last executing test programs: 8m8.314727136s ago: executing program 3 (id=254): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4041) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/anycast6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/72, 0x48}], 0x1, 0x38, 0x0) 8m6.298107916s ago: executing program 3 (id=258): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x82, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 8m6.127440849s ago: executing program 3 (id=260): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500020000000000000044000000080003", @ANYRES32=r2, @ANYBLOB="0a00180003030303030300004400238006000300ea000000050006000900000006001b"], 0x6c}, 0x1, 0x0, 0x0, 0x24040040}, 0x0) 8m6.016274853s ago: executing program 3 (id=262): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x9) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) recvmmsg(r4, &(0x7f0000002d80)=[{{0x0, 0xfffffffffffffeaf, 0x0}, 0xfd}], 0x1, 0x10043, 0x0) socket$netlink(0x10, 0x3, 0xc) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0xfffff) 8m5.964314383s ago: executing program 1 (id=263): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000001480)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {}, {0xffff, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8m5.754767061s ago: executing program 1 (id=264): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) statx(r1, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 8m5.660163188s ago: executing program 1 (id=265): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01f92bbd7000fedbdf251f000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x2c, r6, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0800a000fe08000008009f000d000000080026006c09"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="2d5161255516fd0e9bdb19f3ddd83b57ed08aafbb909efed4fb63f4e388e273461c65dbbb2bc7365b638d85376092a333c7efbfccbef7a3d33dd2eb73881b30913e68e00cab660d1dc4bf4057af049311a968fd0ff19ad6ec0815d24000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8011}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), 0xffffffffffffffff) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r9, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd, 0x0, 0x0}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r9, 0x100000000) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r9, 0xc00464b4, &(0x7f0000000080)={r10}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffb}]}) close_range(r11, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 8m4.268302912s ago: executing program 1 (id=266): syz_emit_ethernet(0x7e, 0x0, 0x0) r0 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x14d002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r2 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="020e004000001f00000097d01de4ff01000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004000000020000000000"], 0x50) syz_usb_connect$uac1(0x0, 0xab, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000000000086b1d01014000010203010902990003010000000904000000010100000a240100"], 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r5}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000140), 0x23a, 0x101000) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f00000001c0)={0x0}) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@v={0x93, 0x0, 0xa0, 0x1d, @MIDI_NOTEON=@note=0x3f, 0x8, 0x1}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r8, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000840), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, r9, 0x401, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x4855) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}], {0x14}}, 0x64}}, 0x0) r11 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r11, &(0x7f0000000640)=[{{&(0x7f00000000c0)={0x2, 0x0, @remote}, 0xffffffffffffff1d, &(0x7f0000000000)=[{&(0x7f0000000140)="a9050000004d00"/21, 0x15}, {&(0x7f0000000100)="17faffffff0fb2eedcccbb9d000000", 0xf}], 0x2}}], 0x1, 0x0) getsockopt$inet6_mreq(r11, 0x29, 0x1c, 0x0, &(0x7f0000000500)) sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)=@gettfilter={0x34, 0x2e, 0x2, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0xb, 0xd}, {0xd, 0xa}}, [{0x8, 0xb, 0x3fab1fdb}, {0x8, 0xb, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x8000000) 8m3.94033354s ago: executing program 3 (id=267): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002a80)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) 8m2.947795206s ago: executing program 3 (id=269): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 8m1.842920354s ago: executing program 1 (id=273): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x17f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) r0 = syz_io_uring_setup(0x74d, &(0x7f0000000100)={0x0, 0x1381, 0x10, 0x3, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_ACCEPT={0xd, 0xc, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x81800, 0x1}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 8m1.591461015s ago: executing program 1 (id=274): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0xffff, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m47.617919115s ago: executing program 32 (id=269): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 7m46.249594755s ago: executing program 33 (id=274): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001000)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newtfilter={0x84, 0x2c, 0x605, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {}, {0xffff, 0x3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_ACT={0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x10, 0x7ff, 0x6, 0x1, 0xff}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x84}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m47.76669817s ago: executing program 0 (id=660): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x1b8, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x184, 0x2, [@TCA_MATCHALL_ACT={0x180, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 4m41.332388886s ago: executing program 0 (id=674): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r0, 0x0, &(0x7f0000000480)='LLLLLL', 0x6, 0x2}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r0}) 4m41.210199522s ago: executing program 0 (id=676): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f00000000001400", @ANYRES64=r0], 0x38}}, 0x0) 4m40.762908231s ago: executing program 0 (id=678): sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x14, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) ioctl$VIDIOC_TRY_DECODER_CMD(0xffffffffffffffff, 0xc0485661, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x8, 0xfffffff2, 0x80, 0xc868, 0xffffffff, 0x5, 0x40, 0x7, 0x2, 0x80000000, 0x200, 0xe, 0x574, 0x8, 0x80000000, 0x2]}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ptrace$getsig(0x4202, r0, 0x8000000000000, &(0x7f0000000500)) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x109182, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r3, 0x3b82, &(0x7f0000000000)={0x18, r4, 0x1, 0x0, &(0x7f0000000100)=[{0x7ff, 0x1080}]}) ioctl$IOMMU_IOAS_MAP(r3, 0x3b85, &(0x7f0000001380)={0x28, 0x4, r4, 0x0, &(0x7f0000000380)="9e", 0x1, 0xd}) 4m39.487559878s ago: executing program 0 (id=681): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) getsockopt$bt_hci(r0, 0x0, 0x3, 0x0, &(0x7f0000000080)) 4m39.362106927s ago: executing program 0 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x294, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x260, 0x2, [@TCA_MATCHALL_ACT={0x25c, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xdc, 0xc, 0x0, 0x0, {{0xf}, {0x4}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 4m24.152396908s ago: executing program 34 (id=682): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)=@newtfilter={0x294, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff1, 0xc}}, [@filter_kind_options=@f_matchall={{0xd}, {0x260, 0x2, [@TCA_MATCHALL_ACT={0x25c, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x6, 0x1, 0xea, 0x100004}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @remote}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_tunnel_key={0xdc, 0xc, 0x0, 0x0, {{0xf}, {0x4}, {0xaa, 0x6, "702d7b7ca2605b80fb0bfc581434a99b0850c1e175b9e72d4819877b7effa9a22735ec0257f9035602a8c82a11dcd81f6da90792c83eb930b4651b0842fd8b24ec959c6de4ea9a6fdfff65cf7fc47d67a92fccbcf4fd60e2271bae67b9018d70f2d67b7fcbbfc60cf21233bfcc9ab73d6b2b4e85bed55d04fedeb2f8b470d29a44a7f85406cacfcdfea3e574aeb330772672c017d8cb90971aa75861a28f23ee6cdfb876faaa"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x6}}}}, @m_skbedit={0x128, 0x2, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x8, 0x8, 0x10000000, 0x7ff, 0x9}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x3350}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x10001}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x1}]}, {0xc1, 0x6, "04f1182a84f597cf3b9523440c209d73ff6282fffbe76149d4d47c7f085e00962e0197abc32c39d6c30a5d1b7be4d09795bce6d91a10a26c1a35fc59fbfe2ffe96ec7f206d912712c74135715760f3e6da7c1f87b9a4359bd92c4a106b30e29df4501a7971e68cd5c207fb9a850306331fd3a39ad27e6cd6fef98261cf73c07d26dbc5dd8b3fbb5128be3f63dc090fdb8d78e151445e7a7a17bfe450e03190ce0b6a62bfcdbecf9681515413ed98ca95e4a57d3350cf749b2317a1938d"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}]}}]}, 0x294}, 0x1, 0x0, 0x0, 0x4040011}, 0x0) 41.10905029s ago: executing program 2 (id=1692): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00), 0x0, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) 38.71051804s ago: executing program 2 (id=1704): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x4000000) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 38.375978031s ago: executing program 2 (id=1708): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xa8ac}, 0x28) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) 37.695077869s ago: executing program 7 (id=1712): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 37.437573865s ago: executing program 7 (id=1713): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$EVIOCGMTSLOTS(0xffffffffffffffff, 0x8040450a, &(0x7f0000000400)=""/114) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='squashfs\x00', 0x208000, 0x0) 37.082190317s ago: executing program 2 (id=1714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x51) 36.935855949s ago: executing program 2 (id=1715): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@ipv6_newaddrlabel={0x38, 0x48, 0x1, 0x70bd2d, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x9}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x2a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) 36.808002886s ago: executing program 2 (id=1716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 36.683310804s ago: executing program 7 (id=1717): r0 = add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="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", 0x5c2, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000001b40)=""/4096, 0x1000) 36.440084478s ago: executing program 7 (id=1720): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}]}], {0x14}}, 0x94}}, 0x0) 33.9983289s ago: executing program 7 (id=1728): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='mand\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0xb) 32.429672872s ago: executing program 7 (id=1739): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x5e, {"420f7923c744240090000000c744240230000000ff1c240f076564f33664450f35b9080900000f32410f6428c4e24540c5f4b985010000b8a5d7ff8cba000000000f30c4637d08150f0000008e"}}], 0x5e}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@code={0xa, 0x56, {"48b8e00000000000b9000f23d00f21f835000000000f23f8f365c11f7a660f38807af60f060f00d0c48200f57694430f0726660faef3b801000000b9977802030f01c17300"}}], 0x56}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28.704146558s ago: executing program 5 (id=1760): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x1c, r1, 0xd03, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 28.629724686s ago: executing program 5 (id=1761): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8000003d) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 28.536198161s ago: executing program 5 (id=1762): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000300)=@ethtool_sfeatures}) ioctl(r0, 0x8b19, &(0x7f0000000040)) 28.445063659s ago: executing program 5 (id=1763): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x1, 0x0, 0x2, 0x2, 0x9, 0xfffe}, 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 28.334743253s ago: executing program 5 (id=1764): pipe2(0x0, 0x4800) vmsplice(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x40000) 27.2550001s ago: executing program 6 (id=1767): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x149400, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd0) 27.235939176s ago: executing program 6 (id=1768): r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc1485544, &(0x7f00000003c0)) 27.14147254s ago: executing program 6 (id=1769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 27.037170175s ago: executing program 6 (id=1770): modify_ldt$read(0x1100, 0x0, 0xfffffffffffffe5e) 27.002547367s ago: executing program 6 (id=1771): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'das16m1\x00', [0x4e27, 0x5, 0x3, 0x40300000, 0xe7, 0x8, 0x8, 0xa82, 0xff46, 0x100, 0xcf3, 0xb, 0x1db, 0x2, 0x6, 0x101, 0x10001, 0x10087, 0x3, 0x0, 0x2, 0x80000001, 0xf23, 0x2000007, 0xb, 0xbfd, 0x3c, 0x5, 0x6, 0x0, 0xfffffff8]}) 26.92478294s ago: executing program 6 (id=1772): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000001c0), 0x0, 0x0, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 26.782786698s ago: executing program 5 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, 0x0) 21.620458742s ago: executing program 35 (id=1716): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x83, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000240)="b805000000090200e1490000320f01d9660ff7e31bf7ecec05000000b90000c0fe0fae41d90100b9800000c00f320908400f300f0826f30fc7b2050000000f32660fc775022e0ffa600c980f320f3566b857000f00d0", 0x56}], 0x1, 0x15, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x6bb6c4a5b2d35090, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 16.439575608s ago: executing program 36 (id=1739): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x5e, {"420f7923c744240090000000c744240230000000ff1c240f076564f33664450f35b9080900000f32410f6428c4e24540c5f4b985010000b8a5d7ff8cba000000000f30c4637d08150f0000008e"}}], 0x5e}) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000000)={0x0, &(0x7f0000000340)=[@code={0xa, 0x56, {"48b8e00000000000b9000f23d00f21f835000000000f23f8f365c11f7a660f38807af60f060f00d0c48200f57694430f0726660faef3b801000000b9977802030f01c17300"}}], 0x56}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.299687408s ago: executing program 4 (id=1806): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x4}, [], {}, {0x20, 0x5}}, 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') 16.004307217s ago: executing program 4 (id=1807): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, r2, 0x25, 0x4, @val=@tcx={@void, @value=r0}}, 0x1c) 15.349616075s ago: executing program 4 (id=1808): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="1fdea5f3fc0132a7a47be237a09811d3", 0x10) close(r0) 15.29660478s ago: executing program 4 (id=1809): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) ioctl$SOUND_MIXER_READ_CAPS(r0, 0x80044dfc, &(0x7f0000001080)) 15.230798224s ago: executing program 4 (id=1810): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) 15.139363163s ago: executing program 4 (id=1811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r5, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="29920200465c00"], 0x20}}, 0x0) 11.542704173s ago: executing program 37 (id=1772): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x4, 0x2000, 0x2000, &(0x7f0000012000/0x2000)=nil}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) fsetxattr$trusted_overlay_origin(r1, &(0x7f00000001c0), 0x0, 0x0, 0x1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.427978737s ago: executing program 38 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, 0x0) 0s ago: executing