last executing test programs: 15m44.639615793s ago: executing program 0 (id=285): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3a}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) r1 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x20000) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a45320, &(0x7f00000000c0)={{0x80}, 'port1\x00', 0x0, 0x150014, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5fb, @name="a13c4dacaace7477f3f8f1d68f8a0c4a4b407126d4a332ea110a356827492a5c"}) r4 = add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={0x0, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) connect$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) r6 = fcntl$dupfd(r5, 0x406, r5) write$binfmt_elf64(r6, &(0x7f0000000400)=ANY=[@ANYRESOCT=r3, @ANYRES64=r5, @ANYRES16=r6, @ANYRES32=r5, @ANYRESDEC, @ANYRES8, @ANYRES64=r4, @ANYRES64=r4], 0xfffffdcf) connect$unix(r6, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) 15m39.67578564s ago: executing program 0 (id=301): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x80000001, 0x30}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000400)={0x1f, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01"], 0x9) 15m39.176124493s ago: executing program 0 (id=304): write$tun(0xffffffffffffffff, &(0x7f00000004c0)={@void, @val={0x0, 0x0, 0x2, 0x8, 0x14, 0x2}, @ipv4=@gre={{0x13, 0x4, 0x2, 0x9, 0x159, 0x66, 0x0, 0x6, 0x2f, 0x0, @multicast1, @local, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x3, 0xac}, @noop, @timestamp={0x44, 0xc, 0x86, 0x0, 0xd, [0x0, 0x1]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x3c, 0x3, 0x9, [{@remote, 0x1}, {@rand_addr=0x64010100, 0x5}, {@multicast2, 0x3}]}, @end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x40, 0x1, [0x1ff], "e29d2ec0e48169d97dbf971d1a5b15a45a3b214e4d4feb4708c8b2a7c9e175b21a2529440c55b5e34c2d0ccdf1cbe11044aa5aee6da9cb09f9df87e307a58b0c"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x83, 0x100], "81b4e7c597e989898b317c39fbe8a09a82acf66016738013d5450d5c0ef02e9dd1898fcbacdfeea888495b7b"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x200, 0x6, 0x4], "e6a2be25e7433e96f7a043961d92643dafa6991286d2ebea7b80bea2eeb7a579aed30a5f64d09edf7bc90ad77bad1b64913e4e5533fc78fa1fdcf59e7e255fa5c49d9f6fc83c96c606eb27114cd5e47e35"}, {0x8, 0x88be, 0x1, {{0x8, 0x1, 0x4, 0x3, 0x0, 0x3, 0x5, 0x4}, 0x1, {0xfff}}}, {0x8, 0x22eb, 0x4, {{0x9, 0x2, 0x3, 0x2, 0x0, 0x1, 0x3, 0xff}, 0x2, {0x3, 0x5, 0x1, 0x2, 0x0, 0x0, 0x2}}}, {0x8, 0x6558, 0x2}}}}, 0x163) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 15m38.792352424s ago: executing program 0 (id=305): prlimit64(0x0, 0xc, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 15m37.658343625s ago: executing program 0 (id=309): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, 0x0, 0x0, &(0x7f00000000c0), 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x800, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) 15m29.747149194s ago: executing program 0 (id=313): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') readv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x3) 15m12.777671226s ago: executing program 32 (id=313): openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') readv(r3, &(0x7f0000000400)=[{&(0x7f0000000200)=""/101, 0x65}, {&(0x7f0000000280)=""/128, 0x80}, {&(0x7f0000003d80)=""/4096, 0x1000}], 0x3) 12m49.505283347s ago: executing program 1 (id=464): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00003b2000/0x4000)=nil) socket(0x40000000015, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) lseek(r1, 0x800, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x2}) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r4}) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000001c0)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x4000002, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0xd, 0xe661, 0x4, 0x7, 0xdf, 0x8, 0x4c74, 0x80000003, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0x8, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x86, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x8, 0x9, 0x3b, 0xf, 0x8020, 0x1, 0xfe000000, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0xfffffff3, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0x2, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0xf, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xffffffff, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x3) 12m47.410499567s ago: executing program 4 (id=472): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x2000000, 0x7}) 12m43.454436865s ago: executing program 4 (id=474): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xd) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) socket(0x11, 0x5, 0x400101) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x800}) 12m39.691132559s ago: executing program 1 (id=476): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) 12m39.376127314s ago: executing program 1 (id=478): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@sg0, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', &(0x7f0000000280)='openpromfs\x00', 0x123008, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x4) sendfile(0xffffffffffffffff, r0, &(0x7f00000001c0)=0x1, 0x8) openat(r0, &(0x7f0000000140)='./debug\x00', 0x32da01, 0x1b7) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000002c0)={0x84, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e1c, 0x3, 'wrr\x00', 0x5, 0x80, 0x1b}, 0x2c) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x40004) 12m39.304032645s ago: executing program 4 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = fanotify_init(0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2136, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000070060000000000000900000073113b000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_mark(r3, 0x1, 0x1030, r2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x1e}]) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100050808004149004001040800", 0x58}], 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xc9, {0x9, 0x21, 0xe4, 0x3, 0x1, {0x22, 0x49b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 12m39.107805604s ago: executing program 1 (id=481): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010000000000000000000100000038000180060001000200000008000500000000000c000700000000000000000008000900000000"], 0x4c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x8000000004) mkdir(0x0, 0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) 12m35.250819591s ago: executing program 1 (id=485): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x82084, 0x0) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaabb7fc9bb68d1df88a82b008100190008004ebd02f900680000082f9078ac1414bbac1414bb868700000000020f1ad9a4cd3bdbed2faeb6ca28ae0005d46a11634e2c62aedc01037b07101f3462d0fcfe0f647f6c28f4d157000da3e23df9148913333cd499051188f763d72d71cddf89e9be603984f006102784755e41ecd35e59b6d313b83e060b25974a58669da2a4dd0612d2d2d1fb3c6dd4e8eb9ff1ef232c6e64020f3fa96b73c2e7a272a2a3fe3dd044183430000000050000000600000005000000030000000344447bb1e00000010000000be000000200008ad86401010000000000e000000200000fffac141442000000066401010000000004ac1414aa00000008ffffffff0000000c000c21880b00fa00009b2047b600aa02605ba2d4d43ad536c3ead7ecc4c480adbcded174c7e91ced0004c8936012c776402e558872da2b52513290220f56811c8f0d6c4fe271892546669ae20a60d7fe38ac933428f50c85503e657d3ca40dcafb3bfbb37423ae8ffdc4ea9f64a6594bf2c3f7b76c81b92525c50e59300aa2ab958d6b1ffd656b7dd1eebbfc6441b800e7a0377b8fafcd2c7cc5cb8674aac57676cc96cabf92d356c8ed183430e3698919935602bf2ad8e0e85cf6e40a86319fae1029657f6ffd4a8ce88980d3d9daef15a657b15de657d35463966a87f5ca546f9c070075761f0808cdf8eaa9dc067e9a2b30c4f0a3984999a8ed973c94c680f20147040008000001f03291972cf310546effe1f556d9d152d80955de9d24d23fb9bfa475a0e616af1f1f9b6cd0732715dc32d1d89417bd000086dde044262c7deb71f3ad2075f421a376502d21fd380f95c20320016eeb637396877d86bdbfa381a12be1f2a916d96a47f188305bbc11e07e3f513e8e101d800aa43d698e1ddcd56577d52b69281987db802118b7053664a527c42a860918ce097b09b7827124778233f8dad66f080088be00000003100125040100000000000005080022eb0000000321803a2302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0xc5, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$kcm(0x10, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="00940a37", 0x4) sendto$unix(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x800, 0x0, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00'}) 12m35.163584091s ago: executing program 4 (id=486): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x1a8043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = openat$kvm(0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000010010401040000000000000000000000080500010003000000"], 0x1c}}, 0x24008880) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f0000000300)={0x80a0000, 0x3000}) r5 = eventfd(0xf9) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0xfec00000, 0x0, r5}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r8, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000600)=ANY=[@ANYBLOB="00afed0a0c1229f6465758a3cd06d079dead6f6c469a36cd6af6af309c81c51fada453092a4a488534eb22dbc66553e5fdb34060d11618fdf620b38de6ac4996459e55aa59441eef63aeed750503c748fd8f0f5583515b7ac0ce2d351420ff5fb311a45504c3f70d636e30c507b572e1e82d97215cac4887ed6b1e78b1b7cf6f99ded4c30fc173bf53746273a9bf4465b208a569a7f6e57e4211645848eab692290338847f40b392cd4d6f339e800e1a84b7095293a683bb91629d4a1b0b086f0fd37da47fb26ac3ae1ff63394c7a5faea7db8f69b096205133bf5b7744c"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x100}, 0x10}, 0x94) sendmmsg$sock(r8, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}}], 0x1, 0x20000000) ioctl$vim2m_VIDIOC_STREAMON(r6, 0x40045612, &(0x7f0000000080)=0x2) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000001ff69000000000001000000c000000002000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a90400000000000000c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) setsockopt$inet6_tcp_int(r9, 0x6, 0x5, 0x0, 0x0) recvmsg(r9, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x40000040) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000000)={0xffff1000, 0x10000, 0x8}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000140)={0xffff0000, 0x106000}) 12m31.237729784s ago: executing program 1 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 12m26.582663549s ago: executing program 4 (id=492): prlimit64(0x0, 0xc, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(0xffffffffffffffff, 0xc1004110, &(0x7f0000000000)={0x8, [0x6, 0x7fffffff, 0xfffffffb], [{0x0, 0x1, 0x0, 0x1}, {0xb, 0x35}, {0xfff, 0x100000c}, {0xffffffff}, {0x0, 0x3}, {0x3, 0x200}, {0x0, 0xfffffffd}, {0xfffffff8, 0x2010000}, {0x3, 0x82}, {0x1010000, 0x6}, {0xec41, 0xffffffff}, {0x3, 0x8}], 0xc}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="bf"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0xfffffffffffffffc, 0xfffffffffffffffd, 0x2000000, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) 12m18.767821649s ago: executing program 4 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = fanotify_init(0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2136, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000070060000000000000900000073113b000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_mark(r3, 0x1, 0x1030, r2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x1e}]) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100050808004149004001040800", 0x58}], 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xc9, {0x9, 0x21, 0xe4, 0x3, 0x1, {0x22, 0x49b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 12m13.644601627s ago: executing program 33 (id=487): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) 11m59.777504202s ago: executing program 34 (id=495): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = fanotify_init(0x0, 0x800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[], 0x0}, 0x94) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x2136, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000070060000000000000900000073113b000000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fanotify_mark(r3, 0x1, 0x1030, r2, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x1000, r1, 0x0, 0x1e}]) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000580)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100050808004149004001040800", 0x58}], 0x1) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x25b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0xc0, 0x2, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0xc9, {0x9, 0x21, 0xe4, 0x3, 0x1, {0x22, 0x49b}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x7, 0x7, 0x5}}}}}]}}]}}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) 2m54.069453185s ago: executing program 2 (id=1139): write(0xffffffffffffffff, &(0x7f0000000a00)='transport=fc,traddr=nn-0x3333333333333333:pn-0x4444444444444444,host_traddr=nn-0x1111111111111111:pn-0x2222222222222222,nqn=nqn.2014-08.org.nvmexpress.discovery\x00', 0xa1) 2m53.912015567s ago: executing program 2 (id=1141): getpgrp(0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000005000000010000000000000e020000000000000000000000000000050000000000712e14"], 0x0, 0x39}, 0x28) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffec4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r7, 0x2, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x9, r5, 0x0, 0x0, 0x3b, 0x0, 0x0, r6}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000280)="0e7d2469801a5d15927d2e7b37daa0618ad83f87106d65b5", 0x18, 0x1, 0x0, 0x1, r0}]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 2m49.868043201s ago: executing program 2 (id=1142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1111, @empty}, 0x10) listen(r0, 0x10) r1 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000000100)=[0xffffffff], 0x1) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000440)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd_index, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="00000080fe534d42400001000000000000000100010000000000000000000000000000000000000000000000000000000000000000000000000000004100010011030000000000000000000000000000000000000000000000001000000010000000100000000000000000000000000000000000800000000000000000000048fe534d42400001000000000001000100010000000000000001000000000000000000000000000000010000000000000000000000000000000000000000000000090000004800000000000050fe534d42400001000000000002000100010000000000000002000000000000000000000001000000010000000000000000000000000000000000000000000000100001000000000008000000ff011f00", 0x124}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./cifs\x00', 0x1ed) mount(&(0x7f0000000800)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000300)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='ip=127.0.0.1,port=4369,user=root,password=root,vers=3.1.1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./proc\x00', 0x1ed) mount(&(0x7f0000000a00)=@filename='proc\x00', &(0x7f0000000900)='./proc\x00', &(0x7f0000000a00)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/fs/cifs/Stats\x00', 0x0, 0x0) read(r5, &(0x7f0000000c00), 0x1000) 2m46.13624581s ago: executing program 2 (id=1147): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x9}, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000001c0)='source', &(0x7f0000000100)='%\xff:2\x82|\x9a\xe0\xadA\xde\xd5\x03\x00\x00\x00\xb7\xe5\xee:\xb5\x0e\xec\xe5\xdc\xe5\x8d?