last executing test programs: 5m5.298467366s ago: executing program 2 (id=43): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 5m5.000035137s ago: executing program 2 (id=48): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo/4\x00') pread64(r1, &(0x7f0000002140)=""/17, 0x11, 0x0) 5m4.745847548s ago: executing program 2 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x2, 0x0, 0x0) connect$inet(r7, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x20, r6, 0x1, 0x0, 0xfffffffc, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) 5m4.390198072s ago: executing program 2 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) 5m4.176623434s ago: executing program 2 (id=60): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x1, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)=0x3) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, 0x0, 0x0) r3 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x37d}, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m3.377657037s ago: executing program 2 (id=69): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800"], 0x7c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m2.70785696s ago: executing program 32 (id=69): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2800"], 0x7c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000140)=0xffffffff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m0.514868154s ago: executing program 1 (id=86): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040)=0xfffffff2, 0x16281464) 5m0.389785614s ago: executing program 1 (id=88): r0 = socket$l2tp(0x2, 0x2, 0x73) connect$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001080)="d800", 0x2}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) 5m0.318830577s ago: executing program 1 (id=90): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104206558"], 0xfdef) 4m59.967897717s ago: executing program 1 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) 4m59.825440171s ago: executing program 1 (id=95): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x222}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7b", 0x40}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e9997", 0x7e}], 0x2}}], 0x2, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4m57.352769722s ago: executing program 1 (id=100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000200000000a0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00", @ANYBLOB='Z'], 0x124}}, 0x0) 4m57.202401573s ago: executing program 33 (id=100): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000c40)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000200000000a0000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c00", @ANYBLOB='Z'], 0x124}}, 0x0) 4m17.94235649s ago: executing program 6 (id=365): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6}, 0x10) 4m17.605063206s ago: executing program 6 (id=368): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 4m17.410262627s ago: executing program 6 (id=370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x2, 0x0, [{0x48a, 0x0, 0x1}, {0x3b3, 0x0, 0xc60}]}) 4m16.96182053s ago: executing program 6 (id=373): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) 4m16.721274832s ago: executing program 6 (id=377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="080086dd0001280004000000a60c6eec00be00442ffffe800000000000"], 0xfdef) 4m16.409449009s ago: executing program 0 (id=380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(0x3) 4m16.203473705s ago: executing program 0 (id=382): syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x6f6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 4m16.036083358s ago: executing program 0 (id=384): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000001480)='locks_get_lock_context\x00', r1}, 0x18) flock(r0, 0x8) 4m15.709922438s ago: executing program 0 (id=387): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) 4m15.537165244s ago: executing program 0 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0x9362, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) 4m15.387348002s ago: executing program 6 (id=393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4m15.024537967s ago: executing program 34 (id=393): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000004000085000000720000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) 4m14.629602974s ago: executing program 0 (id=397): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c616e30"], 0x68}}, 0x0) 4m14.317220529s ago: executing program 35 (id=397): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000300)=ANY=[@ANYBLOB='_\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000003000000200001800400028008000300fdffffff0e0001006574683a766c616e30"], 0x68}}, 0x0) 3m43.730799003s ago: executing program 7 (id=549): mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) chdir(&(0x7f0000000080)='./file0\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x111) rmdir(&(0x7f0000000100)='./control\x00') 3m43.540855841s ago: executing program 7 (id=550): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\n\x00'], 0x20) 3m43.337913242s ago: executing program 7 (id=552): unshare(0x20000400) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 3m39.891346668s ago: executing program 7 (id=571): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0x2) 3m39.469924202s ago: executing program 7 (id=575): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x2d40, 0x865, 0x0, 0x0, 0x0) 3m38.680337719s ago: executing program 5 (id=583): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) write$P9_RVERSION(r0, &(0x7f0000000100)={0x13, 0x65, 0xffff, 0x3, 0x6, '9P2000'}, 0x13) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3m37.160041294s ago: executing program 7 (id=589): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m35.077365956s ago: executing program 36 (id=589): madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m34.98385119s ago: executing program 5 (id=593): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x100b) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x220c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r6, 0x2) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000000000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 3m31.907534163s ago: executing program 5 (id=599): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x47b2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x3, 0x0, 0x7ff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) io_uring_enter(r0, 0x2d40, 0x865, 0x0, 0x0, 0x0) 3m29.569138393s ago: executing program 5 (id=603): r0 = syz_open_dev$video(&(0x7f0000000180), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000240)={0xc, {0x1, 0xa2c, 0x200, 0x8000}}) 3m28.939092933s ago: executing program 5 (id=607): bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(0x0, 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f00000005c0)=[{0xf, 0xc401, 0x4f, &(0x7f0000000340)="2fa4aaca558cf35a3e86a08ad4b578c54a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcb6b2cae2a5a1d1fe21e06a25b420583e45f7afa4f265a9d9068b1568dedca7f43f25"}], 0x1}) 3m24.867806156s ago: executing program 5 (id=614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140700001000010000000000000000000000000a54"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m11.476073913s ago: executing program 4 (id=628): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x90, r1, 0x405, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48894}, 0x20004080) 3m10.092830125s ago: executing program 4 (id=631): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000c00000008000300", @ANYRES32=r3, @ANYBLOB="0a00070008021100000100003000508011000a004abee339084eeef16f162471f40000000800070000000000050002"], 0x58}}, 0x800) 3m8.655228673s ago: executing program 37 (id=614): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="140700001000010000000000000000000000000a54"], 0x7c}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x13, 0x7, 0x106c, 0x8, 0x8000000000000, 0x8000000400007f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m7.598206378s ago: executing program 4 (id=636): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x58, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x44000}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, 0x9, 0x6, 0x801, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x11}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 3m6.342407022s ago: executing program 4 (id=638): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 3m4.785577554s ago: executing program 4 (id=641): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x691, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8c0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a0000000400000008000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000000040)={0x0, @l2tp={0x2, 0x0, @empty}, @can, @nl=@unspec, 0xa00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}) 2m57.027899814s ago: executing program 4 (id=653): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000006c0)={0x77774002, 0x1b000, 0x22}) close_range(r0, 0xffffffffffffffff, 0x0) 2m39.099440538s ago: executing program 38 (id=653): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f00000006c0)={0x77774002, 0x1b000, 0x22}) close_range(r0, 0xffffffffffffffff, 0x0) 2m26.281330392s ago: executing program 8 (id=679): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00'}, 0x10) mremap(&(0x7f00003ab000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000ffc000/0x1000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2m25.154625074s ago: executing program 8 (id=681): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a48637cb781581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb", 0x3f}, {&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e349359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e76881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20b877a39157101dbd8e23bc9ed32efed96c410a103d3533", 0x1e2}], 0x2}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a7040f7dff39e90a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb31347fc2ba20baa8cc06a99aea4a4221e753e94bf215a02377273dfb5b0cd", 0x3f}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749", 0x1b}, {&(0x7f0000000300)="e11b12d8e463a0b8dd59326154501ecf0819f23ca714d4a23e3be62be279e7e5959106799deb35c7f7fd59d5f8dc617c2a8fbccb4792bf67e3723aaf17f518045fa8f87f907a589f5bf63177c693d8c440d2fe9db6916a0a7ab91e693509f4e9440ad12f02126e866ae679f93d0acee16664dbbc4bb25f0d776e4096ee3ec57ee0cab99031c4783854663af5086b24f69721b8cf15", 0x95}], 0x3}}], 0x2, 0x54004) writev(r0, &(0x7f0000000b80)=[{&(0x7f0000000640)="46daf6dfa0fcabb990635232180cb28bc15167fe7fca2e7b023acc6def6992c5e3af7df84bb75b8cbeb4188c17a2b3b175d65c4b83ed20bbe4c43c0f8554eaeed8de48e062ad02a56840a46f15524fa387dd2a288a0e0d2a110ff5bc598e9b3dc58ed87f5884ebed5f5d7d80ebbcc33c2a59ce98edb0d70ac96d956c8254958f6e87f032578859d76d306003d84d37e34a6f89c5a45f626e68e3cbe3608529671ee9851a1113aa91612b7ac1ffc845ac6400b872b9471d7150a26b9c813b1a6cacf80126bae6a50e9c529235def3414640e177307076cb", 0xd7}, {&(0x7f0000000740)="bbb444be37206ac692bec92c8b221ac8b632c039dfff045c852647329abce195b9fd275caf831923a728f0b38d2737e671f106cfc064d215814c52e79b3429a7fbb3474efc51f649f12ba162aa2704e6d0ad784aacb7f727e87aacf421816bb1bd327f882d2d2d45ddad53286fa1323660630078dfc9f1bcbc9d2941c65ebd4a7b09b6aec6ff7b109853f3fa5c458853f636395fc091b59d1249f479a1cf72c2f78362e532f373ae85149b2eee945baab41c7d1b2ebb6839f58f7e39c1853bd2a6e53bcd26dc98180df0f4ff3a618d914eaefc2f0461c7dcf9c27f6ee24e5abddce3140f9949675a8cc7fda68cd73648c77802b3d5", 0xf5}, {&(0x7f0000000200)="0bb927cb6765e383ee796e0edc2c5b31583e39f1e0e9d1739afac441519fb775405d0887559b64b104bb10c5487456e21699a1e993211f843c5d154c2626bafc8fec3a168db78ce38080ffc5a102799414104ebd22a5e469446bfd6a36b68d1af7cea192e082a4748d7c80d57399462070bee90725b38b", 0x77}, {&(0x7f0000000a40)="a2b3e3997e78105743a0748a83811f0fcf424e79ea7f9be3083679f57a7e4a65c0e264ee0b6b02732f85161c1d74522ad60c1c5580e79953cee5d253af5873c2242082d8823389fdfde0c83160d07a99ff948c1129c3afd00dc6db3406a92703ad4e8dd69f5220262e55b4ef4f263a77426b2ba68b8417ab7c01bf715430c822337ffa2266a4d0b7ab5a3c2e67591857d65afd94", 0x94}, {&(0x7f0000000b00)="c35302f49463d5c67585411ae464da41157a419cb9d502a626ac46848fc28f0e9ac8a479c62d218eef4a2a1968013c71636b8704", 0x34}, {0x0}], 0x6) 2m22.343727976s ago: executing program 8 (id=684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000078000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f340012802000c50f0000000000006f7461000000100002800c00014000000000000000091000018007000100637400000400028008000340000001"], 0xc0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20054800) r1 = creat(0x0, 0xe5) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x4) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x403, 0xfffffffd, 0x4, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$EVIOCGREP(r1, 0x80084503, 0x0) setgroups(0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x2c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCL_SETVESABLANK(r5, 0x560e, &(0x7f0000000140)) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x5606, 0x4) ioctl$TIOCL_BLANKSCREEN(r6, 0x541c, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$UHID_DESTROY(r2, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000280)=0x20007) ioctl$TIOCVHANGUP(r7, 0x5437, 0x2000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x2e, &(0x7f0000000000)=r8, 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000800)='/sys/kernel/profiling', 0x89022, 0x1) 2m19.796350303s ago: executing program 8 (id=686): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x8001, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 2m17.388196216s ago: executing program 8 (id=688): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 2m15.439835751s ago: executing program 8 (id=690): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x714e, 0x0) 1m59.718732673s ago: executing program 39 (id=690): pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r6], 0x20}}, 0x0) write$binfmt_misc(r1, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x714e, 0x0) 4.955286691s ago: executing program 3 (id=797): bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) 4.370763413s ago: executing program 3 (id=798): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3.439490317s ago: executing program 3 (id=799): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x5}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0x8, 0x0, 0x6, 0x2, 0xfffffffb, 0x2, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x0, 0xfffffffb, 0x2004, 0x3, 0x0, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0xd, 0x3, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x4, 0xe, 0x4, 0x2, 0x6f, 0x8, 0x9, 0x1, 