program 39 (id=1811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x400, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r5, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r5, @ANYBLOB="29920200465c00"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): allmulticast mode [ 440.904295][ T58] bridge_slave_0: left promiscuous mode [ 440.904523][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.965442][ T58] bridge_slave_1: left allmulticast mode [ 440.965467][ T58] bridge_slave_1: left promiscuous mode [ 440.965648][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.039416][ T58] bridge_slave_0: left allmulticast mode [ 441.039439][ T58] bridge_slave_0: left promiscuous mode [ 441.039578][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.333980][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.414105][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.474924][ T58] bond0 (unregistering): Released all slaves [ 442.875089][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.933835][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 442.954067][ T58] bond0 (unregistering): Released all slaves [ 443.154667][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.254631][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.315099][ T58] bond0 (unregistering): Released all slaves [ 443.334862][ T8392] tipc: Enabling of bearer rejected, failed to enable media [ 443.414372][ T8399] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 443.664861][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.664873][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.664886][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.670647][ T8116] hsr_slave_0: entered promiscuous mode [ 443.671593][ T8116] hsr_slave_1: entered promiscuous mode [ 443.672119][ T8116] debugfs: 'hsr0' already exists in 'hsr' [ 443.672132][ T8116] Cannot create hsr debugfs directory [ 443.675540][ T8223] team0: Port device team_slave_1 added [ 443.991320][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.991332][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.991344][ T8223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.196367][ T8223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.196387][ T8223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.196424][ T8223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.560698][ T8097] hsr_slave_0: entered promiscuous mode [ 444.562313][ T8097] hsr_slave_1: entered promiscuous mode [ 444.564298][ T8097] debugfs: 'hsr0' already exists in 'hsr' [ 444.564321][ T8097] Cannot create hsr debugfs directory [ 445.145479][ T8428] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 447.735451][ T8223] hsr_slave_0: entered promiscuous mode [ 447.737156][ T8223] hsr_slave_1: entered promiscuous mode [ 447.738359][ T8223] debugfs: 'hsr0' already exists in 'hsr' [ 447.738385][ T8223] Cannot create hsr debugfs directory [ 448.275820][ T58] hsr_slave_0: left promiscuous mode [ 448.313218][ T58] hsr_slave_1: left promiscuous mode [ 448.316898][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.104624][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.437582][ T58] hsr_slave_0: left promiscuous mode [ 449.473210][ T58] hsr_slave_1: left promiscuous mode [ 449.474071][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.494152][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.643145][ T58] hsr_slave_0: left promiscuous mode [ 449.663228][ T58] hsr_slave_1: left promiscuous mode [ 449.664711][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.714051][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.666154][ T58] team0 (unregistering): Port device team_slave_1 removed [ 450.804379][ T58] team0 (unregistering): Port device team_slave_0 removed [ 453.255344][ T58] team0 (unregistering): Port device team_slave_1 removed [ 453.473774][ T58] team0 (unregistering): Port device team_slave_0 removed [ 456.344985][ T58] team0 (unregistering): Port device team_slave_1 removed [ 456.484226][ T58] team0 (unregistering): Port device team_slave_0 removed [ 457.282141][ T8469] netlink: 'syz.2.783': attribute type 3 has an invalid length. [ 458.639223][ T8479] netlink: 'syz.4.787': attribute type 2 has an invalid length. [ 460.286426][ T8506] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 461.442647][ T5815] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.456896][ T5815] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.459308][ T5815] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.461764][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.474318][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.819118][ T8116] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 461.897343][ T8116] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 461.999147][ T8116] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 462.686971][ T8523] netlink: 12 bytes leftover after parsing attributes in process `syz.4.802'. [ 463.593525][ T5815] Bluetooth: hci0: command tx timeout [ 463.650360][ T8525] netlink: 40 bytes leftover after parsing attributes in process `syz.2.803'. [ 464.052690][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 464.095220][ T8223] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 464.098518][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 464.100901][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 464.102855][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 464.104274][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 464.933241][ T5784] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 465.050223][ T8541] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 465.104794][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.104818][ T5784] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.104831][ T5784] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.104857][ T5784] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.104871][ T5784] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.107381][ T8223] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 465.108881][ T5784] usb 3-1: config 0 descriptor?? [ 465.228029][ T8223] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 465.329302][ T8223] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 465.686384][ T5815] Bluetooth: hci0: command tx timeout [ 465.739115][ T5784] usbhid 3-1:0.0: can't add hid device: -71 [ 465.739262][ T5784] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 465.759893][ T5784] usb 3-1: USB disconnect, device number 31 [ 466.153159][ T5815] Bluetooth: hci2: command tx timeout [ 466.193391][ T8512] chnl_net:caif_netlink_parms(): no params data found [ 466.410987][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.4.808'. [ 466.657826][ T8563] netlink: 40 bytes leftover after parsing attributes in process `syz.2.812'. [ 466.785905][ T8566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.811'. [ 467.799197][ T5815] Bluetooth: hci0: command tx timeout [ 468.146582][ T8579] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 468.817182][ T5815] Bluetooth: hci2: command tx timeout [ 470.301702][ T5815] Bluetooth: hci0: command tx timeout [ 470.556348][ T8512] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.556443][ T8512] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.556612][ T8512] bridge_slave_0: entered allmulticast mode [ 470.558363][ T8512] bridge_slave_0: entered promiscuous mode [ 470.610204][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.610347][ T8512] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.610519][ T8512] bridge_slave_1: entered allmulticast mode [ 470.633371][ T8512] bridge_slave_1: entered promiscuous mode [ 470.793152][ T5892] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 470.886288][ T5815] Bluetooth: hci2: command tx timeout [ 470.946800][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.946836][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.946860][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 470.946907][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 470.946931][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.008229][ T5892] usb 3-1: config 0 descriptor?? [ 471.016540][ T37] kauditd_printk_skb: 135 callbacks suppressed [ 471.016557][ T37] audit: type=1326 audit(1763599699.841:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8589 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7fc00000 [ 471.016941][ T37] audit: type=1326 audit(1763599699.841:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8589 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb63d1ef749 code=0x7fc00000 [ 471.017211][ T37] audit: type=1326 audit(1763599699.841:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8589 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7fc00000 [ 471.019710][ T37] audit: type=1326 audit(1763599699.841:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8589 comm="syz.4.819" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7fc00000 [ 471.297636][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.4.821'. [ 472.332284][ T8600] netlink: 40 bytes leftover after parsing attributes in process `syz.4.822'. [ 472.413771][ T8512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.436897][ T8512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.603603][ T5892] usbhid 3-1:0.0: can't add hid device: -71 [ 472.603760][ T5892] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 472.628507][ T5892] usb 3-1: USB disconnect, device number 32 [ 472.727096][ T8512] team0: Port device team_slave_0 added [ 472.729267][ T8532] chnl_net:caif_netlink_parms(): no params data found [ 472.742618][ T8512] team0: Port device team_slave_1 added [ 472.857493][ T8611] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 472.953396][ T5815] Bluetooth: hci2: command tx timeout [ 473.106029][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.106043][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.106058][ T8512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.240432][ T8512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.240452][ T8512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.240481][ T8512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.563158][ T6019] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 473.734947][ T6019] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 473.734966][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 473.734978][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 473.734988][ T6019] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 473.735014][ T6019] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 473.735025][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.739823][ T6019] usb 3-1: config 0 descriptor?? [ 473.975137][ T8532] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.975428][ T8532] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.975779][ T8532] bridge_slave_0: entered allmulticast mode [ 473.980661][ T8532] bridge_slave_0: entered promiscuous mode [ 474.107880][ T8532] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.107987][ T8532] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.109962][ T8532] bridge_slave_1: entered allmulticast mode [ 474.117378][ T8532] bridge_slave_1: entered promiscuous mode [ 474.120227][ T58] bridge_slave_1: left allmulticast mode [ 474.120477][ T58] bridge_slave_1: left promiscuous mode [ 474.120835][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.209686][ T6019] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 474.245802][ T58] bridge_slave_0: left allmulticast mode [ 474.245821][ T58] bridge_slave_0: left promiscuous mode [ 474.245960][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.337993][ T58] bridge_slave_1: left allmulticast mode [ 474.338025][ T58] bridge_slave_1: left promiscuous mode [ 474.338267][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.404294][ T58] bridge_slave_0: left allmulticast mode [ 474.404316][ T58] bridge_slave_0: left promiscuous mode [ 474.404464][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.854865][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.933700][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.984426][ T991] usb 3-1: USB disconnect, device number 33 [ 475.004324][ T58] bond0 (unregistering): Released all slaves [ 475.357665][ T8626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.829'. [ 476.280435][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.396361][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.455166][ T58] bond0 (unregistering): Released all slaves [ 476.479072][ T8223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.492179][ T8512] hsr_slave_0: entered promiscuous mode [ 476.494287][ T8512] hsr_slave_1: entered promiscuous mode [ 476.560304][ T8630] netlink: 20 bytes leftover after parsing attributes in process `syz.4.831'. [ 476.639599][ T8628] netlink: 'syz.2.830': attribute type 4 has an invalid length. [ 476.762331][ T8532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.919886][ T8532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.037482][ T8639] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 477.043130][ T993] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 477.205730][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 477.205767][ T993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 477.205790][ T993] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 477.205838][ T993] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 477.205863][ T993] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.217622][ T993] usb 3-1: config 0 descriptor?? [ 477.351216][ T8532] team0: Port device team_slave_0 added [ 477.387856][ T8532] team0: Port device team_slave_1 added [ 477.406309][ T8223] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.643312][ T58] hsr_slave_0: left promiscuous mode [ 477.683184][ T58] hsr_slave_1: left promiscuous mode [ 477.696339][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.734962][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.833235][ T58] hsr_slave_0: left promiscuous mode [ 477.853158][ T58] hsr_slave_1: left promiscuous mode [ 477.854128][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.867320][ T993] usbhid 3-1:0.0: can't add hid device: -71 [ 477.867457][ T993] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 477.872575][ T993] usb 3-1: USB disconnect, device number 34 [ 477.902279][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 478.684038][ T58] team0 (unregistering): Port device team_slave_1 removed [ 478.813115][ T5892] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 478.831327][ T58] team0 (unregistering): Port device team_slave_0 removed [ 478.966106][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 478.966142][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 478.966167][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 478.966189][ T5892] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.966232][ T5892] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.966254][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.066547][ T5892] usb 3-1: config 0 descriptor?? [ 479.487723][ T5892] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 479.933569][ T58] team0 (unregistering): Port device team_slave_1 removed [ 480.063824][ T58] team0 (unregistering): Port device team_slave_0 removed [ 480.300078][ T993] usb 3-1: USB disconnect, device number 35 [ 480.713867][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.713889][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.713920][ T8532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.720446][ T8532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.720465][ T8532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.720495][ T8532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.748694][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.748850][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.889505][ T8653] netlink: 12 bytes leftover after parsing attributes in process `syz.4.838'. [ 481.844908][ T8655] ======================================================= [ 481.844908][ T8655] WARNING: The mand mount option has been deprecated and [ 481.844908][ T8655] and is