last executing test programs: 3m24.765675452s ago: executing program 2 (id=55): r0 = socket(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) getsockopt$sock_buf(r0, 0x1, 0xc, 0x0, &(0x7f00000003c0)) syz_open_dev$video(&(0x7f0000000440), 0xb, 0x0) 3m23.673061101s ago: executing program 2 (id=57): syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x1, 0x9, 0xa7, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x6, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x3, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0xfc, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x6, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x400007f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd8, 0x1fa08606, 0x1007, 0xaa, 0x81, 0x2, 0x72, 0x3, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xffffffff, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x6, 0x84, 0x100, 0x5, 0x252, 0x7d, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xa, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x2, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0xc2982) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0xffffffff, 0x0, 0x1, 'queue1\x00'}) syz_usb_connect(0x5, 0x35, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100003be004209904a2a9e8c401020301090223000104"], 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}, {0xa, 0x4e20, 0x6, @empty, 0x9}, 0xffffffffffffffff, 0x1}}, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) poll(&(0x7f0000000080)=[{r0, 0x20}], 0x1, 0xfbe) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x2, @tick=0x7ffe, 0x7, {0x3, 0xbb}, 0x3d, 0x2, 0x9}) 3m19.816348721s ago: executing program 2 (id=62): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = epoll_create1(0x80000) getpgrp(r0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000140)={0x80000002}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x200000000000000) 3m15.991870025s ago: executing program 2 (id=65): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) syz_open_pts(r0, 0x0) syz_io_uring_setup(0x5906, &(0x7f0000000140)={0x0, 0x9a4, 0x0, 0x2, 0x3b9}, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = dup(r1) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 3m15.543441272s ago: executing program 2 (id=67): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000000)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, 0x0, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000980)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) 3m14.253479606s ago: executing program 2 (id=70): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 2m58.963392433s ago: executing program 32 (id=70): dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040), 0x0, 0x40800) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x2) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) 1m52.282046404s ago: executing program 4 (id=177): syz_usbip_server_init(0x6) 1m51.329323148s ago: executing program 4 (id=178): r0 = socket$inet(0xa, 0x801, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x2, 0x9, 0x1, 0x2, 0x9, 0x53, 0x6, 0xb, 0x7, 0x5, 0x2, 0x5, 0x40}, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) dup(r5) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x402c5828, &(0x7f00000000c0)={0x0, 0x0, 0x1, 0x762}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r7}}, 0x58) 1m41.678616984s ago: executing program 4 (id=191): syz_emit_ethernet(0x46, &(0x7f0000000e40)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1m41.521369765s ago: executing program 4 (id=192): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$inet6(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001500)="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", 0x1000}], 0x1}, 0x4004000) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x24cda000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x42, 0x1, 0x0}, &(0x7f0000000000)=0x40) 1m41.486192491s ago: executing program 4 (id=193): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040f0424011c04"], 0x7) 1m41.418000982s ago: executing program 4 (id=194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000400a, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x414401) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x9, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x42303159}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/98, 0x62, 0x3, 0x0) bind$packet(r6, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r9, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, r8, 0x0}]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9fe9010018000000000000f327000000280000000300000001004f000000000c02000000000000070200000d00000000000000b8500000000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 1m26.182703921s ago: executing program 33 (id=194): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8000000400a, 0x2) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x1, 0x414401) ioctl$BLKTRACESTOP(r2, 0x1275, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x9, 0x2, 0x2, "9611ba5a0000000000000000e8f7fa00e9ffffffffffffff83df00", 0x42303159}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macvlan1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r5 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r5, &(0x7f0000002700)=""/102392, 0x18ff8) r6 = socket(0x200000000000011, 0x4000000000080002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r7 = mq_open(0x0, 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) mq_timedreceive(r7, &(0x7f0000000180)=""/98, 0x62, 0x3, 0x0) bind$packet(r6, &(0x7f0000001100)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x48}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_setup(0x7ff, &(0x7f0000002080)=0x0) io_submit(r9, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x2, r8, 0x0}]) recvmsg$unix(0xffffffffffffffff, 0x0, 0x101) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9fe9010018000000000000f327000000280000000300000001004f000000000c02000000000000070200000d00000000000000b8500000000000000000000000006100"], 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 23.228508146s ago: executing program 1 (id=518): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) flock(r0, 0x2) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040ed5000410"], 0x11) 23.08253355s ago: executing program 1 (id=519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0xc, 0x0, &(0x7f00000003c0)) syz_open_dev$video(&(0x7f0000000440), 0xb, 0x0) 21.867285882s ago: executing program 1 (id=521): socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r0], 0x0) 21.377306339s ago: executing program 1 (id=523): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x4}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000b80)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00Wz', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}}, 0x0) 21.201681358s ago: executing program 1 (id=524): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) 20.735916848s ago: executing program 3 (id=526): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x3, @remote, 0x2}], 0x1c) 20.150521112s ago: executing program 3 (id=527): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) 19.137992904s ago: executing program 0 (id=528): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x8, 0xb9, 0x8, 0x0, 0x0}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe, 0x80000000}, {0xfffffff9}]}}) 19.006084004s ago: executing program 1 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa1840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) 18.218367205s ago: executing program 3 (id=530): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0xd000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) msgctl$IPC_SET(0x0, 0x1, 0x0) msgsnd(0x0, &(0x7f0000000a80)={0x3}, 0x8, 0x0) msgsnd(0x0, &(0x7f0000000080)=ANY=[], 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0xee01, 0x10}, 0x0, 0x0, 0x1, 0x0, 0x9, 0x1000ff, 0x2, 0x0, 0x0, 0x4}) 18.196309461s ago: executing program 0 (id=531): socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000440)={0x0, 0x304e, 0x0, 0x2, 0x28d}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8001}}) io_uring_enter(r0, 0x2b93, 0xf9d0, 0x22, 0x0, 0x0) 18.021663826s ago: executing program 3 (id=532): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fc"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000020008"], 0xe) 17.937165882s ago: executing program 3 (id=533): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) sendmsg$unix(r0, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r2}}}], 0x20, 0x20000011}, 0xc4) 17.76503907s ago: executing program 0 (id=534): r0 = syz_open_procfs(0x0, 0x0) r1 = fanotify_init(0x200, 0x40000) r2 = openat(0xffffffffffffff9c, 0x0, 0x2060, 0x0) ioctl$CEC_ADAP_G_CAPS(0xffffffffffffffff, 0xc04c6100, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073797a31000000000900010073797a31"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, 0x0) io_uring_enter(r5, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000009840)='./file1\x00', &(0x7f0000009880), 0x800) syz_clone(0x700, 0x0, 0x0, 0x0, &(0x7f0000009a00), &(0x7f0000009a40)) statx(r2, &(0x7f0000009a80)='./file1\x00', 0x800, 0x40, &(0x7f0000009ac0)) lstat(&(0x7f0000009bc0)='./file1\x00', 0x0) gettid() timer_create(0x2, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f000000b300)=[{{&(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000480)="4d2c8c881fb904467d4a379875ed42d87414c877b24ab188999e7da3c8ee4df0fe884bf132db81854d7bde88c49e8668aea1109d73469f111fe066a3501320fe6f44514c3e9c0fd32abec5a77a299c8e4ab4a2bf897d7cc83de77a5e482334151ba0ec94efa7ed513635e97c0a", 0x6d}, {&(0x7f0000000d00)="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", 0x7f8}], 0x2, 0x0, 0x0, 0x20008000}}, {{&(0x7f0000001ec0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000001f40), 0x0, 0x0, 0x0, 0x20004800}}, {{&(0x7f0000002040)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000002180)=[{&(0x7f00000020c0)}], 0x1, &(0x7f0000004280)=[@rights={{0x24, 0x1, 0x1, [r3, r4, r8, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [r5]}}, @rights={{0x20, 0x1, 0x1, [r3, r4, r5, r1]}}, @rights={{0x38, 0x1, 0x1, [r4, r5, r8, r4, r1, r0, r3, r3, r8, r2]}}], 0xc8, 0x8040}}, {{&(0x7f00000021c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000004500)=[{&(0x7f0000004380)="16024d3657a8f1fd0fa13ceec250c3ae077b63a08254a2fc9f900f75959087bb4a260009f7655d6df6ff48ba849babaf41e8b1e85d7a2990156f980374f4705df79bdd60918090cb8a6eb474a44ab817b0841f5a976c5f1a5d6f854cd7a0f6a7c320a1ac89a2af22c245a3879b00a5f4957a2f857804efe5dd175c8a96cf45b65fc989bb62c12fbacfbaa5b362fbd7119ab81e14fb32211a5756b167c6", 0x9d}, {&(0x7f0000004440)}], 0x2, &(0x7f0000004900), 0x0, 0x40000}}, {{&(0x7f0000004a00)=@file={0x0, './file1\x00'}, 0x6e, &(0x7f0000004cc0)=[{&(0x7f0000004a80)="7733e043a1a73ae2af7f80c31d14cb25a7b6a8bedbf8de67f606367a97c76df5e72361287c3c4ce66c503f57d7af191a54ba5f3026fcd1c914a569b11c81425b80d286364e158401d80f85213965a5803d5f705e378359ccffbb9ed1080d652b52558ea593a83134847c961488140db41c1468c2c365ac86fbe8cbf63026c98f71a29b4be521a12ffd2fdf5d48e6f860cd7e9586ab8c102dce7786ad7c1a9b94d155afb410ebe79ee066201b68693c0b5b1a348153acef0f904cb26c08b2c5e872796d423a735d9cbe87eebe36d343bfcdc486ed0a677d825e877ce671448256b33bf025debfc67648a18cd27f8161251657", 0xf2}, {&(0x7f0000004b80)="b6c65b3b70f951445a4f5a5e5bdc7090e80945a044cb64082205eba8", 0x1c}, {&(0x7f0000004bc0)="897539ef25d0f0ee83db8350ba14e4e5aae7fcbd17ec99da898519d9703b262bdab1565294dc44b863875cc184a756b3c7ce603e35596f70f9f7008d882217906fc0bbb7ccb228a2b52b858eaf34f629", 0x50}], 0x3}}], 0x5, 0x40) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x4, 0xffffffff, 0xfffffff8, 0xfffffffc}, 0x10) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@ipv4_newroute={0x20, 0x1a, 0x1, 0x8, 0x25dfdc03, {0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@RTA_METRICS={0x4}]}, 0x20}}, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c000000010401010000000000000000ce5bd74f0500010001"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) close_range(r9, 0xffffffffffffffff, 0x0) 17.764228724s ago: executing program 3 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xbe, 0x0, 0xfffffffffffffffe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) 17.093053224s ago: executing program 0 (id=536): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000000, 0xfec6, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) 15.735150328s ago: executing program 0 (id=537): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x208}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) 15.52969881s ago: executing program 0 (id=538): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17000000d0eb"], 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) 3.518721031s ago: executing program 34 (id=529): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0xa1840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xfffffea8, {0xf000}}, "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", "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"}) 2.489504928s ago: executing program 35 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000240)={0xbe, 0x0, 0xfffffffffffffffe}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0xaf}]}) 0s ago: executing program 36 (id=538): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="17000000d0eb"], 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.53' (ED25519) to the list of known hosts. [ 74.962083][ T5782] cgroup: Unknown subsys name 'net' [ 75.223028][ T5782] cgroup: Unknown subsys name 'cpuset' [ 75.258530][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.888297][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.666009][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.669822][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.693012][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.693836][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.713271][ T5805] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.728758][ T5810] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.734810][ T5810] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.736121][ T5810] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.736586][ T5810] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.740236][ T5810] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.743267][ T5810] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.745601][ T5810] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.746462][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.750304][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.751136][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.755281][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.756357][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.757541][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.780635][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.789980][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.790749][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.812334][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.813254][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.819319][ T5814] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.822425][ T5814] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.780284][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 81.857536][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 81.868328][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 82.029737][ T5793] chnl_net:caif_netlink_parms(): no params data found [ 82.135544][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 82.799385][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.800637][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.801014][ T5797] bridge_slave_0: entered allmulticast mode [ 82.802869][ T5797] bridge_slave_0: entered promiscuous mode [ 82.850585][ T5801] Bluetooth: hci1: command tx timeout [ 82.851003][ T5814] Bluetooth: hci3: command tx timeout [ 82.851422][ T5814] Bluetooth: hci0: command tx timeout [ 82.851541][ T5805] Bluetooth: hci2: command tx timeout [ 82.851557][ T5114] Bluetooth: hci4: command tx timeout [ 83.030600][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.030714][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.030911][ T5797] bridge_slave_1: entered allmulticast mode [ 83.033354][ T5797] bridge_slave_1: entered promiscuous mode [ 83.034382][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.035158][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.035379][ T5795] bridge_slave_0: entered allmulticast mode [ 83.036919][ T5795] bridge_slave_0: entered promiscuous mode [ 83.144379][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.144478][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.144587][ T5796] bridge_slave_0: entered allmulticast mode [ 83.146040][ T5796] bridge_slave_0: entered promiscuous mode [ 83.249213][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.249355][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.249476][ T5795] bridge_slave_1: entered allmulticast mode [ 83.250944][ T5795] bridge_slave_1: entered promiscuous mode [ 83.458817][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.458922][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.459034][ T5796] bridge_slave_1: entered allmulticast mode [ 83.460488][ T5796] bridge_slave_1: entered promiscuous mode [ 83.588861][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.588962][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.589077][ T5793] bridge_slave_0: entered allmulticast mode [ 83.590587][ T5793] bridge_slave_0: entered promiscuous mode [ 83.762506][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.838891][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.839016][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.839190][ T5793] bridge_slave_1: entered allmulticast mode [ 83.840978][ T5793] bridge_slave_1: entered promiscuous mode [ 83.842016][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.842121][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.842224][ T5794] bridge_slave_0: entered allmulticast mode [ 83.843699][ T5794] bridge_slave_0: entered promiscuous mode [ 84.043504][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.047789][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.138992][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.139379][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.139553][ T5794] bridge_slave_1: entered allmulticast mode [ 84.142223][ T5794] bridge_slave_1: entered promiscuous mode [ 84.147353][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.230893][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.350930][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.493781][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.661276][ T5797] team0: Port device team_slave_0 added [ 84.741526][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.744227][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.811775][ T5797] team0: Port device team_slave_1 added [ 84.813527][ T5795] team0: Port device team_slave_0 added [ 84.890881][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.892630][ T5796] team0: Port device team_slave_0 added [ 84.928291][ T5114] Bluetooth: hci2: command tx timeout [ 84.928321][ T5114] Bluetooth: hci4: command tx timeout [ 84.928338][ T5114] Bluetooth: hci0: command tx timeout [ 84.928484][ T5805] Bluetooth: hci3: command tx timeout [ 84.929159][ T5801] Bluetooth: hci1: command tx timeout [ 84.981747][ T5795] team0: Port device team_slave_1 added [ 85.420258][ T5796] team0: Port device team_slave_1 added [ 85.560658][ T5793] team0: Port device team_slave_0 added [ 85.699695][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.699708][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.699723][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.801058][ T5793] team0: Port device team_slave_1 added [ 85.802809][ T5794] team0: Port device team_slave_0 added [ 85.869366][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.869406][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.869431][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.870685][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.870695][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.870709][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.000414][ T5794] team0: Port device team_slave_1 added [ 86.001088][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.001098][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.001112][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.060995][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.061006][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.061021][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.259637][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.259650][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.259665][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.386960][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.386972][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.386987][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.509315][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.509331][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.509346][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.510223][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.510232][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.510246][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.657433][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.657449][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.657477][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.776783][ T10] cfg80211: failed to load regulatory.db [ 86.910287][ T5797] hsr_slave_0: entered promiscuous mode [ 86.911341][ T5797] hsr_slave_1: entered promiscuous mode [ 87.007981][ T5801] Bluetooth: hci3: command tx timeout [ 87.008013][ T5801] Bluetooth: hci0: command tx timeout [ 87.008035][ T5801] Bluetooth: hci4: command tx timeout [ 87.008054][ T5801] Bluetooth: hci2: command tx timeout [ 87.018038][ T5805] Bluetooth: hci1: command tx timeout [ 87.071932][ T5795] hsr_slave_0: entered promiscuous mode [ 87.073307][ T5795] hsr_slave_1: entered promiscuous mode [ 87.073902][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 87.073979][ T5795] Cannot create hsr debugfs directory [ 87.154476][ T5796] hsr_slave_0: entered promiscuous mode [ 87.155236][ T5796] hsr_slave_1: entered promiscuous mode [ 87.155794][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 87.155811][ T5796] Cannot create hsr debugfs directory [ 87.365622][ T5793] hsr_slave_0: entered promiscuous mode [ 87.366389][ T5793] hsr_slave_1: entered promiscuous mode [ 87.366909][ T5793] debugfs: 'hsr0' already exists in 'hsr' [ 87.366925][ T5793] Cannot create hsr debugfs directory [ 87.654865][ T5794] hsr_slave_0: entered promiscuous mode [ 87.655660][ T5794] hsr_slave_1: entered promiscuous mode [ 87.656208][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 87.656224][ T5794] Cannot create hsr debugfs directory [ 88.980496][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.026276][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.044321][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.088132][ T5801] Bluetooth: hci2: command tx timeout [ 89.088178][ T5814] Bluetooth: hci0: command tx timeout [ 89.088211][ T5805] Bluetooth: hci1: command tx timeout [ 89.094380][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.098089][ T5805] Bluetooth: hci4: command tx timeout [ 89.098102][ T5814] Bluetooth: hci3: command tx timeout [ 89.251649][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.283408][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.346722][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.373917][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.486270][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.524416][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.545394][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.602594][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.735448][ T5793] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.775514][ T5793] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.805361][ T5793] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.837490][ T5793] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.913639][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.977242][ T5794] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.029260][ T5794] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.069026][ T5794] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.106257][ T5794] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.153563][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.194139][ T202] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.194859][ T202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.233571][ T202] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.233792][ T202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.266441][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.355243][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.374543][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.415633][ T1011] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.415946][ T1011] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.449402][ T1011] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.449858][ T1011] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.487487][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.515632][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.540445][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.540580][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.602729][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.602894][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.656183][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.706090][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.706297][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.746696][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.746899][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.784320][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.899984][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.945582][ T3539] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.945786][ T3539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.960183][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.005464][ T3539] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.005679][ T3539] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.155330][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.280906][ T5797] veth0_vlan: entered promiscuous mode [ 91.313531][ T5797] veth1_vlan: entered promiscuous mode [ 91.477769][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.529680][ T5797] veth0_macvtap: entered promiscuous mode [ 91.535059][ T5797] veth1_macvtap: entered promiscuous mode [ 91.596645][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.671638][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.701460][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.761662][ T755] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.765186][ T755] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777585][ T755] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.791998][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.795467][ T755] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.816639][ T5796] veth0_vlan: entered promiscuous mode [ 91.926314][ T5793] veth0_vlan: entered promiscuous mode [ 91.931056][ T5796] veth1_vlan: entered promiscuous mode [ 92.042952][ T5793] veth1_vlan: entered promiscuous mode [ 92.112108][ T202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.112137][ T202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.173295][ T5794] veth0_vlan: entered promiscuous mode [ 92.191914][ T5795] veth0_vlan: entered promiscuous mode [ 92.216277][ T5796] veth0_macvtap: entered promiscuous mode [ 92.234388][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.234409][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.240990][ T5796] veth1_macvtap: entered promiscuous mode [ 92.243614][ T5794] veth1_vlan: entered promiscuous mode [ 92.264921][ T5795] veth1_vlan: entered promiscuous mode [ 92.310312][ T5793] veth0_macvtap: entered promiscuous mode [ 92.344464][ T5793] veth1_macvtap: entered promiscuous mode [ 92.362953][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.395988][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.436084][ T3539] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.456716][ T3539] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.464932][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.482790][ T3539] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.500514][ T3539] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.531684][ T5794] veth0_macvtap: entered promiscuous mode [ 92.547005][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.783254][ T5795] veth0_macvtap: entered promiscuous mode [ 92.791590][ T5794] veth1_macvtap: entered promiscuous mode [ 93.412861][ T5795] veth1_macvtap: entered promiscuous mode [ 93.416428][ T43] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.435303][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.450621][ T43] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.551884][ T43] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.771889][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.500622][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.560470][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.643190][ T1504] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.643211][ T1504] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.647639][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.679138][ T1504] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.695400][ T1504] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.712738][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.714472][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.717634][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.717681][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.717716][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.717749][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.949241][ T3666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.949262][ T3666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.981230][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.981250][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.567391][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.567493][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.026873][ T755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.026893][ T755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.235418][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 101.106770][ T755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.106791][ T755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.192693][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.192718][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.467911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.525873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.527873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.534917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.537871][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.547884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.557914][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.567885][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.577876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.939304][ T5960] netlink: 324 bytes leftover after parsing attributes in process `syz.2.13'. [ 103.385549][ T202] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.385569][ T202] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.514502][ T5964] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 107.858860][ T5998] sctp: [Deprecated]: syz.4.5 (pid 5998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 107.858860][ T5998] Use struct sctp_sack_info instead [ 113.788735][ T6026] netlink: 20 bytes leftover after parsing attributes in process `syz.3.26'. [ 114.073890][ T6031] Bluetooth: MGMT ver 1.23 [ 114.073939][ T6031] Bluetooth: hci0: invalid length 0, exp 2 for type 10 [ 115.209967][ T5808] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.617939][ T5808] usb 1-1: Using ep0 maxpacket: 32 [ 116.840347][ T5808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 116.857029][ T5808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 116.857069][ T5808] usb 1-1: can't read configurations, error -71 [ 133.570515][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.570639][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.126353][ T6123] kvm: kvm [6121]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x80 [ 134.140834][ T6123] kvm: kvm [6121]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x80 [ 134.143824][ T6123] kvm: kvm [6121]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x80 [ 138.267977][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 138.617946][ T5914] usb 3-1: Using ep0 maxpacket: 32 [ 138.646176][ T5914] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 138.646203][ T5914] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 138.676661][ T5914] usb 3-1: New USB device found, idVendor=0499, idProduct=a9a2, bcdDevice=c4.e8 [ 138.676695][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.676715][ T5914] usb 3-1: Product: syz [ 138.676728][ T5914] usb 3-1: Manufacturer: syz [ 138.676742][ T5914] usb 3-1: SerialNumber: syz [ 141.832822][ T5962] usb 3-1: USB disconnect, device number 2 [ 143.409769][ T6166] vivid-007: disconnect [ 143.474628][ T6170] vivid-007: reconnect [ 146.225010][ T6182] Zero length message leads to an empty skb [ 154.415190][ T6236] netlink: 44 bytes leftover after parsing attributes in process `syz.4.66'. [ 161.320737][ T6265] netlink: 'syz.0.83': attribute type 4 has an invalid length. [ 161.320762][ T6265] netlink: 17 bytes leftover after parsing attributes in process `syz.0.83'. [ 164.962343][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 164.965582][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 164.966624][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 164.990372][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 164.991094][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 165.364527][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 165.364657][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 165.398584][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 165.401038][ T6277] kvm: kvm [6276]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 167.049839][ T5814] Bluetooth: hci5: command tx timeout [ 170.105442][ T5814] Bluetooth: hci5: command tx timeout [ 170.535110][ T5814] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 170.535247][ T5814] Bluetooth: hci2: Injecting HCI hardware error event [ 170.536593][ T5805] Bluetooth: hci2: hardware error 0x00 [ 170.639015][ T5797] syz-executor (5797) used greatest stack depth: 17656 bytes left [ 171.514266][ T6319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.96'. [ 173.200725][ T5805] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 173.200845][ T5805] Bluetooth: hci5: command tx timeout [ 173.528604][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.309425][ T6337] No source specified [ 175.981395][ T5814] Bluetooth: hci5: command tx timeout [ 176.207105][ T6339] syz.1.93 (6339) used greatest stack depth: 15608 bytes left [ 178.746902][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.273033][ T6367] netlink: 40 bytes leftover after parsing attributes in process `syz.0.104'. [ 181.450036][ T6374] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 184.635798][ T6392] capability: warning: `syz.4.108' uses 32-bit capabilities (legacy support in use) [ 185.271598][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.274115][ T6390] binder: 6388:6390 ioctl 4058534c 2000000004c0 returned -22 [ 185.676868][ T6120] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.426831][ T6274] chnl_net:caif_netlink_parms(): no params data found [ 189.681177][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.259365][ T6438] netlink: 'syz.4.114': attribute type 1 has an invalid length. [ 193.259397][ T6438] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 194.409059][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.409139][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.744040][ T6274] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.778109][ T6274] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.778359][ T6274] bridge_slave_0: entered allmulticast mode [ 194.790575][ T6274] bridge_slave_0: entered promiscuous mode [ 194.862754][ T6452] netlink: 40 bytes leftover after parsing attributes in process `syz.3.124'. [ 194.900753][ T6454] faux_driver vkms: [drm] Unknown color mode 267; guessing buffer size. [ 194.911375][ T6274] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.911573][ T6274] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.911815][ T6274] bridge_slave_1: entered allmulticast mode [ 194.921997][ T6274] bridge_slave_1: entered promiscuous mode [ 196.598001][ T6120] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 196.751444][ T6120] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.751470][ T6120] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 196.751505][ T6120] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 196.751528][ T6120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.825259][ T6120] usb 2-1: config 0 descriptor?? [ 196.902552][ T6274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.961800][ T6274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.127961][ T5886] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 197.278119][ T5886] usb 4-1: Using ep0 maxpacket: 8 [ 197.303084][ T6274] team0: Port device team_slave_0 added [ 197.319325][ T6274] team0: Port device team_slave_1 added [ 197.555717][ T5886] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 197.555759][ T5886] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.555772][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 197.555785][ T5886] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 197.555797][ T5886] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.555820][ T5886] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 197.555832][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.682456][ T58] bridge_slave_1: left allmulticast mode [ 197.682580][ T58] bridge_slave_1: left promiscuous mode [ 197.737623][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.840827][ T58] bridge_slave_0: left allmulticast mode [ 197.840854][ T58] bridge_slave_0: left promiscuous mode [ 197.843211][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.681003][ T5886] usb 2-1: USB disconnect, device number 2 [ 198.795543][ T6472] usbtmc 4-1:16.0: simple control status returned 67 [ 198.862795][ T6473] overlayfs: overlapping lowerdir path [ 200.672807][ T5804] usb 4-1: USB disconnect, device number 2 [ 203.574963][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.1.137'. [ 206.504300][ T6527] ADFS-fs (nbd1): error: unable to read block 3, try 0 [ 206.947221][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 207.197529][ T5809] Bluetooth: hci0: command 0x0406 tx timeout [ 207.199508][ T5809] Bluetooth: hci3: command 0x0406 tx timeout [ 211.400223][ T6273] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 212.148520][ T6556] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 212.818714][ T6565] netlink: 40 bytes leftover after parsing attributes in process `syz.0.149'. [ 213.047970][ T6273] usb 2-1: Using ep0 maxpacket: 8 [ 213.050673][ T6273] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.050703][ T6273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.479502][ T6072] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 213.827938][ T6273] usb 2-1: config 0 descriptor?? [ 213.977915][ T6072] usb 5-1: Using ep0 maxpacket: 8 [ 214.043932][ T6273] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 214.055158][ T6072] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 214.098528][ T6072] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 214.098558][ T6072] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.098578][ T6072] usb 5-1: Product: syz [ 214.098592][ T6072] usb 5-1: Manufacturer: syz [ 214.098605][ T6072] usb 5-1: SerialNumber: syz [ 214.143507][ T6072] usb 5-1: config 0 descriptor?? [ 214.151929][ T6273] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.157212][ T6273] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 214.157302][ T6273] usb 2-1: media controller created [ 214.178982][ T6072] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 214.180291][ T6072] usb 5-1: setting power ON [ 214.180830][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 214.219716][ T6072] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.248634][ T6559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.249202][ T6559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.295548][ T6273] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.315750][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.316282][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.378050][ T10] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 214.507983][ T10] usb 1-1: device descriptor read/64, error -71 [ 214.553552][ T6072] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 214.553631][ T6072] usb 5-1: media controller created [ 214.790426][ T6580] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 215.457853][ T6072] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 215.538005][ T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 215.544549][ T6072] usb 5-1: selecting invalid altsetting 6 [ 215.544584][ T6072] usb 5-1: digital interface selection failed (-22) [ 215.544604][ T6072] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 215.547232][ T6072] usb 5-1: setting power OFF [ 215.547369][ T6072] dvb-usb: bulk message failed: -22 (2/0) [ 215.547387][ T6072] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 215.547399][ T6072] (NULL device *): no alternate interface [ 215.678021][ T10] usb 1-1: device descriptor read/64, error -71 [ 215.763153][ T6072] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 215.788596][ T10] usb usb1-port1: attempt power cycle [ 215.813590][ T6072] usb 5-1: USB disconnect, device number 3 [ 215.898665][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.904182][ T6273] az6027: usb out operation failed. (-71) [ 215.904484][ T6273] az6027: usb out operation failed. (-71) [ 215.904492][ T6273] stb0899_attach: Driver disabled by Kconfig [ 215.904498][ T6273] az6027: no front-end attached [ 215.904498][ T6273] [ 215.904782][ T6273] az6027: usb out operation failed. (-71) [ 215.904790][ T6273] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 216.113211][ T6273] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 216.175388][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.224528][ T6273] dvb-usb: schedule remote query interval to 400 msecs. [ 217.224554][ T6273] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 217.262911][ T58] bond0 (unregistering): Released all slaves [ 217.325848][ T10] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 217.348674][ T10] usb 1-1: device descriptor read/8, error -71 [ 217.370071][ T6273] usb 2-1: USB disconnect, device number 3 [ 218.438038][ T10] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 218.496170][ T10] usb 1-1: device descriptor read/8, error -71 [ 218.598471][ T10] usb usb1-port1: unable to enumerate USB device [ 218.669969][ T6588] delete_channel: no stack [ 218.837241][ T6273] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 219.443016][ T6606] delete_channel: no stack [ 219.649990][ T6609] ubi31: attaching mtd0 [ 219.654650][ T6609] ubi31: scanning is finished [ 219.654675][ T6609] ubi31: empty MTD device detected [ 220.031815][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 220.031832][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.031852][ T6274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.360086][ T6609] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 223.580224][ T6625] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 225.162441][ T6274] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.162460][ T6274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.162485][ T6274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.601835][ T6647] netlink: zone id is out of range [ 227.907790][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 227.946938][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.053538][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.065793][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.068143][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.520695][ T6664] fuse: Bad value for 'user_id' [ 229.520715][ T6664] fuse: Bad value for 'user_id' [ 229.674498][ T6680] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 229.674517][ T6680] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 229.768074][ T6680] vhci_hcd