\x16BE\x8b\xe8)\xa9H\x99\x10\x02q\xf7\xd3\xc5*\x15\xdf_\xb2_`\x92|\x7f\xff9\xf7o$e&1\xfd\xea\xb0\xb0', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000180)=0x6f) socket(0x11, 0x5, 0x400101) r5 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f00000000c0)={0x980914, 0x800}) 2m39.015846685s ago: executing program 2 (id=1150): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,ip=127.0.0.1,unc=\\\\127.0.0.1\\share,nodfs\x00') 2m38.667083852s ago: executing program 2 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)="020052487f000001", 0x80) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="020030397f000001", 0x80) close(r2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="0600000000000000020000000401000000000000000000006d796c7300", 0x80}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r8 = socket(0x2, 0x1, 0x0) setsockopt(r8, 0x1, 0x2, &(0x7f0000000700)="01000000", 0x4) bind(r8, &(0x7f0000000740)=@in={0x2, 0x3039, @loopback}, 0x10) connect(r8, &(0x7f00000007c0)=@in={0x2, 0x5248, @loopback}, 0x10) write(r8, &(0x7f0000000840)="02000300000000000200000028000300050000000000000002000300000000000200000010000500", 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r8, &(0x7f0000000880)="02000300010000000200000010000400", 0x10) 2m23.529024062s ago: executing program 35 (id=1152): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/dlm\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/dlm/cluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/dlm/cluster/comms\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/dlm/cluster/comms/2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/dlm/cluster/comms/1/addr\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)="020052487f000001", 0x80) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/dlm/cluster/comms/2/addr\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)="020030397f000001", 0x80) close(r2) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = syz_io_uring_setup(0x20, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000580)=0x0) r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)="0600000000000000020000000401000000000000000000006d796c7300", 0x80}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r8 = socket(0x2, 0x1, 0x0) setsockopt(r8, 0x1, 0x2, &(0x7f0000000700)="01000000", 0x4) bind(r8, &(0x7f0000000740)=@in={0x2, 0x3039, @loopback}, 0x10) connect(r8, &(0x7f00000007c0)=@in={0x2, 0x5248, @loopback}, 0x10) write(r8, &(0x7f0000000840)="02000300000000000200000028000300050000000000000002000300000000000200000010000500", 0x28) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r8, &(0x7f0000000880)="02000300010000000200000010000400", 0x10) 8.334819799s ago: executing program 3 (id=1282): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) write(r1, &(0x7f0000000100)="1500000065ffff0020000008003950323030302e4c1400000069000080000000000000000000000000a0000000190000ff1700000000000080000000000000000000000000ed4100000000000000000000020000000000000000000000000000000010000000000000001000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b00000007000005000000", 0xd4) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,version=9p2000.L,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESDEC=r0, @ANYBLOB='\x00']) 8.037439279s ago: executing program 3 (id=1283): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)=ANY=[], 0x0, 0x39}, 0x28) r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x7, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000400)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x9, r1, 0x0, 0x0, 0x3b, 0x0, 0x0, r2}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0xe, 0x6, 0xffffffffffffffff, &(0x7f0000000280)="0e7d2469801a5d15927d2e7b37daa0618ad83f87106d65b5", 0x18, 0x1, 0x0, 0x1, r0}]) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 7.700533506s ago: executing program 3 (id=1284): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='md0\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='raid1\x00', 0x5) 6.555216261s ago: executing program 3 (id=1285): socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x90) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000440)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000}, 0x94) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000200)={0x0, 0x8}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x200}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "5303000000000002", "a9df7ccffde8899f914d4f2c3e263509", "3c36a51c", "6775c975b6b15e11"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f64e40992f79ecf0", "53c272d8b763f690b35605dff8a4a8d2", "021000", "72392a24199b5903"}, 0x28) writev(r4, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0x7}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c26", 0xdc}], 0x2) readv(r4, &(0x7f00000006c0)=[{&(0x7f0000001980)=""/4089, 0x4000}], 0x59) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x10008047}, 0x4000084) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="1c000000030601040000000000000000020000050500010007000000483938836ef61e43c8a0cd9f467064ae1da6baf3eb1106fc288a2af8adf476d01025cf09b07ce7bf48ecd6abfff4fc1249e7af1311edc025d8ccf7ce85205aa6e84d513529fae8a3174c984f3b2b2a0baa04acbc382fe89f43292f6ffd6f72e123f829e774bb8de2d17f464332789dcde1a4b2e214585da5aac1ed396916335f4363a8cb9c68e1fbcd8f8d26c8928b607a557066f197bf8942b3fc576cc6655e83e84d52030c2d77de96cac915636f168414"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) 988.441367ms ago: executing program 3 (id=1286): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='tmpfs\x00', &(0x7f0000000100)='./mnt\x00', &(0x7f0000000140)='tmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/file\x00', 0x42, 0x1ff) r1 = syz_io_uring_setup(0x80, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000300)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000400)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000480)=[{&(0x7f00000004c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000500)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000600)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000680)=[{&(0x7f00000006c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000780)=[{&(0x7f00000007c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000800)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000900)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000980)=[{&(0x7f00000009c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000a00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000b00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000bc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000c00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000d00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000dc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000e00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ec0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000f00)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000fc0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001000)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001080)=[{&(0x7f00000010c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001100)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001180)=[{&(0x7f00000011c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000001200)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r0, 0x0, &(0x7f0000001280)=[{&(0x7f00000012c0)='AAAA', 0x4}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) chmod(&(0x7f0000001300)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001340)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001380)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000013c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001400)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001440)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001480)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000014c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001500)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001540)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001580)='./mnt/file\x00', 0x1ff) chmod(&(0x7f00000015c0)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001600)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001640)='./mnt/file\x00', 0x1ff) chmod(&(0x7f0000001680)='./mnt/file\x00', 0x1ff) io_uring_enter(r1, 0x0, 0x10, 0x1, 0x0, 0x0) 0s ago: executing program 3 (id=1287): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/testnqn\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) write(r1, &(0x7f0000000480)='/dev/loop0\x00', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/subsystems/testnqn/namespaces/1/buffered_io\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r3, &(0x7f0000000580)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1\x00', 0x1ed) r4 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r4, &(0x7f0000000680)='loop\x00', 0x4) symlinkat(&(0x7f00000006c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testnqn\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) write(r5, &(0x7f0000000780)='transport=loop,nqn=testnqn\x00', 0x1a) nanosleep(&(0x7f0000000800)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000840)='./sys\x00', &(0x7f0000000880)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/class/nvme/nvme0/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, &(0x7f0000000900), 0x64) r7 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/class/nvme/nvme1/nvme1n1/wwid\x00', 0x0, 0x0) read(r7, &(0x7f0000000980), 0x64) kernel console output (not intermixed with test programs): 4 phy0 wpan0: encryption failed: -22 [ 812.063110][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.957570][ T9428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.038205][ T9428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 814.685877][ T9428] team0: Port device team_slave_0 added [ 814.705604][ T9428] team0: Port device team_slave_1 added [ 814.855024][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 814.855110][ T9467] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.855292][ T9467] bridge_slave_0: entered allmulticast mode [ 814.864735][ T9467] bridge_slave_0: entered promiscuous mode [ 814.985227][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 815.044484][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 815.044580][ T9467] bridge0: port 2(bridge_slave_1) entered disabled state [ 815.044795][ T9467] bridge_slave_1: entered allmulticast mode [ 815.107771][ T9467] bridge_slave_1: entered promiscuous mode [ 815.112269][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.112282][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.112304][ T9428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.321908][ T9428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.321922][ T9428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.321943][ T9428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.364919][ T91] bridge_slave_1: left allmulticast mode [ 816.364946][ T91] bridge_slave_1: left promiscuous mode [ 816.365134][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.367387][ T91] bridge_slave_0: left allmulticast mode [ 816.367408][ T91] bridge_slave_0: left promiscuous mode [ 816.367569][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.422003][ T91] bridge_slave_1: left allmulticast mode [ 816.422047][ T91] bridge_slave_1: left promiscuous mode [ 816.422238][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.454890][ T91] bridge_slave_0: left allmulticast mode [ 816.454918][ T91] bridge_slave_0: left promiscuous mode [ 816.455113][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.503742][ T91] bridge_slave_1: left allmulticast mode [ 816.503818][ T91] bridge_slave_1: left promiscuous mode [ 816.503988][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.507799][ T91] bridge_slave_0: left allmulticast mode [ 816.507827][ T91] bridge_slave_0: left promiscuous mode [ 816.507996][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 816.752155][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.755169][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.777995][ T91] bond0 (unregistering): Released all slaves [ 816.941403][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 816.962469][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.964628][ T91] bond0 (unregistering): Released all slaves [ 817.177313][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 817.191007][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 817.193056][ T91] bond0 (unregistering): Released all slaves [ 817.221772][ T9467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 817.301245][ T9467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 817.695292][ T9428] hsr_slave_0: entered promiscuous mode [ 817.705291][ T9428] hsr_slave_1: entered promiscuous mode [ 817.725361][ T9467] team0: Port device team_slave_0 added [ 817.855084][ T9467] team0: Port device team_slave_1 added [ 818.033686][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.033772][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 818.033956][ T9489] bridge_slave_0: entered allmulticast mode [ 818.065586][ T9489] bridge_slave_0: entered promiscuous mode [ 818.263390][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.263477][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.263658][ T9489] bridge_slave_1: entered allmulticast mode [ 818.265593][ T9489] bridge_slave_1: entered promiscuous mode [ 818.828563][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.828578][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 818.828599][ T9467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 823.168456][ T9709] kAFS: unable to lookup cell 'ÿ' [ 823.775623][ T5608] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 823.775656][ T5608] CPU: 0 UID: 0 PID: 5608 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 823.775681][ T5608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 823.775691][ T5608] Workqueue: hci2 hci_rx_work [ 823.775846][ T5608] Call Trace: [ 823.775852][ T5608] [ 823.775858][ T5608] dump_stack_lvl+0xe8/0x150 [ 823.775959][ T5608] sysfs_create_dir_ns+0x271/0x2a0 [ 823.776021][ T5608] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 823.776042][ T5608] ? rt_spin_unlock+0x163/0x200 [ 823.776112][ T5608] kobject_add_internal+0x62c/0xce0 [ 823.776150][ T5608] kobject_add+0x163/0x240 [ 823.776164][ T5608] ? rt_spin_unlock+0x157/0x200 [ 823.776184][ T5608] ? __pfx_kobject_add+0x10/0x10 [ 823.776231][ T5608] ? get_device_parent+0x370/0x3a0 [ 823.776293][ T5608] device_add+0x3fa/0xb80 [ 823.776316][ T5608] hci_conn_add_sysfs+0xd5/0x210 [ 823.776355][ T5608] le_conn_complete_evt+0xfef/0x1580 [ 823.776419][ T5608] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 823.776444][ T5608] ? lockdep_hardirqs_on+0x7a/0x110 [ 823.776485][ T5608] ? rt_mutex_slowunlock+0x219/0x460 [ 823.776503][ T5608] ? skb_pull_data+0xf0/0x200 [ 823.776582][ T5608] hci_le_enh_conn_complete_evt+0x189/0x490 [ 823.776609][ T5608] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 823.776638][ T5608] hci_event_packet+0x67a/0xf10 [ 823.776670][ T5608] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 823.776693][ T5608] ? __pfx_hci_event_packet+0x10/0x10 [ 823.776712][ T5608] ? rt_spin_unlock+0x157/0x200 [ 823.776736][ T5608] ? hci_send_to_monitor+0xe2/0x590 [ 823.776754][ T5608] hci_rx_work+0x3ee/0x1020 [ 823.776782][ T5608] ? process_scheduled_works+0xa20/0x14e0 [ 823.776895][ T5608] process_scheduled_works+0xa8e/0x14e0 [ 823.776936][ T5608] ? __pfx_process_scheduled_works+0x10/0x10 [ 823.776962][ T5608] ? assign_work+0x3cf/0x5d0 [ 823.776985][ T5608] worker_thread+0xa47/0xfb0 [ 823.777026][ T5608] kthread+0x388/0x470 [ 823.777066][ T5608] ? __pfx_worker_thread+0x10/0x10 [ 823.777085][ T5608] ? __pfx_kthread+0x10/0x10 [ 823.777109][ T5608] ret_from_fork+0x514/0xb70 [ 823.777160][ T5608] ? __pfx_ret_from_fork+0x10/0x10 [ 823.777186][ T5608] ? __switch_to+0xc89/0x1420 [ 823.777225][ T5608] ? __pfx_kthread+0x10/0x10 [ 823.777250][ T5608] ret_from_fork_asm+0x1a/0x30 [ 823.777279][ T5608] [ 823.777328][ T5608] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 823.777359][ T5608] Bluetooth: hci2: failed to register connection device [ 823.826894][ T91] hsr_slave_0: left promiscuous mode [ 823.855851][ T91] hsr_slave_1: left promiscuous mode [ 823.856593][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 823.894458][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.329665][ T91] hsr_slave_0: left promiscuous mode [ 824.345175][ T91] hsr_slave_1: left promiscuous mode [ 824.345907][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.377507][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.436499][ T91] hsr_slave_0: left promiscuous mode [ 824.448088][ T91] hsr_slave_1: left promiscuous mode [ 824.456981][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.472442][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 824.574811][ T9493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 824.643570][ T9493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 824.670148][ T9493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 824.672171][ T9493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 824.685570][ T9493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 825.426276][ T91] team0 (unregistering): Port device team_slave_1 removed [ 825.451194][ T91] team0 (unregistering): Port device team_slave_0 removed [ 825.883328][ T91] team0 (unregistering): Port device team_slave_1 removed [ 825.919046][ T91] team0 (unregistering): Port device team_slave_0 removed [ 826.260787][ T91] team0 (unregistering): Port device team_slave_1 removed [ 826.285392][ T91] team0 (unregistering): Port device team_slave_0 removed [ 826.470333][ T9467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 826.470346][ T9467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 826.470366][ T9467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 826.801853][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 826.867703][ T5608] Bluetooth: hci0: command tx timeout [ 826.908192][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 827.186061][ T9489] team0: Port device team_slave_0 added [ 827.247350][ T9489] team0: Port device team_slave_1 added [ 827.413091][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 827.413104][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.413143][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 827.415338][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 827.415350][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 827.415370][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 827.933693][ T9489] hsr_slave_0: entered promiscuous mode [ 827.963984][ T9489] hsr_slave_1: entered promiscuous mode [ 827.964587][ T9489] debugfs: 'hsr0' already exists in 'hsr' [ 827.964604][ T9489] Cannot create hsr debugfs directory [ 828.591697][ T9493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 828.669947][ T9493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 828.674465][ T9493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 828.676821][ T9493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 828.677294][ T9493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 828.942911][ T9493] Bluetooth: hci0: command tx timeout [ 830.458496][ T91] bridge_slave_1: left allmulticast mode [ 830.458534][ T91] bridge_slave_1: left promiscuous mode [ 830.458721][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.745403][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 830.823471][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 830.827806][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 830.852484][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 830.853069][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 830.866858][ T9493] Bluetooth: hci1: command tx timeout [ 831.016261][ T91] bridge_slave_0: left allmulticast mode [ 831.016290][ T91] bridge_slave_0: left promiscuous mode [ 831.016480][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.023123][ T9493] Bluetooth: hci0: command tx timeout [ 831.409885][ T91] bridge_slave_1: left allmulticast mode [ 831.409913][ T91] bridge_slave_1: left promiscuous mode [ 831.410105][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.556122][ T91] bridge_slave_0: left allmulticast mode [ 831.556148][ T91] bridge_slave_0: left promiscuous mode [ 831.556324][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.038386][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 835.041401][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 835.043444][ T91] bond0 (unregistering): Released all slaves [ 835.758367][ T9801] netlink: 'syz.3.897': attribute type 1 has an invalid length. [ 835.758385][ T9801] netlink: 228 bytes leftover after parsing attributes in process `syz.3.897'. [ 836.053569][ T9493] Bluetooth: hci1: command tx timeout [ 836.053598][ T9493] Bluetooth: hci0: command tx timeout [ 836.053647][ T9493] Bluetooth: hci3: command tx timeout [ 837.050438][ T9805] input: syz1 as /devices/virtual/input/input17 [ 837.148022][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.197602][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.290424][ T91] bond0 (unregistering): Released all slaves [ 837.769413][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 837.993295][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.042150][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.096121][ T9825] netlink: 'syz.3.903': attribute type 1 has an invalid length. [ 838.096137][ T9825] netlink: 756 bytes leftover after parsing attributes in process `syz.3.903'. [ 838.118394][ T5729] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 838.138725][ T5608] Bluetooth: hci3: command tx timeout [ 838.138750][ T5608] Bluetooth: hci1: command tx timeout [ 838.263904][ T91] hsr_slave_0: left promiscuous mode [ 838.267145][ T91] hsr_slave_1: left promiscuous mode [ 838.267818][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 838.272362][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 838.272387][ T5729] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 838.272404][ T5729] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 838.272435][ T5729] usb 3-1: New USB device found, idVendor=093a, idProduct=8002, bcdDevice= 0.00 [ 838.272460][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.278559][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 838.367125][ T5729] usb 3-1: config 0 descriptor?? [ 838.733515][ T91] team0 (unregistering): Port device team_slave_1 removed [ 838.859718][ T91] team0 (unregistering): Port device team_slave_0 removed [ 838.866386][ T5729] hid-generic 0003:093A:8002.0001: collection stack underflow [ 838.866410][ T5729] hid-generic 0003:093A:8002.0001: item 0 4 0 12 parsing failed [ 838.969756][ T5729] hid-generic 0003:093A:8002.0001: probe with driver hid-generic failed with error -22 [ 839.069269][ T5729] usb 3-1: USB disconnect, device number 11 [ 839.104245][ T37] audit: type=1800 audit(1785849796.369:36): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.903" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 839.159191][ T9820] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 839.159225][ T9820] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 839.159267][ T9820] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 840.240235][ T9493] Bluetooth: hci1: command tx timeout [ 840.240263][ T9493] Bluetooth: hci3: command tx timeout [ 840.417928][ T91] team0 (unregistering): Port device team_slave_1 removed [ 840.469704][ T91] team0 (unregistering): Port device team_slave_0 removed [ 841.835965][ T5608] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 842.029870][ T5608] Bluetooth: hci2: unexpected subevent 0x10 length: 30 > 2 [ 842.301597][ T5608] Bluetooth: hci3: command tx timeout [ 842.976214][ T9852] binder: 9850:9852 ioctl c0046209 0 returned -22 [ 843.272350][ T9860] fuse: Bad value for 'fd' [ 843.297379][ T9861] netlink: 'syz.2.912': attribute type 1 has an invalid length. [ 843.297396][ T9861] netlink: 756 bytes leftover after parsing attributes in process `syz.2.912'. [ 843.588079][ T9723] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.588158][ T9723] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.588418][ T9723] bridge_slave_0: entered allmulticast mode [ 843.599434][ T9723] bridge_slave_0: entered promiscuous mode [ 843.686991][ T91] bridge_slave_1: left allmulticast mode [ 843.687019][ T91] bridge_slave_1: left promiscuous mode [ 843.687218][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.709048][ T91] bridge_slave_0: left allmulticast mode [ 843.709075][ T91] bridge_slave_0: left promiscuous mode [ 843.709277][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.660259][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.695093][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.759116][ T91] bond0 (unregistering): Released all slaves [ 846.031637][ T9723] bridge0: port 2(bridge_slave_1) entered blocking state [ 846.031726][ T9723] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.031901][ T9723] bridge_slave_1: entered allmulticast mode [ 846.041351][ T9723] bridge_slave_1: entered promiscuous mode [ 846.774260][ T91] hsr_slave_0: left promiscuous mode [ 846.778452][ T91] hsr_slave_1: left promiscuous mode [ 846.779191][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 846.780848][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 847.373470][ T91] team0 (unregistering): Port device team_slave_1 removed [ 847.460712][ T91] team0 (unregistering): Port device team_slave_0 removed [ 848.449057][ T9723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.651647][ T9723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.712172][ T5608] Bluetooth: hci2: unexpected subevent 0x10 length: 30 > 2 [ 848.789990][ T5729] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 849.001207][ T5729] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.005213][ T5729] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.005235][ T5729] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.005250][ T5729] usb 4-1: Product: syz [ 849.005260][ T5729] usb 4-1: Manufacturer: syz [ 849.005272][ T5729] usb 4-1: SerialNumber: syz [ 849.354963][ T5260] 8021q: adding VLAN 0 to HW filter on device eth20 [ 849.469145][ T9723] team0: Port device team_slave_0 added [ 849.714733][ T9723] team0: Port device team_slave_1 added [ 850.107924][ T5729] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 850.107962][ T5729] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 850.107977][ T5729] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 851.786940][ T5729] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 852.882552][ T5729] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 852.918692][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.918705][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 852.918727][ T9723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 853.001813][ T9723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 853.001827][ T9723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 853.001850][ T9723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.187670][ T5729] usb 4-1: USB disconnect, device number 8 [ 853.221187][ T5729] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 853.898745][ T5608] Bluetooth: hci4: unexpected subevent 0x10 length: 30 > 2 [ 854.240155][ T9749] bridge0: port 1(bridge_slave_0) entered blocking state [ 854.240251][ T9749] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.240442][ T9749] bridge_slave_0: entered allmulticast mode [ 854.342657][ T9749] bridge_slave_0: entered promiscuous mode [ 854.911354][ T9749] bridge0: port 2(bridge_slave_1) entered blocking state [ 854.911442][ T9749] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.911608][ T9749] bridge_slave_1: entered allmulticast mode [ 854.948163][ T9749] bridge_slave_1: entered promiscuous mode [ 855.014289][ T9723] hsr_slave_0: entered promiscuous mode [ 855.028180][ T9723] hsr_slave_1: entered promiscuous mode [ 856.922037][ T9749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.057391][ T9749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 857.495003][ T9780] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.495090][ T9780] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.495263][ T9780] bridge_slave_0: entered allmulticast mode [ 857.524257][ T9780] bridge_slave_0: entered promiscuous mode [ 857.573506][ T9749] team0: Port device team_slave_0 added [ 857.722405][ T9780] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.722495][ T9780] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.722678][ T9780] bridge_slave_1: entered allmulticast mode [ 857.752671][ T9780] bridge_slave_1: entered promiscuous mode [ 857.792451][ T9749] team0: Port device team_slave_1 added [ 858.159473][ T9780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.200760][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 858.200774][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.200795][ T9749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 858.347065][ T9780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.466870][ T9749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 858.466885][ T9749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 858.466907][ T9749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 858.682134][ T9780] team0: Port device team_slave_0 added [ 858.723036][ T9780] team0: Port device team_slave_1 added [ 861.008788][ T9749] hsr_slave_0: entered promiscuous mode [ 861.012805][ T9749] hsr_slave_1: entered promiscuous mode [ 861.016613][ T9749] debugfs: 'hsr0' already exists in 'hsr' [ 861.016634][ T9749] Cannot create hsr debugfs directory [ 861.041821][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.041834][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.041855][ T9780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.100362][ T9780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.100375][ T9780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 861.100397][ T9780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.081735][ T9780] hsr_slave_0: entered promiscuous mode [ 863.087277][ T9780] hsr_slave_1: entered promiscuous mode [ 863.108437][ T9780] debugfs: 'hsr0' already exists in 'hsr' [ 863.108459][ T9780] Cannot create hsr debugfs directory [ 863.992793][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 864.725256][ T9723] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 864.756515][ T9723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 864.796818][T10018] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.941'. [ 864.880634][ T9723] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 864.993315][ T9723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.077839][ T9723] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 865.340255][ T9723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.464266][ T9723] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 865.492647][ T9723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 869.117861][T10049] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 869.117929][T10049] syzkaller0: entered promiscuous mode [ 869.117945][T10049] syzkaller0: entered allmulticast mode [ 870.392245][ T9723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.393886][T10070] warning: `syz.2.954' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 870.688041][ T9723] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.760302][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.763397][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.831698][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.847948][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 875.428954][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 883.759129][T10156] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 885.272936][ T9493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 885.316918][ T9493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 885.335244][ T9493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 885.336110][ T9493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 885.374983][ T9493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 886.553935][ T5729] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 886.698617][ T5729] usb 3-1: Using ep0 maxpacket: 16 [ 886.700677][ T5729] usb 3-1: unable to get BOS descriptor or descriptor too short [ 886.703628][ T5729] usb 3-1: New USB device found, idVendor=15ca, idProduct=1806, bcdDevice= 0.40 [ 886.703649][ T5729] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.703665][ T5729] usb 3-1: Product: syz [ 886.703676][ T5729] usb 3-1: Manufacturer: syz [ 886.703688][ T5729] usb 3-1: SerialNumber: syz [ 888.422663][ T9493] Bluetooth: hci0: command tx timeout [ 888.497458][ T5729] usb 3-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 888.660318][ T5729] usb 3-1: failed to enable PITCH for EP 0x1 [ 888.686632][ T5729] usb 3-1: unit 3 not found! [ 889.852015][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 889.900062][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 889.904490][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 889.926703][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 889.942886][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 890.050719][ T5729] usb 3-1: USB disconnect, device number 12 [ 890.459550][ T9493] Bluetooth: hci0: command tx timeout [ 891.397754][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 891.442696][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 891.448158][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 891.474263][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 891.493122][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 892.070849][ T9493] Bluetooth: hci5: command tx timeout [ 892.539542][ T9493] Bluetooth: hci0: command tx timeout [ 892.955023][ T9961] udevd[9961]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 893.691246][ T9493] Bluetooth: hci6: command tx timeout [ 894.038420][ T5735] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 894.138430][ T9493] Bluetooth: hci5: command tx timeout [ 894.190228][ T5735] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 894.190254][ T5735] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 894.192370][ T5735] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 894.192391][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.192406][ T5735] usb 4-1: Product: syz [ 894.192417][ T5735] usb 4-1: Manufacturer: syz [ 894.192428][ T5735] usb 4-1: SerialNumber: syz [ 894.196335][ T5735] usb 4-1: config 0 descriptor?? [ 894.266169][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 894.266331][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 894.468936][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 894.469078][T10251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 894.624033][ T9493] Bluetooth: hci0: command tx timeout [ 894.876662][ T5735] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 895.658557][ T5735] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 895.757330][ T9493] Bluetooth: hci6: command tx timeout [ 896.114515][ T5735] dm9601 4-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, 3e:5c:b1:f9:c7:a2 [ 896.218486][ T9493] Bluetooth: hci5: command tx timeout [ 896.236697][ T5735] usb 4-1: USB disconnect, device number 9 [ 896.288525][ T5735] dm9601 4-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 896.882265][T10290] binder: 10289:10290 ioctl c0306201 0 returned -14 [ 897.818837][ T9493] Bluetooth: hci6: command tx timeout [ 899.273801][T10305] netlink: 180 bytes leftover after parsing attributes in process `syz.2.993'. [ 899.274581][T10305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 899.376121][ T9493] Bluetooth: hci5: command tx timeout [ 899.898404][ T9493] Bluetooth: hci6: command tx timeout [ 900.363381][T10314] sch_tbf: burst 0 is lower than device gretap0 mtu (1476) ! [ 900.722527][ T9493] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 900.722551][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 900.722571][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 900.722583][ T9493] Workqueue: hci4 hci_rx_work [ 900.722613][ T9493] Call Trace: [ 900.722619][ T9493] [ 900.722635][ T9493] dump_stack_lvl+0xe8/0x150 [ 900.722668][ T9493] sysfs_create_dir_ns+0x271/0x2a0 [ 900.722691][ T9493] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 900.722713][ T9493] ? rt_spin_unlock+0x163/0x200 [ 900.722737][ T9493] kobject_add_internal+0x62c/0xce0 [ 900.722760][ T9493] kobject_add+0x163/0x240 [ 900.722774][ T9493] ? rt_spin_unlock+0x157/0x200 [ 900.722799][ T9493] ? __pfx_kobject_add+0x10/0x10 [ 900.722831][ T9493] ? get_device_parent+0x370/0x3a0 [ 900.722860][ T9493] device_add+0x3fa/0xb80 [ 900.722884][ T9493] hci_conn_add_sysfs+0xd5/0x210 [ 900.722907][ T9493] le_conn_complete_evt+0xfef/0x1580 [ 900.722948][ T9493] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 900.722974][ T9493] ? lockdep_hardirqs_on+0x7a/0x110 [ 900.723006][ T9493] ? rt_mutex_slowunlock+0x219/0x460 [ 900.723024][ T9493] ? skb_pull_data+0xf0/0x200 [ 900.723055][ T9493] hci_le_enh_conn_complete_evt+0x189/0x490 [ 900.723082][ T9493] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 900.723112][ T9493] hci_event_packet+0x67a/0xf10 [ 900.723139][ T9493] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 900.723163][ T9493] ? __pfx_hci_event_packet+0x10/0x10 [ 900.723183][ T9493] ? rt_spin_unlock+0x157/0x200 [ 900.723208][ T9493] ? hci_send_to_monitor+0xe2/0x590 [ 900.723227][ T9493] hci_rx_work+0x3ee/0x1020 [ 900.723255][ T9493] ? process_scheduled_works+0xa20/0x14e0 [ 900.723278][ T9493] process_scheduled_works+0xa8e/0x14e0 [ 900.723320][ T9493] ? __pfx_process_scheduled_works+0x10/0x10 [ 900.723347][ T9493] ? assign_work+0x3cf/0x5d0 [ 900.723371][ T9493] worker_thread+0xa47/0xfb0 [ 900.723403][ T9493] ? __kthread_parkme+0x71/0x1f0 [ 900.723434][ T9493] kthread+0x388/0x470 [ 900.723460][ T9493] ? __pfx_worker_thread+0x10/0x10 [ 900.723480][ T9493] ? __pfx_kthread+0x10/0x10 [ 900.723507][ T9493] ret_from_fork+0x514/0xb70 [ 900.723538][ T9493] ? __pfx_ret_from_fork+0x10/0x10 [ 900.723564][ T9493] ? __switch_to+0xc89/0x1420 [ 900.723589][ T9493] ? __pfx_kthread+0x10/0x10 [ 900.723616][ T9493] ret_from_fork_asm+0x1a/0x30 [ 900.723646][ T9493] [ 900.723692][ T9493] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 900.723724][ T9493] Bluetooth: hci4: failed to register connection device [ 905.202363][T10351] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1004'. [ 905.204241][ T91] bridge_slave_1: left allmulticast mode [ 905.204265][ T91] bridge_slave_1: left promiscuous mode [ 905.204503][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.240783][ T91] bridge_slave_0: left allmulticast mode [ 905.240810][ T91] bridge_slave_0: left promiscuous mode [ 905.241019][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.962695][ T37] audit: type=1804 audit(1785849863.279:37): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1005" name="bus" dev="ramfs" ino=27448 res=1 errno=0 [ 905.969935][ T37] audit: type=1804 audit(1785849863.279:38): pid=10357 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.1005" name="bus" dev="ramfs" ino=27448 res=1 errno=0 [ 906.605763][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 906.633078][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 906.637662][ T91] bond0 (unregistering): Released all slaves [ 907.298543][T10373] fuse: Unknown parameter 'grou00000000000000000000' [ 907.607212][ T91] hsr_slave_0: left promiscuous mode [ 907.626571][ T91] hsr_slave_1: left promiscuous mode [ 907.627362][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 907.646096][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 908.181187][ T5608] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 909.337504][ T91] team0 (unregistering): Port device team_slave_1 removed [ 909.883364][T10392] program syz.2.1017 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 909.956072][ T91] team0 (unregistering): Port device team_slave_0 removed [ 910.160522][T10392] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 910.160552][T10392] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 910.160580][T10392] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 910.164647][T10392] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 910.175316][T10392] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 910.463261][T10386] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1013'. [ 911.124340][T10404] fuse: Unknown parameter 'group_i00000000000000000000' [ 911.527927][T10179] bridge0: port 1(bridge_slave_0) entered blocking state [ 911.528015][T10179] bridge0: port 1(bridge_slave_0) entered disabled state [ 911.543043][T10179] bridge_slave_0: entered allmulticast mode [ 911.560242][T10179] bridge_slave_0: entered promiscuous mode [ 911.565286][T10412] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 911.717463][T10179] bridge0: port 2(bridge_slave_1) entered blocking state [ 911.717561][T10179] bridge0: port 2(bridge_slave_1) entered disabled state [ 911.717708][T10179] bridge_slave_1: entered allmulticast mode [ 911.744289][T10179] bridge_slave_1: entered promiscuous mode [ 911.825517][ T9493] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 913.219929][T10214] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.220017][T10214] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.220208][T10214] bridge_slave_0: entered allmulticast mode [ 913.782896][T10424] program syz.3.1025 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 913.784042][T10424] siw: device registration error -23 [ 913.969671][T10214] bridge_slave_0: entered promiscuous mode [ 914.191956][T10179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.210646][T10214] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.210734][T10214] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.210921][T10214] bridge_slave_1: entered allmulticast mode [ 914.241388][T10214] bridge_slave_1: entered promiscuous mode [ 914.471264][T10179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.822898][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.822986][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.823111][T10229] bridge_slave_0: entered allmulticast mode [ 914.825021][T10229] bridge_slave_0: entered promiscuous mode [ 914.946015][T10214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.970284][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.970371][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.970553][T10229] bridge_slave_1: entered allmulticast mode [ 914.977277][T10229] bridge_slave_1: entered promiscuous mode [ 915.027833][T10179] team0: Port device team_slave_0 added [ 915.097480][T10214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 915.230232][T10179] team0: Port device team_slave_1 added [ 915.520768][T10444] fuse: Unknown parameter 'group_i00000000000000000000' [ 917.175342][T10229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.395796][T10214] team0: Port device team_slave_0 added [ 917.413796][T10229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 917.414396][T10179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 917.414407][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 917.414428][T10179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 917.481377][T10214] team0: Port device team_slave_1 added [ 919.413792][T10454] program syz.3.1033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 919.414900][T10454] siw: device registration error -23 [ 919.690706][T10456] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 919.925294][T10179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 919.925317][T10179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.925339][T10179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.042141][ T5260] 8021q: adding VLAN 0 to HW filter on device eth13 [ 920.411887][T10229] team0: Port device team_slave_0 added [ 920.427573][T10214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.427587][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.427609][T10214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.500150][T10229] team0: Port device team_slave_1 added [ 920.504203][T10214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.504216][T10214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.504239][T10214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.300608][ T5608] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 921.370465][T10179] hsr_slave_0: entered promiscuous mode [ 921.377518][T10179] hsr_slave_1: entered promiscuous mode [ 921.657177][T10229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.657197][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.657219][T10229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.742352][T10479] futex_wake_op: syz.3.1036 tries to shift op by 144; fix this program [ 921.841318][T10229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.841332][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.841354][T10229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 922.644370][T10214] hsr_slave_0: entered promiscuous mode [ 922.646930][T10214] hsr_slave_1: entered promiscuous mode [ 922.647575][T10214] debugfs: 'hsr0' already exists in 'hsr' [ 922.691470][T10214] Cannot create hsr debugfs directory [ 924.367915][T10495] program syz.2.1041 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 924.690483][T10499] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 924.696306][ T9493] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 924.883465][T10229] hsr_slave_0: entered promiscuous mode [ 924.895365][T10229] hsr_slave_1: entered promiscuous mode [ 924.911193][T10229] debugfs: 'hsr0' already exists in 'hsr' [ 924.911217][T10229] Cannot create hsr debugfs directory [ 925.386185][T10506] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 925.525664][T10507] overlayfs: conflicting options: userxattr,redirect_dir=on [ 926.940236][ T5608] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 928.675409][T10530] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 929.746849][T10533] capability: warning: `syz.3.1055' uses deprecated v2 capabilities in a way that may be insecure [ 929.950109][T10535] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 930.245914][T10535] overlayfs: conflicting options: userxattr,redirect_dir=on [ 931.483081][T10553] usbip-vudc usbip-vudc.0: gadget not bound [ 931.568410][ T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 931.728348][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 931.729828][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 931.729868][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 931.729887][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.781664][ T9] usb 4-1: config 0 descriptor?? [ 933.514162][T10568] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 934.563792][ T5729] usb 4-1: USB disconnect, device number 10 [ 936.637838][ T5260] 8021q: adding VLAN 0 to HW filter on device eth17 [ 936.864459][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.883544][ T91] bridge_slave_1: left allmulticast mode [ 936.883572][ T91] bridge_slave_1: left promiscuous mode [ 936.883776][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.886206][ T91] bridge_slave_0: left allmulticast mode [ 936.886230][ T91] bridge_slave_0: left promiscuous mode [ 936.886412][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.962806][ T91] bridge_slave_1: left allmulticast mode [ 936.962834][ T91] bridge_slave_1: left promiscuous mode [ 936.963022][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.992703][ T91] bridge_slave_0: left allmulticast mode [ 936.992730][ T91] bridge_slave_0: left promiscuous mode [ 936.992905][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.309415][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.315120][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.317481][ T91] bond0 (unregistering): Released all slaves [ 937.476371][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.501811][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.506062][ T91] bond0 (unregistering): Released all slaves [ 938.331326][T10593] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 938.491570][ T91] hsr_slave_0: left promiscuous mode [ 938.509737][ T91] hsr_slave_1: left promiscuous mode [ 938.510429][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.612394][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.796240][ T91] hsr_slave_0: left promiscuous mode [ 938.796838][ T91] hsr_slave_1: left promiscuous mode [ 938.797458][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 938.797987][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.832379][T10602] overlayfs: conflicting options: userxattr,redirect_dir=on [ 939.440073][ T9493] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 939.440095][ T9493] CPU: 0 UID: 0 PID: 9493 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 939.440115][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 939.440127][ T9493] Workqueue: hci4 hci_rx_work [ 939.440153][ T9493] Call Trace: [ 939.440159][ T9493] [ 939.440167][ T9493] dump_stack_lvl+0xe8/0x150 [ 939.440197][ T9493] sysfs_create_dir_ns+0x271/0x2a0 [ 939.440218][ T9493] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 939.440241][ T9493] ? rt_spin_unlock+0x163/0x200 [ 939.440262][ T9493] kobject_add_internal+0x62c/0xce0 [ 939.440286][ T9493] kobject_add+0x163/0x240 [ 939.440300][ T9493] ? rt_spin_unlock+0x157/0x200 [ 939.440322][ T9493] ? __pfx_kobject_add+0x10/0x10 [ 939.440354][ T9493] ? get_device_parent+0x370/0x3a0 [ 939.440381][ T9493] device_add+0x3fa/0xb80 [ 939.440405][ T9493] hci_conn_add_sysfs+0xd5/0x210 [ 939.440431][ T9493] le_conn_complete_evt+0xfef/0x1580 [ 939.440466][ T9493] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 939.440492][ T9493] ? lockdep_hardirqs_on+0x7a/0x110 [ 939.440515][ T9493] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 939.440538][ T9493] ? rt_mutex_slowunlock+0x219/0x460 [ 939.440557][ T9493] ? skb_pull_data+0xf0/0x200 [ 939.440594][ T9493] hci_le_conn_complete_evt+0x187/0x470 [ 939.440625][ T9493] hci_event_packet+0x67a/0xf10 [ 939.440652][ T9493] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 939.440676][ T9493] ? __pfx_hci_event_packet+0x10/0x10 [ 939.440697][ T9493] ? rt_spin_unlock+0x157/0x200 [ 939.440722][ T9493] ? hci_send_to_monitor+0xe2/0x590 [ 939.440741][ T9493] hci_rx_work+0x3ee/0x1020 [ 939.440769][ T9493] ? process_scheduled_works+0xa20/0x14e0 [ 939.440790][ T9493] process_scheduled_works+0xa8e/0x14e0 [ 939.440833][ T9493] ? __pfx_process_scheduled_works+0x10/0x10 [ 939.440859][ T9493] ? assign_work+0x3cf/0x5d0 [ 939.440883][ T9493] worker_thread+0xa47/0xfb0 [ 939.440915][ T9493] ? __kthread_parkme+0x71/0x1f0 [ 939.440946][ T9493] kthread+0x388/0x470 [ 939.440972][ T9493] ? __pfx_worker_thread+0x10/0x10 [ 939.440992][ T9493] ? __pfx_kthread+0x10/0x10 [ 939.441019][ T9493] ret_from_fork+0x514/0xb70 [ 939.441048][ T9493] ? __pfx_ret_from_fork+0x10/0x10 [ 939.441074][ T9493] ? __switch_to+0xc89/0x1420 [ 939.441100][ T9493] ? __pfx_kthread+0x10/0x10 [ 939.441126][ T9493] ret_from_fork_asm+0x1a/0x30 [ 939.441156][ T9493] [ 939.441189][ T9493] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 939.441220][ T9493] Bluetooth: hci4: failed to register connection device [ 940.053787][ T91] team0 (unregistering): Port device team_slave_1 removed [ 940.058724][ T5729] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 940.127527][ T91] team0 (unregistering): Port device team_slave_0 removed [ 940.250390][ T5729] usb 3-1: Using ep0 maxpacket: 32 [ 940.252139][ T5729] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 940.252178][ T5729] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 940.252197][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.342815][ T5729] usb 3-1: config 0 descriptor?? [ 940.511891][T10624] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 942.247531][ T91] team0 (unregistering): Port device team_slave_1 removed [ 942.283863][ T91] team0 (unregistering): Port device team_slave_0 removed [ 942.591175][ T5260] 8021q: adding VLAN 0 to HW filter on device eth18 [ 942.896138][ T5729] usb 3-1: USB disconnect, device number 13 [ 948.521932][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.576320][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.592608][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.633915][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.636973][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 949.160146][ T5260] 8021q: adding VLAN 0 to HW filter on device eth19 [ 949.670845][T10662] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 949.867323][T10662] overlayfs: conflicting options: userxattr,redirect_dir=on [ 951.287082][T10686] vhci_hcd vhci_hcd.0: failed to lookup sock [ 951.923644][ T9493] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 951.968889][ T9493] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 951.970215][ T9493] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 952.000286][ T9493] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 952.024960][ T9493] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 952.970920][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 953.200192][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 953.202258][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 953.202298][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 953.202316][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 953.341682][ T5608] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 953.392626][ T5608] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 953.395096][ T5608] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 953.452796][ T5608] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 953.453476][ T5608] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 953.754951][ T9] usb 3-1: config 0 descriptor?? [ 954.138421][ T5608] Bluetooth: hci3: command tx timeout [ 955.660458][ T5608] Bluetooth: hci7: command tx timeout [ 956.218321][ T5608] Bluetooth: hci3: command tx timeout [ 956.463116][ T5729] usb 3-1: USB disconnect, device number 14 [ 957.741139][ T5608] Bluetooth: hci7: command tx timeout [ 958.301300][ T5608] Bluetooth: hci3: command tx timeout [ 960.680627][ T5608] Bluetooth: hci7: command tx timeout [ 960.680650][ T5608] Bluetooth: hci3: command tx timeout [ 961.205837][ T91] bridge_slave_1: left allmulticast mode [ 961.205865][ T91] bridge_slave_1: left promiscuous mode [ 961.206121][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.227851][ T91] bridge_slave_0: left allmulticast mode [ 961.227877][ T91] bridge_slave_0: left promiscuous mode [ 961.228065][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.540061][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 961.546102][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 961.569296][ T91] bond0 (unregistering): Released all slaves [ 962.469595][ T91] hsr_slave_0: left promiscuous mode [ 962.470265][ T91] hsr_slave_1: left promiscuous mode [ 962.470928][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 962.473901][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 963.872596][ T9493] Bluetooth: hci7: command tx timeout [ 963.928263][ T5729] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 964.239254][ T5729] usb 4-1: Using ep0 maxpacket: 