ignored by this kernel. Remove the mand [ 481.844908][ T8655] option from the mount to silence this warning. [ 481.844908][ T8655] ======================================================= [ 481.856781][ T8655] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 481.929688][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.953197][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.062521][ T8661] netlink: 20 bytes leftover after parsing attributes in process `syz.2.841'. [ 482.205923][ T8532] hsr_slave_0: entered promiscuous mode [ 482.220032][ T8532] hsr_slave_1: entered promiscuous mode [ 482.221253][ T8532] debugfs: 'hsr0' already exists in 'hsr' [ 482.221280][ T8532] Cannot create hsr debugfs directory [ 482.263381][ T8664] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 482.753154][ T6019] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 482.926016][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 482.926054][ T6019] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 482.926078][ T6019] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 482.926125][ T6019] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 482.926149][ T6019] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.984623][ T6019] usb 3-1: config 0 descriptor?? [ 483.662452][ T6019] usbhid 3-1:0.0: can't add hid device: -71 [ 483.662541][ T6019] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 483.760720][ T6019] usb 3-1: USB disconnect, device number 36 [ 483.924877][ T8512] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.043033][ T8512] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.166913][ T8512] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.297866][ T8512] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.577901][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.847'. [ 485.650590][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 485.660832][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 485.662092][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 485.664684][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 485.665475][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 485.701279][ T8693] netlink: 20 bytes leftover after parsing attributes in process `syz.4.850'. [ 485.873412][ T993] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 486.037744][ T993] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 486.037768][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.037778][ T993] usb 3-1: Product: syz [ 486.037784][ T993] usb 3-1: Manufacturer: syz [ 486.037790][ T993] usb 3-1: SerialNumber: syz [ 486.229464][ T8699] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 486.495711][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 486.495783][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 487.673118][ T5812] Bluetooth: hci5: command tx timeout [ 488.630160][ T8532] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 488.690648][ T8532] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 488.803233][ T8532] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 488.886514][ T8532] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 489.216374][ T12] bridge_slave_1: left allmulticast mode [ 489.216407][ T12] bridge_slave_1: left promiscuous mode [ 489.216927][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.297072][ T12] bridge_slave_0: left allmulticast mode [ 489.297107][ T12] bridge_slave_0: left promiscuous mode [ 489.297624][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.496612][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz.4.856'. [ 490.356175][ T5812] Bluetooth: hci5: command tx timeout [ 490.403354][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -EPROTO [ 490.403418][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 490.403436][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 490.404324][ T993] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 490.505054][ T993] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 490.511164][ T993] usb 3-1: USB disconnect, device number 37 [ 491.362700][ T8725] netlink: 40 bytes leftover after parsing attributes in process `syz.2.858'. [ 491.863778][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 491.944032][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 491.965834][ T12] bond0 (unregistering): Released all slaves [ 492.021865][ T8512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.136257][ T8691] chnl_net:caif_netlink_parms(): no params data found [ 492.198097][ T8731] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.336957][ T8733] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 492.411318][ T5812] Bluetooth: hci5: command tx timeout [ 493.163221][ T12] hsr_slave_0: left promiscuous mode [ 493.183483][ T12] hsr_slave_1: left promiscuous mode [ 493.185357][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 493.223788][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.353634][ T12] team0 (unregistering): Port device team_slave_1 removed [ 494.483150][ T5812] Bluetooth: hci5: command tx timeout [ 494.584298][ T12] team0 (unregistering): Port device team_slave_0 removed [ 496.605858][ T8743] geneve2: entered promiscuous mode [ 496.775862][ T8512] 8021q: adding VLAN 0 to HW filter on device team0 [ 496.969422][ T8691] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.969640][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.969815][ T8691] bridge_slave_0: entered allmulticast mode [ 496.971306][ T8691] bridge_slave_0: entered promiscuous mode [ 497.002049][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.002124][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.028869][ T8691] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.029025][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.029249][ T8691] bridge_slave_1: entered allmulticast mode [ 497.032164][ T8691] bridge_slave_1: entered promiscuous mode [ 497.093220][ T993] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 497.255770][ T993] usb 3-1: Using ep0 maxpacket: 8 [ 497.258393][ T993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 497.258418][ T993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 497.269100][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.269358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.305280][ T8691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.308290][ T993] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 497.308321][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.308341][ T993] usb 3-1: Product: syz [ 497.308354][ T993] usb 3-1: Manufacturer: syz [ 497.308368][ T993] usb 3-1: SerialNumber: syz [ 497.397790][ T8691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.510297][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.4.866'. [ 498.495049][ T993] usb 3-1: 0:2 : does not exist [ 498.511332][ T993] usb 3-1: USB disconnect, device number 38 [ 498.735685][ T8691] team0: Port device team_slave_0 added [ 498.765492][ T8691] team0: Port device team_slave_1 added [ 498.936149][ T8767] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 499.055891][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 499.055905][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.055921][ T8691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 499.071448][ T8691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 499.071465][ T8691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 499.071490][ T8691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.806598][ T8691] hsr_slave_0: entered promiscuous mode [ 499.807875][ T8691] hsr_slave_1: entered promiscuous mode [ 499.808510][ T8691] debugfs: 'hsr0' already exists in 'hsr' [ 499.808729][ T8691] Cannot create hsr debugfs directory [ 500.164085][ T8532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.230429][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 500.740865][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.874'. [ 501.689692][ T8532] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.733651][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.733735][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.796017][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.798062][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.941122][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.941332][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.001254][ T8512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.053250][ T31] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 502.193384][ T8802] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 502.243041][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 502.245860][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.245888][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.248469][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 502.248487][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.248500][ T31] usb 3-1: Product: syz [ 502.248508][ T31] usb 3-1: Manufacturer: syz [ 502.248515][ T31] usb 3-1: SerialNumber: syz [ 502.969724][ T31] usb 3-1: 0:2 : does not exist [ 503.031438][ T31] usb 3-1: USB disconnect, device number 39 [ 503.798249][ T8691] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 503.943076][ T8691] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 504.097020][ T8691] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 504.139992][ T8512] veth0_vlan: entered promiscuous mode [ 504.145425][ T8691] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 504.247575][ T8512] veth1_vlan: entered promiscuous mode [ 504.269654][ T8532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.433232][ T5808] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 504.440454][ T8512] veth0_macvtap: entered promiscuous mode [ 504.550511][ T8831] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 504.995009][ T8512] veth1_macvtap: entered promiscuous mode [ 505.428541][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.551820][ T5808] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 505.551872][ T5808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.551898][ T5808] usb 3-1: Product: syz [ 505.551922][ T5808] usb 3-1: Manufacturer: syz [ 505.551936][ T5808] usb 3-1: SerialNumber: syz [ 505.617476][ T8512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.667295][ T7117] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.670377][ T7117] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.672627][ T7117] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.710470][ T7117] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.746086][ T8691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.944609][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.003866][ T5808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 506.003955][ T5808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 506.097069][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.099514][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.185232][ T6145] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.185494][ T6145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.195616][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.195645][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.296918][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.296941][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.421002][ T8532] veth0_vlan: entered promiscuous mode [ 506.464629][ T8532] veth1_vlan: entered promiscuous mode [ 506.709008][ T8532] veth0_macvtap: entered promiscuous mode [ 506.744545][ T8532] veth1_macvtap: entered promiscuous mode [ 506.799353][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.845472][ T8532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.941067][ T3771] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.944739][ T3771] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.949939][ T3771] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.959474][ T3771] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.568092][ T5957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.568119][ T5957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.601656][ T8691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.691078][ T5957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.691100][ T5957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.138764][ T8867] fuse: Unknown parameter 'fd0x0000000000000005' [ 509.607128][ T5808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO [ 509.607194][ T5808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 509.607214][ T5808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 509.674047][ T5808] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 509.813725][ T5808] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 509.963201][ T5808] usb 3-1: USB disconnect, device number 40 [ 510.696983][ T8691] veth0_vlan: entered promiscuous mode [ 510.967964][ T8691] veth1_vlan: entered promiscuous mode [ 511.078303][ T8691] veth0_macvtap: entered promiscuous mode [ 511.088074][ T8691] veth1_macvtap: entered promiscuous mode [ 511.112514][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.126556][ T8691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.160001][ T3771] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.160584][ T3771] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.161478][ T3771] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.161521][ T3771] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.333312][ T5892] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 511.483777][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.483801][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.510645][ T5892] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 511.510677][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.510698][ T5892] usb 3-1: Product: syz [ 511.510712][ T5892] usb 3-1: Manufacturer: syz [ 511.510726][ T5892] usb 3-1: SerialNumber: syz [ 511.698460][ T1333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.698710][ T1333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.834060][ T5892] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 512.834135][ T5892] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 514.093081][ T5889] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 514.695373][ T5889] usb 6-1: device descriptor read/64, error -71 [ 515.053183][ T5889] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 517.031745][ T5892] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 517.031813][ T5892] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 517.031834][ T5892] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 517.032774][ T5892] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 517.365756][ T5892] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 517.397582][ T5892] usb 3-1: USB disconnect, device number 41 [ 517.674284][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 517.898850][ T8966] tipc: Started in network mode [ 517.898964][ T8966] tipc: Node identity 4, cluster identity 4711 [ 517.899007][ T8966] tipc: Node number set to 4 [ 518.713060][ T31] usb 8-1: Using ep0 maxpacket: 32 [ 518.715533][ T31] usb 8-1: config 0 has an invalid interface number: 66 but max is 0 [ 518.715561][ T31] usb 8-1: config 0 has no interface number 0 [ 518.719264][ T31] usb 8-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 518.719294][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.719315][ T31] usb 8-1: Product: syz [ 518.719328][ T31] usb 8-1: Manufacturer: syz [ 518.719341][ T31] usb 8-1: SerialNumber: syz [ 518.757638][ T31] usb 8-1: config 0 descriptor?? [ 518.762741][ T31] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 518.777905][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 518.838458][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 518.849150][ T31] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 518.849250][ T31] usb 8-1: media controller created [ 520.179053][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 520.263524][ T31] cxusb: set interface failed [ 520.263546][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 520.473522][ T8971] random: crng reseeded on system resumption [ 520.593574][ T31] DVB: Unable to find symbol lgdt330x_attach() [ 520.593590][ T31] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 520.903036][ T31] rc_core: IR keymap rc-dvico-portable not found [ 520.903062][ T31] Registered IR keymap rc-empty [ 520.913912][ T31] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0 [ 520.917258][ T31] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.7/usb8/8-1/rc/rc0/input14 [ 523.221944][ T31] dvb-usb: schedule remote query interval to 100 msecs. [ 523.221971][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 523.273588][ T31] usb 8-1: USB disconnect, device number 2 [ 523.372407][ T8984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium acpid: input device has been disconnected, fd 10 [ 525.282302][ T31] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 528.223167][ T8859] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 528.392620][ T8859] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 528.392655][ T8859] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.392676][ T8859] usb 6-1: Product: syz [ 528.392690][ T8859] usb 6-1: Manufacturer: syz [ 528.392704][ T8859] usb 6-1: SerialNumber: syz [ 528.902143][ T8859] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 528.902216][ T8859] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 530.213063][ T5808] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 530.366066][ T5808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 530.366115][ T5808] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 530.366166][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.366192][ T5808] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.366217][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.366234][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.366252][ T5808] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 530.366278][ T5808] usb 8-1: config 168 interface 0 has no altsetting 0 [ 530.368367][ T5808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 530.368415][ T5808] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 530.368464][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.368483][ T5808] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.368500][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.368526][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.368552][ T5808] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 530.368579][ T5808] usb 8-1: config 168 interface 0 has no altsetting 0 [ 530.370015][ T5808] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 530.370036][ T5808] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 530.370082][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 530.370103][ T5808] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 530.370124][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 530.370144][ T5808] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 530.370163][ T5808] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 530.370182][ T5808] usb 8-1: config 168 interface 0 has no altsetting 0 [ 530.375425][ T5808] usb 8-1: string descriptor 0 read error: -22 [ 530.375623][ T5808] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 530.375646][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.441294][ T5808] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 530.545720][ T8859] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 530.545788][ T8859] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 530.546714][ T8859] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 530.919469][ T8859] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 530.981482][ T8859] usb 6-1: USB disconnect, device number 4 [ 531.296484][ T9086] kAFS: unable to lookup cell '\,' [ 531.329746][ T9084] kAFS: unable to lookup cell '(,c¾ûL' [ 531.470024][ T31] usb 8-1: USB disconnect, device number 3 [ 531.950324][ T9098] tipc: Started in network mode [ 531.950357][ T9098] tipc: Node identity 5a343a4b1664, cluster identity 4711 [ 531.950566][ T9098] tipc: Enabled bearer , priority 0 [ 531.974031][ T9098] syzkaller0: entered promiscuous mode [ 531.974051][ T9098] syzkaller0: entered allmulticast mode [ 532.423211][ T9095] tipc: Resetting bearer [ 533.454397][ T9117] 9pnet_virtio: no channels available for device syz [ 533.613199][ T9095] tipc: Disabling bearer [ 533.805702][ T9124] overlayfs: failed to clone upperpath [ 533.873222][ T5808] tipc: Node number set to 1280326219 [ 534.185036][ T9137] random: crng reseeded on system resumption [ 535.761528][ T9154] Bluetooth: MGMT ver 1.23 [ 536.125474][ T9166] tipc: Enabled bearer , priority 0 [ 536.127286][ T9166] syzkaller0: entered promiscuous mode [ 536.127311][ T9166] syzkaller0: entered allmulticast mode [ 536.377967][ T9177] capability: warning: `syz.6.1007' uses deprecated v2 capabilities in a way that may be insecure [ 536.615192][ T9160] tipc: Resetting bearer [ 538.157235][ T9160] tipc: Disabling bearer [ 539.974794][ T37] audit: type=1326 audit(1763599768.791:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.975161][ T37] audit: type=1326 audit(1763599768.791:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.975964][ T37] audit: type=1326 audit(1763599768.791:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.976450][ T37] audit: type=1326 audit(1763599768.791:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.976748][ T37] audit: type=1326 audit(1763599768.791:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.977271][ T37] audit: type=1326 audit(1763599768.791:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.977622][ T37] audit: type=1326 audit(1763599768.791:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9a6b265e7 code=0x7ffc0000 [ 539.977914][ T37] audit: type=1326 audit(1763599768.791:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc9a6acb829 code=0x7ffc0000 [ 539.978224][ T37] audit: type=1326 audit(1763599768.791:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 539.978656][ T37] audit: type=1326 audit(1763599768.791:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.5.1026" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc9a6b2f749 code=0x7ffc0000 [ 540.023099][ T5808] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 540.212823][ T9226] random: crng reseeded on system resumption [ 540.254393][ T5808] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 540.254427][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.254449][ T5808] usb 8-1: Product: syz [ 540.254463][ T5808] usb 8-1: Manufacturer: syz [ 540.254478][ T5808] usb 8-1: SerialNumber: syz [ 540.728999][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 540.729071][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 541.726689][ T9253] tipc: Started in network mode [ 541.726717][ T9253] tipc: Node identity 4, cluster identity 4711 [ 541.726730][ T9253] tipc: Node number set to 4 [ 543.576957][ T9261] tipc: Enabled bearer , priority 0 [ 543.584054][ T9261] syzkaller0: entered promiscuous mode [ 543.584081][ T9261] syzkaller0: entered allmulticast mode [ 543.588572][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 543.588652][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 543.589472][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 543.901607][ T9263] random: crng reseeded on system resumption [ 543.979109][ T5808] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 544.149098][ T5808] usb 8-1: USB disconnect, device number 4 [ 544.243491][ T9260] tipc: Resetting bearer [ 544.933661][ T9287] nftables ruleset with unbound chain [ 545.046165][ T9260] tipc: Disabling bearer [ 546.341306][ T5808] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 546.361638][ T5892] tipc: Node number set to 2865413400 [ 546.640098][ T5808] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 546.640130][ T5808] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.640255][ T5808] usb 8-1: Product: syz [ 546.640271][ T5808] usb 8-1: Manufacturer: syz [ 546.640286][ T5808] usb 8-1: SerialNumber: syz [ 546.942808][ T9310] random: crng reseeded on system resumption [ 547.098096][ T9315] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 547.102272][ T9315] tipc: Enabled bearer , priority 10 [ 547.133403][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 547.133475][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 549.158175][ T9340] tipc: Enabled bearer , priority 0 [ 549.159374][ T9340] syzkaller0: entered promiscuous mode [ 549.159400][ T9340] syzkaller0: entered allmulticast mode [ 549.323257][ T9338] tipc: Resetting bearer [ 549.507603][ T9338] tipc: Disabling bearer [ 549.891155][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891197][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891220][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891243][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891266][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891290][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891312][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891335][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891358][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.891381][ T31] hid-generic 000C:0007:000C.0007: unknown main item tag 0x0 [ 549.994487][ T31] hid-generic 000C:0007:000C.0007: hidraw0: HID v14.24 Device [syz1] on syz0 [ 550.585938][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e4. ret = -EPROTO [ 550.586002][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 550.586024][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 550.587898][ T5808] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 550.608959][ T9377] tipc: Enabled bearer , priority 0 [ 550.609801][ T9377] syzkaller0: entered promiscuous mode [ 550.609821][ T9377] syzkaller0: entered allmulticast mode [ 550.692364][ T5808] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 550.763850][ T5808] usb 8-1: USB disconnect, device number 5 [ 550.902393][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.003198][ T9376] tipc: Resetting bearer [ 551.381399][ T9376] tipc: Disabling bearer [ 552.000323][ C1] vkms_vblank_simulate: vblank timer overrun [ 552.718141][ T9421] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1102'. [ 552.816556][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.030812][ T9416] random: crng reseeded on system resumption [ 553.625098][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.763909][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.096628][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.264083][ C1] vkms_vblank_simulate: vblank timer overrun [ 554.627585][ T5808] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 554.641938][ T9448] tipc: Enabled bearer , priority 0 [ 554.836821][ T9444] tipc: Disabling bearer [ 554.851915][ T5808] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.851944][ T5808] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 554.851984][ T5808] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 554.852008][ T5808] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.899421][ T5808] usb 8-1: config 0 descriptor?? [ 555.077971][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.180033][ T5889] usb 8-1: USB disconnect, device number 6 [ 558.133458][ T9516] tipc: Enabled bearer , priority 0 [ 558.179203][ T9516] tipc: Resetting bearer [ 558.437982][ T9515] tipc: Disabling bearer [ 558.744559][ T37] kauditd_printk_skb: 207 callbacks suppressed [ 558.744582][ T37] audit: type=1326 audit(1763599787.561:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9527 comm="syz.4.1141" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x0 [ 560.002745][ T9533] random: crng reseeded on system resumption [ 562.989416][ T9586] 9pnet_fd: Insufficient options for proto=fd [ 563.972806][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.972947][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.306712][ T9593] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1166'. [ 564.850878][ T9591] random: crng reseeded on system resumption [ 566.725304][ T9622] syzkaller0: entered promiscuous mode [ 566.725332][ T9622] syzkaller0: entered allmulticast mode [ 566.879450][ T9637] netlink: 'syz.4.1183': attribute type 2 has an invalid length. [ 566.879479][ T9637] netlink: 'syz.4.1183': attribute type 1 has an invalid length. [ 567.825805][ T9646] random: crng reseeded on system resumption [ 568.947687][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.262198][ T9682] syzkaller0: entered promiscuous mode [ 569.262227][ T9682] syzkaller0: entered allmulticast mode [ 569.481854][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.698218][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.895705][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.897113][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.996412][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.096896][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.629197][ T9737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1226'. [ 577.874959][ T9779] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1241'. [ 578.664472][ T9804] overlayfs: failed to clone upperpath [ 578.703547][ T5889] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 578.856302][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 578.856342][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.856369][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.856420][ T5889] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 578.856445][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.918922][ T5889] usb 6-1: config 0 descriptor?? [ 579.396431][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 579.396582][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 579.426330][ T5889] usb 6-1: USB disconnect, device number 5 [ 579.579351][ T9815] overlayfs: unescaped trailing colons in lowerdir mount option. [ 582.633206][ T5815] Bluetooth: hci0: command 0x1407 tx timeout [ 582.633547][ T5812] Bluetooth: hci0: Opcode 0x1407 failed: -110 [ 584.418655][ T5812] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 585.005142][ T9928] tipc: Started in network mode [ 585.005169][ T9928] tipc: Node identity 4, cluster identity 4711 [ 585.005183][ T9928] tipc: Node number set to 4 [ 586.157384][ T5812] Bluetooth: hci0: command 0x1407 tx timeout [ 587.377946][ T9951] tty tty34: ldisc open failed (-12), clearing slot 33 [ 587.930924][ T9964] fuse: Bad value for 'fd' [ 588.283027][ T5889] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 588.440239][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 588.440277][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.440303][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.440347][ T5889] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 588.440372][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.498065][ T5889] usb 6-1: config 0 descriptor?? [ 588.667584][ T9979] syz.4.1316 (9979) used greatest stack depth: 16632 bytes left [ 589.773188][ T5889] usbhid 6-1:0.0: can't add hid device: -71 [ 589.773334][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 589.970301][ T5889] usb 6-1: USB disconnect, device number 6 [ 592.655862][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 593.598949][ T5889] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 594.228568][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 594.228605][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 594.228633][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 594.228676][ T5889] usb 3-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 594.228700][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.296754][ T5889] usb 3-1: config 0 descriptor?? [ 594.762807][ T5889] usbhid 3-1:0.0: can't add hid device: -71 [ 594.763164][ T5889] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 594.781943][ T5889] usb 3-1: USB disconnect, device number 42 [ 595.816702][ T37] audit: type=1326 audit(1763599824.631:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 595.817038][ T37] audit: type=1326 audit(1763599824.631:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 595.820644][ T37] audit: type=1326 audit(1763599824.631:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 595.821177][ T37] audit: type=1326 