vhci_hcd.0: Device attached [ 229.794335][ T6681] vhci_hcd: connection closed [ 229.821312][ T13] vhci_hcd vhci_hcd.4: stop threads [ 229.822853][ T13] vhci_hcd vhci_hcd.4: release socket [ 229.878085][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 230.138121][ T5801] Bluetooth: hci4: command tx timeout [ 232.886480][ T5801] Bluetooth: hci4: command tx timeout [ 233.287072][ T5801] Bluetooth: hci1: unexpected cc 0x042e length: 1 < 7 [ 233.287094][ T5801] Bluetooth: hci1: unexpected event for opcode 0x042e [ 233.349419][ T58] hsr_slave_0: left promiscuous mode [ 233.428309][ T58] hsr_slave_1: left promiscuous mode [ 233.429056][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.429132][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.556634][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.556654][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.849905][ T58] veth1_macvtap: left promiscuous mode [ 233.850168][ T58] veth0_macvtap: left promiscuous mode [ 233.850443][ T58] veth1_vlan: left promiscuous mode [ 233.850755][ T58] veth0_vlan: left promiscuous mode [ 236.662638][ T5801] Bluetooth: hci4: command tx timeout [ 238.688229][ T5801] Bluetooth: hci4: command tx timeout [ 246.276286][ T6774] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20002 [ 248.474386][ T6785] netlink: 44 bytes leftover after parsing attributes in process `syz.1.205'. [ 248.474415][ T6785] netlink: 43 bytes leftover after parsing attributes in process `syz.1.205'. [ 248.474432][ T6785] netlink: 'syz.1.205': attribute type 5 has an invalid length. [ 248.474445][ T6785] netlink: 43 bytes leftover after parsing attributes in process `syz.1.205'. [ 248.798747][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'. [ 248.844510][ T6794] comedi comedi0: Minor 3 could not be opened [ 250.088799][ T6072] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 250.111989][ T6805] 9pnet_virtio: no channels available for device syz [ 250.297874][ T6072] usb 4-1: Using ep0 maxpacket: 32 [ 250.319740][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 250.319774][ T6072] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.319814][ T6072] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 250.319837][ T6072] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.329625][ T6072] usb 4-1: config 0 descriptor?? [ 251.717513][ T58] team0 (unregistering): Port device team_slave_1 removed [ 252.039211][ T6817] netlink: 40 bytes leftover after parsing attributes in process `syz.1.215'. [ 252.089156][ T58] team0 (unregistering): Port device team_slave_0 removed [ 252.883960][ T6072] usbhid 4-1:0.0: can't add hid device: -71 [ 252.884093][ T6072] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 252.907205][ T6072] usb 4-1: USB disconnect, device number 3 [ 254.091522][ T6831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.220'. [ 255.687385][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.715139][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.716918][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.744075][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.744145][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.750434][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.752233][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 256.342585][ T6850] netlink: 40 bytes leftover after parsing attributes in process `syz.0.225'. [ 256.790452][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 256.804540][ T6863] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 256.961792][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 256.986572][ T10] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 256.986602][ T10] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 256.986623][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 256.986644][ T10] usb 2-1: config 1 has no interface number 0 [ 256.986981][ T10] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 256.987005][ T10] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 256.987048][ T10] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 256.987071][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.199936][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 257.435773][ T10] snd_usb_pod 2-1:1.1: invalid control EP [ 257.435795][ T10] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 257.436912][ T10] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 257.439295][ T10] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 257.477157][ T6654] chnl_net:caif_netlink_parms(): no params data found [ 257.630977][ T31] usb 2-1: USB disconnect, device number 5 [ 257.931682][ T5114] Bluetooth: hci5: command tx timeout [ 259.605294][ T6885] openvswitch: netlink: IP tunnel dst address not specified [ 259.848570][ T6896] netlink: 40 bytes leftover after parsing attributes in process `syz.3.238'. [ 259.968420][ T5114] Bluetooth: hci5: command tx timeout [ 260.207579][ T6910] netlink: 40 bytes leftover after parsing attributes in process `syz.1.240'. [ 260.499033][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.499404][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.499630][ T6654] bridge_slave_0: entered allmulticast mode [ 260.503393][ T6654] bridge_slave_0: entered promiscuous mode [ 260.634232][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.634369][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.635067][ T6654] bridge_slave_1: entered allmulticast mode [ 260.666193][ T6654] bridge_slave_1: entered promiscuous mode [ 261.466803][ T6930] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.650862][ T6934] netlink: 40 bytes leftover after parsing attributes in process `syz.1.249'. [ 261.798648][ T6938] netlink: 40 bytes leftover after parsing attributes in process `syz.0.250'. [ 261.940152][ T6654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.079262][ T5114] Bluetooth: hci5: command tx timeout [ 262.283695][ T58] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.412643][ T6654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.413303][ T6839] chnl_net:caif_netlink_parms(): no params data found [ 262.632423][ T6956] tipc: Started in network mode [ 262.632454][ T6956] tipc: Node identity 0000000000000000ffff, cluster identity 4711 [ 262.744159][ T6962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.259'. [ 263.043475][ T58] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.152270][ T6654] team0: Port device team_slave_0 added [ 263.379911][ T6654] team0: Port device team_slave_1 added [ 263.636411][ T58] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.805344][ T6995] netlink: 40 bytes leftover after parsing attributes in process `syz.1.274'. [ 263.845216][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.845232][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 263.845256][ T6654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.959557][ T6999] netlink: 20 bytes leftover after parsing attributes in process `syz.0.275'. [ 264.022107][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.022122][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 264.022146][ T6654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.095815][ T7005] netlink: 40 bytes leftover after parsing attributes in process `syz.0.277'. [ 264.131178][ T5114] Bluetooth: hci5: command tx timeout [ 265.151582][ T58] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.485450][ T6839] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.517009][ T6839] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.517250][ T6839] bridge_slave_0: entered allmulticast mode [ 265.533102][ T6839] bridge_slave_0: entered promiscuous mode [ 265.552568][ T6839] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.556190][ T6839] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.579230][ T6839] bridge_slave_1: entered allmulticast mode [ 265.583278][ T6839] bridge_slave_1: entered promiscuous mode [ 266.768140][ T6072] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 266.930594][ T6072] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 266.930644][ T6072] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 266.930671][ T6072] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 266.930711][ T6072] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 266.930733][ T6072] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.936164][ T6072] usb 1-1: config 0 descriptor?? [ 266.937292][ T7035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 267.142012][ T6839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.172170][ T6654] hsr_slave_0: entered promiscuous mode [ 267.173506][ T6654] hsr_slave_1: entered promiscuous mode [ 267.337295][ T6839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.419889][ T6072] megaworld 0003:07B5:0312.0001: hidraw0: USB HID v20.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 267.419923][ T6072] megaworld 0003:07B5:0312.0001: no inputs found [ 267.559466][ T6072] usb 1-1: USB disconnect, device number 8 [ 267.649637][ T7065] fido_id[7065]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 267.865372][ T7074] netlink: 16 bytes leftover after parsing attributes in process `syz.3.298'. [ 267.974014][ T6839] team0: Port device team_slave_0 added [ 268.048268][ T6839] team0: Port device team_slave_1 added [ 269.026151][ T7087] netlink: zone id is out of range [ 269.230669][ T5886] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 269.329321][ T58] bridge_slave_1: left allmulticast mode [ 269.329350][ T58] bridge_slave_1: left promiscuous mode [ 269.333805][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.378163][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 269.383227][ T5886] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 269.385693][ T5886] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 269.385722][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 269.385743][ T5886] usb 1-1: Product: syz [ 269.385757][ T5886] usb 1-1: Manufacturer: syz [ 269.385772][ T5886] usb 1-1: SerialNumber: syz [ 269.411406][ T5886] usb 1-1: config 0 descriptor?? [ 269.430409][ T7086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 269.440116][ T58] bridge_slave_0: left allmulticast mode [ 269.440143][ T58] bridge_slave_0: left promiscuous mode [ 269.440395][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.454768][ T5886] hub 1-1:0.0: bad descriptor, ignoring hub [ 269.454808][ T5886] hub 1-1:0.0: probe with driver hub failed with error -5 [ 269.532599][ T58] bridge_slave_1: left allmulticast mode [ 269.532628][ T58] bridge_slave_1: left promiscuous mode [ 269.533265][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.602766][ T58] bridge_slave_0: left allmulticast mode [ 269.602795][ T58] bridge_slave_0: left promiscuous mode [ 269.603030][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.768452][ T5784] usb 1-1: USB disconnect, device number 9 [ 270.133154][ T7106] netlink: 40 bytes leftover after parsing attributes in process `syz.3.311'. [ 270.827879][ T6004] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 271.020737][ T6004] usb 2-1: config 0 has an invalid interface number: 139 but max is 0 [ 271.020767][ T6004] usb 2-1: config 0 has no interface number 0 [ 271.020818][ T6004] usb 2-1: config 0 interface 139 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.020840][ T6004] usb 2-1: config 0 interface 139 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 271.020866][ T6004] usb 2-1: config 0 interface 139 altsetting 0 endpoint 0x8D has invalid maxpacket 14158, setting to 64 [ 271.020894][ T6004] usb 2-1: config 0 interface 139 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 271.023896][ T6004] usb 2-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6 [ 271.023923][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.023941][ T6004] usb 2-1: Product: syz [ 271.023955][ T6004] usb 2-1: Manufacturer: syz [ 271.023967][ T6004] usb 2-1: SerialNumber: syz [ 271.142045][ T7136] netlink: 40 bytes leftover after parsing attributes in process `syz.0.324'. [ 271.144864][ T6004] usb 2-1: config 0 descriptor?? [ 271.148899][ T7121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.149032][ T7121] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 271.370499][ T6004] mct_u232 2-1:0.139: MCT U232 converter detected [ 271.414025][ T6004] usb 2-1: MCT U232 converter now attached to ttyUSB0 [ 271.450185][ T6004] usb 2-1: USB disconnect, device number 6 [ 271.513222][ T6004] mct_u232 ttyUSB0: MCT U232 converter now disconnected from ttyUSB0 [ 271.514661][ T6004] mct_u232 2-1:0.139: device disconnected [ 272.759644][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.333'. [ 272.883552][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.975858][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.012182][ T58] bond0 (unregistering): Released all slaves [ 273.398749][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.468225][ T7174] netlink: 40 bytes leftover after parsing attributes in process `syz.1.339'. [ 273.585682][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.665442][ T58] bond0 (unregistering): Released all slaves [ 273.724032][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.724048][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.724073][ T6839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.789224][ T6839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.789240][ T6839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.789266][ T6839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.808419][ T6839] hsr_slave_0: entered promiscuous mode [ 274.809861][ T6839] hsr_slave_1: entered promiscuous mode [ 274.810748][ T6839] debugfs: 'hsr0' already exists in 'hsr' [ 274.810776][ T6839] Cannot create hsr debugfs directory [ 274.987954][ T6004] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 275.099533][ T5804] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 275.144345][ T6004] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 275.144374][ T6004] usb 1-1: config 0 has no interface number 0 [ 275.144424][ T6004] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.144447][ T6004] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 275.144472][ T6004] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 275.144493][ T6004] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 275.144516][ T6004] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 275.144540][ T6004] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.144580][ T6004] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 275.144603][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.155241][ T6004] usb 1-1: config 0 descriptor?? [ 275.173378][ T7214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.173511][ T7214] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 275.199940][ T6004] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 275.976692][ T5804] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 275.976720][ T5804] usb 4-1: config 0 has no interface number 0 [ 275.976766][ T5804] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 275.976789][ T5804] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 275.976814][ T5804] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 275.976840][ T5804] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 275.976866][ T5804] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 275.976893][ T5804] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 275.976933][ T5804] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 275.976954][ T5804] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.113555][ T5804] usb 4-1: config 0 descriptor?? [ 276.119148][ T7217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 276.121726][ T7217] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 276.198499][ T5804] ldusb 4-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 276.237142][ T5804] usb 1-1: USB disconnect, device number 10 [ 276.261220][ T5804] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 276.341939][ T5886] usb 4-1: USB disconnect, device number 4 [ 276.366495][ T5886] ldusb 4-1:0.55: LD USB Device #1 now disconnected [ 276.398905][ T5811] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 276.547952][ T5811] usb 2-1: Using ep0 maxpacket: 8 [ 276.550606][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.550650][ T5811] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00 [ 276.550663][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.554265][ T5811] usb 2-1: config 0 descriptor?? [ 276.868577][ T58] hsr_slave_0: left promiscuous mode [ 276.892438][ T58] hsr_slave_1: left promiscuous mode [ 276.894179][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.894204][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.985637][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.985666][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.986762][ T5811] logitech-djreceiver 0003:046D:C531.0002: unknown main item tag 0x1 [ 277.022857][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 277.069473][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 277.196049][ T58] veth1_macvtap: left promiscuous mode [ 277.196150][ T58] veth0_macvtap: left promiscuous mode [ 277.196407][ T58] veth1_vlan: left promiscuous mode [ 277.196583][ T58] veth0_vlan: left promiscuous mode [ 277.200061][ T5811] usb 2-1: USB disconnect, device number 7 [ 277.590230][ T7257] netlink: zone id is out of range [ 277.763884][ T7262] random: crng reseeded on system resumption [ 278.277951][ T31] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 278.649153][ T31] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 278.649185][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.649205][ T31] usb 1-1: Product: syz [ 278.649219][ T31] usb 1-1: Manufacturer: syz [ 278.649234][ T31] usb 1-1: SerialNumber: syz [ 278.722621][ T31] usb 1-1: config 0 descriptor?? [ 278.736745][ T31] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 278.772038][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 278.773522][ T31] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 278.773581][ T31] usb 1-1: media controller created [ 278.807013][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 278.915861][ T31] DVB: Unable to find symbol mt352_attach() [ 279.010074][ T31] DVB: Unable to find symbol nxt6000_attach() [ 279.010091][ T31] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 279.020317][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 279.033901][ T31] dvb-usb: schedule remote query interval to 1000 msecs. [ 279.033923][ T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 279.033940][ T31] dvb-usb: bulk message failed: -22 (7/0) [ 279.033956][ T31] dvb-usb: bulk message failed: -22 (7/0) [ 279.118311][ T31] usb 1-1: USB disconnect, device number 11 [ 280.479541][ T31] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 280.510130][ T7285] netlink: zone id is out of range [ 280.607067][ T7289] mmap: syz.0.382 (7289) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 281.505515][ T7300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.386'. [ 282.229676][ T58] team0 (unregistering): Port device team_slave_1 removed [ 282.449332][ T58] team0 (unregistering): Port device team_slave_0 removed [ 282.657968][ T37] audit: type=1326 audit(1765961340.799:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7305 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa435f749 code=0x7ffc0000 [ 282.658022][ T37] audit: type=1326 audit(1765961340.799:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7305 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa435f749 code=0x7ffc0000 [ 282.658581][ T37] audit: type=1326 audit(1765961340.809:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7305 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fefa435f749 code=0x7ffc0000 [ 282.658710][ T37] audit: type=1326 audit(1765961340.809:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7305 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa435f749 code=0x7ffc0000 [ 282.660532][ T37] audit: type=1326 audit(1765961340.809:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7305 comm="syz.0.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fefa435f749 code=0x7ffc0000 [ 282.929392][ T7310] netlink: zone id is out of range [ 285.158833][ T5801] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.161170][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.183096][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.184309][ T5801] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.185237][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.098576][ T58] team0 (unregistering): Port device team_slave_1 removed [ 286.238690][ T58] team0 (unregistering): Port device team_slave_0 removed [ 286.625278][ T7270] batadv0: entered promiscuous mode [ 286.781237][ T7270] batadv0: left promiscuous mode [ 286.895719][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.926767][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.344300][ T5114] Bluetooth: hci2: command tx timeout [ 288.040500][ T6839] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 289.182236][ T7363] netlink: 56 bytes leftover after parsing attributes in process `syz.1.402'. [ 289.201769][ T6839] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 289.407871][ T5114] Bluetooth: hci2: command tx timeout [ 290.308627][ T6839] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 290.435678][ T6839] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 290.752114][ T7381] netlink: zone id is out of range [ 291.490807][ T5114] Bluetooth: hci2: command tx timeout [ 291.805582][ T7320] chnl_net:caif_netlink_parms(): no params data found [ 292.329290][ T7415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.421'. [ 292.478867][ T7419] netlink: zone id is out of range [ 294.110407][ T5114] Bluetooth: hci2: command tx timeout [ 295.827941][ T6004] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 295.977957][ T6004] usb 2-1: Using ep0 maxpacket: 32 [ 295.980482][ T6004] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 295.980512][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.018249][ T6004] usb 2-1: config 0 descriptor?? [ 296.304097][ T6004] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 296.341739][ T6004] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 296.344063][ T6004] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 296.344122][ T6004] usb 2-1: media controller created [ 296.426112][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 296.506545][ T6004] az6027: usb out operation failed. (-71) [ 296.507088][ T6004] az6027: usb out operation failed. (-71) [ 296.507102][ T6004] stb0899_attach: Driver disabled by Kconfig [ 296.507111][ T6004] az6027: no front-end attached [ 296.507111][ T6004] [ 296.533060][ T6004] az6027: usb out operation failed. (-71) [ 296.533081][ T6004] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 296.551635][ T6004] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 296.557163][ T6004] dvb-usb: schedule remote query interval to 400 msecs. [ 296.557186][ T6004] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 296.586542][ T6004] usb 2-1: USB disconnect, device number 8 [ 296.743909][ T7447] netlink: 'syz.0.433': attribute type 3 has an invalid length. [ 296.763699][ T7447] netlink: 'syz.0.433': attribute type 3 has an invalid length. [ 296.773386][ T7320] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.793936][ T7320] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.794119][ T7320] bridge_slave_0: entered allmulticast mode [ 296.795559][ T7320] bridge_slave_0: entered promiscuous mode [ 296.829260][ T7320] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.838104][ T7320] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.838349][ T7320] bridge_slave_1: entered allmulticast mode [ 296.849346][ T7320] bridge_slave_1: entered promiscuous mode [ 297.136938][ T5933] hid-generic 0005:15C2:0009.0003: unknown main item tag 0x0 [ 297.215315][ T5933] hid-generic 0005:15C2:0009.0003: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 297.323116][ T6004] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 299.177944][ T6004] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 299.328157][ T6004] usb 1-1: Using ep0 maxpacket: 32 [ 299.330428][ T6004] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.330454][ T6004] usb 1-1: config 0 has no interface number 0 [ 299.358746][ T6004] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 299.358776][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.358796][ T6004] usb 1-1: Product: syz [ 299.358810][ T6004] usb 1-1: Manufacturer: syz [ 299.358823][ T6004] usb 1-1: SerialNumber: syz [ 299.420415][ T6004] usb 1-1: config 0 descriptor?? [ 299.443689][ T6004] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 299.443727][ T6004] usb 1-1: selecting invalid altsetting 1 [ 299.443742][ T6004] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 299.485995][ T6004] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 299.486389][ T6004] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 299.486444][ T6004] usb 1-1: media controller created [ 299.534526][ T6004] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.865833][ T6004] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 299.965311][ T6004] usb 1-1: USB disconnect, device number 12 [ 300.993467][ T7320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.070809][ T7320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.667432][ T5933] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 301.830648][ T5933] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.833487][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.833515][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.833535][ T5933] usb 4-1: Product: syz [ 301.833550][ T5933] usb 4-1: Manufacturer: syz [ 301.833564][ T5933] usb 4-1: SerialNumber: syz [ 301.919456][ T5933] usb 4-1: selecting invalid altsetting 1 [ 301.978034][ T6072] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 302.195643][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.195677][ T6072] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.195717][ T6072] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 302.195744][ T6072] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.240185][ T6072] usb 2-1: config 0 descriptor?? [ 302.546054][ T5933] cdc_ncm 4-1:1.0: SET_NTB_FORMAT failed [ 302.565790][ T5933] usb 4-1: selecting invalid altsetting 1 [ 302.566076][ T5933] cdc_ncm 4-1:1.0: bind() failure [ 302.609131][ T5933] usb 4-1: USB disconnect, device number 5 [ 302.741672][ T6072] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 302.781192][ T6072] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input9 [ 303.585915][ T7523] syz.1.465 uses obsolete (PF_INET,SOCK_PACKET) [ 305.327554][ T5933] hid-generic 0005:0C45:1010.0005: unknown main item tag 0x1 [ 305.327594][ T5933] hid-generic 0005:0C45:1010.0005: ignoring exceeding usage max [ 305.329262][ T5933] hid-generic 0005:0C45:1010.0005: unknown main item tag 0x4 [ 305.329293][ T5933] hid-generic 0005:0C45:1010.0005: unknown main item tag 0x5 [ 305.412740][ T5933] hid-generic 0005:0C45:1010.0005: hidraw0: BLUETOOTH HID v0.c3 Device [syz0] on aa:aa:aa:aa:aa:aa [ 305.860617][ T6072] keytouch 0003:0926:3333.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 305.928091][ T6072] usb 2-1: USB disconnect, device number 9 [ 306.372676][ T7549] fido_id[7549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 307.631961][ T7320] team0: Port device team_slave_0 added [ 309.356771][ T7573] netlink: 'syz.3.480': attribute type 83 has an invalid length. [ 311.909369][ T7320] team0: Port device team_slave_1 added [ 313.064026][ T7600] netlink: 'syz.3.489': attribute type 12 has an invalid length. [ 313.201918][ T7605] netlink: zone id is out of range [ 313.569529][ T6004] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 313.723860][ T6004] usb 1-1: Using ep0 maxpacket: 8 [ 313.743747][ T6004] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 313.743806][ T6004] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.743829][ T6004] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.743853][ T6004] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.743876][ T6004] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.743918][ T6004] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 313.743941][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.923311][ T6839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.935535][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.935554][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.935632][ T7320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.993579][ T7320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.993596][ T7320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.993621][ T7320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.576813][ T7320] hsr_slave_0: entered promiscuous mode [ 314.589390][ T7320] hsr_slave_1: entered promiscuous mode [ 314.590575][ T7320] debugfs: 'hsr0' already exists in 'hsr' [ 314.590608][ T7320] Cannot create hsr debugfs directory [ 314.619588][ T6839] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.646498][ T7621] usbtmc 1-1:16.0: simple usb_control_msg failed -32 [ 314.654208][ T31] usb 1-1: USB disconnect, device number 13 [ 314.827578][ T7625] netlink: zone id is out of range [ 315.057484][ T5952] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.057696][ T5952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.360571][ T7633] netlink: 40 bytes leftover after parsing attributes in process `syz.1.503'. [ 315.464764][ T5952] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.465343][ T5952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.667898][ T31] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 315.762029][ T7644] kernel read not supported for file /eth0 (pid: 7644 comm: syz.0.508) [ 315.781620][ T37] audit: type=1800 audit(1765961373.909:7): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.508" name="eth0" dev="mqueue" ino=16693 res=0 errno=0 [ 316.218929][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 316.239277][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 316.260769][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 