32 [ 964.241345][ T5729] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 964.241385][ T5729] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 964.241411][ T5729] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.286625][ T5729] usb 4-1: config 0 descriptor?? [ 964.444980][ T91] team0 (unregistering): Port device team_slave_1 removed [ 964.488991][ T91] team0 (unregistering): Port device team_slave_0 removed [ 966.739603][ T9493] Bluetooth: hci2: Malformed HCI Event [ 966.915922][ T9] usb 4-1: USB disconnect, device number 11 [ 968.336372][T10654] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.336456][T10654] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.336581][T10654] bridge_slave_0: entered allmulticast mode [ 968.363514][T10654] bridge_slave_0: entered promiscuous mode [ 968.515934][T10654] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.516080][T10654] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.516248][T10654] bridge_slave_1: entered allmulticast mode [ 968.538802][T10654] bridge_slave_1: entered promiscuous mode [ 970.412935][T10654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.538383][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 970.572562][T10654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 970.690517][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 970.692630][ T9] usb 4-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 970.692653][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.692668][ T9] usb 4-1: Product: syz [ 970.692679][ T9] usb 4-1: Manufacturer: syz [ 970.692690][ T9] usb 4-1: SerialNumber: syz [ 971.010227][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.010685][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.052767][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 971.067511][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 971.076514][ T9] usb 4-1: unit 2 not found! [ 971.266504][ T9] usb 4-1: USB disconnect, device number 12 [ 972.010974][ T9821] udevd[9821]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 972.130341][T10654] team0: Port device team_slave_0 added [ 972.357053][T10654] team0: Port device team_slave_1 added [ 972.630206][ T5729] input: syz0 as /devices/virtual/misc/uhid/0005:17EF:6048.0002/input/input18 [ 973.283263][T10654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.283277][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.283299][T10654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.379025][T10654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.379039][T10654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.379061][T10654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.380333][ T5729] lenovo 0005:17EF:6048.0002: input,hidraw0: BLUETOOTH HID v0.00 Mouse [syz0] on syz0 [ 973.729138][T10817] fido_id[10817]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 976.062621][T10654] hsr_slave_0: entered promiscuous mode [ 976.063629][T10654] hsr_slave_1: entered promiscuous mode [ 976.080368][T10654] debugfs: 'hsr0' already exists in 'hsr' [ 976.080388][T10654] Cannot create hsr debugfs directory [ 976.861471][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.861629][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.861820][T10691] bridge_slave_0: entered allmulticast mode [ 976.890696][T10691] bridge_slave_0: entered promiscuous mode [ 977.044381][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.044465][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.044623][T10691] bridge_slave_1: entered allmulticast mode [ 977.073094][T10691] bridge_slave_1: entered promiscuous mode [ 977.424555][T10713] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.424696][T10713] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.424861][T10713] bridge_slave_0: entered allmulticast mode [ 977.452526][T10713] bridge_slave_0: entered promiscuous mode [ 977.606020][T10713] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.606124][T10713] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.606266][T10713] bridge_slave_1: entered allmulticast mode [ 977.635001][T10713] bridge_slave_1: entered promiscuous mode [ 977.660977][T10691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.952010][T10691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.293215][ T37] audit: type=1800 audit(1785849935.599:39): pid=10845 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1098" name="local" dev="configfs" ino=30353 res=0 errno=0 [ 978.364612][T10713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 978.445546][T10713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 978.447416][T10691] team0: Port device team_slave_0 added [ 978.467812][ T91] bridge_slave_1: left allmulticast mode [ 978.467838][ T91] bridge_slave_1: left promiscuous mode [ 978.468019][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 978.492423][ T91] bridge_slave_0: left allmulticast mode [ 978.492459][ T91] bridge_slave_0: left promiscuous mode [ 978.492685][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 978.578455][ T5729] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 979.769963][ T5729] usb 3-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 0.00 [ 979.769984][ T5729] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.866676][ T5729] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 979.905998][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.972517][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 980.006405][ T91] bond0 (unregistering): Released all slaves [ 980.388092][T10691] team0: Port device team_slave_1 added [ 980.742646][T10713] team0: Port device team_slave_0 added [ 980.891826][ T91] hsr_slave_0: left promiscuous mode [ 980.894379][ T91] hsr_slave_1: left promiscuous mode [ 980.936716][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 980.967539][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 981.343494][ T2393] usb 3-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 981.343517][ T2393] usb 3-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 981.712945][T10860] binder: 10857:10860 ioctl c0306201 200000000180 returned -14 [ 981.762065][T10858] binder: 10857:10858 unknown command 0 [ 981.762086][T10858] binder: 10857:10858 ioctl c0306201 2000000004c0 returned -22 [ 981.881669][ T91] team0 (unregistering): Port device team_slave_1 removed [ 981.939948][ T91] team0 (unregistering): Port device team_slave_0 removed [ 982.104225][T10863] binder: 10861:10863 ioctl c0306201 0 returned -14 [ 982.254647][T10713] team0: Port device team_slave_1 added [ 982.257318][T10691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.257330][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.257352][T10691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.393029][ T5729] usb 3-1: USB disconnect, device number 15 [ 982.459778][T10691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.459793][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.459815][T10691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.724027][T10713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.724040][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.724059][T10713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.726224][T10713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.726235][T10713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 982.726257][T10713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.177203][T10691] hsr_slave_0: entered promiscuous mode [ 983.217873][T10691] hsr_slave_1: entered promiscuous mode [ 983.676722][T10713] hsr_slave_0: entered promiscuous mode [ 983.720624][T10713] hsr_slave_1: entered promiscuous mode [ 983.721306][T10713] debugfs: 'hsr0' already exists in 'hsr' [ 983.721325][T10713] Cannot create hsr debugfs directory [ 984.415457][T10878] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 987.370248][T10896] program syz.3.1110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 987.371367][T10896] siw: device registration error -23 [ 988.080452][T10915] binder: 10911:10915 ioctl c0306201 0 returned -14 [ 988.118736][T10897] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 989.933926][ T5722] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 989.970259][T10925] ceph: No mds server is up or the cluster is laggy [ 990.077297][ T5722] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 991.726376][T10944] program syz.3.1119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 991.727427][T10944] siw: device registration error -23 [ 991.979862][ T5722] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 992.602121][ T5722] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 995.534408][ T9] libceph: mon0 (1)127.0.0.1:8080 socket error on write [ 996.052951][T10962] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 999.244001][T10987] program syz.3.1127 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 999.245077][T10987] siw: device registration error -23 [ 999.384337][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.575731][T10654] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 999.685139][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 999.736988][T10654] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 999.846417][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 999.849280][ T5722] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1000.022902][ T5722] usb 4-1: not running at top speed; connect to a high speed hub [ 1000.023914][ T5722] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1000.023950][ T5722] usb 4-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 1000.023969][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.097428][T10991] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1000.285353][T10654] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1000.314575][ T5722] usb 4-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 1000.400136][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1000.409891][T11000] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1129'. [ 1000.538012][T10654] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1000.731644][T10654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1001.418131][ T91] bridge_slave_1: left allmulticast mode [ 1001.423849][ T91] bridge_slave_1: left promiscuous mode [ 1001.424125][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.553367][ T91] bridge_slave_0: left allmulticast mode [ 1001.553395][ T91] bridge_slave_0: left promiscuous mode [ 1001.574196][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.224612][ T5722] dvb_usb_rtl28xxu 4-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1002.365467][ T5722] usb 4-1: USB disconnect, device number 13 [ 1002.525564][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.561024][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.566566][ T91] bond0 (unregistering): Released all slaves [ 1005.026161][T11039] program syz.3.1135 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1005.032940][T11039] siw: device registration error -23 [ 1009.086612][T11045] kAFS: unable to lookup cell 'ÿ' [ 1009.756445][ T91] hsr_slave_0: left promiscuous mode [ 1009.764785][ T91] hsr_slave_1: left promiscuous mode [ 1009.765420][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.767487][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.212964][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1010.250793][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1012.353298][ T5608] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1012.413088][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1012.449959][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1012.451142][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1012.451741][ T5608] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1014.335263][ T9493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1014.432114][ T9493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1014.442799][ T9493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1014.445345][ T9493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1014.446094][ T9493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1014.624254][ T5608] Bluetooth: hci0: command tx timeout [ 1014.870608][T11072] CIFS: Attempting to mount //127.0.0.1/share [ 1014.966149][T11074] binder: BINDER_SET_CONTEXT_MGR already set [ 1014.966161][T11074] binder: 11073:11074 ioctl 4018620d 200000004a80 returned -16 [ 1016.835819][T11079] program syz.3.1144 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1016.836839][T11079] siw: device registration error -23 [ 1016.973074][ T5608] Bluetooth: hci1: command tx timeout [ 1016.973560][ T5608] Bluetooth: hci0: command tx timeout [ 1017.346385][ T5608] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1017.424822][ T5608] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1017.430040][ T5608] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1017.431130][ T5608] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1017.433127][ T5608] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1017.745380][T11072] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1017.745762][T11072] CIFS: VFS: cifs_mount failed w/return code = -4 [ 1018.344480][ T5735] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 1018.461847][ T9] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 1019.019574][ T9493] Bluetooth: hci0: command tx timeout [ 1019.019596][ T9493] Bluetooth: hci1: command tx timeout [ 1019.658341][ T5608] Bluetooth: hci5: command tx timeout [ 1020.498724][ T8847] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 1020.498758][ T8847] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 1020.498840][ T8847] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 1021.099628][ T5608] Bluetooth: hci1: command tx timeout [ 1021.099650][ T5608] Bluetooth: hci0: command tx timeout [ 1021.738341][ T9493] Bluetooth: hci5: command tx timeout [ 1022.748670][T11104] fuse: Bad value for 'fd' [ 1023.182665][ T9493] Bluetooth: hci1: command tx timeout [ 1023.818348][ T9493] Bluetooth: hci5: command tx timeout [ 1024.995374][T11103] kAFS: unable to lookup cell 'ÿ' [ 1025.371286][ T5735] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 1025.371409][ T5735] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 1025.660251][T11113] CIFS: Attempting to mount //127.0.0.1/share [ 1025.717000][T11113] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1025.717041][T11113] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1026.220383][T11123] dlm: Using TCP for communications [ 1026.321995][ T9493] Bluetooth: hci5: command tx timeout [ 1026.540158][T11123] dlm: myls: joining the lockspace group... [ 1026.542637][T11119] dlm: dlm user daemon left 1 lockspaces [ 1026.767580][ T37] audit: type=1800 audit(1785849984.069:40): pid=11133 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1153" name="local" dev="configfs" ino=31435 res=0 errno=0 [ 1027.365471][T11143] fuse: Unknown parameter '0x0000000000000003' [ 1031.400576][ T91] bridge_slave_1: left allmulticast mode [ 1031.400603][ T91] bridge_slave_1: left promiscuous mode [ 1031.400795][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.403435][ T91] bridge_slave_0: left allmulticast mode [ 1031.403459][ T91] bridge_slave_0: left promiscuous mode [ 1031.403633][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.709746][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1031.712971][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.718077][ T91] bond0 (unregistering): Released all slaves [ 1032.077807][ T91] hsr_slave_0: left promiscuous mode [ 1032.078608][ T91] hsr_slave_1: left promiscuous mode [ 1032.079208][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1032.079789][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1032.350619][T11167] binder: BINDER_SET_CONTEXT_MGR already set [ 1032.350631][T11167] binder: 11166:11167 ioctl 4018620d 200000004a80 returned -16 [ 1032.757384][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1032.807578][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1033.443735][T11058] bridge0: port 1(bridge_slave_0) entered blocking state [ 1033.443836][T11058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.443988][T11058] bridge_slave_0: entered allmulticast mode [ 1033.479149][T11058] bridge_slave_0: entered promiscuous mode [ 1033.616599][T11058] bridge0: port 2(bridge_slave_1) entered blocking state [ 1033.616688][T11058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.616838][T11058] bridge_slave_1: entered allmulticast mode [ 1033.618895][T11058] bridge_slave_1: entered promiscuous mode [ 1033.861973][T11058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1033.994143][T11058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.270206][T11058] team0: Port device team_slave_0 added [ 1034.286594][T11058] team0: Port device team_slave_1 added [ 1035.029434][T11058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1035.029449][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.029471][T11058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1035.068651][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.068740][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 1035.068940][T11066] bridge_slave_0: entered allmulticast mode [ 1035.074320][T11066] bridge_slave_0: entered promiscuous mode [ 1035.187691][T11058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1035.187705][T11058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1035.187727][T11058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1035.189156][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.189240][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 1035.189421][T11066] bridge_slave_1: entered allmulticast mode [ 