audit(1763599824.631:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 595.821806][ T37] audit: type=1326 audit(1763599824.631:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 595.822347][ T37] audit: type=1326 audit(1763599824.631:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 596.365578][ T37] audit: type=1326 audit(1763599825.181:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16d86165e7 code=0x7ffc0000 [ 596.365645][ T37] audit: type=1326 audit(1763599825.181:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f16d85bb829 code=0x7ffc0000 [ 596.365693][ T37] audit: type=1326 audit(1763599825.181:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 596.371959][ T37] audit: type=1326 audit(1763599825.181:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10067 comm="syz.7.1350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f16d86165e7 code=0x7ffc0000 [ 597.200208][ T5812] Bluetooth: hci3: unexpected event for opcode 0x203b [ 597.393039][ T5889] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 597.623565][ T5889] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 597.623587][ T5889] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.623599][ T5889] usb 8-1: Product: syz [ 597.623607][ T5889] usb 8-1: Manufacturer: syz [ 597.623615][ T5889] usb 8-1: SerialNumber: syz [ 598.082400][ T5889] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 598.082470][ T5889] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 598.365035][T10120] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1371'. [ 598.657048][T10122] netlink: 'syz.5.1372': attribute type 13 has an invalid length. [ 600.209174][T10141] Unknown options in mask b7f2 [ 601.163978][ T37] kauditd_printk_skb: 103 callbacks suppressed [ 601.163999][ T37] audit: type=1326 audit(1763599829.981:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 601.167619][ T37] audit: type=1326 audit(1763599829.981:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 601.168527][ T37] audit: type=1326 audit(1763599829.981:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 601.169281][ T37] audit: type=1326 audit(1763599829.981:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 601.170025][ T37] audit: type=1326 audit(1763599829.981:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 601.171164][ T37] audit: type=1326 audit(1763599829.981:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 601.229719][ T37] audit: type=1326 audit(1763599830.041:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63d1e65e7 code=0x7ffc0000 [ 601.232112][ T37] audit: type=1326 audit(1763599830.041:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63d18b829 code=0x7ffc0000 [ 601.236149][ T37] audit: type=1326 audit(1763599830.041:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63d1e65e7 code=0x7ffc0000 [ 601.239234][ T37] audit: type=1326 audit(1763599830.051:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10168 comm="syz.4.1394" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63d18b829 code=0x7ffc0000 [ 601.356661][ T5889] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -EPROTO [ 601.356722][ T5889] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 601.356740][ T5889] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 601.357632][ T5889] lan78xx 8-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 601.491168][T10179] geneve2: entered allmulticast mode [ 601.928092][ T5889] lan78xx 8-1:1.0: probe with driver lan78xx failed with error -71 [ 602.503669][ T5889] usb 8-1: USB disconnect, device number 7 [ 603.083102][ T31] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 603.255967][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 603.256001][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 603.256028][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 603.256054][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 603.256083][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 603.319719][ T31] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 603.319739][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.319750][ T31] usb 7-1: Product: syz [ 603.319759][ T31] usb 7-1: Manufacturer: syz [ 603.319766][ T31] usb 7-1: SerialNumber: syz [ 603.357544][ T31] usb 7-1: config 0 descriptor?? [ 603.378175][ T31] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input15 [ 603.543744][ T5889] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 604.403592][ T5889] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 604.403627][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.403646][ T5889] usb 3-1: Product: syz [ 604.403661][ T5889] usb 3-1: Manufacturer: syz [ 604.403674][ T5889] usb 3-1: SerialNumber: syz [ 604.509523][ T31] usb 7-1: USB disconnect, device number 2 [ 604.843524][T10217] random: crng reseeded on system resumption [ 605.376877][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 605.376951][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 608.003340][ T5812] Bluetooth: hci0: command 0x1407 tx timeout [ 610.122474][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000084. ret = -EPROTO [ 610.122546][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 610.122568][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 610.160251][ T5889] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 610.239191][ T5889] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 611.073118][ T5889] usb 3-1: USB disconnect, device number 43 [ 611.277339][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 611.831604][ T5889] IPVS: starting estimator thread 0... [ 612.757592][T10284] IPVS: using max 6 ests per chain, 14400 per kthread [ 612.757698][ T6013] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 612.967967][ T6013] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 612.968001][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.968022][ T6013] usb 3-1: Product: syz [ 612.968037][ T6013] usb 3-1: Manufacturer: syz [ 612.968062][ T6013] usb 3-1: SerialNumber: syz [ 613.416195][ T37] kauditd_printk_skb: 147 callbacks suppressed [ 613.416217][ T37] audit: type=1326 audit(1763599842.231:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10295 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e001f749 code=0x7ffc0000 [ 613.416868][ T37] audit: type=1326 audit(1763599842.231:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10295 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e001f749 code=0x7ffc0000 [ 613.418619][ T37] audit: type=1326 audit(1763599842.231:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10295 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f42e001f749 code=0x7ffc0000 [ 613.449002][ T37] audit: type=1326 audit(1763599842.261:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10295 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e001f749 code=0x7ffc0000 [ 613.449594][ T37] audit: type=1326 audit(1763599842.261:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10295 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42e001f749 code=0x7ffc0000 [ 613.449919][ T37] audit: type=1326 audit(1763599842.261:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10295 comm="syz.6.1444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f42e001f749 code=0x7ffc0000 [ 613.563172][ T6013] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 613.563240][ T6013] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 614.322334][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 614.445282][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1457'. [ 615.284163][ T37] audit: type=1326 audit(1763599844.091:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10337 comm="syz.7.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 615.284603][ T37] audit: type=1326 audit(1763599844.111:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10337 comm="syz.7.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 615.285216][ T37] audit: type=1326 audit(1763599844.111:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10337 comm="syz.7.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 615.285798][ T37] audit: type=1326 audit(1763599844.111:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10337 comm="syz.7.1461" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f16d861f749 code=0x7ffc0000 [ 617.361529][ T6013] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000ec. ret = -EPROTO [ 617.361599][ T6013] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 617.361620][ T6013] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 617.362759][ T6013] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 617.740335][T10383] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 617.740407][T10383] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.791528][ T6013] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 617.804054][ T6013] usb 3-1: USB disconnect, device number 44 [ 618.108960][T10396] vlan2: entered promiscuous mode [ 618.109212][T10396] vlan2: entered allmulticast mode [ 618.109228][T10396] hsr_slave_1: entered allmulticast mode [ 618.620987][ T37] kauditd_printk_skb: 297 callbacks suppressed [ 618.621007][ T37] audit: type=1326 audit(1763599847.431:1050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63d1e65e7 code=0x7ffc0000 [ 618.642295][ T37] audit: type=1326 audit(1763599847.451:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63d18b829 code=0x7ffc0000 [ 618.642349][ T37] audit: type=1326 audit(1763599847.451:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63d1e65e7 code=0x7ffc0000 [ 618.642391][ T37] audit: type=1326 audit(1763599847.451:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63d18b829 code=0x7ffc0000 [ 618.642433][ T37] audit: type=1326 audit(1763599847.451:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 618.643634][ T37] audit: type=1326 audit(1763599847.461:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63d1e65e7 code=0x7ffc0000 [ 618.643684][ T37] audit: type=1326 audit(1763599847.461:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63d18b829 code=0x7ffc0000 [ 618.643834][ T37] audit: type=1326 audit(1763599847.461:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 618.665667][ T37] audit: type=1326 audit(1763599847.471:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb63d1e65e7 code=0x7ffc0000 [ 618.665726][ T37] audit: type=1326 audit(1763599847.471:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10388 comm="syz.4.1480" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb63d18b829 code=0x7ffc0000 [ 618.783107][ T8839] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 619.023615][ T8839] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 619.023650][ T8839] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.023670][ T8839] usb 3-1: Product: syz [ 619.023684][ T8839] usb 3-1: Manufacturer: syz [ 619.023698][ T8839] usb 3-1: SerialNumber: syz [ 619.971370][ T8839] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 619.971446][ T8839] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 621.335085][T10475] overlayfs: missing 'workdir' [ 622.385997][T10494] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1527'. [ 623.395698][ T8839] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f0. ret = -EPROTO [ 623.395767][ T8839] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 623.395789][ T8839] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 623.399426][ T8839] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 623.484930][ T8839] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 623.491620][ T8839] usb 3-1: USB disconnect, device number 45 [ 623.666713][T10514] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1536'. [ 623.939187][T10528] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1540'. [ 624.177695][T10538] ALSA: seq fatal error: cannot create timer (-22) [ 624.343019][ T6013] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 624.491531][T10555] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1556'. [ 624.513617][ T6013] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 624.513651][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.513671][ T6013] usb 6-1: Product: syz [ 624.513687][ T6013] usb 6-1: Manufacturer: syz [ 624.513701][ T6013] usb 6-1: SerialNumber: syz [ 624.564453][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.564539][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.718075][T10559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1557'. [ 624.974238][ T6013] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 624.974313][ T6013] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 625.901409][T10589] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 626.091520][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1573'. [ 627.055559][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1585'. [ 628.219030][T10631] tipc: Enabling of bearer rejected, failed to enable media [ 628.948110][ T6013] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000f4. ret = -EPROTO [ 628.948144][ T6013] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 628.948154][ T6013] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 628.948547][ T6013] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 629.038094][ T6013] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 629.106911][ T6013] usb 6-1: USB disconnect, device number 7 [ 634.304380][T10726] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1622'. [ 635.721973][T10750] tipc: Enabling of bearer rejected, failed to enable media [ 636.933153][ T5808] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 637.569084][ T5808] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 637.923475][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.923546][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.923574][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.926425][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.926489][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.926517][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.927994][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.928051][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.928078][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.931215][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.931271][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.931298][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.932747][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.932803][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.932829][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.943796][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.943858][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.943884][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.946102][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.946172][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.946200][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.951961][ T5808] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 637.952025][ T5808] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 637.952062][ T5808] usb 7-1: config 0 interface 0 has no altsetting 0 [ 637.955765][ T5808] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 637.955797][ T5808] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 637.955819][ T5808] usb 7-1: Product: syz [ 637.955832][ T5808] usb 7-1: Manufacturer: syz [ 637.955845][ T5808] usb 7-1: SerialNumber: syz [ 638.177103][ T5808] usb 7-1: config 0 descriptor?? [ 638.268886][ T5808] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 638.420774][ T8859] usb 7-1: USB disconnect, device number 3 [ 638.427850][ T8859] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 638.549913][T10795] tipc: Enabling of bearer rejected, failed to enable media [ 640.592684][T10835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1659'. [ 641.869262][T10845] netem: incorrect gi model size [ 641.869307][T10845] netem: change failed [ 643.269967][T10869] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1675'. [ 644.678888][T10879] overlayfs: failed to clone upperpath [ 645.003062][T10887] IPVS: length: 18 != 8 [ 649.333291][ T6013] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 649.490667][ T6013] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 649.490702][ T6013] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 649.490722][ T6013] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 649.490784][ T6013] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 649.490810][ T6013] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 649.573142][ T6013] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 649.573175][ T6013] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 649.573196][ T6013] usb 7-1: Product: syz [ 649.573210][ T6013] usb 7-1: Manufacturer: syz [ 649.638803][ T6013] cdc_wdm 7-1:1.0: skipping garbage [ 649.638824][ T6013] cdc_wdm 7-1:1.0: skipping garbage [ 649.657158][ T6013] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 649.657181][ T6013] cdc_wdm 7-1:1.0: Unknown control protocol [ 649.856358][ T6013] usb 7-1: USB disconnect, device number 4 [ 653.467154][T11006] netlink: 'syz.6.1734': attribute type 10 has an invalid length. [ 654.291305][T11005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.717982][T11006] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 666.332252][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 666.354361][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 666.355836][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 666.357269][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 666.358189][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.331300][T11148] chnl_net:caif_netlink_parms(): no params data found [ 667.499874][ T37] kauditd_printk_skb: 21 callbacks suppressed [ 667.499894][ T37] audit: type=1326 audit(1763599896.311:1081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 667.500224][ T37] audit: type=1326 audit(1763599896.311:1082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 667.629692][ T37] audit: type=1326 audit(1763599896.441:1083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 667.630010][ T37] audit: type=1326 audit(1763599896.441:1084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 667.630813][ T37] audit: type=1326 audit(1763599896.441:1085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11162 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fb63d222005 code=0x7ffc0000 [ 667.723603][ T37] audit: type=1326 audit(1763599896.541:1086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 667.777402][ T37] audit: type=1326 audit(1763599896.591:1087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 667.777757][ T37] audit: type=1326 audit(1763599896.591:1088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.4.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb63d1ef749 code=0x7ffc0000 [ 668.393530][ T61] Bluetooth: hci1: command tx timeout [ 668.993867][T11171] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 668.993939][T11171] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 670.473130][ T61] Bluetooth: hci1: command tx timeout [ 670.627382][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 670.650910][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 670.652507][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 670.668337][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 670.671388][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 672.463642][T11191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 672.553295][ T5812] Bluetooth: hci1: command tx timeout [ 672.793019][ T5812] Bluetooth: hci6: command tx timeout [ 674.238742][T11191] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.633058][ T5812] Bluetooth: hci1: command tx timeout [ 674.898567][ T5812] Bluetooth: hci6: command tx timeout [ 676.429949][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 676.441791][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 676.453745][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 676.456280][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 676.457229][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 676.547462][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 676.575368][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 676.576858][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 676.578712][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 676.579635][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 676.957090][ T5812] Bluetooth: hci6: command tx timeout [ 677.445085][T11148] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.445250][T11148] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.445785][T11148] bridge_slave_0: entered allmulticast mode [ 677.450365][T11148] bridge_slave_0: entered promiscuous mode [ 678.553121][ T5812] Bluetooth: hci3: command tx timeout [ 678.633153][ T5812] Bluetooth: hci7: command tx timeout [ 678.922184][T11148] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.922369][T11148] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.922654][T11148] bridge_slave_1: entered allmulticast mode [ 678.955876][T11148] bridge_slave_1: entered promiscuous mode [ 679.034600][ T5812] Bluetooth: hci6: command tx timeout [ 680.633013][ T5812] Bluetooth: hci3: command tx timeout [ 680.713177][ T5812] Bluetooth: hci7: command tx timeout [ 682.713940][ T5812] Bluetooth: hci3: command tx timeout [ 682.783239][T11148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 682.801796][ T5812] Bluetooth: hci7: command tx timeout [ 682.838040][T11148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 684.793026][ T5812] Bluetooth: hci3: command tx timeout [ 684.873646][ T5812] Bluetooth: hci7: command tx timeout [ 685.518124][T11148] team0: Port device team_slave_0 added [ 685.567700][T11148] team0: Port device team_slave_1 added [ 686.005710][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.005797][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.544849][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 687.576152][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 687.578444][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 687.579856][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 687.580818][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 688.608703][T11148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 688.608724][T11148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.608753][T11148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 688.683437][T11148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 688.683456][T11148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 688.683485][T11148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 689.673139][ T61] Bluetooth: hci2: command tx timeout [ 691.753086][ T61] Bluetooth: hci2: command tx timeout [ 691.926875][T11148] hsr_slave_0: entered promiscuous mode [ 691.928646][T11148] hsr_slave_1: entered promiscuous mode [ 691.929869][T11148] debugfs: 'hsr0' already exists in 'hsr' [ 691.929897][T11148] Cannot create hsr debugfs directory [ 693.828073][T11174] chnl_net:caif_netlink_parms(): no params data found [ 693.834988][ T61] Bluetooth: hci2: command tx timeout [ 695.913080][ T61] Bluetooth: hci2: command tx timeout [ 696.923708][T11197] chnl_net:caif_netlink_parms(): no params data found [ 696.950407][T11194] chnl_net:caif_netlink_parms(): no params data found [ 700.874212][T11174] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.874373][T11174] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.874619][T11174] bridge_slave_0: entered allmulticast mode [ 700.877881][T11174] bridge_slave_0: entered promiscuous mode [ 701.286051][T11174] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.286207][T11174] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.286440][T11174] bridge_slave_1: entered allmulticast mode [ 701.290673][T11174] bridge_slave_1: entered promiscuous mode [ 707.959619][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.815506][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.822517][T11197] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.822700][T11197] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.848622][T11197] bridge_slave_0: entered allmulticast mode [ 708.865503][T11197] bridge_slave_0: entered promiscuous mode [ 708.872505][T11194] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.872665][T11194] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.893871][T11194] bridge_slave_0: entered allmulticast mode [ 708.897304][T11194] bridge_slave_0: entered promiscuous mode [ 708.901862][T11201] chnl_net:caif_netlink_parms(): no params data found [ 709.105266][T11197] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.105468][T11197] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.105767][T11197] bridge_slave_1: entered allmulticast mode [ 709.161721][T11197] bridge_slave_1: entered promiscuous mode [ 709.171994][T11194] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.172159][T11194] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.172408][T11194] bridge_slave_1: entered allmulticast mode [ 709.176086][T11194] bridge_slave_1: entered promiscuous mode [ 711.748225][T11174] team0: Port device team_slave_0 added [ 713.849872][T11174] team0: Port device team_slave_1 added [ 718.479362][T11197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.497839][T11194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 719.490571][T11194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 719.507618][T11197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 721.497936][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.497957][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.497986][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 724.039763][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.039784][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.039815][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 724.105677][T11194] team0: Port device team_slave_0 added [ 724.127937][T11197] team0: Port device team_slave_0 added [ 725.566433][T11194] team0: Port device team_slave_1 added [ 725.615680][T11197] team0: Port device team_slave_1 added [ 725.616516][T11201] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.617075][T11201] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.617328][T11201] bridge_slave_0: entered allmulticast mode [ 725.620694][T11201] bridge_slave_0: entered promiscuous mode [ 726.439670][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 726.461118][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 726.462747][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 726.480416][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 726.481364][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 728.281539][T11201] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.281731][T11201] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.282042][T11201] bridge_slave_1: entered allmulticast mode [ 728.310387][T11201] bridge_slave_1: entered promiscuous mode [ 728.553336][ T5812] Bluetooth: hci0: command tx timeout [ 730.633305][ T5812] Bluetooth: hci0: command tx timeout [ 730.969210][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.982260][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.993595][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 730.995006][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 730.996002][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 732.296014][T11194] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.296034][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.296063][T11194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.742904][ T5812] Bluetooth: hci0: command tx timeout [ 733.033367][ T5812] Bluetooth: hci1: command tx timeout [ 734.026566][T11197] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.026586][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 734.026616][T11197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.793185][ T5812] Bluetooth: hci0: command tx timeout [ 735.113124][ T5812] Bluetooth: hci1: command tx timeout [ 735.165421][T11194] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 735.165441][T11194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 735.165471][T11194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 735.980214][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 735.995478][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 736.015887][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 736.017396][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 736.019020][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 736.934483][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 736.967691][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 736.981768][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 737.001189][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 737.002743][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 737.195447][ T61] Bluetooth: hci1: command tx timeout [ 737.750284][T11197] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.750304][T11197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.750335][T11197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.073603][ T61] Bluetooth: hci5: command tx timeout [ 738.728657][T11201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.830959][T11201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.143855][ T61] Bluetooth: hci6: command tx timeout [ 739.274827][ T61] Bluetooth: hci1: command tx timeout [ 740.713018][ T61] Bluetooth: hci5: command tx timeout [ 741.193337][ T61] Bluetooth: hci6: command tx timeout [ 741.646273][T11201] team0: Port device team_slave_0 added [ 741.710590][T11201] team0: Port device team_slave_1 added [ 742.797541][ T61] Bluetooth: hci5: command tx timeout [ 743.273483][ T61] Bluetooth: hci6: command tx timeout [ 744.873520][ T61] Bluetooth: hci5: command tx timeout [ 745.353004][ T61] Bluetooth: hci6: command tx timeout [ 747.439208][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.439294][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.017324][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 748.021461][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 748.046049][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 748.051188][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 748.052178][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 750.155529][ T5812] Bluetooth: hci3: command tx timeout [ 751.438104][T11230] chnl_net:caif_netlink_parms(): no params data found [ 751.657058][T11227] chnl_net:caif_netlink_parms(): no params data found [ 752.233035][ T5812] Bluetooth: hci3: command tx timeout [ 753.420416][T11233] chnl_net:caif_netlink_parms(): no params data found [ 754.059245][T11236] chnl_net:caif_netlink_parms(): no params data found [ 754.313217][ T5812] Bluetooth: hci3: command tx timeout [ 756.393188][ T5812] Bluetooth: hci3: command tx timeout [ 757.649640][T11230] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.649896][T11230] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.650197][T11230] bridge_slave_0: entered allmulticast mode [ 757.681818][T11230] bridge_slave_0: entered promiscuous mode [ 758.290889][T11230] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.291068][T11230] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.291353][T11230] bridge_slave_1: entered allmulticast mode [ 758.315577][T11230] bridge_slave_1: entered promiscuous mode [ 758.711754][T11239] chnl_net:caif_netlink_parms(): no params data found [ 759.553203][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.553363][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.553667][T11227] bridge_slave_0: entered allmulticast mode [ 759.557101][T11227] bridge_slave_0: entered promiscuous mode [ 762.138921][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.139082][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.139340][T11227] bridge_slave_1: entered allmulticast mode [ 762.143994][T11227] bridge_slave_1: entered promiscuous mode [ 764.770801][T11230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.732035][T11230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.732316][T11233] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.752342][T11233] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.752709][T11233] bridge_slave_0: entered allmulticast mode [ 