316.276495][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 316.292425][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 316.347878][ T31] usb 4-1: Using ep0 maxpacket: 16 [ 316.351569][ T31] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 316.351597][ T31] usb 4-1: config 1 has no interface number 0 [ 316.351649][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 316.351675][ T31] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 316.351699][ T31] usb 4-1: config 1 interface 105 has no altsetting 0 [ 316.354268][ T31] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 316.354296][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.354317][ T31] usb 4-1: Product: syz [ 316.354331][ T31] usb 4-1: Manufacturer: syz [ 316.354346][ T31] usb 4-1: SerialNumber: syz [ 316.722293][ T7637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 316.722413][ T7637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.182988][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.185860][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.190509][ T7637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.190622][ T7637] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.804032][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 317.804551][ T31] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 318.110365][ T31] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, d2:34:03:ed:bb:4d [ 318.176403][ T31] usb 4-1: USB disconnect, device number 6 [ 318.282843][ T31] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 318.544596][ T5801] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 318.767949][ T5801] Bluetooth: hci4: command tx timeout [ 320.017202][ T37] audit: type=1326 audit(1765961378.159:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.017256][ T37] audit: type=1326 audit(1765961378.159:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.017296][ T37] audit: type=1326 audit(1765961378.159:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.017337][ T37] audit: type=1326 audit(1765961378.159:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.017376][ T37] audit: type=1326 audit(1765961378.159:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.017643][ T37] audit: type=1326 audit(1765961378.159:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd5989df90 code=0x7ffc0000 [ 320.158993][ T37] audit: type=1326 audit(1765961378.309:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbd5989df90 code=0x7ffc0000 [ 320.159670][ T37] audit: type=1326 audit(1765961378.309:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.159975][ T37] audit: type=1326 audit(1765961378.309:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.1.521" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd5989f749 code=0x7ffc0000 [ 320.561820][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 320.710225][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 320.710286][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 320.711801][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 320.711828][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 320.711847][ T10] usb 1-1: Manufacturer: syz [ 320.777997][ T10] usb 1-1: config 0 descriptor?? [ 320.847909][ T5801] Bluetooth: hci4: command tx timeout [ 320.907896][ T5811] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 320.982486][ T10] rc_core: IR keymap rc-hauppauge not found [ 320.982505][ T10] Registered IR keymap rc-empty [ 320.999677][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 321.003943][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input10 [ 321.064604][ T5811] usb 2-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 321.064635][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.064655][ T5811] usb 2-1: Product: syz [ 321.064669][ T5811] usb 2-1: Manufacturer: syz [ 321.064682][ T5811] usb 2-1: SerialNumber: syz [ 321.106264][ T5811] usb 2-1: config 0 descriptor?? [ 321.118781][ T5811] hub 2-1:0.0: bad descriptor, ignoring hub [ 321.118820][ T5811] hub 2-1:0.0: probe with driver hub failed with error -5 [ 321.341233][ T5811] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 321.465421][ T5811] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 321.561934][ T5811] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 321.562524][ T5811] usb 2-1: media controller created [ 321.906207][ T5871] usb 1-1: USB disconnect, device number 14 [ 321.935770][ T5811] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 322.013892][ T5811] DVB: Unable to find symbol dib7000p_attach() [ 322.013908][ T5811] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 322.131844][ T5811] rc_core: IR keymap rc-dib0700-rc5 not found [ 322.131867][ T5811] Registered IR keymap rc-empty [ 322.132307][ T5811] dvb-usb: could not initialize remote control. [ 322.132317][ T5811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 322.179255][ T5811] usb 2-1: USB disconnect, device number 10 [ 322.284589][ T5811] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 322.608509][ T5801] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 322.608856][ T5801] Bluetooth: hci1: Injecting HCI hardware error event [ 322.611971][ T5801] Bluetooth: hci1: hardware error 0x00 [ 322.928034][ T5114] Bluetooth: hci4: command tx timeout [ 324.077655][ T7712] netlink: 40 bytes leftover after parsing attributes in process `syz.0.534'. [ 324.350451][ T59] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.770138][ T5801] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 325.008232][ T5801] Bluetooth: hci4: command tx timeout [ 325.286938][ T7647] chnl_net:caif_netlink_parms(): no params data found [ 327.734805][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.734935][ T7647] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.735140][ T7647] bridge_slave_0: entered allmulticast mode [ 327.774790][ T7647] bridge_slave_0: entered promiscuous mode [ 327.784780][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.784923][ T7647] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.785167][ T7647] bridge_slave_1: entered allmulticast mode [ 327.827264][ T7647] bridge_slave_1: entered promiscuous mode [ 330.591443][ T7647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.618221][ T7647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.281729][ T31] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 331.281886][ T31] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 331.282022][ T31] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 331.282820][ T7647] team0: Port device team_slave_0 added [ 331.286645][ T7647] team0: Port device team_slave_1 added [ 332.513408][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.513425][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.513451][ T7647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.515684][ T7647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.515696][ T7647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.515727][ T7647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.371109][ T7647] hsr_slave_0: entered promiscuous mode [ 333.372563][ T7647] hsr_slave_1: entered promiscuous mode [ 333.373618][ T7647] debugfs: 'hsr0' already exists in 'hsr' [ 333.373654][ T7647] Cannot create hsr debugfs directory [ 338.491409][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.508170][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.532317][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.552051][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.552727][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 338.968020][ T7732] chnl_net:caif_netlink_parms(): no params data found [ 339.509043][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 339.532498][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 339.552369][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 339.554703][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 339.555955][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 340.608106][ T5114] Bluetooth: hci5: command tx timeout [ 341.576882][ T7732] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.577130][ T7732] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.577372][ T7732] bridge_slave_0: entered allmulticast mode [ 341.606833][ T7732] bridge_slave_0: entered promiscuous mode [ 341.619131][ T7732] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.622787][ T7732] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.623022][ T7732] bridge_slave_1: entered allmulticast mode [ 341.652056][ T5114] Bluetooth: hci6: command tx timeout [ 341.681252][ T7732] bridge_slave_1: entered promiscuous mode [ 341.899154][ T5801] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 341.905446][ T5801] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 341.906719][ T5801] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 341.949019][ T5801] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 341.949899][ T5801] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 342.688135][ T5801] Bluetooth: hci5: command tx timeout [ 343.708871][ T7732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.731032][ T5801] Bluetooth: hci6: command tx timeout [ 343.760346][ T7732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.968040][ T5801] Bluetooth: hci7: command tx timeout [ 344.768120][ T5801] Bluetooth: hci5: command tx timeout [ 345.808147][ T5801] Bluetooth: hci6: command tx timeout [ 346.053776][ T5801] Bluetooth: hci7: command tx timeout [ 346.058965][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.076894][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.090473][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.091673][ T5805] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.092451][ T5805] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.848120][ T5805] Bluetooth: hci5: command tx timeout [ 347.891893][ T5805] Bluetooth: hci6: command tx timeout [ 348.127888][ T5805] Bluetooth: hci0: command tx timeout [ 348.128155][ T5114] Bluetooth: hci7: command tx timeout [ 350.207923][ T5114] Bluetooth: hci7: command tx timeout [ 350.320195][ T5114] Bluetooth: hci0: command tx timeout [ 351.852056][ T7732] team0: Port device team_slave_0 added [ 351.880546][ T7732] team0: Port device team_slave_1 added [ 352.368184][ T5114] Bluetooth: hci0: command tx timeout [ 353.556748][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.556766][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.556791][ T7732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.645436][ T7732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.645453][ T7732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 353.645479][ T7732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.447988][ T5114] Bluetooth: hci0: command tx timeout [ 355.560612][ T7732] hsr_slave_0: entered promiscuous mode [ 355.562045][ T7732] hsr_slave_1: entered promiscuous mode [ 355.563109][ T7732] debugfs: 'hsr0' already exists in 'hsr' [ 355.563132][ T7732] Cannot create hsr debugfs directory [ 357.481790][ T7743] chnl_net:caif_netlink_parms(): no params data found [ 358.360597][ T7746] chnl_net:caif_netlink_parms(): no params data found [ 361.215850][ T7743] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.216054][ T7743] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.216291][ T7743] bridge_slave_0: entered allmulticast mode [ 361.247480][ T7743] bridge_slave_0: entered promiscuous mode [ 361.287030][ T7743] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.287159][ T7743] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.287400][ T7743] bridge_slave_1: entered allmulticast mode [ 361.291112][ T7743] bridge_slave_1: entered promiscuous mode [ 363.320822][ T7746] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.321042][ T7746] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.321272][ T7746] bridge_slave_0: entered allmulticast mode [ 363.324054][ T7746] bridge_slave_0: entered promiscuous mode [ 363.357111][ T7743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.370880][ T7749] chnl_net:caif_netlink_parms(): no params data found [ 363.387883][ T7746] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.387982][ T7746] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.388164][ T7746] bridge_slave_1: entered allmulticast mode [ 363.389667][ T7746] bridge_slave_1: entered promiscuous mode [ 363.607309][ T7743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.542397][ T7746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.544878][ T7743] team0: Port device team_slave_0 added [ 367.598687][ T7743] team0: Port device team_slave_1 added [ 367.602287][ T7746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.954493][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.954511][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.954537][ T7743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.019214][ T7746] team0: Port device team_slave_0 added [ 371.020182][ T7743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.020195][ T7743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.020221][ T7743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.083871][ T7746] team0: Port device team_slave_1 added [ 372.118272][ T7749] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.118479][ T7749] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.118755][ T7749] bridge_slave_0: entered allmulticast mode [ 372.121254][ T7749] bridge_slave_0: entered promiscuous mode [ 373.203323][ T7749] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.203451][ T7749] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.203670][ T7749] bridge_slave_1: entered allmulticast mode [ 373.205235][ T7749] bridge_slave_1: entered promiscuous mode [ 375.199371][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.199388][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.199412][ T7746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.927679][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 375.937134][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 375.946101][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 375.947304][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 375.950009][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.406775][ T7746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.406793][ T7746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.406819][ T7746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.711277][ T7749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.724576][ T7743] hsr_slave_0: entered promiscuous mode [ 376.725994][ T7743] hsr_slave_1: entered promiscuous mode [ 376.726964][ T7743] debugfs: 'hsr0' already exists in 'hsr' [ 376.726985][ T7743] Cannot create hsr debugfs directory [ 376.735535][ T7749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.968144][ T5805] Bluetooth: hci1: command tx timeout [ 378.616093][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.616163][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.005616][ T7749] team0: Port device team_slave_0 added [ 380.036633][ T7749] team0: Port device team_slave_1 added [ 380.048016][ T5805] Bluetooth: hci1: command tx timeout [ 380.053436][ T7746] hsr_slave_0: entered promiscuous mode [ 380.056657][ T7746] hsr_slave_1: entered promiscuous mode [ 380.075221][ T7746] debugfs: 'hsr0' already exists in 'hsr' [ 380.075247][ T7746] Cannot create hsr debugfs directory [ 382.078728][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.078745][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.078770][ T7749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.127888][ T5805] Bluetooth: hci1: command tx timeout [ 382.152344][ T7749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.152361][ T7749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.152385][ T7749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.208133][ T5805] Bluetooth: hci1: command tx timeout [ 385.074727][ T7749] hsr_slave_0: entered promiscuous mode [ 385.076229][ T7749] hsr_slave_1: entered promiscuous mode [ 385.077257][ T7749] debugfs: 'hsr0' already exists in 'hsr' [ 385.077281][ T7749] Cannot create hsr debugfs directory [ 387.355246][ T7772] chnl_net:caif_netlink_parms(): no params data found [ 389.581938][ T7772] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.582151][ T7772] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.582400][ T7772] bridge_slave_0: entered allmulticast mode [ 389.585223][ T7772] bridge_slave_0: entered promiscuous mode [ 389.620154][ T7772] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.620361][ T7772] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.620622][ T7772] bridge_slave_1: entered allmulticast mode [ 389.623425][ T7772] bridge_slave_1: entered promiscuous mode [ 391.393083][ T7772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.418528][ T7772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.624342][ T7772] team0: Port device team_slave_0 added [ 393.634653][ T7772] team0: Port device team_slave_1 added [ 394.707423][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.707439][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.707464][ T7772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.754617][ T7772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.754633][ T7772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 394.754658][ T7772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.456677][ T7772] hsr_slave_0: entered promiscuous mode [ 396.464477][ T7772] hsr_slave_1: entered promiscuous mode [ 396.465536][ T7772] debugfs: 'hsr0' already exists in 'hsr' [ 396.465559][ T7772] Cannot create hsr debugfs directory [ 399.029119][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 399.051065][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 399.052457][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 399.054134][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 399.054960][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 399.710719][ T7783] chnl_net:caif_netlink_parms(): no params data found [ 399.990048][ T5805] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 399.995067][ T5805] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 400.037975][ T5805] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 400.039257][ T5805] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 400.054804][ T5805] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 400.851400][ T7783] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.851621][ T7783] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.851876][ T7783] bridge_slave_0: entered allmulticast mode [ 400.854794][ T7783] bridge_slave_0: entered promiscuous mode [ 400.906875][ T7783] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.907005][ T7783] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.907245][ T7783] bridge_slave_1: entered allmulticast mode [ 400.910106][ T7783] bridge_slave_1: entered promiscuous mode [ 401.177558][ T5805] Bluetooth: hci3: command tx timeout [ 402.127984][ T5805] Bluetooth: hci8: command tx timeout [ 402.198142][ T7783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 402.255354][ T7783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 402.500146][ T5114] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 402.523157][ T5114] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 402.524623][ T5114] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 402.525880][ T5114] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 402.526691][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 403.220046][ T7783] team0: Port device team_slave_0 added [ 403.225018][ T7783] team0: Port device team_slave_1 added [ 403.250156][ T5114] Bluetooth: hci3: command tx timeout [ 404.208897][ T5114] Bluetooth: hci8: command tx timeout [ 404.607984][ T5114] Bluetooth: hci9: command tx timeout [ 405.079788][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.079805][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.079831][ T7783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.188973][ T7783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.188990][ T7783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.189016][ T7783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 405.327810][ T5114] Bluetooth: hci3: command tx timeout [ 406.287894][ T5114] Bluetooth: hci8: command tx timeout [ 406.345309][ T5805] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 406.364700][ T5805] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 406.366361][ T5805] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 406.367639][ T5805] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 406.408708][ T5805] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 406.688101][ T5805] Bluetooth: hci9: command tx timeout [ 407.417845][ T5805] Bluetooth: hci3: command tx timeout [ 407.541807][ T7783] hsr_slave_0: entered promiscuous mode [ 407.543383][ T7783] hsr_slave_1: entered promiscuous mode [ 407.544430][ T7783] debugfs: 'hsr0' already exists in 'hsr' [ 407.544453][ T7783] Cannot create hsr debugfs directory [ 407.545347][ T7791] chnl_net:caif_netlink_parms(): no params data found [ 408.368151][ T5805] Bluetooth: hci8: command tx timeout [ 408.448390][ T5805] Bluetooth: hci10: command tx timeout [ 408.768025][ T5805] Bluetooth: hci9: command tx timeout [ 410.528317][ T5805] Bluetooth: hci10: command tx timeout [ 410.848090][ T5805] Bluetooth: hci9: command tx timeout [ 411.882307][ T7791] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.882531][ T7791] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.882765][ T7791] bridge_slave_0: entered allmulticast mode [ 411.886305][ T7791] bridge_slave_0: entered promiscuous mode [ 412.453532][ T7791] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.453699][ T7791] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.454601][ T7791] bridge_slave_1: entered allmulticast mode [ 412.481623][ T7791] bridge_slave_1: entered promiscuous mode [ 412.607972][ T5805] Bluetooth: hci10: command tx timeout [ 413.645051][ T7791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 413.721733][ T7791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.687976][ T5805] Bluetooth: hci10: command tx timeout [ 415.270995][ T7791] team0: Port device team_slave_0 added [ 415.275661][ T7791] team0: Port device team_slave_1 added [ 415.276159][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 416.143792][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.143810][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 416.143843][ T7791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 417.720258][ T7791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 417.720270][ T7791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.720285][ T7791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 417.906081][ T7803] chnl_net:caif_netlink_parms(): no params data found [ 421.863906][ T7791] hsr_slave_0: entered promiscuous mode [ 421.865527][ T7791] hsr_slave_1: entered promiscuous mode [ 421.866641][ T7791] debugfs: 'hsr0' already exists in 'hsr' [ 421.866665][ T7791] Cannot create hsr debugfs directory [ 421.867221][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.867435][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.912553][ T7797] bridge_slave_0: entered allmulticast mode [ 421.924901][ T7797] bridge_slave_0: entered promiscuous mode [ 422.821194][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.821356][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.821579][ T7797] bridge_slave_1: entered allmulticast mode [ 422.825420][ T7797] bridge_slave_1: entered promiscuous mode [ 425.949242][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.920218][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.592509][ T7803] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.593867][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.594143][ T7803] bridge_slave_0: entered allmulticast mode [ 428.596985][ T7803] bridge_slave_0: entered promiscuous mode [ 429.119111][ T7803] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.120416][ T7803] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.120679][ T7803] bridge_slave_1: entered allmulticast mode [ 429.123446][ T7803] bridge_slave_1: entered promiscuous mode [ 429.145785][ T7797] team0: Port device team_slave_0 added [ 430.114670][ T7797] team0: Port device team_slave_1 added [ 431.360283][ T7803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.736736][ T7803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.759761][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 432.759778][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 432.759803][ T7797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 433.160562][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 433.160579][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 433.160603][ T7797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 433.860929][ T7803] team0: Port device team_slave_0 added [ 433.893500][ T7803] team0: Port device team_slave_1 added [ 435.990956][ T5801] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 436.014474][ T5801] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 436.022856][ T5801] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 436.024181][ T5801] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 436.024991][ T5801] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 436.310221][ T7797] hsr_slave_0: entered promiscuous mode [ 436.311762][ T7797] hsr_slave_1: entered promiscuous mode [ 436.312796][ T7797] debugfs: 'hsr0' already exists in 'hsr' [ 436.312821][ T7797] Cannot create hsr debugfs directory [ 436.320155][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 436.320169][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.320192][ T7803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 436.386285][ T7803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 436.386297][ T7803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 436.386312][ T7803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.018943][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 438.056956][ T5114] Bluetooth: hci11: command tx timeout [ 440.078516][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.078588][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.130225][ T5801] Bluetooth: hci11: command tx timeout [ 440.976028][ T7803] hsr_slave_0: entered promiscuous mode [ 440.977537][ T7803] hsr_slave_1: entered promiscuous mode [ 441.012503][ T7803] debugfs: 'hsr0' already exists in 'hsr' [ 441.012532][ T7803] Cannot create hsr debugfs directory [ 442.127840][ T5801] Bluetooth: hci4: command 0x0406 tx timeout [ 442.207828][ T5801] Bluetooth: hci11: command tx timeout [ 443.264888][ T7824] chnl_net:caif_netlink_parms(): no params data found [ 444.288033][ T5114] Bluetooth: hci11: command tx timeout [ 446.790254][ T7824] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.790467][ T7824] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.790745][ T7824] bridge_slave_0: entered allmulticast mode [ 446.793663][ T7824] bridge_slave_0: entered promiscuous mode [ 446.828728][ T7824] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.828944][ T7824] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.829235][ T7824] bridge_slave_1: entered allmulticast mode [ 446.832162][ T7824] bridge_slave_1: entered promiscuous mode [ 448.127588][ T7824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.164330][ T7824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 449.534684][ T7824] team0: Port device team_slave_0 added [ 449.544834][ T7824] team0: Port device team_slave_1 added [ 450.656908][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.656925][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.656950][ T7824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.704923][ T7824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.704939][ T7824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.704981][ T7824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 451.794842][ T7824] hsr_slave_0: entered promiscuous mode [ 451.796491][ T7824] hsr_slave_1: entered promiscuous mode [ 451.822029][ T7824] debugfs: 'hsr0' already exists in 'hsr' [ 451.822063][ T7824] Cannot create hsr debugfs directory [ 459.838813][ T5801] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 459.847491][ T5801] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 459.849980][ T5801] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 459.858757][ T5801] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 459.859542][ T5801] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 460.499986][ T5801] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 460.504000][ T5801] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 460.505099][ T5801] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 460.557447][ T5805] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 460.575856][ T5805] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 461.336123][ T7835] chnl_net:caif_netlink_parms(): no params data found [ 461.967871][ T5114] Bluetooth: hci12: command tx timeout [ 462.607979][ T5114] Bluetooth: hci13: command tx timeout [ 462.608662][ T5114] Bluetooth: hci6: command 0x0406 tx timeout [ 462.608688][ T5114] Bluetooth: hci5: command 0x0406 tx timeout [ 462.981421][ T5114] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 462.987020][ T5114] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 463.012278][ T5114] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 463.013683][ T5114] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 463.014593][ T5114] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 464.047999][ T5114] Bluetooth: hci12: command tx timeout [ 464.367990][ T38] INFO: task syz-executor:7320 blocked for more than 143 seconds. [ 464.368016][ T38] Tainted: G L syzkaller #0 [ 464.368027][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 464.368035][ T38] task:syz-executor state:D stack:17784 pid:7320 tgid:7320 ppid:1 task_flags:0x400140 flags:0x00080002 [ 464.368093][ T38] Call Trace: [ 464.368106][ T38] [ 464.368119][ T38] __schedule+0x1480/0x50a0 [ 464.368159][ T38] ? __lock_acquire+0x6b6/0x2cf0 [ 464.368207][ T38] ? __pfx___schedule+0x10/0x10 [ 464.368255][ T38] rt_mutex_schedule+0x77/0xf0 [ 464.368274][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 464.368312][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 464.368340][ T38] rt_mutex_slowlock+0x2a8/0x6b0 [ 464.368368][ T38] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 464.368393][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 464.368429][ T38] ? device_del+0xa9/0x8e0 [ 464.368464][ T38] ? device_del+0xa9/0x8e0 [ 464.368481][ T38] mutex_lock_nested+0x16a/0x1d0 [ 464.368509][ T38] device_del+0xa9/0x8e0 [ 464.368529][ T38] ? ida_free+0x28f/0x2e0 [ 464.368548][ T38] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 464.368567][ T38] ? __pfx_ida_free+0x10/0x10 [ 464.368586][ T38] ? __pfx_device_del+0x10/0x10 [ 464.368616][ T38] device_unregister+0x21/0x100 [ 464.368638][ T38] del_device_store+0x2aa/0x360 [ 464.368661][ T38] ? __pfx_del_device_store+0x10/0x10 [ 464.368682][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 464.368706][ T38] ? sysfs_kf_write+0x166/0x260 [ 464.368734][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 464.368756][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 464.368786][ T38] vfs_write+0x5d5/0xb40 [ 464.368818][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 464.368841][ T38] ? __pfx_vfs_write+0x10/0x10 [ 464.368876][ T38] ? do_sys_openat2+0x15a/0x200 [ 464.368914][ T38] ksys_write+0x14b/0x260 [ 464.368942][ T38] ? __pfx_ksys_write+0x10/0x10 [ 464.368971][ T38] ? do_syscall_64+0xbe/0xf80 [ 464.368995][ T38] do_syscall_64+0xfa/0xf80 [ 464.369015][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.369035][ T38] ? clear_bhb_loop+0x60/0xb0 [ 464.369058][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.369077][ T38] RIP: 0033:0x7fa6f126e1ff [ 464.369098][ T38] RSP: 002b:00007ffd2df885f0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 464.369117][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa6f126e1ff [ 464.369131][ T38] RDX: 0000000000000001 RSI: 00007ffd2df88640 RDI: 0000000000000005 [ 464.369143][ T38] RBP: 00007fa6f12f52cb R08: 0000000000000000 R09: 00007ffd2df88447 [ 464.369156][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 464.369168][ T38] R13: 00007ffd2df88640 R14: 00007fa6f1ff4620 R15: 0000000000000003 [ 464.369200][ T38] [ 464.369254][ T38] [ 464.369254][ T38] Showing all locks held in the system: [ 464.369263][ T38] 5 locks held by kworker/u8:0/12: [ 464.369276][ T38] 4 locks held by rcuc/1/28: [ 464.369286][ T38] 1 lock held by khungtaskd/38: [ 464.369297][ T38] #0: ffffffff8d5ae8c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 464.369355][ T38] 6 locks held by kworker/u8:3/58: [ 464.369366][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 464.369413][ T38] #1: ffffc9000124fb80 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 464.369458][ T38] #2: ffffffff8e898640 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 464.369504][ T38] #3: ffff8880279790d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 464.369553][ T38] #4: ffff888029562300 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 464.369607][ T38] #5: ffffffff8d5b4330 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 464.369670][ T38] 3 locks held by kworker/u8:11/3446: [ 464.369681][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 464.369731][ T38] #1: ffffc9000c8bfb80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 464.369777][ T38] #2: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 464.369828][ T38] 2 locks held by getty/5554: [ 464.369838][ T38] #0: ffff88814efcb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 464.369885][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 464.369934][ T38] 4 locks held by kworker/u9:7/5814: [ 464.369945][ T38] #0: ffff888068b5b938 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 464.369990][ T38] #1: ffffc90004f0fb80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 464.370036][ T38] #2: ffff88805b718f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 464.370088][ T38] #3: ffff88805b7180b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 464.370142][ T38] 5 locks held by syz-executor/7320: [ 464.370152][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.370204][ T38] #1: ffff8880322fa478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.370250][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.370300][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.370345][ T38] #4: ffff8880279790d8 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x8e0 [ 464.370389][ T38] 4 locks held by syz-executor/7647: [ 464.370399][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.370451][ T38] #1: ffff88805c9f5478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.370496][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.370546][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.370591][ T38] 4 locks held by syz-executor/7732: [ 464.370602][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.370654][ T38] #1: ffff88803656b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.370699][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.370749][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.370794][ T38] 4 locks held by syz-executor/7743: [ 464.370805][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.370857][ T38] #1: ffff888059cf1478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.370902][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.370957][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.371001][ T38] 4 locks held by syz-executor/7746: [ 464.371012][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.371063][ T38] #1: ffff88803656ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.371109][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.371158][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.371203][ T38] 4 locks held by syz-executor/7749: [ 464.371214][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.371266][ T38] #1: ffff88803670a078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.371311][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.371361][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.371409][ T38] 4 locks held by syz-executor/7772: [ 464.371420][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.371472][ T38] #1: ffff888144b5c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.371519][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.371570][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.371616][ T38] 4 locks held by syz-executor/7783: [ 464.371627][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.371680][ T38] #1: ffff88805d5a0478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.371725][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.371776][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.371821][ T38] 4 locks held by syz-executor/7791: [ 464.371832][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.371886][ T38] #1: ffff8880517b1c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.371936][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.371988][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.372034][ T38] 4 locks held by syz-executor/7797: [ 464.372045][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.372097][ T38] #1: ffff888054299478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.372144][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.372194][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.372240][ T38] 4 locks held by syz-executor/7803: [ 464.372251][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.372304][ T38] #1: ffff88804f919878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.372350][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.372401][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.372447][ T38] 4 locks held by syz-executor/7824: [ 464.372458][ T38] #0: ffff888034678480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 464.372511][ T38] #1: ffff88806ae8f078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 464.372555][ T38] #2: ffff8880263c2f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 464.372606][ T38] #3: ffffffff8e12c638 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 464.372651][ T38] 2 locks held by syz-executor/7835: [ 464.372662][ T38] #0: ffffffff8e021d08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 464.372713][ T38] #1: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 464.372759][ T38] 2 locks held by syz-executor/7841: [ 464.372770][ T38] #0: ffffffff8edd0a00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 464.372821][ T38] #1: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 464.372866][ T38] 1 lock held by syz-executor/7854: [ 464.372877][ T38] #0: ffffffff8e8a5778 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 464.372927][ T38] [ 464.372932][ T38] ============================================= [ 464.372932][ T38] [ 464.372948][ T38] NMI backtrace for cpu 1 [ 464.372970][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.372996][ T38] Tainted: [L]=SOFTLOCKUP [ 464.373002][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.373013][ T38] Call Trace: [ 464.373021][ T38] [ 464.373028][ T38] dump_stack_lvl+0x189/0x250 [ 464.373056][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.373080][ T38] ? __pfx__printk+0x10/0x10 [ 464.373107][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 464.373132][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 464.373156][ T38] ? __pfx__printk+0x10/0x10 [ 464.373176][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 464.373194][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 464.373219][ T38] sys_info+0x135/0x170 [ 464.373237][ T38] watchdog+0xf95/0xfe0 [ 464.373261][ T38] ? watchdog+0x20a/0xfe0 [ 464.373284][ T38] kthread+0x711/0x8a0 [ 464.373310][ T38] ? __pfx_watchdog+0x10/0x10 [ 464.373328][ T38] ? __pfx_kthread+0x10/0x10 [ 464.373346][ T38] ? rt_spin_unlock+0x150/0x200 [ 464.373373][ T38] ? rt_spin_unlock+0x161/0x200 [ 464.373392][ T38] ? __pfx_kthread+0x10/0x10 [ 464.373416][ T38] ret_from_fork+0x599/0xb30 [ 464.373437][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 464.373465][ T38] ? __switch_to_asm+0x39/0x70 [ 464.373488][ T38] ? __switch_to_asm+0x33/0x70 [ 464.373510][ T38] ? __pfx_kthread+0x10/0x10 [ 464.373535][ T38] ret_from_fork_asm+0x1a/0x30 [ 464.373573][ T38] [ 464.373581][ T38] Sending NMI from CPU 1 to CPUs 0: [ 464.373607][ C0] NMI backtrace for cpu 0 [ 464.373624][ C0] CPU: 0 UID: 0 PID: 3666 Comm: kworker/u8:14 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.373646][ C0] Tainted: [L]=SOFTLOCKUP [ 464.373652][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.373669][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 464.373689][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x45/0xa0 [ 464.373709][ C0] Code: e0 00 00 ff 00 ba 00 01 00 00 23 91 7c 0b 00 00 41 89 d1 45 09 c1 74 12 45 85 c0 75 5b 85 d2 74 57 83 b9 3c 16 00 00 00 74 4e <8b> 91 18 16 00 00 83 fa 03 75 43 48 8b 91 20 16 00 00 44 8b 89 1c [ 464.373723][ C0] RSP: 0018:ffffc9000d0df2f8 EFLAGS: 00000246 [ 464.373737][ C0] RAX: ffffffff8481b30b RBX: 5f0b84a78b6b1ec9 RCX: ffff888030e70000 [ 464.373749][ C0] RDX: 0000000000000000 RSI: 0000000000000038 RDI: 0000000000000040 [ 464.373759][ C0] RBP: ffffc9000d0df5f0 R08: 0000000000000000 R09: 0000000000000000 [ 464.373770][ C0] R10: 1347a8b85f27a371 R11: f936925f726e5ee4 R12: 0000000000000038 [ 464.373781][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: ffffc9000d0df3a0 [ 464.373792][ C0] FS: 0000000000000000(0000) GS:ffff888126d01000(0000) knlGS:0000000000000000 [ 464.373806][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.373817][ C0] CR2: 00007fd9bcafd9bd CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 464.373831][ C0] Call Trace: [ 464.373837][ C0] [ 464.373843][ C0] curve25519_generate_public+0x23b/0x3010 [ 464.373870][ C0] ? __pfx_curve25519_generate_public+0x10/0x10 [ 464.373917][ C0] wg_noise_handshake_create_initiation+0x201/0x750 [ 464.373943][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 464.373965][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 464.373982][ C0] ? finish_task_switch+0x23d/0x940 [ 464.374014][ C0] ? seqcount_lockdep_reader_access+0x122/0x1c0 [ 464.374035][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 464.374050][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 464.374069][ C0] ? seqcount_lockdep_reader_access+0x174/0x1c0 [ 464.374088][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 464.374108][ C0] ? register_lock_class+0x51/0x320 [ 464.374133][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 464.374154][ C0] wg_packet_handshake_send_worker+0x163/0x320 [ 464.374173][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 464.374202][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 464.374219][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 464.374237][ C0] process_scheduled_works+0xad1/0x1770 [ 464.374268][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 464.374294][ C0] worker_thread+0x8a0/0xda0 [ 464.374313][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 464.374334][ C0] ? __kthread_parkme+0x7b/0x200 [ 464.374357][ C0] kthread+0x711/0x8a0 [ 464.374379][ C0] ? __pfx_worker_thread+0x10/0x10 [ 464.374396][ C0] ? __pfx_kthread+0x10/0x10 [ 464.374414][ C0] ? rt_spin_unlock+0x150/0x200 [ 464.374435][ C0] ? rt_spin_unlock+0x161/0x200 [ 464.374454][ C0] ? __pfx_kthread+0x10/0x10 [ 464.374474][ C0] ret_from_fork+0x599/0xb30 [ 464.374492][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 464.374514][ C0] ? __switch_to_asm+0x39/0x70 [ 464.374533][ C0] ? __switch_to_asm+0x33/0x70 [ 464.374552][ C0] ? __pfx_kthread+0x10/0x10 [ 464.374573][ C0] ret_from_fork_asm+0x1a/0x30 [ 464.374602][ C0] [ 464.375613][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 464.375635][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 464.375660][ T38] Tainted: [L]=SOFTLOCKUP [ 464.375667][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.375678][ T38] Call Trace: [ 464.375686][ T38] [ 464.375693][ T38] dump_stack_lvl+0x99/0x250 [ 464.375718][ T38] ? __asan_memcpy+0x40/0x70 [ 464.375742][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.375766][ T38] ? __pfx__printk+0x10/0x10 [ 464.375802][ T38] vpanic+0x237/0x6d0 [ 464.375826][ T38] ? __pfx_vpanic+0x10/0x10 [ 464.375860][ T38] panic+0xb9/0xc0 [ 464.375884][ T38] ? __pfx_panic+0x10/0x10 [ 464.375924][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 464.375952][ T38] watchdog+0xfdf/0xfe0 [ 464.375978][ T38] ? watchdog+0x20a/0xfe0 [ 464.376006][ T38] kthread+0x711/0x8a0 [ 464.376035][ T38] ? __pfx_watchdog+0x10/0x10 [ 464.376055][ T38] ? __pfx_kthread+0x10/0x10 [ 464.376077][ T38] ? rt_spin_unlock+0x150/0x200 [ 464.376105][ T38] ? rt_spin_unlock+0x161/0x200 [ 464.376127][ T38] ? __pfx_kthread+0x10/0x10 [ 464.376153][ T38] ret_from_fork+0x599/0xb30 [ 464.376177][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 464.376208][ T38] ? __switch_to_asm+0x39/0x70 [ 464.376232][ T38] ? __switch_to_asm+0x33/0x70 [ 464.376256][ T38] ? __pfx_kthread+0x10/0x10 [ 464.376283][ T38] ret_from_fork_asm+0x1a/0x30 [ 464.376325][ T38] [ 464.376719][ T38] Kernel Offset: disabled