] netlink: 16 bytes leftover after parsing attributes in process `syz.0.975'. [ 821.334243][T10583] netlink: 3 bytes leftover after parsing attributes in process `syz.0.975'. [ 821.350300][T10077] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 821.455927][T10077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 821.830362][ T68] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 822.697960][ T5598] Bluetooth: hci1: command tx timeout [ 822.783418][T10077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 822.860720][ T5598] Bluetooth: hci3: command tx timeout [ 823.183522][T10632] loop6: detected capacity change from 0 to 524288000 [ 823.787925][T10517] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.788057][T10517] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.788303][T10517] bridge_slave_0: entered allmulticast mode [ 823.791185][T10517] bridge_slave_0: entered promiscuous mode [ 823.943795][T10639] FAULT_INJECTION: forcing a failure. [ 823.943795][T10639] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 823.943839][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.0.989 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 823.943882][T10639] Tainted: [L]=SOFTLOCKUP [ 823.943890][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.943905][T10639] Call Trace: [ 823.943915][T10639] [ 823.943925][T10639] dump_stack_lvl+0xe8/0x150 [ 823.943967][T10639] should_fail_ex+0x46b/0x600 [ 823.944004][T10639] _copy_from_user+0x2d/0xb0 [ 823.944038][T10639] __x64_sys_setrlimit+0xcc/0x150 [ 823.944064][T10639] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 823.944102][T10639] do_syscall_64+0x166/0x520 [ 823.944137][T10639] ? trace_irq_disable+0x3b/0x140 [ 823.944168][T10639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.944192][T10639] ? clear_bhb_loop+0x70/0xc0 [ 823.944222][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.944246][T10639] RIP: 0033:0x7fe9aa50e159 [ 823.944268][T10639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.944288][T10639] RSP: 002b:00007fe9a8766028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 823.944312][T10639] RAX: ffffffffffffffda RBX: 00007fe9aa795fa0 RCX: 00007fe9aa50e159 [ 823.944330][T10639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0040000000000008 [ 823.944345][T10639] RBP: 00007fe9aa5a506b R08: 0000000000000000 R09: 0000000000000000 [ 823.944361][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.944376][T10639] R13: 00007fe9aa796038 R14: 00007fe9aa795fa0 R15: 00007ffdcf610ec8 [ 823.944412][T10639] [ 824.251397][T10517] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.251540][T10517] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.251739][T10517] bridge_slave_1: entered allmulticast mode [ 824.254612][T10517] bridge_slave_1: entered promiscuous mode [ 824.311356][T10077] 8021q: adding VLAN 0 to HW filter on device team0 [ 824.668801][T10517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.753170][ T3323] bridge0: port 1(bridge_slave_0) entered blocking state [ 824.753420][ T3323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 824.778264][ T5598] Bluetooth: hci1: command tx timeout [ 824.786362][T10517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.938552][ T5598] Bluetooth: hci3: command tx timeout [ 825.039305][ T68] bridge_slave_1: left allmulticast mode [ 825.039344][ T68] bridge_slave_1: left promiscuous mode [ 825.039611][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.035584][ T1237] hid_parser_main: 1161 callbacks suppressed [ 826.035613][ T1237] hid-generic 0005:0B57:05DF.0006: unknown main item tag 0x0 [ 826.295083][ T1237] hid-generic 0005:0B57:05DF.0006: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 826.447730][ T6316] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 826.607249][ T68] bridge_slave_0: left allmulticast mode [ 826.607292][ T68] bridge_slave_0: left promiscuous mode [ 826.622367][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.631232][ T6316] usb 2-1: Using ep0 maxpacket: 32 [ 826.643948][ T6316] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 826.646691][ T6316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.714184][ T6316] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 826.857777][ T5598] Bluetooth: hci1: command tx timeout [ 828.056992][ T6316] gspca_nw80x: reg_r err -71 [ 828.057092][ T6316] nw80x 2-1:3.0: probe with driver nw80x failed with error -71 [ 828.476190][ T6316] usb 2-1: USB disconnect, device number 23 [ 829.497854][ T5598] Bluetooth: hci1: command tx timeout [ 833.355936][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 833.570971][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.688330][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 833.694119][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 833.695448][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 833.720624][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 833.928496][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 834.088649][ T68] bond0 (unregistering): Released all slaves [ 835.946328][ T5605] Bluetooth: hci5: command tx timeout [ 837.977985][ T5605] Bluetooth: hci5: command tx timeout [ 838.005648][T10517] team0: Port device team_slave_0 added [ 839.381264][T10517] team0: Port device team_slave_1 added [ 839.602380][T10517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 839.602403][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.602435][T10517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.686765][T10517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.686786][T10517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.686818][T10517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.058894][ T5605] Bluetooth: hci5: command tx timeout [ 840.503619][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.518938][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 840.711439][T10517] hsr_slave_0: entered promiscuous mode [ 840.716951][T10517] hsr_slave_1: entered promiscuous mode [ 840.718340][T10517] debugfs: 'hsr0' already exists in 'hsr' [ 840.718413][T10517] Cannot create hsr debugfs directory [ 840.743097][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 840.758130][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 841.484894][T10581] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.485082][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.485277][T10581] bridge_slave_0: entered