771.770096][T11233] bridge_slave_0: entered promiscuous mode [ 772.548802][T11236] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.549001][T11236] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.549720][T11236] bridge_slave_0: entered allmulticast mode [ 772.574634][T11236] bridge_slave_0: entered promiscuous mode [ 773.358705][T11233] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.358873][T11233] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.359139][T11233] bridge_slave_1: entered allmulticast mode [ 773.362658][T11233] bridge_slave_1: entered promiscuous mode [ 773.400530][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.429586][T11236] bridge0: port 2(bridge_slave_1) entered blocking state [ 773.429786][T11236] bridge0: port 2(bridge_slave_1) entered disabled state [ 773.430105][T11236] bridge_slave_1: entered allmulticast mode [ 773.454322][T11236] bridge_slave_1: entered promiscuous mode [ 774.366708][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.691764][T11230] team0: Port device team_slave_0 added [ 777.458571][T11230] team0: Port device team_slave_1 added [ 777.740800][T11233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.677546][T11236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.957468][T11227] team0: Port device team_slave_0 added [ 778.974144][T11233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.974450][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.974679][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.974951][T11239] bridge_slave_0: entered allmulticast mode [ 778.978653][T11239] bridge_slave_0: entered promiscuous mode [ 779.028197][T11236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.031494][T11227] team0: Port device team_slave_1 added [ 779.888116][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.888277][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.888537][T11239] bridge_slave_1: entered allmulticast mode [ 779.892414][T11239] bridge_slave_1: entered promiscuous mode [ 781.678518][T11230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.678539][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.678569][T11230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.214434][T11230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.214455][T11230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.214494][T11230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.596646][T11233] team0: Port device team_slave_0 added [ 786.249843][T11236] team0: Port device team_slave_0 added [ 786.279037][T11233] team0: Port device team_slave_1 added [ 786.281927][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 786.281946][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.281975][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 786.345567][T11236] team0: Port device team_slave_1 added [ 786.351317][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 786.586128][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.586148][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 786.586177][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 787.347067][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 787.376565][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 787.378137][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 787.380301][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 787.381385][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 787.976310][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.513695][ T5812] Bluetooth: hci2: command tx timeout [ 791.032159][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.081303][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.090714][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.095260][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 791.110387][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 791.335845][T11233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 791.335865][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 791.335895][T11233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 791.593813][ T61] Bluetooth: hci2: command tx timeout [ 792.720992][T11236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.721013][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 792.721042][T11236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.194468][ T5812] Bluetooth: hci0: command tx timeout [ 793.673214][ T5812] Bluetooth: hci2: command tx timeout [ 793.698855][T11233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.698875][T11233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.698904][T11233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.752470][T11236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.752490][T11236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.752520][T11236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.817990][T11239] team0: Port device team_slave_0 added [ 793.858164][T11239] team0: Port device team_slave_1 added [ 795.283348][ T5812] Bluetooth: hci0: command tx timeout [ 795.753501][ T5812] Bluetooth: hci2: command tx timeout [ 796.031070][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 796.083721][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 796.086438][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 796.088289][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 796.089450][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 797.353697][ T5812] Bluetooth: hci0: command tx timeout [ 797.537902][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 797.559851][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 797.561436][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 797.581659][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 797.596830][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 798.158536][ T5812] Bluetooth: hci1: command tx timeout [ 799.433452][ T5812] Bluetooth: hci0: command tx timeout [ 799.674458][ T5812] Bluetooth: hci7: command tx timeout [ 800.004621][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.004641][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.004672][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.233455][ T5812] Bluetooth: hci1: command tx timeout [ 801.753172][ T5812] Bluetooth: hci7: command tx timeout [ 802.313045][ T5812] Bluetooth: hci1: command tx timeout [ 802.435531][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.435552][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.435582][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.833031][ T5812] Bluetooth: hci7: command tx timeout [ 804.393171][ T5812] Bluetooth: hci1: command tx timeout [ 805.913386][ T5812] Bluetooth: hci7: command tx timeout [ 808.882502][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.882589][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.755447][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 809.785713][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 809.787255][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 809.788728][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 809.789653][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 810.446147][T11275] chnl_net:caif_netlink_parms(): no params data found [ 811.993660][ T5812] Bluetooth: hci4: command tx timeout [ 813.523385][T11272] chnl_net:caif_netlink_parms(): no params data found [ 813.661198][T11278] chnl_net:caif_netlink_parms(): no params data found [ 814.073243][ T5812] Bluetooth: hci4: command tx timeout [ 814.437022][T11281] chnl_net:caif_netlink_parms(): no params data found [ 816.153588][ T5812] Bluetooth: hci4: command tx timeout [ 818.233021][ T5812] Bluetooth: hci4: command tx timeout [ 820.753242][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 820.753487][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.753805][T11275] bridge_slave_0: entered allmulticast mode [ 820.757974][T11275] bridge_slave_0: entered promiscuous mode [ 821.084343][T11272] bridge0: port 1(bridge_slave_0) entered blocking state [ 821.084504][T11272] bridge0: port 1(bridge_slave_0) entered disabled state [ 821.084839][T11272] bridge_slave_0: entered allmulticast mode [ 821.088446][T11272] bridge_slave_0: entered promiscuous mode [ 821.152239][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.152409][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.168015][T11275] bridge_slave_1: entered allmulticast mode [ 821.171629][T11275] bridge_slave_1: entered promiscuous mode [ 821.827631][T11272] bridge0: port 2(bridge_slave_1) entered blocking state [ 821.827814][T11272] bridge0: port 2(bridge_slave_1) entered disabled state [ 821.828134][T11272] bridge_slave_1: entered allmulticast mode [ 821.831897][T11272] bridge_slave_1: entered promiscuous mode [ 822.405877][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 822.406036][T11278] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.406342][T11278] bridge_slave_0: entered allmulticast mode [ 822.436292][T11278] bridge_slave_0: entered promiscuous mode [ 825.251749][T11278] bridge0: port 2(bridge_slave_1) entered blocking state [ 825.251918][T11278] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.252211][T11278] bridge_slave_1: entered allmulticast mode [ 825.282211][T11278] bridge_slave_1: entered promiscuous mode [ 827.079939][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.795570][T11281] bridge0: port 1(bridge_slave_0) entered blocking state [ 827.795731][T11281] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.796047][T11281] bridge_slave_0: entered allmulticast mode [ 827.824615][T11281] bridge_slave_0: entered promiscuous mode [ 827.851453][T11272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 827.869773][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 828.507454][T11281] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.509075][T11281] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.509414][T11281] bridge_slave_1: entered allmulticast mode [ 828.537341][T11281] bridge_slave_1: entered promiscuous mode [ 828.557310][T11272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.199848][T11278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.868649][T11278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.055830][T11275] team0: Port device team_slave_0 added [ 833.681209][T11281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 833.698119][T11275] team0: Port device team_slave_1 added [ 833.701947][T11272] team0: Port device team_slave_0 added [ 834.584362][T11281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 834.587578][T11272] team0: Port device team_slave_1 added [ 834.591215][T11278] team0: Port device team_slave_0 added [ 835.630282][T11278] team0: Port device team_slave_1 added [ 836.088316][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.088336][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 836.088366][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 839.433925][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 839.433946][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 839.433975][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.437972][T11281] team0: Port device team_slave_0 added [ 840.060275][T11272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.060295][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.060324][T11272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.206493][T11281] team0: Port device team_slave_1 added [ 840.274288][T11278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 840.274308][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.274338][T11278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 840.279138][T11272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.279155][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.279183][T11272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 840.922299][T11278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 840.922319][T11278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 840.922350][T11278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 842.528144][T11290] chnl_net:caif_netlink_parms(): no params data found [ 843.514968][T11281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 843.514989][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.515019][T11281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 843.906227][T11275] hsr_slave_0: entered promiscuous mode [ 843.908236][T11275] hsr_slave_1: entered promiscuous mode [ 843.909598][T11275] debugfs: 'hsr0' already exists in 'hsr' [ 843.909626][T11275] Cannot create hsr debugfs directory [ 843.911005][T11281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 843.911019][T11281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 843.911048][T11281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.170629][T11272] hsr_slave_0: entered promiscuous mode [ 845.172736][T11272] hsr_slave_1: entered promiscuous mode [ 845.186758][T11272] debugfs: 'hsr0' already exists in 'hsr' [ 845.186790][T11272] Cannot create hsr debugfs directory [ 846.714455][T11278] hsr_slave_0: entered promiscuous mode [ 846.729421][T11278] hsr_slave_1: entered promiscuous mode [ 846.730830][T11278] debugfs: 'hsr0' already exists in 'hsr' [ 846.730857][T11278] Cannot create hsr debugfs directory [ 847.365515][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 847.369624][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.371086][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.395228][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.412456][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 849.513468][ T5812] Bluetooth: hci3: command tx timeout [ 851.205921][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 851.237581][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 851.239229][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 851.241237][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 851.242235][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 851.604015][ T61] Bluetooth: hci3: command tx timeout [ 853.273770][ T61] Bluetooth: hci2: command tx timeout [ 853.673997][ T61] Bluetooth: hci3: command tx timeout [ 854.170810][T11281] hsr_slave_0: entered promiscuous mode [ 854.183795][T11281] hsr_slave_1: entered promiscuous mode [ 854.185152][T11281] debugfs: 'hsr0' already exists in 'hsr' [ 854.185180][T11281] Cannot create hsr debugfs directory [ 855.353013][ T5812] Bluetooth: hci2: command tx timeout [ 855.763708][ T5812] Bluetooth: hci3: command tx timeout [ 856.159663][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 856.192410][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 856.203274][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 856.205283][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 856.206231][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 857.433726][ T61] Bluetooth: hci2: command tx timeout [ 857.910069][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.910227][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.910619][T11290] bridge_slave_0: entered allmulticast mode [ 857.924907][T11290] bridge_slave_0: entered promiscuous mode [ 858.059141][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 858.090820][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 858.105858][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 858.107510][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 858.130099][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 858.315476][ T61] Bluetooth: hci0: command tx timeout [ 858.552482][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.562276][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 858.562745][T11290] bridge_slave_1: entered allmulticast mode [ 858.580827][T11290] bridge_slave_1: entered promiscuous mode [ 859.520910][ T5812] Bluetooth: hci2: command tx timeout [ 860.400864][ T5812] Bluetooth: hci0: command tx timeout [ 860.953615][ T5812] Bluetooth: hci5: command tx timeout [ 861.764690][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.473646][ T5812] Bluetooth: hci0: command tx timeout [ 862.832670][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.033177][ T5812] Bluetooth: hci5: command tx timeout [ 864.553842][ T5812] Bluetooth: hci0: command tx timeout [ 865.123646][ T61] Bluetooth: hci5: command tx timeout [ 865.626069][T11290] team0: Port device team_slave_0 added [ 865.736519][T11290] team0: Port device team_slave_1 added [ 866.474914][ T38] INFO: task syz.5.1774:11097 blocked for more than 143 seconds. [ 866.474944][ T38] Not tainted syzkaller #0 [ 866.474955][ T38] Blocked by coredump. [ 866.474962][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 866.474971][ T38] task:syz.5.1774 state:D stack:24616 pid:11097 tgid:11097 ppid:8512 task_flags:0x40044c flags:0x00080003 [ 866.475038][ T38] Call Trace: [ 866.475046][ T38] [ 866.475062][ T38] __schedule+0x16f3/0x4c20 [ 866.475121][ T38] ? finish_task_switch+0x266/0x950 [ 866.475159][ T38] ? __pfx___schedule+0x10/0x10 [ 866.475210][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 866.475244][ T38] rt_mutex_schedule+0x77/0xf0 [ 866.475265][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 866.475290][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 866.475336][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 866.475365][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 866.475391][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 866.475414][ T38] ? __lock_acquire+0xab9/0xd20 [ 866.475455][ T38] ? rcu_barrier+0x4c/0x570 [ 866.475494][ T38] ? rcu_barrier+0x4c/0x570 [ 866.475513][ T38] mutex_lock_nested+0x16a/0x1d0 [ 866.475535][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 866.475563][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 866.475590][ T38] rcu_barrier+0x4c/0x570 [ 866.475618][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 866.475645][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 866.475669][ T38] netdev_run_todo+0x327/0xea0 [ 866.475702][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 866.475735][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 866.475761][ T38] ? __tun_detach+0x12c4/0x1600 [ 866.475802][ T38] ? netdev_state_change+0x1ca/0x220 [ 866.475826][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 866.475853][ T38] tun_chr_close+0x13f/0x1c0 [ 866.475882][ T38] __fput+0x45b/0xa80 [ 866.475927][ T38] task_work_run+0x1d4/0x260 [ 866.475953][ T38] ? __pfx_task_work_run+0x10/0x10 [ 866.475973][ T38] ? do_exit+0x6b0/0x2300 [ 866.476004][ T38] ? do_exit+0x6b0/0x2300 [ 866.476041][ T38] do_exit+0x6b5/0x2300 [ 866.476071][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 866.476115][ T38] ? __pfx_do_exit+0x10/0x10 [ 866.476143][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 866.476167][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 866.476207][ T38] do_group_exit+0x21c/0x2d0 [ 866.476228][ T38] ? rt_spin_unlock+0x161/0x200 [ 866.476256][ T38] get_signal+0x125d/0x1310 [ 866.476310][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 866.476337][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 866.476382][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 866.476415][ T38] exit_to_user_mode_loop+0x72/0x130 [ 866.476443][ T38] do_syscall_64+0x2bd/0xfa0 [ 866.476476][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.476497][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 866.476518][ T38] ? clear_bhb_loop+0x60/0xb0 [ 866.476544][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.476564][ T38] RIP: 0033:0x7fc9a6b2f749 [ 866.476582][ T38] RSP: 002b:00007ffc49cd6018 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 866.476603][ T38] RAX: 0000000000000000 RBX: 00000000000a117a RCX: 00007fc9a6b2f749 [ 866.476618][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 866.476631][ T38] RBP: 00007fc9a6d87da0 R08: 0000000000000001 R09: 0000000349cd630f [ 866.476645][ T38] R10: 0000001b2fc20000 R11: 0000000000000246 R12: 00007fc9a6d85fac [ 866.476659][ T38] R13: 00007fc9a6d85fa0 R14: ffffffffffffffff R15: 00007ffc49cd6130 [ 866.476698][ T38] [ 866.476745][ T38] [ 866.476745][ T38] Showing all locks held in the system: [ 866.476756][ T38] 4 locks held by rcuc/0/20: [ 866.476771][ T38] 1 lock held by khungtaskd/38: [ 866.476782][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 866.476837][ T38] 3 locks held by kworker/u8:2/43: [ 866.476849][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 866.476918][ T38] #1: ffffc90000b57ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 866.476971][ T38] #2: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 866.477034][ T38] 3 locks held by kworker/u8:7/1333: [ 866.477045][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 866.477098][ T38] #1: ffffc900056ffba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 866.477150][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477210][ T38] 2 locks held by getty/5556: [ 866.477221][ T38] #0: ffff88823bf5e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 866.477274][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 866.477334][ T38] 3 locks held by kworker/1:5/5892: [ 866.477346][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 866.477398][ T38] #1: ffffc900050dfba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 866.477450][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477503][ T38] 2 locks held by kworker/0:1/8839: [ 866.477515][ T38] 1 lock held by syz.7.1739/11021: [ 866.477527][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477576][ T38] 1 lock held by syz.5.1774/11097: [ 866.477587][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477635][ T38] 1 lock held by syz-executor/11148: [ 866.477647][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477694][ T38] 1 lock held by syz-executor/11174: [ 866.477706][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477754][ T38] 1 lock held by syz.4.1811/11191: [ 866.477766][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477814][ T38] 1 lock held by syz-executor/11194: [ 866.477825][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477873][ T38] 1 lock held by syz-executor/11197: [ 866.477884][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.477943][ T38] 1 lock held by syz-executor/11201: [ 866.477954][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478004][ T38] 1 lock held by syz-executor/11227: [ 866.478016][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478065][ T38] 1 lock held by syz-executor/11230: [ 866.478076][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478125][ T38] 1 lock held by syz-executor/11233: [ 866.478136][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478184][ T38] 1 lock held by syz-executor/11236: [ 866.478196][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478244][ T38] 1 lock held by syz-executor/11239: [ 866.478255][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478306][ T38] 1 lock held by syz-executor/11272: [ 866.478317][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478366][ T38] 1 lock held by syz-executor/11275: [ 866.478377][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478426][ T38] 1 lock held by syz-executor/11278: [ 866.478438][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478486][ T38] 1 lock held by syz-executor/11281: [ 866.478498][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 866.478546][ T38] 2 locks held by syz-executor/11290: [ 866.478558][ T38] #0: ffffffff8dfed740 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 866.478613][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 866.478662][ T38] 2 locks held by syz-executor/11315: [ 866.478674][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 866.478721][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 866.478775][ T38] 2 locks held by syz-executor/11320: [ 866.478786][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 866.478832][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 866.478885][ T38] 2 locks held by syz-executor/11323: [ 866.478904][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 866.478952][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 866.479002][ T38] 2 locks held by syz-executor/11326: [ 866.479014][ T38] #0: ffffffff8e8568e0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 866.479062][ T38] #1: ffffffff8e8637f8 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 866.479110][ T38] [ 866.479116][ T38] ============================================= [ 866.479116][ T38] [ 866.479125][ T38] NMI backtrace for cpu 1 [ 866.479140][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 866.479163][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.479175][ T38] Call Trace: [ 866.479183][ T38] [ 866.479191][ T38] dump_stack_lvl+0x189/0x250 [ 866.479226][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 866.479257][ T38] ? __pfx__printk+0x10/0x10 [ 866.479296][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 866.479324][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 866.479351][ T38] ? __pfx__printk+0x10/0x10 [ 866.479381][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 866.479407][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 866.479435][ T38] watchdog+0xf60/0xfa0 [ 866.479470][ T38] ? watchdog+0x1e2/0xfa0 [ 866.479504][ T38] kthread+0x711/0x8a0 [ 866.479538][ T38] ? __pfx_watchdog+0x10/0x10 [ 866.479566][ T38] ? __pfx_kthread+0x10/0x10 [ 866.479593][ T38] ? rt_spin_unlock+0x150/0x200 [ 866.479622][ T38] ? rt_spin_unlock+0x161/0x200 [ 866.479643][ T38] ? __pfx_kthread+0x10/0x10 [ 866.479672][ T38] ret_from_fork+0x4bc/0x870 [ 866.479700][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 866.479732][ T38] ? __switch_to_asm+0x39/0x70 [ 866.479752][ T38] ? __switch_to_asm+0x33/0x70 [ 866.479770][ T38] ? __pfx_kthread+0x10/0x10 [ 866.479800][ T38] ret_from_fork_asm+0x1a/0x30 [ 866.479841][ T38] [ 866.479848][ T38] Sending NMI from CPU 1 to CPUs 0: [ 866.479879][ C0] NMI backtrace for cpu 0 [ 866.479896][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 866.479917][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 866.479926][ C0] RIP: 0010:lock_release+0x295/0x3e0 [ 866.479950][ C0] Code: 5c 24 08 48 c7 c7 0b 55 f6 8c e8 66 bc 24 09 b8 ff ff ff ff 65 0f c1 05 59 e1 06 10 83 f8 01 75 51 48 c7 44 24 20 00 00 00 00 <9c> 8f 44 24 20 f7 44 24 20 00 02 00 00 75 56 f7 c3 00 02 00 00 74 [ 866.479965][ C0] RSP: 0018:ffffc90000196618 EFLAGS: 00000046 [ 866.479980][ C0] RAX: 0000000000000001 RBX: 0000000000000206 RCX: 6983e696b5f72800 [ 866.479992][ C0] RDX: 0000000000000005 RSI: ffffffff8cf6550b RDI: ffffffff8b3ddfe0 [ 866.480003][ C0] RBP: ffff88801b6be628 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 866.480015][ C0] R10: 0000000000000000 R11: fffffbfff1dac80f R12: 0000000000000005 [ 866.480026][ C0] R13: 0000000000000005 R14: ffffffff8d5aa880 R15: ffff88801b6bda00 [ 866.480038][ C0] FS: 0000000000000000(0000) GS:ffff888126df7000(0000) knlGS:0000000000000000 [ 866.480051][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 866.480063][ C0] CR2: 00007fbc28b2d431 CR3: 0000000054a38000 CR4: 00000000003526f0 [ 866.480081][ C0] Call Trace: [ 866.480087][ C0] [ 866.480094][ C0] ? rt_spin_unlock+0x150/0x200 [ 866.480115][ C0] rt_spin_unlock+0x15c/0x200 [ 866.480132][ C0] ? rt_set_nexthop+0x570/0xa80 [ 866.480154][ C0] rt_set_nexthop+0x66e/0xa80 [ 866.480174][ C0] ? rt_set_nexthop+0x570/0xa80 [ 866.480197][ C0] ip_route_output_key_hash_rcu+0x196a/0x23e0 [ 866.480222][ C0] ? ip_route_output_key_hash+0xc1/0x280 [ 866.480242][ C0] ip_route_output_key_hash+0x174/0x280 [ 866.480261][ C0] ? __lock_acquire+0xab9/0xd20 [ 866.480281][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 866.480309][ C0] ip_route_output_flow+0x2a/0x150 [ 866.480326][ C0] ? ip_route_me_harder+0x6ae/0xf10 [ 866.480349][ C0] ip_route_me_harder+0x6c4/0xf10 [ 866.480374][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 866.480403][ C0] ? rcu_is_watching+0x15/0xb0 [ 866.480423][ C0] synproxy_send_tcp+0x3a7/0x700 [ 866.480446][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 866.480470][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 866.480511][ C0] ? nft_fib_store_result+0x8/0x2f0 [ 866.480530][ C0] ? synproxy_pernet+0x45/0x270 [ 866.480554][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 866.480578][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 866.480600][ C0] ? nf_ip_checksum+0x13c/0x510 [ 866.480622][ C0] nft_synproxy_do_eval+0x345/0x570 [ 866.480653][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 866.480681][ C0] nft_do_chain+0x40c/0x1920 [ 866.480700][ C0] ? unwind_next_frame+0xa5/0x2390 [ 866.480727][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 866.480749][ C0] ? stack_trace_save+0x9c/0xe0 [ 866.480771][ C0] ? kasan_save_track+0x4f/0x80 [ 866.480789][ C0] ? kasan_save_track+0x3e/0x80 [ 866.480806][ C0] ? __kasan_save_free_info+0x46/0x50 [ 866.480822][ C0] ? mrp_rcv+0x1476/0x17e0 [ 866.480842][ C0] ? __netif_receive_skb+0x164/0x380 [ 866.480863][ C0] ? process_backlog+0x31e/0x900 [ 866.480876][ C0] ? __napi_poll+0xb6/0x540 [ 866.480900][ C0] nft_do_chain_inet+0x25d/0x340 [ 866.480920][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 866.480941][ C0] ? __lock_acquire+0xab9/0xd20 [ 866.480965][ C0] ? NF_HOOK+0x9a/0x3a0 [ 866.480980][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 866.481000][ C0] nf_hook_slow+0xc5/0x220 [ 866.481020][ C0] NF_HOOK+0x206/0x3a0 [ 866.481035][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 866.481051][ C0] ? NF_HOOK+0x9a/0x3a0 [ 866.481064][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 866.481078][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 866.481095][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 866.481112][ C0] ? skb_dst+0x4f/0xd0 [ 866.481127][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 866.481144][ C0] NF_HOOK+0x30c/0x3a0 [ 866.481160][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 866.481175][ C0] ? NF_HOOK+0x9a/0x3a0 [ 866.481188][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 866.481204][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 866.481224][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 866.481238][ C0] __netif_receive_skb+0x143/0x380 [ 866.481262][ C0] ? process_backlog+0x27b/0x900 [ 866.481276][ C0] process_backlog+0x31e/0x900 [ 866.481296][ C0] __napi_poll+0xb6/0x540 [ 866.481320][ C0] net_rx_action+0x5f7/0xda0 [ 866.481341][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 866.481358][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 866.481382][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 866.481396][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 866.481419][ C0] handle_softirqs+0x22f/0x710 [ 866.481442][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 866.481465][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 866.481485][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 866.481507][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 866.481529][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 866.481550][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 866.481574][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 866.481600][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 866.481619][ C0] ? preempt_schedule_irq+0xde/0x150 [ 866.481640][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 866.481728][ C0] ? __lock_acquire+0xab9/0xd20 [ 866.481749][ C0] ? irqentry_exit+0x74/0x90 [ 866.481773][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 866.481799][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 866.481818][ C0] smpboot_thread_fn+0x542/0xa60 [ 866.481837][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 866.481859][ C0] kthread+0x711/0x8a0 [ 866.481882][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 866.481900][ C0] ? __pfx_kthread+0x10/0x10 [ 866.481920][ C0] ? rt_spin_unlock+0x150/0x200 [ 866.481940][ C0] ? rt_spin_unlock+0x161/0x200 [ 866.481956][ C0] ? __pfx_kthread+0x10/0x10 [ 866.481978][ C0] ret_from_fork+0x4bc/0x870 [ 866.481996][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 866.482016][ C0] ? __switch_to_asm+0x39/0x70 [ 866.482031][ C0] ? __switch_to_asm+0x33/0x70 [ 866.482045][ C0] ? __pfx_kthread+0x10/0x10 [ 866.482067][ C0] ret_from_fork_asm+0x1a/0x30 [ 866.482090][ C0] [ 867.193250][ T61] Bluetooth: hci5: command tx timeout SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 870.316847][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.316963][ T1320] ieee802154 phy1 wpan1: encryption failed: -22