1035.195934][T11066] bridge_slave_1: entered promiscuous mode [ 1035.826403][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.330184][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1039.135595][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1039.156054][T11058] hsr_slave_0: entered promiscuous mode [ 1039.166623][T11058] hsr_slave_1: entered promiscuous mode [ 1039.175648][T11058] debugfs: 'hsr0' already exists in 'hsr' [ 1039.175673][T11058] Cannot create hsr debugfs directory [ 1039.393420][T11084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1039.393510][T11084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.393762][T11084] bridge_slave_0: entered allmulticast mode [ 1039.397432][T11084] bridge_slave_0: entered promiscuous mode [ 1039.445525][T11066] team0: Port device team_slave_0 added [ 1039.451583][T11084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1039.451672][T11084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.451860][T11084] bridge_slave_1: entered allmulticast mode [ 1039.483407][T11084] bridge_slave_1: entered promiscuous mode [ 1039.523145][T11066] team0: Port device team_slave_1 added [ 1039.992135][T11084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1039.994668][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1039.994682][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1039.994703][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.131298][T11084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.132260][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.132273][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.132295][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.401296][T11084] team0: Port device team_slave_0 added [ 1040.490021][T11084] team0: Port device team_slave_1 added [ 1040.735014][T11066] hsr_slave_0: entered promiscuous mode [ 1040.737482][T11066] hsr_slave_1: entered promiscuous mode [ 1040.769228][T11066] debugfs: 'hsr0' already exists in 'hsr' [ 1040.769250][T11066] Cannot create hsr debugfs directory [ 1041.195640][T11084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1041.195656][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.195680][T11084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1041.384750][T11084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1041.384764][T11084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1041.384794][T11084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1042.015298][ T5608] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1042.059740][ T5608] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1042.063073][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1042.108379][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1042.116752][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.331475][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1043.459188][ T8847] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1043.649631][ T8847] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 1043.649654][ T8847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.084609][ T8847] usbhid 4-1:1.0: can't add hid device: -32 [ 1044.085320][ T8847] usbhid 4-1:1.0: probe with driver usbhid failed with error -32 [ 1044.299196][ T5608] Bluetooth: hci3: command tx timeout [ 1044.438990][T11084] hsr_slave_0: entered promiscuous mode [ 1044.446403][T11084] hsr_slave_1: entered promiscuous mode [ 1044.454358][T11084] debugfs: 'hsr0' already exists in 'hsr' [ 1044.454383][T11084] Cannot create hsr debugfs directory [ 1044.704852][ T2393] pvrusb2: request_firmware fatal error with code=-110 [ 1044.704912][ T2393] pvrusb2: Failure uploading firmware1 [ 1044.704936][ T2393] pvrusb2: Device initialization was not successful. [ 1044.704942][ T2393] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1044.704950][ T2393] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1044.706102][ T5729] pvrusb2: Device being rendered inoperable [ 1045.255121][ T91] bridge_slave_1: left allmulticast mode [ 1045.255151][ T91] bridge_slave_1: left promiscuous mode [ 1045.255340][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.282382][ T91] bridge_slave_0: left allmulticast mode [ 1045.282411][ T91] bridge_slave_0: left promiscuous mode [ 1045.282608][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.319260][ T91] bridge_slave_1: left allmulticast mode [ 1045.319293][ T91] bridge_slave_1: left promiscuous mode [ 1045.319518][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.322098][ T91] bridge_slave_0: left allmulticast mode [ 1045.322123][ T91] bridge_slave_0: left promiscuous mode [ 1045.322291][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.512508][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.528615][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.530978][ T91] bond0 (unregistering): Released all slaves [ 1045.681363][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.687484][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.711378][ T91] bond0 (unregistering): Released all slaves [ 1046.382767][ T5608] Bluetooth: hci3: command tx timeout [ 1046.406320][ T91] hsr_slave_0: left promiscuous mode [ 1046.406956][ T91] hsr_slave_1: left promiscuous mode [ 1046.407634][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.433791][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.487084][ T91] hsr_slave_0: left promiscuous mode [ 1046.487738][ T91] hsr_slave_1: left promiscuous mode [ 1046.488523][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1046.490212][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1046.598313][ T9] usb 4-1: USB disconnect, device number 14 [ 1048.458302][ T5608] Bluetooth: hci3: command tx timeout [ 1048.534805][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1048.561139][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1049.348737][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1049.398864][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1050.562796][ T5608] Bluetooth: hci3: command tx timeout [ 1051.008574][T11272] nvme_fabrics: missing parameter 'nqn=%s' [ 1052.889002][T11058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1052.893539][T11058] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1052.928022][T11058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1052.958242][ T8847] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1052.960335][T11058] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1053.041730][T11058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1053.058918][T11058] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1053.076975][T11058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1053.148632][T11058] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1053.152140][ T8847] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 1053.152163][ T8847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.197327][T11231] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.197456][T11231] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.197596][T11231] bridge_slave_0: entered allmulticast mode [ 1054.226819][T11231] bridge_slave_0: entered promiscuous mode [ 1054.253330][T11231] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.253427][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.253614][T11231] bridge_slave_1: entered allmulticast mode [ 1054.257955][T11231] bridge_slave_1: entered promiscuous mode [ 1054.554373][T11231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1054.628817][T11231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1054.772697][T11231] team0: Port device team_slave_0 added [ 1054.837986][T11231] team0: Port device team_slave_1 added [ 1055.010870][T11066] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1055.065365][T11066] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1055.261131][T11066] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1055.365727][T11066] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1055.377767][T11231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.377781][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.377801][T11231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.494847][T11066] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1055.669095][T11066] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1055.670467][T11231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.670479][T11231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1055.670499][T11231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.070052][T11312] nvme_fabrics: missing parameter 'nqn=%s' [ 1056.877468][ T8847] usb 4-1: USB disconnect, device number 15 [ 1056.928645][T11066] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1058.514504][T11321] program syz.3.1192 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1058.515713][T11321] siw: device registration error -23 [ 1058.689782][T11066] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1059.115352][T11325] netlink: 'syz.3.1193': attribute type 1 has an invalid length. [ 1059.115368][T11325] netlink: 756 bytes leftover after parsing attributes in process `syz.3.1193'. [ 1059.384218][T11231] hsr_slave_0: entered promiscuous mode [ 1059.385363][T11231] hsr_slave_1: entered promiscuous mode [ 1059.751039][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.182767][T11338] fuse: Unknown parameter 'fd0x0000000000000003' [ 1060.534020][T11341] usbip-vudc usbip-vudc.0: gadget not bound [ 1061.227892][T11058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.573085][T11058] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.666572][ T1216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.666664][ T1216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.722735][ T3409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.722828][ T3409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.823068][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.115539][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.192127][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.192220][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.218512][T11084] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1063.239023][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1063.244936][T11084] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1063.283943][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1063.305900][T11084] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1063.352455][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1063.395687][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.395787][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.519753][T11084] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1063.591020][T11084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1063.906991][T11368] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1198'. [ 1069.207994][T11388] netlink: 'syz.3.1200': attribute type 16 has an invalid length. [ 1069.208012][T11388] netlink: 'syz.3.1200': attribute type 17 has an invalid length. [ 1069.269633][T11388] vlan2: left promiscuous mode [ 1069.269650][T11388] bond_slave_1: left promiscuous mode [ 1071.717173][T11231] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1071.776472][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1071.801467][T11231] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1071.838090][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1072.009805][T11231] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1072.139822][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1072.191823][T11231] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1072.263591][T11231] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1072.365706][T11084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1072.724478][T11435] usbip-vudc usbip-vudc.0: gadget not bound [ 1073.095777][ T9493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1073.157403][ T9493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1073.166449][ T9493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1073.197016][ T9493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1073.206650][ T9493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1073.626040][T11084] 8021q: adding VLAN 0 to HW filter on device team0 [ 1073.717849][ T1219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.737896][ T1219] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1073.881431][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.883223][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1074.027888][T11066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1074.971143][T11231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1075.433067][ T9493] Bluetooth: hci0: command tx timeout [ 1079.648271][T11458] netlink: 'syz.3.1205': attribute type 1 has an invalid length. [ 1079.648290][T11458] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1205'. [ 1080.366993][ T9493] Bluetooth: hci0: command tx timeout [ 1080.935608][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1081.013446][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1081.054772][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1081.073054][ T5608] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1081.093695][ T5608] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1081.352244][T11470] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1206'. [ 1081.895225][ T5608] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1081.956295][ T5608] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1081.968693][ T5608] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1082.002640][ T5608] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1082.003177][ T5608] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1082.182002][ T37] audit: type=1800 audit(1785850039.489:41): pid=11481 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1207" name="local" dev="configfs" ino=34145 res=0 errno=0 [ 1082.386385][ T9493] Bluetooth: hci0: command tx timeout [ 1083.172556][T11231] 8021q: adding VLAN 0 to HW filter on device team0 [ 1083.259490][ T9493] Bluetooth: hci1: command tx timeout [ 1083.327982][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.335891][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1083.617509][ T1219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.617669][ T1219] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1084.139158][ T9493] Bluetooth: hci6: command tx timeout [ 1084.459704][ T9493] Bluetooth: hci0: command tx timeout [ 1085.399388][ T9493] Bluetooth: hci1: command tx timeout [ 1088.948271][T11511] netlink: 'syz.3.1212': attribute type 1 has an invalid length. [ 1088.948292][T11511] netlink: 200 bytes leftover after parsing attributes in process `syz.3.1212'. [ 1089.668456][ T9493] Bluetooth: hci6: command tx timeout [ 1089.668486][ T9493] Bluetooth: hci1: command tx timeout [ 1090.857342][ T91] bridge_slave_1: left allmulticast mode [ 1090.857369][ T91] bridge_slave_1: left promiscuous mode [ 1090.857562][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.885071][ T91] bridge_slave_0: left allmulticast mode [ 1090.885098][ T91] bridge_slave_0: left promiscuous mode [ 1090.885347][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1091.364283][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1091.379113][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1091.382730][ T91] bond0 (unregistering): Released all slaves [ 1091.800696][ T9493] Bluetooth: hci6: command tx timeout [ 1091.800732][ T9493] Bluetooth: hci1: command tx timeout [ 1091.919514][ T91] hsr_slave_0: left promiscuous mode [ 1091.920195][ T91] hsr_slave_1: left promiscuous mode [ 1091.920812][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1091.921534][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1092.369341][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1092.405425][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1092.691233][T11436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1092.691351][T11436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1092.691535][T11436] bridge_slave_0: entered allmulticast mode [ 1092.693969][T11436] bridge_slave_0: entered promiscuous mode [ 1093.300782][T11436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.300871][T11436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.301072][T11436] bridge_slave_1: entered allmulticast mode [ 1093.309450][T11436] bridge_slave_1: entered promiscuous mode [ 1093.647106][T11436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1093.749856][T11436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1093.819455][T11466] Bluetooth: hci6: command tx timeout [ 1095.496444][T11436] team0: Port device team_slave_0 added [ 1095.706495][T11436] team0: Port device team_slave_1 added [ 1095.935276][T11436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.935290][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.935312][T11436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.114224][T11436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.114238][T11436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.114260][T11436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.157848][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1098.227868][T11436] hsr_slave_0: entered promiscuous mode [ 1098.243393][T11436] hsr_slave_1: entered promiscuous mode [ 1098.244141][T11436] debugfs: 'hsr0' already exists in 'hsr' [ 1098.244160][T11436] Cannot create hsr debugfs directory [ 1098.486888][T11231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1098.636996][T11477] bridge0: port 1(bridge_slave_0) entered blocking state [ 1098.637145][T11477] bridge0: port 1(bridge_slave_0) entered disabled state [ 1098.637323][T11477] bridge_slave_0: entered allmulticast mode [ 1098.702265][T11477] bridge_slave_0: entered promiscuous mode [ 1098.818904][T11477] bridge0: port 2(bridge_slave_1) entered blocking state [ 1098.818991][T11477] bridge0: port 2(bridge_slave_1) entered disabled state [ 1098.819188][T11477] bridge_slave_1: entered allmulticast mode [ 1098.858050][T11477] bridge_slave_1: entered promiscuous mode [ 1099.182894][T11461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1099.183112][T11461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1099.183249][T11461] bridge_slave_0: entered allmulticast mode [ 1099.185557][T11461] bridge_slave_0: entered promiscuous mode [ 1099.384420][T11461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1099.384508][T11461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1099.384683][T11461] bridge_slave_1: entered allmulticast mode [ 1099.455509][T11461] bridge_slave_1: entered promiscuous mode [ 1099.502432][T11477] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1099.811982][T11477] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.203935][T11461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1100.204026][T11590] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1221'. [ 1100.344401][T11461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1100.417709][T11477] team0: Port device team_slave_0 added [ 1100.547025][T11477] team0: Port device team_slave_1 added [ 1100.669825][T11461] team0: Port device team_slave_0 added [ 1100.827458][T11461] team0: Port device team_slave_1 added [ 1101.005395][T11477] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.005410][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.005432][T11477] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.351638][T11477] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.351653][T11477] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.351676][T11477] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1101.415573][T11461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1101.415608][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.448584][T11461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1101.567087][T11461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1101.567101][T11461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1101.567123][T11461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1102.706325][ T9493] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1102.769603][ T9493] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1102.775660][ T9493] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1102.801443][ T9493] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1102.839598][ T9493] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1105.068561][ T9493] Bluetooth: hci5: command tx timeout [ 1105.652159][T11477] hsr_slave_0: entered promiscuous mode [ 1105.657600][T11477] hsr_slave_1: entered promiscuous mode [ 1105.683049][T11477] debugfs: 'hsr0' already exists in 'hsr' [ 1105.683085][T11477] Cannot create hsr debugfs directory [ 1106.059013][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1106.173724][T11461] hsr_slave_0: entered promiscuous mode [ 1106.174765][T11461] hsr_slave_1: entered promiscuous mode [ 1106.177067][T11461] debugfs: 'hsr0' already exists in 'hsr' [ 1106.177088][T11461] Cannot create hsr debugfs directory [ 1107.103374][ T9493] Bluetooth: hci5: command tx timeout [ 1108.535317][T11659] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1228'. [ 1109.178578][ T9493] Bluetooth: hci5: command tx timeout [ 1111.939545][ T9493] Bluetooth: hci5: command tx timeout [ 1113.999019][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1114.000325][T11436] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1114.107062][T11436] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1114.199584][T11436] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1114.265070][T11436] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.322145][T11436] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1114.442965][T11436] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1114.700685][T11436] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1114.706431][T11436] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1119.721674][T11731] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1235'. [ 1120.596608][T11609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.596811][T11609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.597002][T11609] bridge_slave_0: entered allmulticast mode [ 1120.630415][T11609] bridge_slave_0: entered promiscuous mode [ 1120.647629][ T91] bridge_slave_1: left allmulticast mode [ 1120.647981][ T91] bridge_slave_1: left promiscuous mode [ 1120.662784][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.686174][ T91] bridge_slave_0: left allmulticast mode [ 1120.686203][ T91] bridge_slave_0: left promiscuous mode [ 1120.686388][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.907197][ T91] bridge_slave_1: left allmulticast mode [ 1120.907225][ T91] bridge_slave_1: left promiscuous mode [ 1120.907415][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.991959][ T91] bridge_slave_0: left allmulticast mode [ 1120.991986][ T91] bridge_slave_0: left promiscuous mode [ 1120.992171][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.196498][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.424481][T11751] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 1121.635972][T11752] overlayfs: missing 'lowerdir' [ 1122.757943][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.778754][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.782517][ T91] bond0 (unregistering): Released all slaves [ 1123.191525][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.194977][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.197573][ T91] bond0 (unregistering): Released all slaves [ 1123.235110][T11609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1123.235216][T11609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1123.235425][T11609] bridge_slave_1: entered allmulticast mode [ 1123.283990][T11609] bridge_slave_1: entered promiscuous mode [ 1124.507873][T11609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.547341][T11609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.706157][ T91] hsr_slave_0: left promiscuous mode [ 1124.706993][ T91] hsr_slave_1: left promiscuous mode [ 1124.707691][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.724790][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1124.740975][ T91] hsr_slave_0: left promiscuous mode [ 1124.742216][ T91] hsr_slave_1: left promiscuous mode [ 1124.742844][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1124.743640][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1125.287209][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1125.314728][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1125.734555][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1125.766040][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1125.964303][T11609] team0: Port device team_slave_0 added [ 1126.001794][T11609] team0: Port device team_slave_1 added [ 1127.794229][T11609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.794244][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.794265][T11609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.853025][T11609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.853039][T11609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.853061][T11609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.509699][T11436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1129.152974][T11609] hsr_slave_0: entered promiscuous mode [ 1129.162675][T11609] hsr_slave_1: entered promiscuous mode [ 1129.165263][T11609] debugfs: 'hsr0' already exists in 'hsr' [ 1129.165296][T11609] Cannot create hsr debugfs directory [ 1129.214529][T11436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1129.567131][ T3399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1129.567349][ T3399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1129.646773][ T3399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1129.646866][ T3399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1130.001689][ T37] audit: type=1800 audit(1785850087.289:42): pid=11788 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1242" name="local" dev="configfs" ino=35985 res=0 errno=0 [ 1131.392050][T11800] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 1131.526284][T11801] overlayfs: missing 'lowerdir' [ 1134.415699][ T9493] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1134.478754][ T9493] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1134.483899][ T9493] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1134.502999][ T9493] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1134.536554][ T9493] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1136.699751][ T9493] Bluetooth: hci0: command tx timeout [ 1137.054767][T11477] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1137.119681][T11477] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1137.711014][T11477] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1137.831934][T11477] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1137.867144][T11477] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1137.957854][T11477] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1138.180212][T11466] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1138.228445][T11466] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1138.266995][T11466] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1138.268073][T11466] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1138.293104][T11466] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1138.778597][T11466] Bluetooth: hci0: command tx timeout [ 1138.819214][T11477] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1138.827438][T11477] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1139.084596][T11898] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 1139.294568][T11900] overlayfs: missing 'lowerdir' [ 1140.858343][T11466] Bluetooth: hci0: command tx timeout [ 1142.938342][T11466] Bluetooth: hci0: command tx timeout [ 1146.442211][ T9493] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1146.493627][ T9493] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1146.538894][ T9493] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1146.542449][ T9493] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1146.544304][ T9493] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1148.404216][ T91] bridge_slave_1: left allmulticast mode [ 1148.404245][ T91] bridge_slave_1: left promiscuous mode [ 1148.404454][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1148.539169][ T91] bridge_slave_0: left allmulticast mode [ 1148.539212][ T91] bridge_slave_0: left promiscuous mode [ 1148.542650][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1148.699150][ T9493] Bluetooth: hci7: command tx timeout [ 1149.835607][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1149.850216][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1149.853908][ T91] bond0 (unregistering): Released all slaves [ 1150.173706][T11951] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1150.173738][T11951] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1150.173753][T11951] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1150.269533][ T5260] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1150.450658][T11962] trusted_key: encrypted_key: master key parameter '‚ÉÛ:6Ôä·%z²]?ä+¬ô®ý[Ý‹¼…KOãgŠPVÒ2' is invalid [ 1150.584295][T11963] overlayfs: missing 'lowerdir' [ 1151.017113][ T91] hsr_slave_0: left promiscuous mode [ 1151.017797][ T91] hsr_slave_1: left promiscuous mode [ 1151.034992][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1151.035684][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1151.676724][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1151.729300][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1152.099320][ T8921] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1152.266210][ T8921] usb 4-1: not running at top speed; connect to a high speed hub [ 1152.273007][ T8921] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 1152.273031][ T8921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.273047][ T8921] usb 4-1: Product: syz [ 1152.273058][ T8921] usb 4-1: Manufacturer: syz [ 1152.273070][ T8921] usb 4-1: SerialNumber: syz [ 1154.207094][ T8921] usb 4-1: 1:1: cannot get freq at ep 0x81 [ 1154.841899][ T8921] usb 4-1: USB disconnect, device number 16 [ 1154.945506][T11833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.945627][T11833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.945830][T11833] bridge_slave_0: entered allmulticast mode [ 1155.042149][T11833] bridge_slave_0: entered promiscuous mode [ 1155.143757][T11986] udevd[11986]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 1156.069099][T11833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.069186][T11833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.069375][T11833] bridge_slave_1: entered allmulticast mode [ 1156.071348][T11833] bridge_slave_1: entered promiscuous mode [ 1156.407056][T11833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.544128][T11833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1156.648291][ T8921] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1156.802077][ T8921] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00 [ 1156.802102][ T8921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.935987][T11833] team0: Port device team_slave_0 added [ 1157.214682][T11833] team0: Port device team_slave_1 added [ 1157.713145][T11886] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.735432][T11886] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.735707][T11886] bridge_slave_0: entered allmulticast mode [ 1157.753171][T11886] bridge_slave_0: entered promiscuous mode [ 1157.901103][T11886] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.901254][T11886] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.901640][T11886] bridge_slave_1: entered allmulticast mode [ 1157.904521][T11886] bridge_slave_1: entered promiscuous mode [ 1158.282839][T11833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1158.282854][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.282876][T11833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1158.482722][T11833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1158.482737][T11833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1158.482758][T11833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1158.682207][T11609] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1158.697095][ T8921] usb 4-1: USB disconnect, device number 17 [ 1158.747581][T11609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1158.860929][T11886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.162264][T11609] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1159.199313][T11609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1159.229189][T11886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.377989][T11609] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1159.573523][T11609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1159.672460][T11609] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1159.705534][T11609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1160.291726][T11886] team0: Port device team_slave_0 added [ 1160.339209][T11833] hsr_slave_0: entered promiscuous mode [ 1160.345711][T11833] hsr_slave_1: entered promiscuous mode [ 1160.361557][T11886] team0: Port device team_slave_1 added [ 1160.623382][T11920] bridge0: port 1(bridge_slave_0) entered blocking state [ 1160.623531][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.623748][T11920] bridge_slave_0: entered allmulticast mode [ 1160.653614][T11920] bridge_slave_0: entered promiscuous mode [ 1160.674906][T11886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.674920][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.674941][T11886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.739460][T11920] bridge0: port 2(bridge_slave_1) entered blocking state [ 1160.739575][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.739724][T11920] bridge_slave_1: entered allmulticast mode [ 1160.743987][T11920] bridge_slave_1: entered promiscuous mode [ 1160.747200][T11886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.747212][T11886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.747234][T11886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.343080][T11920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1161.394859][T11920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.862009][T11886] hsr_slave_0: entered promiscuous mode [ 1161.863209][T11886] hsr_slave_1: entered promiscuous mode [ 1161.901964][T11886] debugfs: 'hsr0' already exists in 'hsr' [ 1161.901984][T11886] Cannot create hsr debugfs directory [ 1161.999497][T11920] team0: Port device team_slave_0 added [ 1162.773563][T11965] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1162.842691][T11965] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1162.847225][T11965] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1162.903258][T11965] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1162.903968][T11965] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1163.125978][T12026] NFSD: Failed to start, no listeners configured. [ 1163.500346][T11920] team0: Port device team_slave_1 added [ 1163.902671][T12036] usbip-vudc usbip-vudc.0: gadget not bound [ 1164.534110][T12043] netlink: 'syz.3.1271': attribute type 16 has an invalid length. [ 1164.534127][T12043] netlink: 'syz.3.1271': attribute type 17 has an invalid length. [ 1164.581856][T11920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1164.581870][T11920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1164.581892][T11920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.036294][T11965] Bluetooth: hci1: command tx timeout [ 1165.258923][T11920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.258937][T11920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.258960][T11920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.944807][ T8921] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 1166.944926][ T8921] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 1166.945019][ T8921] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 1166.945161][ T8921] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 1167.014262][T11920] hsr_slave_0: entered promiscuous mode [ 1167.015463][T11920] hsr_slave_1: entered promiscuous mode [ 1167.016254][T11920] debugfs: 'hsr0' already exists in 'hsr' [ 1167.016487][T11920] Cannot create hsr debugfs directory [ 1167.109789][T11965] Bluetooth: hci1: command tx timeout [ 1168.822666][ T5260] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1168.855744][T12073] usbip-vudc usbip-vudc.0: gadget not bound [ 1169.178811][T11965] Bluetooth: hci1: command tx timeout [ 1170.917227][ T91] bridge_slave_1: left allmulticast mode [ 1170.917257][ T91] bridge_slave_1: left promiscuous mode [ 1170.917468][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.951596][ T91] bridge_slave_0: left allmulticast mode [ 1170.951626][ T91] bridge_slave_0: left promiscuous mode [ 1170.951826][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.071350][ T91] bridge_slave_1: left allmulticast mode [ 1171.071379][ T91] bridge_slave_1: left promiscuous mode [ 1171.071594][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.074538][ T91] bridge_slave_0: left allmulticast mode [ 1171.074564][ T91] bridge_slave_0: left promiscuous mode [ 1171.074726][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.209641][ T8921] logitech-hidpp-device 0005:046D:B012.