allmulticast mode [ 841.522740][T10581] bridge_slave_0: entered promiscuous mode [ 841.779846][T10581] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.779982][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.780200][T10581] bridge_slave_1: entered allmulticast mode [ 841.815459][T10581] bridge_slave_1: entered promiscuous mode [ 841.899518][T10737] loop8: detected capacity change from 0 to 8 [ 841.963356][T10737] Dev loop8: unable to read RDB block 8 [ 841.963407][T10737] loop8: unable to read partition table [ 841.963687][T10737] loop8: partition table beyond EOD, truncated [ 841.965262][T10737] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 842.020785][ T5247] 8021q: adding VLAN 0 to HW filter on device eth13 [ 842.141351][ T5605] Bluetooth: hci5: command tx timeout [ 842.501405][T10581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 842.671240][T10581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.973924][T10581] team0: Port device team_slave_0 added [ 844.031400][T10581] team0: Port device team_slave_1 added [ 844.079426][T10746] loop5: detected capacity change from 0 to 7 [ 845.376452][T10746] Dev loop5: unable to read RDB block 7 [ 845.376498][T10746] loop5: unable to read partition table [ 845.376710][T10746] loop5: partition table beyond EOD, truncated [ 845.376747][T10746] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 845.711088][T10581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.711110][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.711368][T10581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.803633][T10581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.803654][T10581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 845.803685][T10581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 846.326008][T10581] hsr_slave_0: entered promiscuous mode [ 846.331219][T10581] hsr_slave_1: entered promiscuous mode [ 846.436946][T10581] debugfs: 'hsr0' already exists in 'hsr' [ 846.436983][T10581] Cannot create hsr debugfs directory [ 848.425887][T10787] loop2: detected capacity change from 0 to 7 [ 848.459282][T10787] Dev loop2: unable to read RDB block 7 [ 848.459335][T10787] loop2: AHDI p1 p3 [ 848.459360][T10787] loop2: partition table partially beyond EOD, truncated [ 848.459742][T10787] loop2: p1 start 2036297842 is beyond EOD, truncated [ 851.080635][ T5247] 8021q: adding VLAN 0 to HW filter on device eth14 [ 851.726296][ T68] hsr_slave_0: left promiscuous mode [ 851.863099][ T68] hsr_slave_1: left promiscuous mode [ 851.866596][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 851.866635][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 851.930898][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 851.930930][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 852.084234][ T68] veth1_macvtap: left promiscuous mode [ 852.084350][ T68] veth0_macvtap: left promiscuous mode [ 852.084628][ T68] veth1_vlan: left promiscuous mode [ 852.084850][ T68] veth0_vlan: left promiscuous mode [ 854.526460][ T68] team0 (unregistering): Port device team_slave_1 removed [ 854.663190][ T68] team0 (unregistering): Port device team_slave_0 removed [ 855.518836][T10674] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.518983][T10674] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.519174][T10674] bridge_slave_0: entered allmulticast mode [ 855.573340][T10674] bridge_slave_0: entered promiscuous mode [ 855.641482][T10674] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.641617][T10674] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.641901][T10674] bridge_slave_1: entered allmulticast mode [ 855.680530][T10674] bridge_slave_1: entered promiscuous mode [ 855.907377][T10674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 855.967392][T10674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 856.119796][T10674] team0: Port device team_slave_0 added [ 856.137513][T10674] team0: Port device team_slave_1 added [ 856.376271][T10810] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 856.376948][T10810] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 856.564143][T10674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 856.564165][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.564197][T10674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 856.566739][T10674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 856.566757][T10674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 856.566789][T10674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 856.768488][T10674] hsr_slave_0: entered promiscuous mode [ 856.769961][T10674] hsr_slave_1: entered promiscuous mode [ 856.772689][T10674] debugfs: 'hsr0' already exists in 'hsr' [ 856.772718][T10674] Cannot create hsr debugfs directory [ 857.843786][T10825] ubi0: attaching mtd0 [ 857.875276][T10825] ubi0: scanning is finished [ 857.875597][T10825] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 858.415837][ T5247] 8021q: adding VLAN 0 to HW filter on device eth15 [ 865.975073][T10851] loop6: detected capacity change from 0 to 1 [ 866.013428][T10851] Dev loop6: unable to read RDB block 1 [ 866.013473][T10851] loop6: unable to read partition table [ 866.013727][T10851] loop6: partition table beyond EOD, truncated [ 866.013748][T10851] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 866.706341][ C0] operation not supported error, dev loop6, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 870.220184][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.220256][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.082165][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.166200][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.186502][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.195688][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.199798][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 874.459453][T10909] bridge0: port 1(bridge_slave_0) entered blocking state [ 874.459669][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.460279][T10909] bridge_slave_0: entered allmulticast mode [ 874.463031][T10909] bridge_slave_0: entered promiscuous mode [ 874.466997][T10909] bridge0: port 2(bridge_slave_1) entered blocking state [ 874.467268][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.467468][T10909] bridge_slave_1: entered allmulticast mode [ 874.538384][T10909] bridge_slave_1: entered promiscuous mode [ 