0x199d, 0x6, 0x2, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x0, 0x25, 0x7, 0xfffffffc, 0x7, 0x7fff, 0x72c, 0x1c32, 0x3, 0x5, 0x10000, 0x400, 0x7ffd, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0x6, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x8, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x1, 0x379, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7, 0x200, 0x3], [0x401, 0x8000c584, 0xffff, 0xcd3, 0x7, 0x1f, 0x404, 0x6, 0x4008, 0xc, 0x50000000, 0x9, 0xe8b, 0x5, 0x80000001, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0xfffffffe, 0x200003, 0x2, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x3, 0x8, 0x3, 0xbf23, 0x6, 0x9, 0x956, 0x0, 0x3ff, 0xe, 0x6, 0x100fffd, 0x2005, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0xffff, 0x3, 0x3, 0x88, 0x0, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x402, 0x1, 0x5, 0x1000, 0x7f, 0x5, 0x3fa6, 0x9, 0x0, 0x5, 0x6, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x86, 0x44, 0x409, 0x3, 0xffffffff, 0x4, 0x10, 0xffff, 0xffffffff, 0x7fff, 0xffff8a33, 0xfffffff8, 0x401, 0x3, 0x200, 0x7, 0x4edf, 0xfffffffd, 0xa, 0x12, 0x2, 0xf, 0x12, 0x136, 0x6]}, 0x45c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x22, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffea1, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x9}, 0x80}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) pipe(&(0x7f00000001c0)) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0xffffffff, @local, 0x7}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) ioctl$UI_DEV_CREATE(r0, 0x5501) readv(r0, &(0x7f0000001240)=[{0x0}], 0x1) write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 1.790640064s ago: executing program 3 (id=800): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x2245, 0xfa11, 0xffffffff}, 0x0) unshare(0x8040480) socket$unix(0x1, 0x1, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f0000000100)={0xa00, 0xa00}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fsopen(&(0x7f0000000080)='qnx4\x00', 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r6, 0x400, 0x1) syz_open_dev$media(&(0x7f0000000080), 0x5, 0x0) fremovexattr(r6, &(0x7f0000000040)=@known='system.posix_acl_default\x00') preadv(r5, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) 437.446417ms ago: executing program 3 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFBR(r2, 0x8940, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2b}}}]}, 0x38}}, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x587, 0x9}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) 0s ago: executing program 3 (id=802): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) socket$alg(0x26, 0x5, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x801, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000280)={0x2, 0x2}, &(0x7f00000003c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x2235d, 0x4000, 0x2, 0x402002d8}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000c00)=""/78, 0x4e}], 0x1, 0x611, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000040), 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x80, &(0x7f0000000100)=0xffb, 0x0, 0x4) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.185' (ED25519) to the list of known hosts. [ 73.254921][ T5789] cgroup: Unknown subsys name 'net' [ 73.495891][ T5789] cgroup: Unknown subsys name 'cpuset' [ 73.551819][ T5789] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.102767][ T5789] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.344545][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.348654][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.350300][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.364409][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.365121][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.365966][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.367454][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.369432][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.370211][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.381666][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.388273][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.390770][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.413961][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.458649][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.463333][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.464172][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.464957][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.466083][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.467990][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.472508][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.565527][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 77.570960][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 77.591233][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 77.592528][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 77.593342][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.372899][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 78.377737][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 78.482700][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 78.680471][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 78.698230][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 79.354212][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.355309][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.355848][ T5799] bridge_slave_0: entered allmulticast mode [ 79.357329][ T5799] bridge_slave_0: entered promiscuous mode [ 79.382677][ T61] Bluetooth: hci0: command tx timeout [ 79.398740][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.398814][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.399108][ T5800] bridge_slave_0: entered allmulticast mode [ 79.400449][ T5800] bridge_slave_0: entered promiscuous mode [ 79.463122][ T61] Bluetooth: hci1: command tx timeout [ 79.503485][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.503554][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.503683][ T5799] bridge_slave_1: entered allmulticast mode [ 79.505045][ T5799] bridge_slave_1: entered promiscuous mode [ 79.526668][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.526829][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.527006][ T5800] bridge_slave_1: entered allmulticast mode [ 79.529395][ T5800] bridge_slave_1: entered promiscuous mode [ 79.621259][ T61] Bluetooth: hci4: command tx timeout [ 79.621310][ T5804] Bluetooth: hci2: command tx timeout [ 79.621554][ T5119] Bluetooth: hci3: command tx timeout [ 79.942053][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.942165][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.942315][ T5801] bridge_slave_0: entered allmulticast mode [ 79.943692][ T5801] bridge_slave_0: entered promiscuous mode [ 80.232010][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.232148][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.232318][ T5801] bridge_slave_1: entered allmulticast mode [ 80.233905][ T5801] bridge_slave_1: entered promiscuous mode [ 80.239299][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.239626][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.239734][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.239894][ T5803] bridge_slave_0: entered allmulticast mode [ 80.242767][ T5803] bridge_slave_0: entered promiscuous mode [ 80.274462][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.274681][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.274812][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.274973][ T5813] bridge_slave_0: entered allmulticast mode [ 80.277393][ T5813] bridge_slave_0: entered promiscuous mode [ 80.383766][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.385129][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.385247][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.385422][ T5803] bridge_slave_1: entered allmulticast mode [ 80.386764][ T5803] bridge_slave_1: entered promiscuous mode [ 80.389610][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.389808][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.389897][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.389999][ T5813] bridge_slave_1: entered allmulticast mode [ 80.393441][ T5813] bridge_slave_1: entered promiscuous mode [ 80.945572][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.184461][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.186063][ T5799] team0: Port device team_slave_0 added [ 81.189397][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.216427][ T5800] team0: Port device team_slave_0 added [ 81.219468][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.313395][ T5799] team0: Port device team_slave_1 added [ 81.315456][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.317060][ T5800] team0: Port device team_slave_1 added [ 81.319489][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.462521][ T5119] Bluetooth: hci0: command tx timeout [ 81.541223][ T5119] Bluetooth: hci1: command tx timeout [ 81.643692][ T5801] team0: Port device team_slave_0 added [ 81.701432][ T5119] Bluetooth: hci3: command tx timeout [ 81.701465][ T5119] Bluetooth: hci2: command tx timeout [ 81.702699][ T61] Bluetooth: hci4: command tx timeout [ 81.722438][ T805] cfg80211: failed to load regulatory.db [ 81.953960][ T5801] team0: Port device team_slave_1 added [ 81.956121][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.956131][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.956144][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.960515][ T5803] team0: Port device team_slave_0 added [ 82.234216][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.234231][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.234245][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.236990][ T5813] team0: Port device team_slave_0 added [ 82.342640][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.342661][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.342683][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.349382][ T5803] team0: Port device team_slave_1 added [ 82.350051][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.350064][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.350077][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.372985][ T5813] team0: Port device team_slave_1 added [ 82.622718][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.622730][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.622743][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.783265][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.783277][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.783290][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.785218][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.785229][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.785241][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.787252][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.787264][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.787286][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.022532][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.022543][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.022556][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.023422][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.023431][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.023443][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.240536][ T5799] hsr_slave_0: entered promiscuous mode [ 83.243829][ T5799] hsr_slave_1: entered promiscuous mode [ 83.253913][ T5800] hsr_slave_0: entered promiscuous mode [ 83.254674][ T5800] hsr_slave_1: entered promiscuous mode [ 83.255316][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 83.255424][ T5800] Cannot create hsr debugfs directory [ 83.541245][ T61] Bluetooth: hci0: command tx timeout [ 83.546589][ T5801] hsr_slave_0: entered promiscuous mode [ 83.547371][ T5801] hsr_slave_1: entered promiscuous mode [ 83.547874][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 83.547894][ T5801] Cannot create hsr debugfs directory [ 83.621229][ T61] Bluetooth: hci1: command tx timeout [ 83.781369][ T5804] Bluetooth: hci3: command tx timeout [ 83.781461][ T5119] Bluetooth: hci2: command tx timeout [ 83.781528][ T61] Bluetooth: hci4: command tx timeout [ 83.844820][ T5803] hsr_slave_0: entered promiscuous mode [ 83.845635][ T5803] hsr_slave_1: entered promiscuous mode [ 83.846132][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 83.846149][ T5803] Cannot create hsr debugfs directory [ 83.873969][ T5813] hsr_slave_0: entered promiscuous mode [ 83.874752][ T5813] hsr_slave_1: entered promiscuous mode [ 83.875263][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 83.875288][ T5813] Cannot create hsr debugfs directory [ 85.359069][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.412001][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.456642][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.490509][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.608704][ T5799] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.621211][ T61] Bluetooth: hci0: command tx timeout [ 85.645255][ T5799] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.687955][ T5799] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.701405][ T61] Bluetooth: hci1: command tx timeout [ 85.739668][ T5799] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.851691][ T5803] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.871290][ T5804] Bluetooth: hci3: command tx timeout [ 85.871336][ T5119] Bluetooth: hci2: command tx timeout [ 85.871370][ T61] Bluetooth: hci4: command tx timeout [ 85.879690][ T5803] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.940662][ T5803] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.994065][ T5803] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 86.130595][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.167825][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.200193][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.245167][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.378979][ T5813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.409871][ T5813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.429945][ T5813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.477870][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.478842][ T5813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.609698][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.627950][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.650179][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.652508][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.683951][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.684170][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.727314][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.769109][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.774830][ T3744] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.775030][ T3744] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.806784][ T3744] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.807110][ T3744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.857973][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.864919][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.903245][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.903434][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.935920][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.936023][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.973608][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.976760][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.019699][ T85] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.023286][ T85] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.065106][ T85] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.065203][ T85] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.144350][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.196437][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.200147][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.250903][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.269061][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.467011][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.626662][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.737954][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.022722][ T5799] veth0_vlan: entered promiscuous mode [ 88.076144][ T5799] veth1_vlan: entered promiscuous mode [ 88.077275][ T5803] veth0_vlan: entered promiscuous mode [ 88.096434][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.134191][ T5803] veth1_vlan: entered promiscuous mode [ 88.149315][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.242026][ T5799] veth0_macvtap: entered promiscuous mode [ 88.269425][ T5800] veth0_vlan: entered promiscuous mode [ 88.270830][ T5799] veth1_macvtap: entered promiscuous mode [ 88.304445][ T5813] veth0_vlan: entered promiscuous mode [ 88.326143][ T5803] veth0_macvtap: entered promiscuous mode [ 88.328861][ T5800] veth1_vlan: entered promiscuous mode [ 88.354894][ T5803] veth1_macvtap: entered promiscuous mode [ 88.360647][ T5813] veth1_vlan: entered promiscuous mode [ 88.385173][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.386449][ T5801] veth0_vlan: entered promiscuous mode [ 88.414846][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.430324][ T5801] veth1_vlan: entered promiscuous mode [ 88.439684][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.465719][ T3704] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.472659][ T3704] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.490734][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.500058][ T3704] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.533791][ T3704] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.555156][ T5800] veth0_macvtap: entered promiscuous mode [ 88.556233][ T3744] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.607050][ T3744] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.609586][ T3744] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.617328][ T3744] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.618240][ T5813] veth0_macvtap: entered promiscuous mode [ 88.619638][ T5800] veth1_macvtap: entered promiscuous mode [ 88.700943][ T5813] veth1_macvtap: entered promiscuous mode [ 88.934237][ T5801] veth0_macvtap: entered promiscuous mode [ 88.964604][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.999138][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.003178][ T5801] veth1_macvtap: entered promiscuous mode [ 89.019908][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.027952][ T3704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.027978][ T3704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.056898][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.087242][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.102885][ T3589] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.107329][ T3589] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.131176][ T3589] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.155123][ T3589] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.173136][ T3589] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.178869][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.183436][ T3589] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.198409][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.198428][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.232726][ T72] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.235606][ T3744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.235620][ T3744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.317128][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.469639][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.469659][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.481294][ T72] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.527029][ T72] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.591314][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.610570][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.767449][ T3744] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.767464][ T3744] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.966866][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.966888][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.065238][ T66] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.065257][ T66] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.243699][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.243719][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.523550][ T1483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.523572][ T1483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.633363][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.633384][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.713759][ T5937] netlink: 104 bytes leftover after parsing attributes in process `syz.4.5'. [ 91.643677][ T5952] netlink: 148 bytes leftover after parsing attributes in process `syz.0.14'. [ 91.643860][ T5952] Zero length message leads to an empty skb [ 91.714432][ T5954] netlink: 'syz.3.15': attribute type 10 has an invalid length. [ 91.717646][ T5954] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.744092][ T5954] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.852562][ T49] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 91.887218][ T5954] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.887302][ T5954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.889484][ T5954] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.889580][ T5954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.922406][ T5954] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 92.051127][ T49] usb 2-1: Using ep0 maxpacket: 8 [ 92.060290][ T49] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.060318][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.060339][ T49] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.060359][ T49] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.060397][ T49] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.060417][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.423710][ T49] usb 2-1: GET_CAPABILITIES returned 0 [ 92.423754][ T49] usbtmc 2-1:16.0: can't read capabilities [ 92.455082][ T5966] netlink: 12 bytes leftover after parsing attributes in process `syz.0.20'. [ 92.706301][ T805] usb 2-1: USB disconnect, device number 2 [ 92.968611][ T5977] netlink: 44 bytes leftover after parsing attributes in process `syz.4.23'. [ 93.021602][ T5979] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.297928][ T5979] kvm: pic: single mode not supported [ 93.298003][ T5979] kvm: pic: level sensitive irq not supported [ 93.298057][ T5979] kvm: pic: single mode not supported [ 93.298066][ T5979] kvm: pic: level sensitive irq not supported [ 93.484841][ T5994] netlink: 148 bytes leftover after parsing attributes in process `syz.4.28'. [ 94.044964][ T6009] netlink: 44 bytes leftover after parsing attributes in process `syz.3.36'. [ 94.683303][ T6031] netlink: 16 bytes leftover after parsing attributes in process `syz.1.42'. [ 94.683338][ T6031] netlink: 52 bytes leftover after parsing attributes in process `syz.1.42'. [ 94.683352][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.42'. [ 95.126213][ T6045] netlink: 44 bytes leftover after parsing attributes in process `syz.1.49'. [ 96.252537][ T6081] netlink: 44 bytes leftover after parsing attributes in process `syz.4.65'. [ 96.678839][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 96.679345][ T1512] Bluetooth: hci3: Frame reassembly failed (-84) [ 96.679391][ T1512] Bluetooth: hci3: Frame reassembly failed (-84) [ 96.679431][ T1512] Bluetooth: hci3: Frame reassembly failed (-84) [ 96.679485][ T1512] Bluetooth: hci3: Frame reassembly failed (-84) [ 96.679553][ T1512] Bluetooth: hci3: Frame reassembly failed (-84) [ 97.174855][ T3731] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.369477][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.388610][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.409544][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.414433][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.416805][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 97.544968][ T5891] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.702323][ T5891] usb 5-1: device descriptor read/64, error -71 [ 97.723799][ T5804] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 97.726394][ T3731] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.728948][ T6106] netlink: 44 bytes leftover after parsing attributes in process `syz.1.76'. [ 97.951809][ T5891] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 98.104069][ T5891] usb 5-1: device descriptor read/64, error -71 [ 98.105593][ T3731] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.227572][ T5891] usb usb5-port1: attempt power cycle [ 98.420702][ T3731] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.619580][ T5891] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.634103][ T5891] usb 5-1: device descriptor read/8, error -71 [ 98.746373][ T61] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 98.881730][ T5891] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 98.901911][ T5891] usb 5-1: device descriptor read/8, error -71 [ 99.011656][ T5891] usb usb5-port1: unable to enumerate USB device [ 99.165756][ T6099] chnl_net:caif_netlink_parms(): no params data found [ 99.462154][ T61] Bluetooth: hci5: command tx timeout [ 99.512104][ T6134] netlink: 44 bytes leftover after parsing attributes in process `syz.3.87'. [ 99.628708][ T6142] capability: warning: `syz.3.91' uses deprecated v2 capabilities in a way that may be insecure [ 99.672307][ T6143] syz.0.89 uses obsolete (PF_INET,SOCK_PACKET) [ 99.800794][ T3731] bridge_slave_1: left allmulticast mode [ 99.800910][ T3731] bridge_slave_1: left promiscuous mode [ 99.819955][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.944858][ T3731] bridge_slave_0: left allmulticast mode [ 99.944879][ T3731] bridge_slave_0: left promiscuous mode [ 99.945076][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.682052][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 100.682128][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 100.682186][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 100.682237][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 100.682289][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 100.682340][ T1483] Bluetooth: hci3: Frame reassembly failed (-84) [ 101.541949][ T5804] Bluetooth: hci5: command tx timeout [ 101.914875][ T3731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.991678][ T3731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.013223][ T3731] bond0 (unregistering): Released all slaves [ 102.742772][ T61] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 102.748879][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.755779][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.761454][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.762529][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.763247][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.859819][ T6170] netlink: 27 bytes leftover after parsing attributes in process `syz.3.102'. [ 103.167711][ T6099] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.167829][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.167985][ T6099] bridge_slave_0: entered allmulticast mode [ 103.193282][ T6099] bridge_slave_0: entered promiscuous mode [ 103.236746][ T6099] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.236851][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.237039][ T6099] bridge_slave_1: entered allmulticast mode [ 103.242005][ T6099] bridge_slave_1: entered promiscuous mode [ 103.631167][ T5804] Bluetooth: hci5: command tx timeout [ 103.741226][ T5891] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 103.903285][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.903312][ T5891] usb 5-1: config 0 has no interfaces? [ 103.905920][ T5891] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 103.905947][ T5891] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 103.905958][ T5891] usb 5-1: Product: syz [ 103.905965][ T5891] usb 5-1: Manufacturer: syz [ 103.905972][ T5891] usb 5-1: SerialNumber: syz [ 103.913855][ T5891] usb 5-1: config 0 descriptor?? [ 104.136631][ T6099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.218214][ T6099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.257959][ T5940] usb 5-1: USB disconnect, device number 6 [ 104.612782][ T3731] hsr_slave_0: left promiscuous mode [ 104.631185][ T3731] hsr_slave_1: left promiscuous mode [ 104.632094][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.634470][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.683429][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.683457][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.779134][ T3731] veth1_macvtap: left promiscuous mode [ 104.779395][ T3731] veth0_macvtap: left promiscuous mode [ 104.779666][ T3731] veth1_vlan: left promiscuous mode [ 104.779978][ T3731] veth0_vlan: left promiscuous mode [ 104.821243][ T5804] Bluetooth: hci4: command tx timeout [ 105.701228][ T5119] Bluetooth: hci5: command tx timeout [ 106.901321][ T5804] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 106.904973][ T5804] Bluetooth: hci4: command tx timeout [ 106.942725][ T3731] team0 (unregistering): Port device team_slave_1 removed [ 107.162453][ T3731] team0 (unregistering): Port device team_slave_0 removed [ 108.981229][ T5119] Bluetooth: hci4: command tx timeout [ 109.208848][ T6099] team0: Port device team_slave_0 added [ 109.490951][ T6099] team0: Port device team_slave_1 added [ 109.926340][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.926355][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.926374][ T6099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.928253][ T6099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.928267][ T6099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.928286][ T6099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.091283][ T6220] +}[@ (6220) used greatest stack depth: 18192 bytes left [ 110.543006][ T6251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.125'. [ 110.553060][ T6099] hsr_slave_0: entered promiscuous mode [ 110.554539][ T6099] hsr_slave_1: entered promiscuous mode [ 110.555577][ T6099] debugfs: 'hsr0' already exists in 'hsr' [ 110.555600][ T6099] Cannot create hsr debugfs directory [ 110.594951][ T6251] team_slave_0: entered promiscuous mode [ 110.595030][ T6251] team_slave_1: entered promiscuous mode [ 110.607000][ T6251] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 111.061278][ T5119] Bluetooth: hci4: command tx timeout [ 111.446151][ T6279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.132'. [ 112.122703][ T3731] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.166836][ T6167] chnl_net:caif_netlink_parms(): no params data found [ 112.675156][ T3731] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.261692][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.406779][ T3731] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.411573][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 113.432974][ T10] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.433002][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.486205][ T10] usb 1-1: config 0 descriptor?? [ 113.728023][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 113.774389][ T6333] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 113.774463][ T6333] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 113.779802][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.813659][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 113.813800][ T10] usb 1-1: media controller created [ 113.900049][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.938126][ T6336] bond0: (slave bridge0): Releasing backup interface [ 113.959977][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.964861][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.016518][ T6336] bridge_slave_0: left allmulticast mode [ 114.016545][ T6336] bridge_slave_0: left promiscuous mode [ 114.016899][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.085563][ T6333] +}[@ (6333) used greatest stack depth: 17904 bytes left [ 114.115530][ T6336] bridge_slave_1: left allmulticast mode [ 114.115641][ T6336] bridge_slave_1: left promiscuous mode [ 114.115873][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.207639][ T6344] netlink: 28 bytes leftover after parsing attributes in process `syz.4.147'. [ 114.252627][ T6336] bond0: (slave bond_slave_0): Releasing backup interface [ 114.311677][ T6336] bond0: (slave bond_slave_1): Releasing backup interface [ 114.378786][ T6336] team0: Port device team_slave_0 removed [ 114.414865][ T6336] team0: Port device team_slave_1 removed [ 114.415481][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.415497][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.476375][ T6336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.476405][ T6336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.523030][ T6336] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 114.523324][ T6167] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.523438][ T6167] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.523702][ T6167] bridge_slave_0: entered allmulticast mode [ 114.526534][ T6167] bridge_slave_0: entered promiscuous mode [ 114.764668][ T3731] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.831925][ T6167] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.832047][ T6167] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.832275][ T6167] bridge_slave_1: entered allmulticast mode [ 114.835136][ T6167] bridge_slave_1: entered promiscuous mode [ 114.867117][ T10] stb0899_attach: Driver disabled by Kconfig [ 114.867132][ T10] az6027: no front-end attached [ 114.867132][ T10] [ 114.867601][ T10] az6027: usb out operation failed. (-71) [ 114.867615][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 114.933760][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 114.976065][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 114.976091][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 115.009035][ T10] usb 1-1: USB disconnect, device number 2 [ 115.094764][ T5982] udevd[5982]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 115.152776][ T6099] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 115.185206][ T6354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.149'. [ 115.260053][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 115.299401][ T6167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.299872][ T6099] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 115.355840][ T6167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.356921][ T6099] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 115.562836][ T6099] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 115.924810][ T6167] team0: Port device team_slave_0 added [ 115.977353][ T6167] team0: Port device team_slave_1 added [ 116.043850][ T6382] netlink: 28 bytes leftover after parsing attributes in process `syz.3.158'. [ 116.488178][ T6402] netlink: 8 bytes leftover after parsing attributes in process `syz.0.167'. [ 116.517332][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.517348][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.517372][ T6167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.620903][ T6402] team_slave_0: entered promiscuous mode [ 116.620958][ T6402] team_slave_1: entered promiscuous mode [ 116.637562][ T6402] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 116.640278][ T6167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.640294][ T6167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 116.640319][ T6167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.658347][ T6399] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 116.658402][ T6399] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 116.963992][ T3731] bridge_slave_1: left allmulticast mode [ 116.964020][ T3731] bridge_slave_1: left promiscuous mode [ 116.964256][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.028641][ T6418] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.052006][ T3731] bridge_slave_0: left allmulticast mode [ 117.052025][ T3731] bridge_slave_0: left promiscuous mode [ 117.052175][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.951759][ T3731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.013923][ T3731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.033475][ T3731] bond0 (unregistering): Released all slaves [ 119.211712][ T6167] hsr_slave_0: entered promiscuous mode [ 119.212938][ T6167] hsr_slave_1: entered promiscuous mode [ 119.213731][ T6167] debugfs: 'hsr0' already exists in 'hsr' [ 119.213752][ T6167] Cannot create hsr debugfs directory [ 119.851216][ T6453] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 119.851272][ T6453] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 119.935287][ T6464] netlink: 27 bytes leftover after parsing attributes in process `syz.3.189'. [ 120.082009][ T6453] +}[@ (6453) used greatest stack depth: 17496 bytes left [ 120.368265][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 120.368341][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 120.368398][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 120.368456][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 120.368508][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 120.368558][ T85] Bluetooth: hci3: Frame reassembly failed (-84) [ 120.811311][ T3731] hsr_slave_0: left promiscuous mode [ 120.852662][ T3731] hsr_slave_1: left promiscuous mode [ 120.853789][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.853814][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.916695][ T3731] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.916725][ T3731] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.007444][ T3731] veth1_macvtap: left promiscuous mode [ 121.007544][ T3731] veth0_macvtap: left promiscuous mode [ 121.007717][ T3731] veth1_vlan: left promiscuous mode [ 121.007808][ T3731] veth0_vlan: left promiscuous mode [ 121.604764][ T6488] netlink: 27 bytes leftover after parsing attributes in process `syz.3.200'. [ 122.431208][ T5804] Bluetooth: hci3: command 0x1003 tx timeout [ 122.434563][ T5119] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 123.217883][ T3731] team0 (unregistering): Port device team_slave_1 removed [ 123.278480][ T6495] netlink: 128 bytes leftover after parsing attributes in process `syz.4.203'. [ 123.278530][ T6495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.203'. [ 123.501851][ T3731] team0 (unregistering): Port device team_slave_0 removed [ 123.881158][ T5891] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 124.011216][ T5891] usb 5-1: device descriptor read/64, error -71 [ 124.251239][ T5891] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 124.411396][ T5891] usb 5-1: device descriptor read/64, error -71 [ 124.531522][ T5891] usb usb5-port1: attempt power cycle [ 124.881235][ T5891] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 124.918483][ T5891] usb 5-1: device descriptor read/8, error -71 [ 125.171354][ T5891] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 125.201981][ T5891] usb 5-1: device descriptor read/8, error -71 [ 125.316953][ T5891] usb usb5-port1: unable to enumerate USB device [ 125.982436][ T6513] netlink: 452 bytes leftover after parsing attributes in process `syz.0.209'. [ 126.340485][ T6099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.578420][ T6099] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.680977][ T3564] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.687669][ T3564] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.751334][ T5891] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.764680][ T1483] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.764810][ T1483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.791724][ T6167] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 126.881347][ T5891] usb 1-1: device descriptor read/64, error -71 [ 126.906121][ T6167] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 126.977613][ T6167] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 127.086179][ T6167] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 127.121162][ T5891] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 127.261249][ T5891] usb 1-1: device descriptor read/64, error -71 [ 127.371692][ T5891] usb usb1-port1: attempt power cycle [ 127.690599][ T6167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.711597][ T5891] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 127.740421][ T6167] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.753521][ T5891] usb 1-1: device descriptor read/8, error -71 [ 127.780611][ T1483] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.780822][ T1483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.982317][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.982458][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.011223][ T5891] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.033637][ T5891] usb 1-1: device descriptor read/8, error -71 [ 128.141587][ T5891] usb usb1-port1: unable to enumerate USB device [ 128.278609][ T6099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.449895][ T6577] netlink: 128 bytes leftover after parsing attributes in process `+}[@'. [ 128.449953][ T6577] netlink: 16 bytes leftover after parsing attributes in process `+}[@'. [ 128.958839][ T6167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.349181][ T6099] veth0_vlan: entered promiscuous mode [ 129.397791][ T6099] veth1_vlan: entered promiscuous mode [ 129.809433][ T6633] netlink: 128 bytes leftover after parsing attributes in process `syz.0.233'. [ 129.809846][ T6633] netlink: 16 bytes leftover after parsing attributes in process `syz.0.233'. [ 130.089234][ T6099] veth0_macvtap: entered promiscuous mode [ 130.217464][ T6099] veth1_macvtap: entered promiscuous mode [ 130.415372][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.485998][ T6652] Bluetooth: MGMT ver 1.23 [ 130.486026][ T6652] Bluetooth: hci0: invalid length 0, exp 2 for type 5 [ 130.488371][ T6099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.489832][ T6167] veth0_vlan: entered promiscuous mode [ 130.569093][ T66] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.583705][ T66] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.584660][ T66] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.584699][ T66] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.585638][ T6167] veth1_vlan: entered promiscuous mode [ 131.026560][ T6167] veth0_macvtap: entered promiscuous mode [ 131.056132][ T5949] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.109156][ T6167] veth1_macvtap: entered promiscuous mode [ 131.122555][ T3508] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.122575][ T3508] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.209252][ T5949] usb 5-1: device descriptor read/64, error -71 [ 131.451118][ T5949] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 131.591130][ T5949] usb 5-1: device descriptor read/64, error -71 [ 131.671844][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.671864][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.699231][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.710707][ T5949] usb usb5-port1: attempt power cycle [ 131.747556][ T6167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.805365][ T1512] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.823923][ T1512] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.826242][ T1512] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.827228][ T1512] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.061257][ T5949] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 132.083093][ T5949] usb 5-1: device descriptor read/8, error -71 [ 132.326591][ T5949] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 132.343580][ T5949] usb 5-1: device descriptor read/8, error -71 [ 132.393539][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.393559][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.456963][ T5949] usb usb5-port1: unable to enumerate USB device [ 132.551172][ T805] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 132.628181][ T3731] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.628201][ T3731] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.712549][ T805] usb 1-1: device descriptor read/64, error -71 [ 132.906303][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.906398][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.951271][ T805] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 133.044953][ T6713] netlink: 'syz.6.101': attribute type 10 has an invalid length. [ 133.045616][ T6713] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.046388][ T6713] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.105386][ T6713] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.106080][ T6713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.106887][ T6713] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.109413][ T6713] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.111210][ T805] usb 1-1: device descriptor read/64, error -71 [ 133.120739][ T6713] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 133.223286][ T805] usb usb1-port1: attempt power cycle [ 133.573164][ T805] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 133.595579][ T805] usb 1-1: device descriptor read/8, error -71 [ 133.872018][ T805] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 133.891809][ T805] usb 1-1: device descriptor read/8, error -71 [ 134.004644][ T805] usb usb1-port1: unable to enumerate USB device [ 134.867307][ T6780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.274'. [ 135.161387][ T6792] netlink: 43 bytes leftover after parsing attributes in process `syz.3.278'. [ 135.161496][ T6792] tipc: Started in network mode [ 135.161518][ T6792] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 135.215240][ T6792] tipc: Enabled bearer , priority 10 [ 135.254271][ T6792] ªªªªªª: renamed from vlan0 (while UP) [ 135.310972][ T6792] tipc: Disabling bearer [ 136.472688][ T6832] netlink: 48 bytes leftover after parsing attributes in process `syz.5.291'. [ 136.473510][ T6832] netlink: 'syz.5.291': attribute type 10 has an invalid length. [ 136.474159][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.502010][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.556066][ T6836] ======================================================= [ 136.556066][ T6836] WARNING: The mand mount option has been deprecated and [ 136.556066][ T6836] and is ignored by this kernel. Remove the mand [ 136.556066][ T6836] option from the mount to silence this warning. [ 136.556066][ T6836] ======================================================= [ 136.601192][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.601359][ T6832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.601699][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.601847][ T6832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.607503][ T6832] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 136.866297][ T6847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.296'. [ 137.070796][ T6850] netlink: 128 bytes leftover after parsing attributes in process `syz.5.297'. [ 137.070854][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.5.297'. [ 137.826386][ T6883] netlink: 48 bytes leftover after parsing attributes in process `syz.5.308'. [ 137.846553][ T6883] netlink: 'syz.5.308': attribute type 10 has an invalid length. [ 137.846844][ T6883] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.846988][ T6883] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.669174][ T6912] netlink: 28 bytes leftover after parsing attributes in process `syz.0.317'. [ 138.812190][ T6920] netlink: 'syz.6.321': attribute type 1 has an invalid length. [ 138.844736][ T6915] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 138.846202][ T6915] netlink: 44 bytes leftover after parsing attributes in process `syz.6.321'. [ 139.131255][ T5891] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 139.297477][ T5891] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 139.297507][ T5891] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 139.297531][ T5891] usb 7-1: config 220 has no interface number 2 [ 139.297598][ T5891] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 139.297623][ T5891] usb 7-1: config 220 interface 0 has no altsetting 0 [ 139.297641][ T5891] usb 7-1: config 220 interface 76 has no altsetting 0 [ 139.297660][ T5891] usb 7-1: config 220 interface 1 has no altsetting 0 [ 139.312893][ T5891] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 139.313105][ T5891] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.313124][ T5891] usb 7-1: Product: syz [ 139.313137][ T5891] usb 7-1: Manufacturer: syz [ 139.313150][ T5891] usb 7-1: SerialNumber: syz [ 139.682664][ T5891] usb 7-1: selecting invalid altsetting 0 [ 139.710585][ T5891] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 139.710622][ T5891] uvcvideo 7-1:220.0: No valid video chain found. [ 139.727835][ T5891] usb 7-1: selecting invalid altsetting 0 [ 139.727872][ T5891] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 139.773105][ T5891] usb 7-1: USB disconnect, device number 2 [ 140.345848][ T6970] netlink: 128 bytes leftover after parsing attributes in process `syz.6.343'. [ 140.345902][ T6970] netlink: 16 bytes leftover after parsing attributes in process `syz.6.343'. [ 140.361810][ T6972] netlink: 28 bytes leftover after parsing attributes in process `syz.3.341'. [ 141.051496][ T930] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 141.191159][ T930] usb 6-1: device descriptor read/64, error -71 [ 141.431235][ T930] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 141.561426][ T930] usb 6-1: device descriptor read/64, error -71 [ 141.671631][ T930] usb usb6-port1: attempt power cycle [ 142.031120][ T930] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.052233][ T930] usb 6-1: device descriptor read/8, error -71 [ 142.291355][ T930] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 142.311945][ T930] usb 6-1: device descriptor read/8, error -71 [ 142.378122][ T7027] netlink: 128 bytes leftover after parsing attributes in process `syz.4.367'. [ 142.378183][ T7027] netlink: 16 bytes leftover after parsing attributes in process `syz.4.367'. [ 142.423496][ T930] usb usb6-port1: unable to enumerate USB device [ 144.333118][ T7081] netlink: 128 bytes leftover after parsing attributes in process `syz.5.389'. [ 144.333175][ T7081] netlink: 16 bytes leftover after parsing attributes in process `syz.5.389'. [ 145.103707][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 145.120010][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 145.155415][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 145.156875][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 145.182104][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 145.199987][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.383887][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 145.384853][ T5891] usb 5-1: no configurations [ 145.384869][ T5891] usb 5-1: can't read configurations, error -22 [ 145.526933][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.541422][ T5891] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 145.691115][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 145.691974][ T5891] usb 5-1: no configurations [ 145.691990][ T5891] usb 5-1: can't read configurations, error -22 [ 145.692319][ T5891] usb usb5-port1: attempt power cycle [ 145.773257][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.777805][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.785268][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.787488][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.788258][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.031155][ T5891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 146.070764][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 146.078077][ T5891] usb 5-1: no configurations [ 146.078097][ T5891] usb 5-1: can't read configurations, error -22 [ 146.211126][ T5891] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 146.230977][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.235224][ T5891] usb 5-1: Using ep0 maxpacket: 32 [ 146.236008][ T5891] usb 5-1: no configurations [ 146.236022][ T5891] usb 5-1: can't read configurations, error -22 [ 146.236337][ T5891] usb usb5-port1: unable to enumerate USB device [ 147.195440][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.221223][ T5119] Bluetooth: hci0: command tx timeout [ 147.862045][ T5119] Bluetooth: hci3: command tx timeout [ 148.028246][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.519826][ T7152] netlink: 43 bytes leftover after parsing attributes in process `syz.5.414'. [ 148.580709][ T7152] tipc: Started in network mode [ 148.580741][ T7152] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 148.613155][ T7152] tipc: Enabled bearer , priority 10 [ 148.921574][ T7168] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 149.311552][ T5119] Bluetooth: hci0: command tx timeout [ 149.468648][ T7167] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 149.619908][ T7168] bond1: entered promiscuous mode [ 149.619936][ T7168] bond1: entered allmulticast mode [ 149.620512][ T7168] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.720704][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.720736][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.764939][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.764965][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.841218][ T805] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 149.944401][ T5119] Bluetooth: hci3: command tx timeout [ 149.991159][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 149.992079][ T805] usb 5-1: no configurations [ 149.992095][ T805] usb 5-1: can't read configurations, error -22 [ 150.053825][ T5891] tipc: Node number set to 10005162 [ 150.131388][ T805] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 150.284100][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 150.284947][ T805] usb 5-1: no configurations [ 150.284962][ T805] usb 5-1: can't read configurations, error -22 [ 150.285290][ T805] usb usb5-port1: attempt power cycle [ 150.357901][ T7095] chnl_net:caif_netlink_parms(): no params data found [ 150.621243][ T805] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 150.641871][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 150.642739][ T805] usb 5-1: no configurations [ 150.642753][ T805] usb 5-1: can't read configurations, error -22 [ 150.662320][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027b06400: rx timeout, send abort [ 150.771146][ T805] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 150.791964][ T805] usb 5-1: Using ep0 maxpacket: 32 [ 150.792772][ T805] usb 5-1: no configurations [ 150.792787][ T805] usb 5-1: can't read configurations, error -22 [ 150.793183][ T805] usb usb5-port1: unable to enumerate USB device [ 151.103412][ T12] bridge_slave_1: left allmulticast mode [ 151.103440][ T12] bridge_slave_1: left promiscuous mode [ 151.103676][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.163538][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802faa7c00: rx timeout, send abort [ 151.164018][ C1] vcan0: j1939_tp_rxtimer: 0xffff888027b06400: abort rx timeout. Force session deactivation [ 151.307273][ T12] bridge_slave_0: left allmulticast mode [ 151.307301][ T12] bridge_slave_0: left promiscuous mode [ 151.307558][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.381225][ T5119] Bluetooth: hci0: command tx timeout [ 151.579027][ T7221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.427'. [ 151.663636][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802faa7c00: abort rx timeout. Force session deactivation [ 152.024299][ T7235] netlink: 'syz.5.432': attribute type 1 has an invalid length. [ 152.039395][ T5119] Bluetooth: hci3: command tx timeout [ 152.669423][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'. [ 152.830504][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ddde000: rx timeout, send abort [ 152.874147][ T12] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 153.330574][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ddde000: abort rx timeout. Force session deactivation [ 153.461138][ T5119] Bluetooth: hci0: command tx timeout [ 153.722046][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 153.784608][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 153.815927][ T12] bond0 (unregistering): Released all slaves [ 153.909483][ T7235] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 154.101372][ T5119] Bluetooth: hci3: command tx timeout [ 154.770604][ T7278] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 155.058850][ T7278] bond2: entered promiscuous mode [ 155.058880][ T7278] bond2: entered allmulticast mode [ 155.059451][ T7278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 155.401192][ T5891] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 155.483683][ T37] audit: type=1326 audit(1766809080.838:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f399865e7 code=0x7ffc0000 [ 155.483734][ T37] audit: type=1326 audit(1766809080.848:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f3992b829 code=0x7ffc0000 [ 155.483759][ T37] audit: type=1326 audit(1766809080.848:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3998f749 code=0x7ffc0000 [ 155.483780][ T37] audit: type=1326 audit(1766809080.848:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f3f399865e7 code=0x7ffc0000 [ 155.485874][ T37] audit: type=1326 audit(1766809080.848:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f3f3992b829 code=0x7ffc0000 [ 155.486005][ T37] audit: type=1326 audit(1766809080.858:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=296 compat=0 ip=0x7f3f3998f749 code=0x7ffc0000 [ 155.486137][ T37] audit: type=1326 audit(1766809080.858:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7293 comm="syz.3.450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3998f749 code=0x7ffc0000 [ 155.698230][ T5891] usb 5-1: device descriptor read/all, error -71 [ 155.748635][ T7095] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.751695][ T7095] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.751946][ T7095] bridge_slave_0: entered allmulticast