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 1171.258474][T11965] Bluetooth: hci1: command tx timeout [ 1171.289939][ T91] bridge_slave_1: left allmulticast mode [ 1171.289983][ T91] bridge_slave_1: left promiscuous mode [ 1171.290294][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.382526][ T91] bridge_slave_0: left allmulticast mode [ 1171.382556][ T91] bridge_slave_0: left promiscuous mode [ 1171.382740][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.489708][T12088] fido_id[12088]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1171.708004][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.726235][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.740322][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1171.745193][ T91] bond0 (unregistering): Released all slaves [ 1171.866943][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.883592][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.885790][ T91] bond0 (unregistering): Released all slaves [ 1171.892499][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1171.892523][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.892538][ T9] usb 4-1: Product: syz [ 1171.892550][ T9] usb 4-1: Manufacturer: syz [ 1171.892561][ T9] usb 4-1: SerialNumber: syz [ 1172.634556][ T91] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1172.658368][ T91] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.662783][ T91] bond0 (unregistering): Released all slaves [ 1172.914689][ T5729] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1174.273649][T12091] mac80211_hwsim hwsim9 wlan99: renamed from wlan0 (while UP) [ 1174.303969][ T5729] usb 4-1: Service connection timeout for: 256 [ 1174.303991][ T5729] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 1174.686280][ T5729] ath9k_htc: Failed to initialize the device [ 1175.187009][ T91] hsr_slave_0: left promiscuous mode [ 1175.187660][ T91] hsr_slave_1: left promiscuous mode [ 1175.190489][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.191202][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.302529][ T91] hsr_slave_0: left promiscuous mode [ 1175.319724][ T91] hsr_slave_1: left promiscuous mode [ 1175.402081][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.488850][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.522305][ T91] hsr_slave_0: left promiscuous mode [ 1175.523016][ T91] hsr_slave_1: left promiscuous mode [ 1175.523616][ T91] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1175.524234][ T91] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1175.607826][ T5729] usb 4-1: ath9k_htc: USB layer deinitialized [ 1176.736111][ T8921] usb 4-1: USB disconnect, device number 18 [ 1177.371195][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1177.410843][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1177.883101][T12122] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1182.778012][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1183.686923][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1183.713083][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1184.174648][ T91] team0 (unregistering): Port device team_slave_1 removed [ 1184.204654][ T91] team0 (unregistering): Port device team_slave_0 removed [ 1184.521941][ T5260] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1184.537053][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.537143][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1184.537379][T12029] bridge_slave_0: entered allmulticast mode [ 1184.538488][ T38] INFO: task iou-wrk-11121:11123 blocked for more than 143 seconds. [ 1184.538508][ T38] Not tainted syzkaller #0 [ 1184.538518][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1184.538526][ T38] task:iou-wrk-11121 state:D stack:25600 pid:11123 tgid:11119 ppid:5600 task_flags:0x404150 flags:0x00080006 [ 1184.538581][ T38] Call Trace: [ 1184.538587][ T38] [ 1184.538599][ T38] __schedule+0x16dc/0x5500 [ 1184.538714][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.538756][ T38] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 1184.538780][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.538856][ T38] ? __pfx___schedule+0x10/0x10 [ 1184.538884][ T38] ? schedule+0x90/0x2b0 [ 1184.538907][ T38] schedule+0x164/0x2b0 [ 1184.538929][ T38] do_uevent+0x2c3/0x570 [ 1184.538985][ T38] ? __pfx_do_uevent+0x10/0x10 [ 1184.539003][ T38] ? kfree+0x1c5/0x6c0 [ 1184.539087][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.539116][ T38] ? kobject_uevent_env+0x378/0x9e0 [ 1184.539135][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1184.539216][ T38] ? kobject_uevent_env+0x378/0x9e0 [ 1184.539240][ T38] __dlm_new_lockspace+0x1aa4/0x2060 [ 1184.539261][ T38] ? __dlm_new_lockspace+0x273/0x2060 [ 1184.539285][ T38] ? __pfx___dlm_new_lockspace+0x10/0x10 [ 1184.539306][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1184.539332][ T38] ? cap_capable+0x123/0x460 [ 1184.539400][ T38] ? safesetid_security_capable+0xa9/0x1a0 [ 1184.539443][ T38] ? bpf_lsm_capable+0x9/0x20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1184.539505][ T38] ? security_capable+0x7e/0x2c0 [ 1184.539542][ T38] ? dlm_new_user_lockspace+0x3e/0x80 [ 1184.539565][ T38] device_create_lockspace+0xc7/0x350 [ 1184.539609][ T38] ? __pfx_device_create_lockspace+0x10/0x10 [ 1184.539636][ T38] ? _copy_from_user+0x94/0xb0 [ 1184.539705][ [ 1184.539705][ T38] device_write+0x875/0xed0 [ 1184.539731][ T38] loop_rw_iter+0x42f/0x6a0 [ 1184.618893][ T38] io_write+0x11e6/0x1690 [ 1184.618934][ T38] ? __pfx_io_write+0x10/0x10 [ 1184.618960][ T38] ? __pfx_number+0x10/0x10 [ 1184.619051][ T38] __io_issue_sqe+0x188/0x4d0 [ 1184.619103][ T38] io_issue_sqe+0x16d/0x1020 [ 1184.619132][ T38] io_wq_submit_work+0x7b4/0xca0 [ 1184.619158][ T38] io_worker_handle_work+0x72e/0x10e0 [ 1184.619218][ T38] ? io_wq_worker+0x3de/0xf10 [ 1184.619251][ T38] io_wq_worker+0x452/0xf10 [ 1184.619288][ T38] ? io_wq_worker+0x37c/0xf10 [ 1184.619310][ T38] ? __pfx_io_wq_worker+0x10/0x10 [ 1184.619335][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1184.619360][ T38] ? rt_spin_unlock+0x157/0x200 [ 1184.619381][ T38] ? rt_spin_unlock+0x163/0x200 [ 1184.619397][ T38] ? __pfx_io_wq_worker+0x10/0x10 [ 1184.619421][ T38] ret_from_fork+0x514/0xb70 [ 1184.619451][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.619477][ T38] ? __switch_to+0xc89/0x1420 [ 1184.619502][ T38] ? __pfx_io_wq_worker+0x10/0x10 [ 1184.619526][ T38] ret_from_fork_asm+0x1a/0x30 [ 1184.619556][ T38] [ 1184.619598][ T38] [ 1184.619598][ T38] Showing all locks held in the system: [ 1184.619611][ T38] 4 locks held by pr/legacy/17: [ 1184.619625][ T38] 1 lock held by khungtaskd/38: [ 1184.619634][ T38] #0: ffffffff8e1c3000 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1184.619688][ T38] 4 locks held by kworker/u8:6/91: [ 1184.619698][ T38] #0: ffff88801aea0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1184.619741][ T38] #1: ffffc90002f1fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa20/0x14e0 [ 1184.619781][ T38] #2: ffffffff8f5a39e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1184.619849][ T38] #3: ffffffff8f5b2578 (rtnl_mutex){+.+.}-{4:4}, at: wg_destruct+0x25/0x310 [ 1184.619936][ T38] 5 locks held by kworker/u8:13/2210: [ 1184.619961][ T38] 2 locks held by getty/5349: [ 1184.619970][ T38] #0: ffff888036be80a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1184.620048][ T38] #1: ffffc90003cc62e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 1184.620087][ T38] 3 locks held by syz-executor/5601: [ 1184.620102][ T38] 2 locks held by kworker/0:2/8847: [ 1184.620111][ T38] 2 locks held by kworker/0:7/8921: [ 1184.620121][ T38] 1 lock held by iou-wrk-11121/11123: [ 1184.620130][ T38] #0: ffffffff99bcb458 (&ls_lock){+.+.}-{4:4}, at: __dlm_new_lockspace+0xa3/0x2060 [ 1184.620171][ T38] 1 lock held by dlm_recoverd/11129: [ 1184.620180][ T38] #0: ffff8880368e4d20 (&ls->ls_in_recovery){+.+.}-{4:4}, at: dlm_recoverd+0xba/0x23e0 [ 1184.620222][ T38] 6 locks held by syz-executor/11833: [ 1184.620232][ T38] 4 locks held by syz-executor/11886: [ 1184.620241][ T38] #0: ffff8880358d0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1184.668178][ C0] sctp: sctp_do_sm[pre-fn]: ep:ffff88803bc8b800, EVENT_T_TIMEOUT, TIMEOUT_HEARTBEAT, asoc:ffff888032950000[STATE_ESTABLISHED], sctp_sf_sendbeat_8_3 [ 1184.668252][ C0] sctp: sctp_do_sm[post-fn]: asoc:ffff888032950000, status:DISPOSITION_CONSUME [ 1184.668269][ C0] sctp: sctp_outq_tail: outq:ffff888032950820, chunk:ffff88805e258280[HEARTBEAT] [ 1184.668286][ C0] sctp: sctp_transport_lower_cwnd: transport:ffff88802ac30000, reason:3, cwnd:262128, ssthresh:262128 [ 1184.668313][ C0] sctp: sctp_packet_config: packet:ffff88802ac30308 vtag:0x350d2ce [ 1184.668331][ C0] sctp: sctp_packet_transmit_chunk: packet:ffff88802ac30308 size:32 chunk:ffff88805e258280 size:60 [ 1184.668349][ C0] sctp: sctp_packet_append_chunk: packet:ffff88802ac30308 chunk:ffff88805e258280 [ 1184.668367][ C0] sctp: sctp_outq_flush_data: outq:ffff888032950820, chunk:ffff88805e258a00[DATA], tx-tsn:0x0 skb->head:ffff888061ed8000 skb->users:1 [ 1184.668389][ C0] sctp: sctp_packet_transmit_chunk: packet:ffff88802ac30308 size:92 chunk:ffff88805e258a00 size:9900 [ 1184.668406][ C0] sctp: sctp_packet_append_chunk: packet:ffff88802ac30308 chunk:ffff88805e258a00 [ 1184.668421][ C0] sctp: sctp_outq_flush_data: could not transmit tsn:0x0, status:2 [ 1184.668434][ C0] sctp: sctp_packet_transmit: packet:ffff88802ac30308 [ 1184.668472][ C0] sctp: *** Chunk:ffff88805e258280[HEARTBEAT] No TSN 0x0, length:60, chunk->skb->len:60, rtt_in_progress:0 [ 1184.668527][ C0] sctp: ***sctp_transmit_packet*** skb->len:72 [ 1184.668537][ C0] sctp: sctp_v4_xmit: skb:ffff88805b646dc0, len:72, src:172.20.20.170, dst:172.20.20.170 [ 1184.668611][ C0] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888032950000[STATE_ESTABLISHED] [ 1184.668691][ C0] sctp: +++sctp_inq_pop+++ chunk:ffff88805e258780[HEARTBEAT], length:60, skb->len:56 [ 1184.668709][ C0] sctp: sctp_do_sm[pre-fn]: ep:ffff88803bc8b800, EVENT_T_CHUNK, HEARTBEAT, asoc:ffff888032950000[STATE_ESTABLISHED], sctp_sf_beat_8_3 [ 1184.668775][ C0] sctp: sctp_do_sm[post-fn]: asoc:ffff888032950000, status:DISPOSITION_CONSUME [ 1184.668788][ C0] sctp: sctp_outq_tail: outq:ffff888032950820, chunk:ffff88805e258dc0[HEARTBEAT_ACK] [ 1184.668804][ C0] sctp: sctp_packet_config: packet:ffff88802ac30308 vtag:0x350d2ce [ 1184.668820][ C0] sctp: sctp_packet_transmit_chunk: packet:ffff88802ac30308 size:32 chunk:ffff88805e258dc0 size:60 [ 1184.668845][ C0] sctp: sctp_packet_append_chunk: packet:ffff88802ac30308 chunk:ffff88805e258dc0 [ 1184.668861][ C0] sctp: sctp_outq_flush_data: outq:ffff888032950820, chunk:ffff88805e258a00[DATA], tx-tsn:0x0 skb->head:ffff888061ed8000 skb->users:1 [ 1184.668882][ C0] sctp: sctp_packet_transmit_chunk: packet:ffff88802ac30308 size:92 chunk:ffff88805e258a00 size:9900 [ 1184.668900][ C0] sctp: sctp_packet_append_chunk: packet:ffff88802ac30308 chunk:ffff88805e258a00 [ 1184.668913][ C0] sctp: sctp_outq_flush_data: could not transmit tsn:0x0, status:2 [ 1184.668926][ C0] sctp: sctp_packet_transmit: packet:ffff88802ac30308 [ 1184.668965][ C0] sctp: *** Chunk:ffff88805e258dc0[HEARTBEAT_ACK] No TSN 0x0, length:60, chunk->skb->len:60, rtt_in_progress:0 [ 1184.669023][ C0] sctp: ***sctp_transmit_packet*** skb->len:72 [ 1184.669033][ C0] sctp: sctp_v4_xmit: skb:ffff88803f0b3140, len:72, src:172.20.20.170, dst:172.20.20.170 [ 1184.669083][ C0] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888032950000[STATE_ESTABLISHED] [ 1184.670063][ C0] sctp: +++sctp_inq_pop+++ chunk:ffff888041491280[HEARTBEAT_ACK], length:60, skb->len:56 [ 1184.670084][ C0] sctp: sctp_do_sm[pre-fn]: ep:ffff88803bc8b800, EVENT_T_CHUNK, HEARTBEAT_ACK, asoc:ffff888032950000[STATE_ESTABLISHED], sctp_sf_backbeat_8_3 [ 1184.670105][ C0] sctp: sctp_do_sm[post-fn]: asoc:ffff888032950000, status:DISPOSITION_CONSUME [ 1184.670121][ C0] sctp: sctp_transport_update_rto: transport:ffff88802ac30000, rtt:0, srtt:7 rttvar:7, rto:100 [ 1184.670149][ C0] sctp: sctp_packet_config: packet:ffff88802ac30308 vtag:0x350d2ce [ 1184.670165][ C0] sctp: sctp_outq_flush_data: outq:ffff888032950820, chunk:ffff88805e258a00[DATA], tx-tsn:0x0 skb->head:ffff888061ed8000 skb->users:1 [ 1184.670187][ C0] sctp: sctp_packet_transmit_chunk: packet:ffff88802ac30308 size:32 chunk:ffff88805e258a00 size:9900 [ 1184.670204][ C0] sctp: sctp_packet_append_chunk: packet:ffff88802ac30308 chunk:ffff88805e258a00 [ 1184.670219][ C0] sctp: sctp_outq_flush_data: could not transmit tsn:0x0, status:2 [ 1184.670231][ C0] sctp: sctp_do_sm[post-sfx]: error:0, asoc:ffff888032950000[STATE_ESTABLISHED] [ 1184.758018][ T38] #1: ffff88806010dc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1184.759765][ T38] #2: ffff8880298d0e18 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1184.759818][ T38] #3: ffffffff8ee27338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0x13c/0x710 [ 1184.759920][ T38] 4 locks held by syz-executor/11920: [ 1184.759930][ T38] #0: ffff8880358d0500 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 1184.759975][ T38] #1: ffff88804f402878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 1184.760017][ T38] #2: ffff8880298d0d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 1184.760063][ T38] #3: ffffffff8ee27338 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 1184.760103][ T38] 1 lock held by syz-executor/12029: [ 1184.760114][ T38] 5 locks held by dhcpcd-run-hook/12131: [ 1184.760125][ T38] [ 1184.760129][ T38] ============================================= [ 1184.760129][ T38] [ 1184.760137][ T38] NMI backtrace for cpu 0 [ 1184.760150][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1184.760169][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.760180][ T38] Call Trace: [ 1184.760189][ T38] [ 1184.760196][ T38] dump_stack_lvl+0xe8/0x150 [ 1184.760223][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1184.760270][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1184.760343][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x380 [ 1184.760364][ T38] sys_info+0x135/0x170 [ 1184.760380][ T38] watchdog+0xfd7/0x1030 [ 1184.760433][ T38] ? watchdog+0x1c7/0x1030 [ 1184.760453][ T38] kthread+0x388/0x470 [ 1184.760479][ T38] ? __pfx_watchdog+0x10/0x10 [ 1184.760492][ T38] ? __pfx_kthread+0x10/0x10 [ 1184.760517][ T38] ret_from_fork+0x514/0xb70 [ 1184.760546][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.760571][ T38] ? __switch_to+0xc89/0x1420 [ 1184.760595][ T38] ? __pfx_kthread+0x10/0x10 [ 1184.760621][ T38] ret_from_fork_asm+0x1a/0x30 [ 1184.760649][ T38] [ 1184.760667][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1184.760678][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1184.760696][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1184.760705][ T38] Call Trace: [ 1184.760711][ T38] [ 1184.760717][ T38] vpanic+0x56c/0xa60 [ 1184.760736][ T38] ? __pfx_vpanic+0x10/0x10 [ 1184.760759][ T38] panic+0xc5/0xd0 [ 1184.760775][ T38] ? __pfx_panic+0x10/0x10 [ 1184.760792][ T38] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1184.760813][ T38] ? nmi_trigger_cpumask_backtrace+0x247/0x380 [ 1184.760841][ T38] watchdog+0x1030/0x1030 [ 1184.760861][ T38] ? watchdog+0x1c7/0x1030 [ 1184.760882][ T38] kthread+0x388/0x470 [ 1184.760906][ T38] ? __pfx_watchdog+0x10/0x10 [ 1184.760920][ T38] ? __pfx_kthread+0x10/0x10 [ 1184.760946][ T38] ret_from_fork+0x514/0xb70 [ 1184.760973][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.760999][ T38] ? __switch_to+0xc89/0x1420 [ 1184.761022][ T38] ? __pfx_kthread+0x10/0x10 [ 1184.761051][ T38] ret_from_fork_asm+0x1a/0x30 [ 1184.761079][ T38] [ 1184.761146][ T38] Kernel Offset: disabled