874.604655][T10909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.626539][T10909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.693218][T10909] team0: Port device team_slave_0 added [ 874.697191][T10909] team0: Port device team_slave_1 added [ 874.811404][T10909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.811426][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.811458][T10909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.813929][T10909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.813947][T10909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.813978][T10909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.980404][T10909] hsr_slave_0: entered promiscuous mode [ 874.981785][T10909] hsr_slave_1: entered promiscuous mode [ 874.982751][T10909] debugfs: 'hsr0' already exists in 'hsr' [ 874.982781][T10909] Cannot create hsr debugfs directory [ 875.417777][ T5598] Bluetooth: hci0: command tx timeout [ 876.814173][ T5605] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 876.853329][ T5605] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 876.854980][ T5605] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 876.856223][ T5605] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 876.856924][ T5605] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 877.497774][ T5598] Bluetooth: hci0: command tx timeout [ 878.088404][T10928] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.088644][T10928] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.088835][T10928] bridge_slave_0: entered allmulticast mode [ 878.091760][T10928] bridge_slave_0: entered promiscuous mode [ 878.095733][T10928] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.095952][T10928] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.096144][T10928] bridge_slave_1: entered allmulticast mode [ 878.158956][T10928] bridge_slave_1: entered promiscuous mode [ 878.231039][T10928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.243028][T10928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.354572][T10928] team0: Port device team_slave_0 added [ 878.365632][T10928] team0: Port device team_slave_1 added [ 878.437171][T10928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.437193][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.437224][T10928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.487755][T10928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.487775][T10928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.487808][T10928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.649666][T10928] hsr_slave_0: entered promiscuous mode [ 878.651196][T10928] hsr_slave_1: entered promiscuous mode [ 878.652299][T10928] debugfs: 'hsr0' already exists in 'hsr' [ 878.652338][T10928] Cannot create hsr debugfs directory [ 878.937885][ T5598] Bluetooth: hci6: command tx timeout [ 879.577838][ T5598] Bluetooth: hci0: command tx timeout [ 881.018045][ T5598] Bluetooth: hci6: command tx timeout [ 881.445463][ T5605] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 881.503071][ T5605] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 881.505933][ T5605] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 881.507084][ T5605] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 881.531537][ T5605] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 881.668088][ T5605] Bluetooth: hci0: command tx timeout [ 882.984981][T10947] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.985213][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.985410][T10947] bridge_slave_0: entered allmulticast mode [ 883.009625][T10947] bridge_slave_0: entered promiscuous mode [ 883.014792][T10947] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.015049][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.015285][T10947] bridge_slave_1: entered allmulticast mode [ 883.047780][T10947] bridge_slave_1: entered promiscuous mode [ 883.097773][ T5598] Bluetooth: hci6: command tx timeout [ 883.122272][T10947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.126762][T10947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.197881][T10947] team0: Port device team_slave_0 added [ 883.202558][T10947] team0: Port device team_slave_1 added [ 883.262802][T10947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.262824][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.262857][T10947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.266288][T10947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.266306][T10947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.266341][T10947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.424820][T10947] hsr_slave_0: entered promiscuous mode [ 883.426182][T10947] hsr_slave_1: entered promiscuous mode [ 883.427199][T10947] debugfs: 'hsr0' already exists in 'hsr' [ 883.427225][T10947] Cannot create hsr debugfs directory [ 883.657904][ T5598] Bluetooth: hci7: command tx timeout [ 884.163910][ T5605] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 884.201624][ T5605] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 884.204265][ T5605] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 884.205758][ T5605] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 884.206533][ T5605] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 885.177952][ T5598] Bluetooth: hci6: command tx timeout [ 885.737796][ T5598] Bluetooth: hci7: command tx timeout [ 886.298811][ T5598] Bluetooth: hci8: command tx timeout [ 887.827919][ T5598] Bluetooth: hci7: command tx timeout [ 888.387823][ T5598] Bluetooth: hci8: command tx timeout [ 888.411063][T10967] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.411304][T10967] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.412323][T10967] bridge_slave_0: entered allmulticast mode [ 888.415129][T10967] bridge_slave_0: entered promiscuous mode [ 888.450602][T10967] bridge0: port 2(bridge_slave_1) entered blocking state [ 888.450817][T10967] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.451073][T10967] bridge_slave_1: entered allmulticast mode [ 888.454042][T10967] bridge_slave_1: entered promiscuous mode [ 888.548994][T10967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.569734][T10967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.636122][T10967] team0: Port device team_slave_0 added [ 888.660809][T10967] team0: Port device team_slave_1 added [ 