mode [ 155.784059][ T7095] bridge_slave_0: entered promiscuous mode [ 155.787032][ T7102] chnl_net:caif_netlink_parms(): no params data found [ 155.869986][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.870146][ T7095] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.870384][ T7095] bridge_slave_1: entered allmulticast mode [ 155.873111][ T7095] bridge_slave_1: entered promiscuous mode [ 156.405474][ T7314] netlink: 'syz.3.455': attribute type 1 has an invalid length. [ 156.418936][ T12] hsr_slave_0: left promiscuous mode [ 156.455685][ T12] hsr_slave_1: left promiscuous mode [ 156.456751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.456775][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.513171][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.513198][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.736144][ T12] veth1_macvtap: left promiscuous mode [ 156.745830][ T12] veth0_macvtap: left promiscuous mode [ 156.746086][ T12] veth1_vlan: left promiscuous mode [ 156.746250][ T12] veth0_vlan: left promiscuous mode [ 157.399113][ T37] audit: type=1326 audit(1766809082.768:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7327 comm="syz.5.459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f049c54f749 code=0x0 [ 158.497943][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.5.462'. [ 158.497965][ T7337] netlink: 24 bytes leftover after parsing attributes in process `syz.5.462'. [ 160.024960][ T12] team0 (unregistering): Port device team_slave_1 removed [ 160.301890][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.817551][ T7095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.840391][ T7095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.889780][ T7357] netlink: 148 bytes leftover after parsing attributes in process `syz.3.469'. [ 162.902748][ T5804] Bluetooth: hci4: command 0x1003 tx timeout [ 162.906680][ T5119] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 163.203249][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.471'. [ 163.203271][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.3.471'. [ 163.266132][ T7095] team0: Port device team_slave_0 added [ 163.416951][ T7095] team0: Port device team_slave_1 added [ 163.521366][ T5890] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 163.673786][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 163.673818][ T5890] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 163.673840][ T5890] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.673882][ T5890] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.673903][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.678715][ T5890] usb 5-1: config 0 descriptor?? [ 163.875220][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.875421][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.875762][ T7102] bridge_slave_0: entered allmulticast mode [ 163.899384][ T7102] bridge_slave_0: entered promiscuous mode [ 164.190319][ T5890] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 164.326485][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.476'. [ 164.377491][ T7393] netlink: 'syz.5.476': attribute type 10 has an invalid length. [ 164.414275][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.414428][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.414648][ T7102] bridge_slave_1: entered allmulticast mode [ 164.445380][ T7102] bridge_slave_1: entered promiscuous mode [ 164.483264][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.483281][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.483306][ T7095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.507442][ T7397] netlink: 'syz.3.478': attribute type 1 has an invalid length. [ 164.589511][ T7399] netlink: 148 bytes leftover after parsing attributes in process `syz.5.479'. [ 164.606350][ T7095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.606366][ T7095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.606391][ T7095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.866588][ T7411] netlink: 12 bytes leftover after parsing attributes in process `syz.5.481'. [ 164.927974][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.014829][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.751329][ T7102] team0: Port device team_slave_0 added [ 165.808636][ T7095] hsr_slave_0: entered promiscuous mode [ 165.821847][ T7095] hsr_slave_1: entered promiscuous mode [ 165.822600][ T7095] debugfs: 'hsr0' already exists in 'hsr' [ 165.822618][ T7095] Cannot create hsr debugfs directory [ 165.826100][ T7102] team0: Port device team_slave_1 added [ 165.988544][ T5891] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 166.162917][ T5891] usb 5-1: device descriptor read/64, error -32 [ 166.349736][ T7447] netlink: 'syz.5.486': attribute type 1 has an invalid length. [ 166.349871][ T7447] netlink: 4476 bytes leftover after parsing attributes in process `syz.5.486'. [ 166.412829][ T7449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.487'. [ 166.428389][ T5891] usb 5-1: reset high-speed USB device number 25 using dummy_hcd [ 166.464618][ T7450] netlink: 'syz.4.487': attribute type 10 has an invalid length. [ 166.467180][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.467194][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.467218][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.534698][ T7450] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.538715][ T7450] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.607590][ T7450] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.607745][ T7450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.608629][ T7450] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.608792][ T7450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.634919][ T7450] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 166.637625][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.637706][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.637730][ T7102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.250654][ T5949] usb 5-1: USB disconnect, device number 25 [ 167.395415][ T7102] hsr_slave_0: entered promiscuous mode [ 167.396802][ T7102] hsr_slave_1: entered promiscuous mode [ 167.397720][ T7102] debugfs: 'hsr0' already exists in 'hsr' [ 167.397744][ T7102] Cannot create hsr debugfs directory [ 168.696500][ T7518] netlink: 'syz.4.507': attribute type 10 has an invalid length. [ 168.716950][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.717446][ T7518] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.194656][ T7095] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.251666][ T7095] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.300615][ T7095] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.352979][ T7095] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.908383][ T7102] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.977203][ T7102] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 170.033540][ T7102] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 170.034867][ T7553] netlink: 'syz.4.517': attribute type 10 has an invalid length. [ 170.078171][ T7102] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 170.201767][ T7559] netlink: 4 bytes leftover after parsing attributes in process `syz.5.520'. [ 170.491155][ T5889] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 170.591164][ T7559] hsr_slave_1 (unregistering): left promiscuous mode [ 170.641128][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 170.643297][ T5889] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.643321][ T5889] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 170.643354][ T5889] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 170.643376][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.648244][ T5889] usb 5-1: config 0 descriptor?? [ 170.916132][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.943192][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.5.524'. [ 170.992151][ T7095] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.037503][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.037674][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.096305][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.096472][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.172722][ T7102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.325754][ T7102] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.358354][ T3589] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.358567][ T3589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.447802][ T3589] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.449195][ T3589] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.029656][ T7095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.320368][ T7102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.391289][ T5802] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 172.544195][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.544228][ T5802] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.544248][ T5802] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.544286][ T5802] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.544308][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.615609][ T5802] usb 6-1: config 0 descriptor?? [ 173.056149][ T7095] veth0_vlan: entered promiscuous mode [ 173.100035][ T5802] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 173.130330][ T7095] veth1_vlan: entered promiscuous mode [ 173.302052][ T5889] usb 5-1: USB disconnect, device number 26 [ 173.312693][ T7095] veth0_macvtap: entered promiscuous mode [ 173.325790][ T7095] veth1_macvtap: entered promiscuous mode [ 173.479985][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.543388][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.591739][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.3.535'. [ 173.596561][ T981] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.597862][ T981] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.598100][ T981] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.598298][ T981] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.111486][ T7102] veth0_vlan: entered promiscuous mode [ 174.296025][ T7102] veth1_vlan: entered promiscuous mode [ 174.502323][ T981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.502344][ T981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.835595][ T7102] veth0_macvtap: entered promiscuous mode [ 174.852781][ T5857] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 174.855736][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.855756][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.890117][ T7102] veth1_macvtap: entered promiscuous mode [ 174.947092][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.972624][ T7102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.982605][ T5857] usb 6-1: device descriptor read/64, error -32 [ 174.996165][ T981] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.998101][ T981] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.019398][ T981] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.033908][ T981] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.142011][ T930] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 175.223542][ T5857] usb 6-1: reset high-speed USB device number 6 using dummy_hcd [ 175.323989][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 175.401548][ T5857] usb 6-1: device descriptor read/64, error -32 [ 175.434001][ T930] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 175.434046][ T930] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.434068][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.464167][ T930] usb 5-1: config 0 descriptor?? [ 175.568204][ T3589] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.568225][ T3589] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.796248][ T72] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.796271][ T72] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.313536][ T5890] usb 6-1: USB disconnect, device number 6 [ 176.831232][ T5891] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 177.010693][ T5891] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.010725][ T5891] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.010745][ T5891] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.010785][ T5891] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.010805][ T5891] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.273104][ T5891] usb 8-1: config 0 descriptor?? [ 177.900668][ T5891] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 178.139037][ T5890] usb 5-1: USB disconnect, device number 27 [ 179.420345][ T5802] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 179.551179][ T5802] usb 8-1: device descriptor read/64, error -32 [ 179.603550][ T7764] capability: warning: `syz.5.569' uses 32-bit capabilities (legacy support in use) [ 179.801783][ T5802] usb 8-1: reset high-speed USB device number 2 using dummy_hcd [ 180.356627][ T7773] netlink: 'syz.4.572': attribute type 1 has an invalid length. [ 180.698566][ T5891] usb 8-1: USB disconnect, device number 2 [ 181.609631][ T7797] netlink: 28 bytes leftover after parsing attributes in process `syz.8.584'. [ 181.609655][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.8.584'. [ 181.609668][ T7797] netlink: 8 bytes leftover after parsing attributes in process `syz.8.584'. [ 185.923544][ T5891] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 186.861160][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 187.244776][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.244808][ T5891] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.244829][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.244868][ T5891] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.244894][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.249977][ T5891] usb 5-1: config 0 descriptor?? [ 187.917023][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.917056][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.917077][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 187.917116][ T9] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 187.917136][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.155451][ T9] usb 9-1: config 0 descriptor?? [ 188.883701][ T5891] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 189.376984][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.384964][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.386350][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.395548][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.396474][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.607576][ T5891] usb 5-1: USB disconnect, device number 28 [ 190.193944][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 