888.717953][T10967] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.717973][T10967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.718005][T10967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 888.720915][T10967] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 888.720931][T10967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.720962][T10967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 888.915269][T10967] hsr_slave_0: entered promiscuous mode [ 888.916656][T10967] hsr_slave_1: entered promiscuous mode [ 888.929129][T10967] debugfs: 'hsr0' already exists in 'hsr' [ 888.929159][T10967] Cannot create hsr debugfs directory [ 889.898025][ T5598] Bluetooth: hci7: command tx timeout [ 890.457925][ T5598] Bluetooth: hci8: command tx timeout [ 892.537730][ T5598] Bluetooth: hci8: command tx timeout [ 895.319863][ T5605] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 895.375342][ T5605] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 895.387863][ T5605] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 895.391722][ T5605] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 895.393949][ T5605] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 896.664607][T10986] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.664842][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.665076][T10986] bridge_slave_0: entered allmulticast mode [ 896.693332][T10986] bridge_slave_0: entered promiscuous mode [ 896.697089][T10986] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.697341][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.720304][T10986] bridge_slave_1: entered allmulticast mode [ 896.723207][T10986] bridge_slave_1: entered promiscuous mode [ 896.790808][T10986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.794818][T10986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.863566][T10986] team0: Port device team_slave_0 added [ 896.873949][T10986] team0: Port device team_slave_1 added [ 896.924107][T10986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.924126][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.924163][T10986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.926669][T10986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.926685][T10986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 896.926716][T10986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 897.163754][T10986] hsr_slave_0: entered promiscuous mode [ 897.165307][T10986] hsr_slave_1: entered promiscuous mode [ 897.166444][T10986] debugfs: 'hsr0' already exists in 'hsr' [ 897.166472][T10986] Cannot create hsr debugfs directory [ 897.417903][ T5605] Bluetooth: hci2: command tx timeout [ 899.497789][ T5605] Bluetooth: hci2: command tx timeout [ 901.578036][ T5605] Bluetooth: hci2: command tx timeout [ 903.657823][ T5605] Bluetooth: hci2: command tx timeout [ 927.330699][T10825] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 931.660349][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.660404][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.219406][ T5598] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 933.292366][ T5598] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 933.295899][ T5598] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 933.297422][ T5598] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 933.330421][ T5598] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 934.771680][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.775047][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.775290][T11066] bridge_slave_0: entered allmulticast mode [ 934.798726][T11066] bridge_slave_0: entered promiscuous mode [ 934.822986][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.823209][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.823441][T11066] bridge_slave_1: entered allmulticast mode [ 934.826492][T11066] bridge_slave_1: entered promiscuous mode [ 934.942462][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.946583][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 935.013931][T11066] team0: Port device team_slave_0 added [ 935.024851][T11066] team0: Port device team_slave_1 added [ 935.072015][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.072033][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.072061][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.075042][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.075056][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.075085][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 935.234453][T11066] hsr_slave_0: entered promiscuous mode [ 935.235820][T11066] hsr_slave_1: entered promiscuous mode [ 935.236747][T11066] debugfs: 'hsr0' already exists in 'hsr' [ 935.236773][T11066] Cannot create hsr debugfs directory [ 935.499775][ T5605] Bluetooth: hci4: command tx timeout [ 937.577794][ T5605] Bluetooth: hci4: command tx timeout [ 937.855283][T10949] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 937.909810][T10949] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 937.913799][T10949] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 937.935856][T10949] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 937.955545][T10949] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 938.867861][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 939.435106][T11086] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.435383][T11086] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.436932][T11086] bridge_slave_0: entered allmulticast mode [ 939.462429][T11086] bridge_slave_0: entered promiscuous mode [ 939.466124][T11086] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.466314][T11086] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.466520][T11086] bridge_slave_1: entered allmulticast mode [ 939.496145][T11086] bridge_slave_1: entered promiscuous mode [ 939.558454][T11086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.562649][T11086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.630193][T11086] team0: Port device team_slave_0 added [ 939.634187][T11086] team0: Port device team_slave_1 added [ 939.667559][ T5598] Bluetooth: hci4: command tx timeout [ 939.725571][T11086] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.725592][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.725625][T11086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.774108][T11086] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.774126][T11086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.774156][T11086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.881288][T11086] hsr_slave_0: entered promiscuous mode [ 939.882674][T11086] hsr_slave_1: entered promiscuous mode [ 939.883777][T11086] debugfs: 'hsr0' already exists in 'hsr' [ 939.883805][T11086] Cannot create hsr debugfs directory [ 940.067831][ T5598] Bluetooth: hci9: command tx timeout [ 941.738464][ T5598] Bluetooth: hci4: command tx timeout [ 942.142401][ T5598] Bluetooth: hci9: command tx timeout [ 942.582806][ T5605] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 942.659681][ T5605] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 942.661472][ T5605] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 942.666077][ T5605] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 942.735900][ T5605] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 944.227884][ T5598] Bluetooth: hci9: command tx timeout [ 944.344348][T11106] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.344579][T11106] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.344754][T11106] bridge_slave_0: entered allmulticast mode [ 944.347354][T11106] bridge_slave_0: entered promiscuous mode [ 944.399578][T11106] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.401256][T11106] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.402364][T11106] bridge_slave_1: entered allmulticast mode [ 944.406147][T11106] bridge_slave_1: entered promiscuous mode [ 944.540300][ T5605] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 944.607973][ T5605] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 944.610623][ T5605] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 944.613450][ T5605] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 944.614363][ T5605] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 944.860730][T11106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 944.924504][T11106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.937824][ T5605] Bluetooth: hci10: command tx timeout [ 945.258543][T11106] team0: Port device team_slave_0 added [ 945.267412][T11106] team0: Port device team_slave_1 added [ 945.379959][T11106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.379979][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.380009][T11106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.382618][T11106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.382634][T11106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 945.382675][T11106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.605702][T11106] hsr_slave_0: entered promiscuous mode [ 945.606888][T11106] hsr_slave_1: entered promiscuous mode [ 945.622395][T11106] debugfs: 'hsr0' already exists in 'hsr' [ 945.622426][T11106] Cannot create hsr debugfs directory [ 946.297653][ T5605] Bluetooth: hci9: command tx timeout [ 946.844505][T11126] bridge0: port 1(bridge_slave_0) entered blocking state [ 946.844739][T11126] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.844965][T11126] bridge_slave_0: entered allmulticast mode [ 946.857769][ T5605] Bluetooth: hci11: command tx timeout [ 946.874155][T11126] bridge_slave_0: entered promiscuous mode [ 946.884251][T11126] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.884480][T11126] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.884701][T11126] bridge_slave_1: entered allmulticast mode [ 946.908270][T11126] bridge_slave_1: entered promiscuous mode [ 946.974459][T11126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.980410][T11126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.021142][ T5605] Bluetooth: hci10: command tx timeout [ 947.044023][T11126] team0: Port device team_slave_0 added [ 947.054534][T11126] team0: Port device team_slave_1 added [ 947.154307][T11126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.154330][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.154362][T11126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.157365][T11126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.157382][T11126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.157415][T11126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 947.392638][T11126] hsr_slave_0: entered promiscuous mode [ 947.394120][T11126] hsr_slave_1: entered promiscuous mode [ 947.395293][T11126] debugfs: 'hsr0' already exists in 'hsr' [ 947.395319][T11126] Cannot create hsr debugfs directory [ 948.938261][ T5598] Bluetooth: hci11: command tx timeout [ 949.097638][ T5598] Bluetooth: hci10: command tx timeout [ 951.017867][ T5598] Bluetooth: hci11: command tx timeout [ 951.177841][ T5598] Bluetooth: hci10: command tx timeout [ 953.097757][ T5598] Bluetooth: hci11: command tx timeout [ 957.339126][ T5605] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 957.385860][ T5605] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 957.402318][ T5605] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 957.405088][ T5605] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 957.406309][ T5605] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 958.834800][T11144] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.835036][T11144] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.835636][T11144] bridge_slave_0: entered allmulticast mode [ 958.867731][T11144] bridge_slave_0: entered promiscuous mode [ 958.872085][T11144] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.872313][T11144] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.872529][T11144] bridge_slave_1: entered allmulticast mode [ 958.875411][T11144] bridge_slave_1: entered promiscuous mode [ 959.014878][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.044195][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.135279][T11144] team0: Port device team_slave_0 added [ 959.151005][T11144] team0: Port device team_slave_1 added [ 959.218495][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.218515][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.218546][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.292810][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.292829][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 959.292858][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.344868][ T5598] Bluetooth: hci1: command 0x0406 tx timeout [ 959.473389][T11144] hsr_slave_0: entered promiscuous mode [ 959.474968][T11144] hsr_slave_1: entered promiscuous mode [ 959.476098][T11144] debugfs: 'hsr0' already exists in 'hsr' [ 959.476126][T11144] Cannot create hsr debugfs directory [ 959.657761][ T5598] Bluetooth: hci12: command tx timeout [ 961.737723][T10949] Bluetooth: hci12: command tx timeout [ 963.818085][T10949] Bluetooth: hci12: command tx timeout [ 965.897822][T10949] Bluetooth: hci12: command tx timeout [ 974.710073][T10949] Bluetooth: hci5: command 0x0406 tx timeout [ 993.168927][ T1333] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.169038][ T1333] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.446197][T10949] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 993.514595][T10949] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 993.532798][T10949] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 993.545430][T10949] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 993.546181][T10949] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 995.495734][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.495960][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.496559][T11194] bridge_slave_0: entered allmulticast mode [ 995.533268][T11194] bridge_slave_0: entered promiscuous mode [ 995.568005][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.568668][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.569362][T11194] bridge_slave_1: entered allmulticast mode [ 995.576867][T11194] bridge_slave_1: entered promiscuous mode [ 995.737883][T10949] Bluetooth: hci13: command tx timeout [ 995.774647][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.818693][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.983726][T11194] team0: Port device team_slave_0 added [ 995.994237][T11194] team0: Port device team_slave_1 added [ 996.080051][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.080070][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.080098][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.086576][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.086595][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.086627][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 997.649249][T11194] hsr_slave_0: entered promiscuous mode [ 997.650906][T11194] hsr_slave_1: entered promiscuous mode [ 997.652118][T11194] debugfs: 'hsr0' already exists in 'hsr' [ 997.652145][T11194] Cannot create hsr debugfs directory [ 997.817671][T10949] Bluetooth: hci13: command tx timeout [ 999.164721][T11241] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 999.214779][T11241] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 999.225143][T11241] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 999.244543][T11241] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 999.245366][T11241] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 999.897921][T11087] Bluetooth: hci13: command tx timeout [ 1000.238679][ T38] INFO: task syz-executor:10581 blocked for ** replaying previous printk message ** [ 1000.238679][ T38] INFO: task syz-executor:10581 blocked for more than 143 seconds. [ 1000.238714][ T38] Tainted: G L syzkaller #0 [ 1000.238728][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1000.238756][ T38] task:syz-executor state:D stack:19240 pid:10581 tgid:10581 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1000.238821][ T38] Call Trace: [ 1000.238829][ T38] [ 1000.238845][ T38] __schedule+0x16d9/0x5700 [ 1000.238902][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1000.238950][ T38] ? __pfx___schedule+0x10/0x10 [ 1000.238999][ T38] rt_mutex_schedule+0x76/0xf0 [ 1000.239030][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 1000.239085][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 1000.239115][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 1000.239145][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 1000.239174][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1000.239229][ T38] ? del_device_store+0xd6/0x370 [ 1000.239267][ T38] ? del_device_store+0xd6/0x370 [ 1000.239296][ T38] mutex_lock_nested+0x168/0x1d0 [ 1000.239322][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1000.239350][ T38] del_device_store+0xd6/0x370 [ 1000.239382][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1000.239406][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1000.239439][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1000.239464][ T38] ? sysfs_kf_write+0x166/0x260 [ 1000.239493][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1000.239517][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 1000.239558][ T38] vfs_write+0x61e/0xbb0 [ 1000.239594][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1000.239624][ T38] ? do_sys_openat2+0x14e/0x200 [ 1000.239657][ T38] ? kmem_cache_free+0x187/0x6d0 [ 1000.239707][ T38] ksys_write+0x156/0x270 [ 1000.239737][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1000.239794][ T38] do_syscall_64+0x166/0x520 [ 1000.239828][ T38] ? trace_irq_disable+0x3b/0x140 [ 1000.239858][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.239884][ T38] ? clear_bhb_loop+0x70/0xc0 [ 1000.239914][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.239938][ T38] RIP: 0033:0x7f42bb98e98e [ 1000.239960][ T38] RSP: 002b:00007ffe7a9a9478 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1000.239985][ T38] RAX: ffffffffffffffda RBX: 000055555809d500 RCX: 00007f42bb98e98e [ 1000.240002][ T38] RDX: 0000000000000001 RSI: 00007ffe7a9a9500 RDI: 0000000000000005 [ 1000.240018][ T38] RBP: 00007f42bba658ee R08: 0000000000000000 R09: 0000000000000000 [ 1000.240034][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.240049][ T38] R13: 00007ffe7a9a9500 R14: 00007f42bc784620 R15: 0000000000000003 [ 1000.240086][ T38] [ 1000.240156][ T38] [ 1000.240156][ T38] Showing all locks held in the system: [ 1000.240173][ T38] locks held by kworker/u8:1/13: 3, last CPU#0: [ 1000.240197][ T38] #0: ffff88813ff62938 ((wq_completion)kvfree_rcu_reclaim){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.240269][ T38] #1: ffffc90000127c40 ((work_completion)(&(&krcp->krw_arr[i].rcu_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.240337][ T38] #2: ffffffff8e1c3da0 (rcu_callback){....