190.194057][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 190.382196][ T9] usb 9-1: USB disconnect, device number 2 [ 190.783877][ T7845] fido_id[7845]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 191.473213][ T5119] Bluetooth: hci0: command tx timeout [ 193.543285][ T5119] Bluetooth: hci0: command tx timeout [ 194.186318][ T5949] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 194.348010][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.348079][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.021191][ T5949] usb 6-1: device not accepting address 7, error -71 [ 195.621477][ T5119] Bluetooth: hci0: command tx timeout [ 196.485858][ T3744] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.814703][ T5119] Bluetooth: hci0: command tx timeout [ 201.732725][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 201.732769][ T5119] Bluetooth: hci1: command 0x0406 tx timeout [ 203.699740][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.616'. [ 206.911159][ T7916] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 207.643681][ T7916] usb 9-1: Using ep0 maxpacket: 32 [ 207.649988][ T7916] usb 9-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 207.650017][ T7916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.650035][ T7916] usb 9-1: Product: syz [ 207.650048][ T7916] usb 9-1: Manufacturer: syz [ 207.650062][ T7916] usb 9-1: SerialNumber: syz [ 207.754345][ T7916] usb 9-1: config 0 descriptor?? [ 208.397331][ T7916] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 003 [ 209.301518][ T7838] usb 9-1: USB disconnect, device number 3 [ 211.505465][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.4.631'. [ 212.231131][ T5889] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 212.438786][ T5889] usb 9-1: Using ep0 maxpacket: 32 [ 212.999786][ T5889] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 212.999815][ T5889] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.006689][ T5889] usb 9-1: config 0 descriptor?? [ 213.427119][ T5889] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 213.440633][ T5889] usb 9-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 213.440663][ T5889] usb 9-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 213.690596][ T7834] chnl_net:caif_netlink_parms(): no params data found [ 214.297820][ T7959] netlink: 40 bytes leftover after parsing attributes in process `syz.4.638'. [ 214.495121][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 214.516605][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 214.518395][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 214.642280][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 214.654956][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.471222][ T7971] netlink: 'syz.4.641': attribute type 13 has an invalid length. [ 216.839226][ T5804] Bluetooth: hci4: command tx timeout [ 218.921127][ T5804] Bluetooth: hci4: command tx timeout [ 220.734768][ T7971] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.743088][ T7971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.743512][ T7971] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.743660][ T7971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.981231][ T5804] Bluetooth: hci4: command tx timeout [ 222.067946][ T5804] Bluetooth: hci5: command 0x0406 tx timeout [ 222.341489][ T7971] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.061224][ T5804] Bluetooth: hci4: command tx timeout [ 227.785229][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.805699][ T7834] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.844370][ T7834] bridge_slave_0: entered allmulticast mode [ 228.755033][ T7834] bridge_slave_0: entered promiscuous mode [ 230.135951][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.153543][ T7834] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.153804][ T7834] bridge_slave_1: entered allmulticast mode [ 230.156345][ T7834] bridge_slave_1: entered promiscuous mode [ 235.378607][ T8057] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 237.967450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 238.150133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 238.304750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 243.893264][ T3744] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.956706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 244.021831][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 244.594008][ T7834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.854248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 245.156215][ T7834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.727671][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 247.177443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 247.503753][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 247.505167][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 247.766265][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.770843][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.834242][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.926780][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.974044][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.244793][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 250.274684][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 250.276930][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 250.278167][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 250.278960][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 251.061271][ T61] Bluetooth: hci1: command tx timeout [ 252.741288][ T61] Bluetooth: hci6: command tx timeout [ 252.907942][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.678'. [ 252.907970][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.678'. [ 252.908010][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.8.678'. [ 253.141091][ T61] Bluetooth: hci1: command tx timeout [ 254.831149][ T61] Bluetooth: hci6: command tx timeout [ 255.637190][ T61] Bluetooth: hci1: command tx timeout [ 255.892112][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.917001][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.907362][ T61] Bluetooth: hci6: command tx timeout [ 257.701776][ T61] Bluetooth: hci1: command tx timeout [ 258.008166][ T8115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.684'. [ 259.366819][ T61] Bluetooth: hci6: command tx timeout [ 261.862383][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.686'. [ 261.862409][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.686'. [ 261.862448][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.8.686'. [ 268.208497][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 276.580047][ T5889] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 276.580136][ T5889] dvb_usb_az6027 9-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 276.713441][ T5889] usb 9-1: USB disconnect, device number 4 [ 277.953904][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.965083][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.966369][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.967924][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.968689][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 280.661390][ T61] Bluetooth: hci0: command tx timeout [ 282.821236][ T61] Bluetooth: hci0: command tx timeout [ 285.101069][ T61] Bluetooth: hci0: command tx timeout [ 285.854106][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.888364][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.279168][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.730642][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.735119][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.145702][ T5804] Bluetooth: hci0: command tx timeout [ 288.983828][ T61] Bluetooth: hci4: command tx timeout [ 291.061165][ T61] Bluetooth: hci4: command tx timeout [ 291.554400][ T8075] chnl_net:caif_netlink_parms(): no params data found [ 293.521342][ T61] Bluetooth: hci4: command tx timeout [ 295.352736][ T8081] chnl_net:caif_netlink_parms(): no params data found [ 295.542285][ T61] Bluetooth: hci4: command tx timeout [ 301.677879][ T8075] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.679920][ T8075] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.680173][ T8075] bridge_slave_0: entered allmulticast mode [ 301.762159][ T8075] bridge_slave_0: entered promiscuous mode [ 302.286315][ T8075] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.286464][ T8075] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.286705][ T8075] bridge_slave_1: entered allmulticast mode [ 302.297511][ T8075] bridge_slave_1: entered promiscuous mode [ 308.587023][ T5804] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 308.631437][ T5804] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 308.656220][ T5804] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 308.657486][ T5804] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 308.658301][ T5804] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 309.022795][ T61] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 309.045479][ T61] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 309.108921][ T61] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 309.177001][ T61] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 309.177913][ T61] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 310.741184][ T61] Bluetooth: hci7: command tx timeout [ 311.302000][ T61] Bluetooth: hci8: command tx timeout [ 312.821106][ T61] Bluetooth: hci7: command tx timeout [ 313.721136][ T5804] Bluetooth: hci8: command tx timeout [ 314.901299][ T61] Bluetooth: hci7: command tx timeout [ 315.791218][ T61] Bluetooth: hci8: command tx timeout [ 316.981161][ T61] Bluetooth: hci7: command tx timeout [ 317.226183][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.226276][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.221677][ T61] Bluetooth: hci8: command tx timeout [ 323.988373][ T8189] chnl_net:caif_netlink_parms(): no params data found [ 331.861568][ T8203] chnl_net:caif_netlink_parms(): no params data found [ 335.857741][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.886999][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.027626][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.034161][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.034995][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 338.181209][ T5804] Bluetooth: hci1: command tx timeout [ 340.261211][ T61] Bluetooth: hci1: command tx timeout [ 342.341381][ T61] Bluetooth: hci1: command tx timeout [ 342.842181][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 342.846298][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 342.847434][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 342.848818][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 342.849507][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 344.421562][ T61] Bluetooth: hci1: command tx timeout [ 344.981184][ T61] Bluetooth: hci0: command tx timeout [ 347.119823][ T61] Bluetooth: hci0: command tx timeout [ 349.471438][ T61] Bluetooth: hci0: command tx timeout [ 351.541124][ T61] Bluetooth: hci0: command tx timeout [ 364.317240][ T8262] chnl_net:caif_netlink_parms(): no params data found [ 365.647307][ T8265] chnl_net:caif_netlink_parms(): no params data found [ 368.894332][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 368.901461][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 368.911526][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 368.912679][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 368.941288][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.047215][ T5804] Bluetooth: hci4: command tx timeout [ 371.812613][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.845127][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.846448][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.874426][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.875374][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 373.399056][ T5804] Bluetooth: hci4: command tx timeout [ 373.941267][ T5804] Bluetooth: hci5: command tx timeout [ 375.481156][ T5804] Bluetooth: hci4: command tx timeout [ 376.021531][ T5804] Bluetooth: hci5: command tx timeout [ 377.541221][ T5804] Bluetooth: hci4: command tx timeout [ 378.101219][ T5804] Bluetooth: hci5: command tx timeout [ 378.668954][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.669051][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.251125][ T5804] Bluetooth: hci5: command tx timeout [ 385.075294][ T8327] chnl_net:caif_netlink_parms(): no params data found [ 388.580592][ T8354] chnl_net:caif_netlink_parms(): no params data found [ 393.375887][ T8327] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg1": -EINTR [ 396.404190][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 396.415204][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 396.451547][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 396.900303][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 396.912594][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 398.984176][ T61] Bluetooth: hci6: command tx timeout [ 400.631279][ T38] INFO: task syz-executor:5800 blocked for more than 143 seconds. [ 400.631309][ T38] Not tainted syzkaller #0 [ 400.631320][ T38] Blocked by coredump. [ 400.631326][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 400.631334][ T38] task:syz-executor state:D stack:20672 pid:5800 tgid:5800 ppid:1 task_flags:0x40054c flags:0x00080003 [ 400.631397][ T38] Call Trace: [ 400.631407][ T38] [ 400.631421][ T38] __schedule+0x145f/0x5070 [ 400.631493][ T38] ? __pfx___schedule+0x10/0x10 [ 400.631538][ T38] rt_mutex_schedule+0x77/0xf0 [ 400.631568][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 400.631594][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 400.631635][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 400.631663][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 400.631687][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 400.631723][ T38] ? rcu_barrier+0x4c/0x570 [ 400.631749][ T38] ? rcu_barrier+0x4c/0x570 [ 400.631775][ T38] ? rcu_barrier+0x4c/0x570 [ 400.631793][ T38] mutex_lock_nested+0x16a/0x1d0 [ 400.631815][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 400.631842][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 400.631867][ T38] rcu_barrier+0x4c/0x570 [ 400.631891][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 400.631912][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 400.631935][ T38] netdev_run_todo+0x327/0xea0 [ 400.631966][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 400.631987][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 400.632013][ T38] ? lruvec_stat_mod_folio+0x6f/0x2e0 [ 400.632037][ T38] ? __pfx___free_frozen_pages+0x10/0x10 [ 400.632070][ T38] ? netdev_state_change+0x1ca/0x220 [ 400.632094][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 400.632117][ T38] tun_chr_close+0x13f/0x1c0 [ 400.632148][ T38] __fput+0x45b/0xa80 [ 400.632182][ T38] task_work_run+0x1d4/0x260 [ 400.632213][ T38] ? __pfx_task_work_run+0x10/0x10 [ 400.632242][ T38] ? rt_spin_unlock+0x161/0x200 [ 400.632273][ T38] do_exit+0x694/0x22f0 [ 400.632302][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.632322][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 400.632342][ T38] ? __pfx_do_exit+0x10/0x10 [ 400.632366][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 400.632390][ T38] ? reacquire_held_locks+0x104/0x190 [ 400.632417][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 400.632454][ T38] do_group_exit+0x21c/0x2d0 [ 400.632481][ T38] ? rt_spin_unlock+0x161/0x200 [ 400.632508][ T38] get_signal+0x125d/0x1310 [ 400.632550][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 400.632580][ T38] ? __pfx___x64_sys_wait4+0x10/0x10 [ 400.632599][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 400.632637][ T38] ? __pfx_fput_close_sync+0x10/0x10 [ 400.632666][ T38] exit_to_user_mode_loop+0x87/0x4e0 [ 400.632692][ T38] ? rcu_is_watching+0x15/0xb0 [ 400.632713][ T38] do_syscall_64+0x2b7/0xf80 [ 400.632732][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.632750][ T38] ? trace_irq_disable+0x37/0x100 [ 400.632770][ T38] ? clear_bhb_loop+0x60/0xb0 [ 400.632793][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.632813][ T38] RIP: 0033:0x7effd5195897 [ 400.632835][ T38] RSP: 002b:00007ffd698a89d0 EFLAGS: 00000293 ORIG_RAX: 000000000000003d [ 400.632854][ T38] RAX: fffffffffffffe00 RBX: 0000000000000152 RCX: 00007effd5195897 [ 400.632869][ T38] RDX: 0000000040000000 RSI: 00007ffd698a8a3c RDI: 00000000ffffffff [ 400.632882][ T38] RBP: 00007ffd698a8a3c R08: 0000000000000000 R09: 0000000000000000 [ 400.632894][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000089 [ 400.632905][ T38] R13: 000055555895a590 R14: 0000000000037028 R15: 00007ffd698a8a90 [ 400.632937][ T38] [ 400.633035][ T38] [ 400.633035][ T38] Showing all locks held in the system: [ 400.633046][ T38] 3 locks held by rcuc/1/28: [ 400.633059][ T38] 1 lock held by khungtaskd/38: [ 400.633069][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 400.633130][ T38] 3 locks held by kworker/u8:2/43: [ 400.633140][ T38] #0: ffff88814e4cc138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.633194][ T38] #1: ffffc90000b57bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.633242][ T38] #2: ffffffff8e8a5878 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 400.633316][ T38] 3 locks held by kworker/u8:17/3731: [ 400.633328][ T38] 6 locks held by kworker/u8:18/3744: [ 400.633338][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.633384][ T38] #1: ffffc9000e0a7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.633429][ T38] #2: ffffffff8e898760 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 400.633475][ T38] #3: ffff88802e6c20d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 400.633525][ T38] #4: ffff88802e6c4300 (&devlink->lock_key#8){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 400.633579][ T38] #5: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.633624][ T38] 1 lock held by jbd2/sda1-8/5132: [ 400.633636][ T38] 2 locks held by getty/5561: [ 400.633646][ T38] #0: ffff88814eaf50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 400.633694][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 400.633738][ T38] 1 lock held by syz-executor/5800: [ 400.633748][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.633793][ T38] 9 locks held by syz-executor/5801: [ 400.633813][ T38] 3 locks held by kworker/u8:19/7815: [ 400.633824][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 400.633874][ T38] #1: ffffc90004c1fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 400.633919][ T38] #2: ffffffff8e8a5878 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 400.633968][ T38] 7 locks held by kworker/u8:20/7820: [ 400.633979][ T38] 1 lock held by syz-executor/7834: [ 400.633988][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634033][ T38] 2 locks held by kworker/1:8/7838: [ 400.634045][ T38] 3 locks held by kworker/u8:24/7869: [ 400.634056][ T38] 1 lock held by syz.5.614/7878: [ 400.634066][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634111][ T38] 1 lock held by syz-executor/7960: [ 400.634121][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634174][ T38] 3 locks held by kworker/u8:28/8073: [ 400.634185][ T38] 1 lock held by syz-executor/8075: [ 400.634195][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634241][ T38] 1 lock held by syz-executor/8081: [ 400.634251][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634296][ T38] 1 lock held by syz.8.690/8141: [ 400.634306][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634350][ T38] 1 lock held by syz-executor/8189: [ 400.634361][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634405][ T38] 1 lock held by syz-executor/8203: [ 400.634416][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634460][ T38] 1 lock held by syz-executor/8262: [ 400.634471][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634515][ T38] 1 lock held by syz-executor/8265: [ 400.634526][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 400.634571][ T38] 4 locks held by syz-executor/8327: [ 400.634581][ T38] #0: ffff88803212cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x5b0 [ 400.634625][ T38] #1: ffff88803212c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x640/0x1100 [ 400.634673][ T38] #2: ffffffff8ea153b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x260 [ 400.634723][ T38] #3: ffff88805f7f3358 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x7b/0x5b0 [ 400.634778][ T38] 2 locks held by syz-executor/8354: [ 400.634788][ T38] #0: ffffffff8e021d48 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 400.634840][ T38] #1: ffffffff8e8a5878 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 400.634884][ T38] 7 locks held by kworker/u8:29/8388: [ 400.634904][ T38] 1 lock held by syz-executor/8401: [ 400.634914][ T38] #0: ffffffff8e8a5878 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 400.634960][ T38] 2 locks held by syz-executor/8409: [ 400.634970][ T38] #0: ffffffff8e898760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 400.635014][ T38] #1: ffffffff8e8a5878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 400.635063][ T38] 2 locks held by syz-executor/8459: [ 400.635074][ T38] #0: ffffffff8e898760 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x3cc/0x570 [ 400.635117][ T38] #1: ffffffff8e8a5878 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 400.635171][ T38] 1 lock held by dhcpcd/8475: [ 400.635181][ T38] #0: ffff88805eeb1c78 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 400.635237][ T38] [ 400.635242][ T38] ============================================= [ 400.635242][ T38] [ 400.635260][ T38] NMI backtrace for cpu 0 [ 400.635284][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.635305][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.635316][ T38] Call Trace: [ 400.635323][ T38] [ 400.635331][ T38] dump_stack_lvl+0xe8/0x150 [ 400.635357][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 400.635382][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 400.635404][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 400.635431][ T38] sys_info+0x135/0x170 [ 400.635451][ T38] watchdog+0xf95/0xfe0 [ 400.635477][ T38] ? watchdog+0x20a/0xfe0 [ 400.635504][ T38] kthread+0x711/0x8a0 [ 400.635532][ T38] ? __pfx_watchdog+0x10/0x10 [ 400.635551][ T38] ? __pfx_kthread+0x10/0x10 [ 400.635573][ T38] ? rt_spin_unlock+0x150/0x200 [ 400.635602][ T38] ? rt_spin_unlock+0x161/0x200 [ 400.635624][ T38] ? __pfx_kthread+0x10/0x10 [ 400.635650][ T38] ret_from_fork+0x510/0xa50 [ 400.635673][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 400.635691][ T38] ? __switch_to+0xc9e/0x1480 [ 400.635722][ T38] ? __pfx_kthread+0x10/0x10 [ 400.635748][ T38] ret_from_fork_asm+0x1a/0x30 [ 400.635789][ T38] [ 400.635797][ T38] Sending NMI from CPU 0 to CPUs 1: [ 400.635826][ C1] NMI backtrace for cpu 1 [ 400.635840][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.635859][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.635869][ C1] RIP: 0010:lock_acquire+0x12/0x340 [ 400.635900][ C1] Code: cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 60 <4d> 89 ce 45 89 c7 41 89 cc 89 54 24 04 89 f3 49 89 fd 48 8b ac 24 [ 400.635915][ C1] RSP: 0018:ffffc90000a2eb08 EFLAGS: 00000082 [ 400.635930][ C1] RAX: 1ffff110037d32ad RBX: 0000000000000246 RCX: 0000000000000000 [ 400.635942][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880b8946418 [ 400.635953][ C1] RBP: ffffc90000a2ec68 R08: 0000000000000001 R09: 0000000000000000 [ 400.635965][ C1] R10: dffffc0000000000 R11: fffffbfff1db668f R12: 1ffff92000145d81 [ 400.635978][ C1] R13: dffffc0000000000 R14: ffff8880b8946400 R15: ffffc90000a2ec00 [ 400.635992][ C1] FS: 0000000000000000(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 400.636006][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 400.636018][ C1] CR2: 00007f3f3a7156c0 CR3: 000000002f0e8000 CR4: 00000000003526f0 [ 400.636034][ C1] Call Trace: [ 400.636040][ C1] [ 400.636053][ C1] _raw_spin_lock_irqsave+0x40/0x60 [ 400.636069][ C1] ? rt_spin_lock+0x14a/0x3e0 [ 400.636091][ C1] rt_spin_lock+0x14a/0x3e0 [ 400.636114][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 400.636137][ C1] ? setup_object+0x10/0xd0 [ 400.636156][ C1] ? allocate_slab+0x262/0x3b0 [ 400.636178][ C1] ___slab_alloc+0x116f/0x13e0 [ 400.636196][ C1] ? rt_mutex_slowunlock+0x493/0x8a0 [ 400.636220][ C1] ? __alloc_skb+0x1dc/0x3a0 [ 400.636241][ C1] __slab_alloc+0xc6/0x1f0 [ 400.636258][ C1] ? __alloc_skb+0x1dc/0x3a0 [ 400.636277][ C1] ? __alloc_skb+0x1dc/0x3a0 [ 400.636294][ C1] kmem_cache_alloc_node_noprof+0x1b6/0x6f0 [ 400.636317][ C1] ? __alloc_skb+0x1dc/0x3a0 [ 400.636335][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 400.636352][ C1] ? __alloc_skb+0x198/0x3a0 [ 400.636370][ C1] __alloc_skb+0x1dc/0x3a0 [ 400.636390][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 400.636422][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 400.636447][ C1] ? nft_log_eval+0x360/0xab0 [ 400.636470][ C1] ? synproxy_pernet+0x45/0x270 [ 400.636491][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 400.636513][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 400.636533][ C1] ? nf_ip_checksum+0x13c/0x510 [ 400.636553][ C1] nft_synproxy_do_eval+0x345/0x570 [ 400.636575][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 400.636593][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 400.636616][ C1] ? __lock_acquire+0x6b6/0x2cf0 [ 400.636642][ C1] nft_do_chain+0x40c/0x1920 [ 400.636659][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 400.636684][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 400.636719][ C1] nft_do_chain_inet+0x25d/0x340 [ 400.636737][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.636758][ C1] ? NF_HOOK+0x9a/0x3a0 [ 400.636781][ C1] ? NF_HOOK+0x9a/0x3a0 [ 400.636802][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 400.636820][ C1] nf_hook_slow+0xc5/0x220 [ 400.636846][ C1] NF_HOOK+0x206/0x3a0 [ 400.636868][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 400.636896][ C1] ? NF_HOOK+0x9a/0x3a0 [ 400.636916][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 400.636936][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 400.636960][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 400.636984][ C1] ? skb_dst+0x4f/0xd0 [ 400.637005][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 400.637029][ C1] NF_HOOK+0x30c/0x3a0 [ 400.637050][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 400.637072][ C1] ? NF_HOOK+0x9a/0x3a0 [ 400.637092][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 400.637114][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 400.637141][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 400.637161][ C1] __netif_receive_skb+0x143/0x380 [ 400.637180][ C1] ? process_backlog+0x272/0x8f0 [ 400.637198][ C1] process_backlog+0x315/0x8f0 [ 400.637222][ C1] __napi_poll+0xae/0x520 [ 400.637240][ C1] net_rx_action+0x64a/0xdb0 [ 400.637265][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 400.637282][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 400.637312][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 400.637346][ C1] handle_softirqs+0x1df/0x650 [ 400.637371][ C1] __local_bh_enable_ip+0x171/0x2c0 [ 400.637390][ C1] ? rcu_cpu_kthread+0x211/0x1af0 [ 400.637415][ C1] rcu_cpu_kthread+0xbec/0x1af0 [ 400.637443][ C1] ? rcu_cpu_kthread+0x211/0x1af0 [ 400.637475][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 400.637500][ C1] ? schedule+0x91/0x360 [ 400.637528][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 400.637549][ C1] smpboot_thread_fn+0x542/0xa60 [ 400.637570][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 400.637595][ C1] kthread+0x711/0x8a0 [ 400.637619][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 400.637640][ C1] ? __pfx_kthread+0x10/0x10 [ 400.637661][ C1] ? rt_spin_unlock+0x150/0x200 [ 400.637685][ C1] ? rt_spin_unlock+0x161/0x200 [ 400.637706][ C1] ? __pfx_kthread+0x10/0x10 [ 400.637729][ C1] ret_from_fork+0x510/0xa50 [ 400.637748][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 400.637765][ C1] ? __switch_to+0xc9e/0x1480 [ 400.637792][ C1] ? __pfx_kthread+0x10/0x10 [ 400.637815][ C1] ret_from_fork_asm+0x1a/0x30 [ 400.637847][ C1] [ 400.638833][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 400.638850][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 400.638871][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 400.638882][ T38] Call Trace: [ 400.638889][ T38] [ 400.638896][ T38] vpanic+0x1e0/0x670 [ 400.638925][ T38] panic+0xb9/0xc0 [ 400.638950][ T38] ? __pfx_panic+0x10/0x10 [ 400.638984][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 400.639013][ T38] watchdog+0xfdf/0xfe0 [ 400.639038][ T38] ? watchdog+0x20a/0xfe0 [ 400.639065][ T38] kthread+0x711/0x8a0 [ 400.639093][ T38] ? __pfx_watchdog+0x10/0x10 [ 400.639113][ T38] ? __pfx_kthread+0x10/0x10 [ 400.639136][ T38] ? rt_spin_unlock+0x150/0x200 [ 400.639174][ T38] ? rt_spin_unlock+0x161/0x200 [ 400.639196][ T38] ? __pfx_kthread+0x10/0x10 [ 400.639222][ T38] ret_from_fork+0x510/0xa50 [ 400.639244][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 400.639262][ T38] ? __switch_to+0xc9e/0x1480 [ 400.639293][ T38] ? __pfx_kthread+0x10/0x10 [ 400.639320][ T38] ret_from_fork_asm+0x1a/0x30 [ 400.639361][ T38] [ 400.639518][ T38] Kernel Offset: disabled