}-{0:0}, at: kvfree_rcu_bulk+0x6d/0x190 [ 1000.240407][ T38] locks held by rcuc/0/20: 4, last CPU#0: [ 1000.240424][ T38] #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1000.240490][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1000.240555][ T38] #2: ffffffff8e1c3da0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x217/0x1740 [ 1000.240639][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 1000.240749][ T38] locks held by ksoftirqd/1/30: 6, last CPU#1: [ 1000.240766][ T38] #0: ffffffff8e059500 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1000.240831][ T38] #1: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 1000.240896][ T38] #2: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x261/0xc50 [ 1000.240963][ T38] #3: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0x9e/0x3c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1000.241029][ T38] #4: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 1000.241085][ T38] #5: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: ip_vs_conn_out_get+0xab/0x1030 [ 1000.241146][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 1000.241163][ T38] #0: ffffffff8e1c3c80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1000.241234][ T38] locks held by kworker/u8:4/68: 5, on CPU#0: [ 1000.241251][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.241317][ T38] #1: ffffc9000153fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.241392][ T38] #2: ffffffff8f5c58e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1000.241458][ T38] #3: ffff88802c991978 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1000.241518][ T38] #4: ffffffff8e1c9ef0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1000.241598][ T38] locks held by getty/5344: 2, on CPU#0: [ 1000.241614][ T38] #0: ffff8880365900a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1000.241671][ T38] #1: ffffc900044c32e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1000.241738][ T38] locks held by kworker/u9:8/5605: 3, on CPU#0: [ 1000.241754][ T38] #0: ffff888029136938 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.241838][ T38] #1: ffffc9000591fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.241905][ T38] #2: ffff88803aa54f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1000.241974][ T38] locks held by syz-executor/10517: 7, on CPU#0: [ 1000.241992][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.242069][ T38] #1: ffff888060f5d878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.242136][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.242215][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.242280][ T38] #4: ffff88803647f160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb9/0x880 [ 1000.242350][ T38] #5: ffff88802a55e310 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1000.242411][ T38] #6: ffffffff8e1c9ef0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 1000.242467][ T38] locks held by syz-executor/10581: 4, on CPU#0: [ 1000.242484][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.242545][ T38] #1: ffff8880373b2c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.242611][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.242684][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.242749][ T38] locks held by syz-executor/10674: 4, on CPU#0: [ 1000.242766][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.242826][ T38] #1: ffff888060e1a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.242890][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.242962][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.243026][ T38] locks held by syz-executor/10909: 4, on CPU#0: [ 1000.243042][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.243104][ T38] #1: ffff88805fd6bc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.243171][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.243269][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.243335][ T38] locks held by syz-executor/10928: 4, on CPU#0: [ 1000.243363][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.243424][ T38] #1: ffff888041893078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.243490][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.243580][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.243647][ T38] locks held by syz-executor/10947: 4, on CPU#0: [ 1000.243665][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.243730][ T38] #1: ffff888060873c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.243798][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.243872][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.243938][ T38] locks held by kworker/u9:0/10949: 3, on CPU#1: [ 1000.243955][ T38] #0: ffff88801da8c938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.244021][ T38] #1: ffffc9000582fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1000.244088][ T38] #2: ffff88802c794f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1000.244150][ T38] locks held by syz-executor/10967: 4, on CPU#0: [ 1000.244167][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.244240][ T38] #1: ffff88803b97cc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.244308][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.244383][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.244449][ T38] locks held by syz-executor/10986: 4, on CPU#0: [ 1000.244466][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.244531][ T38] #1: ffff888061624878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.244599][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.244673][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.244738][ T38] locks held by syz-executor/11066: 4, on CPU#0: [ 1000.244755][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.244818][ T38] #1: ffff888037537c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.244887][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.244960][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.245027][ T38] locks held by syz-executor/11086: 4, on CPU#0: [ 1000.245043][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.245105][ T38] #1: ffff88808d6adc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.245173][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.245280][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.245346][ T38] locks held by syz-executor/11106: 4, on CPU#0: [ 1000.245363][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.245444][ T38] #1: ffff88805fed4478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.245512][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.245587][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.245655][ T38] locks held by syz-executor/11126: 4, on CPU#0: [ 1000.245673][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.245737][ T38] #1: ffff888051c6c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.245804][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.245879][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.245946][ T38] locks held by syz-executor/11144: 4, on CPU#0: [ 1000.245964][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.246028][ T38] #1: ffff8880960f2078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.246097][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.246171][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.246247][ T38] locks held by syz-executor/11194: 4, on CPU#0: [ 1000.246264][ T38] #0: ffff8880352aa510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1000.246329][ T38] #1: ffff88805a670878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1000.246398][ T38] #2: ffff888029affc38 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1000.246473][ T38] #3: ffffffff8ee447d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1000.246541][ T38] locks held by syz-executor/11243: 4, last CPU#0: [ 1000.246559][ T38] #0: ffffffff8f5c58e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x524/0x780 [ 1000.246625][ T38] #1: ffffffff8f5d4138 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2d5/0x820 [ 1000.246686][ T38] #2: ffff88813ff6f238 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1000.246749][ T38] #3: ffff88813ff6f2c0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_add_one+0x308/0x6f0 [ 1000.246814][ T38] [ 1000.246820][ T38] ============================================= [ 1000.246820][ T38] [ 1000.246832][ T38] NMI backtrace for cpu 1 [ 1000.246851][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1000.246882][ T38] Tainted: [L]=SOFTLOCKUP [ 1000.246891][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.246905][ T38] Call Trace: [ 1000.246915][ T38] [ 1000.246924][ T38] dump_stack_lvl+0xe8/0x150 [ 1000.246959][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1000.246988][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1000.247014][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1000.247047][ T38] sys_info+0x135/0x170 [ 1000.247072][ T38] watchdog+0xfd7/0x1030 [ 1000.247111][ T38] ? watchdog+0x1c7/0x1030 [ 1000.247148][ T38] kthread+0x38b/0x470 [ 1000.247173][ T38] ? __pfx_watchdog+0x10/0x10 [ 1000.247208][ T38] ? __pfx_kthread+0x10/0x10 [ 1000.247234][ T38] ret_from_fork+0x514/0xb70 [ 1000.247260][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1000.247283][ T38] ? __switch_to+0xc89/0x1420 [ 1000.247319][ T38] ? __pfx_kthread+0x10/0x10 [ 1000.247345][ T38] ret_from_fork_asm+0x1a/0x30 [ 1000.247382][ T38] [ 1000.247392][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1000.247432][ C0] NMI backtrace for cpu 0 [ 1000.247449][ C0] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1000.247479][ C0] Tainted: [L]=SOFTLOCKUP [ 1000.247486][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.247500][ C0] Workqueue: kvfree_rcu_reclaim kfree_rcu_work [ 1000.247531][ C0] RIP: 0010:preempt_count_sub+0x72/0x180 [ 1000.247559][ C0] Code: c0 0f 94 c1 81 ff ff 00 00 00 0f 92 c2 45 84 f6 0f 94 c0 84 ca 75 02 31 c0 84 c0 75 57 f7 df 48 63 c7 65 48 01 05 be b6 10 11 <5b> 41 5e 5d e9 05 a0 c6 09 cc 90 e8 8e 5e 35 03 85 c0 74 33 48 c7 [ 1000.247574][ C0] RSP: 0018:ffffc90000127878 EFLAGS: 00000297 [ 1000.247590][ C0] RAX: ffffffffffffffff RBX: dffffc0000000000 RCX: ffffffff99aea501 [ 1000.247605][ C0] RDX: 0000000000000001 RSI: ffffffff8d869fd8 RDI: 00000000ffffffff [ 1000.247618][ C0] RBP: ffff88801d2f40c8 R08: ffffffff8fb2097f R09: 1ffffffff1f6412f [ 1000.247632][ C0] R10: dffffc0000000000 R11: fffffbfff1f64130 R12: 0000000000000000 [ 1000.247645][ C0] R13: ffff8880980e7000 R14: 8000000000000001 R15: 0000000000000000 [ 1000.247659][ C0] FS: 0000000000000000(0000) GS:ffff888125bca000(0000) knlGS:0000000000000000 [ 1000.247674][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1000.247694][ C0] CR2: 00007f983915acf0 CR3: 000000007fb94000 CR4: 00000000003526f0 [ 1000.247710][ C0] Call Trace: [ 1000.247717][ C0] [ 1000.247725][ C0] _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1000.247754][ C0] debug_check_no_obj_freed+0x39e/0x450 [ 1000.247792][ C0] kmem_cache_free_bulk+0x52b/0x1100 [ 1000.247820][ C0] ? kvfree_rcu_bulk+0xc6/0x190 [ 1000.247854][ C0] ? kvfree_rcu_bulk+0x6d/0x190 [ 1000.247879][ C0] kvfree_rcu_bulk+0xc6/0x190 [ 1000.247907][ C0] kfree_rcu_work+0xe8/0x160 [ 1000.247935][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1000.247961][ C0] process_scheduled_works+0xc3d/0x1630 [ 1000.248003][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1000.248033][ C0] ? assign_work+0x3cf/0x5d0 [ 1000.248060][ C0] worker_thread+0xa47/0xfb0 [ 1000.248101][ C0] kthread+0x38b/0x470 [ 1000.248119][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1000.248144][ C0] ? __pfx_kthread+0x10/0x10 [ 1000.248163][ C0] ret_from_fork+0x514/0xb70 [ 1000.248183][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1000.248202][ C0] ? __switch_to+0xc89/0x1420 [ 1000.248229][ C0] ? __pfx_kthread+0x10/0x10 [ 1000.248249][ C0] ret_from_fork_asm+0x1a/0x30 [ 1000.248275][ C0] [ 1000.254757][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1001.925613][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1001.936825][ T38] Tainted: [L]=SOFTLOCKUP [ 1001.941158][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1001.951226][ T38] Call Trace: [ 1001.954526][ T38] [ 1001.957469][ T38] vpanic+0x56d/0xa60 [ 1001.961485][ T38] ? __pfx___schedule+0x10/0x10 [ 1001.966362][ T38] ? __pfx_vpanic+0x10/0x10 [ 1001.970912][ T38] panic+0xc5/0xd0 [ 1001.974648][ T38] ? __pfx_panic+0x10/0x10 [ 1001.979077][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 1001.984558][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 1001.989956][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1001.996140][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1002.002315][ T38] watchdog+0x1030/0x1030 [ 1002.006672][ T38] ? watchdog+0x1c7/0x1030 [ 1002.011113][ T38] kthread+0x38b/0x470 [ 1002.015197][ T38] ? __pfx_watchdog+0x10/0x10 [ 1002.019916][ T38] ? __pfx_kthread+0x10/0x10 [ 1002.024522][ T38] ret_from_fork+0x514/0xb70 [ 1002.029125][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1002.034339][ T38] ? __switch_to+0xc89/0x1420 [ 1002.039041][ T38] ? __pfx_kthread+0x10/0x10 [ 1002.043648][ T38] ret_from_fork_asm+0x1a/0x30 [ 1002.048433][ T38] [ 1002.052080][ T38] Kernel Offset: disabled [ 1002.056416][ T38] Rebooting in 86400 seconds..