last executing test programs: 15m37.063596162s ago: executing program 0 (id=276): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/56, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/64, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) 15m35.557150211s ago: executing program 0 (id=280): socket(0x10, 0x3, 0x0) userfaultfd(0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 15m20.933683037s ago: executing program 0 (id=304): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f0000000100)=""/94, 0xfffffcf7) 15m18.130066835s ago: executing program 0 (id=310): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = getpgid(0xffffffffffffffff) prlimit64(r0, 0xd, &(0x7f0000000140)={0x3, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x800) sched_setscheduler(0x0, 0x6, &(0x7f0000000000)=0x7) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$binder(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x1008008, &(0x7f0000000040)={[{@max={'max', 0x3d, 0x1}}]}) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) ioperm(0x6, 0x5, 0x80) rt_tgsigqueueinfo(r0, r0, 0x3f, &(0x7f0000000080)={0x15, 0x79, 0x4}) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x10, @any, 0x5, 0x2}, 0xe) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r4 = open(0x0, 0x145142, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) tgkill(0x0, 0x0, 0x33) ftruncate(r4, 0x2008004) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)}, {&(0x7f0000000300)='l3', 0x2}], 0x3}], 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x44) 15m17.35067092s ago: executing program 0 (id=314): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)="711366", 0x3}, 0x1, 0x0, 0x0, 0x24004040}, 0x4004014) 15m16.802298828s ago: executing program 0 (id=315): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 15m1.137656842s ago: executing program 32 (id=315): creat(&(0x7f0000000080)='./bus\x00', 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) open$dir(&(0x7f0000000200)='./file0\x00', 0x1e9240, 0x180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) r4 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x31) sendmmsg$inet6(r4, &(0x7f0000002940), 0x40000000000017d, 0x811) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount(&(0x7f0000000240)=@filename='./bus\x00', &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x0, &(0x7f0000000100)='trans=rdma,') 14m28.630658726s ago: executing program 2 (id=386): socket(0x10, 0x3, 0x0) userfaultfd(0x80800) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$tipc(0x1e, 0x5, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x100) ioctl$MON_IOCX_GET(r5, 0x400c9206, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(r6, 0xc018aa06, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) close_range(r0, 0xffffffffffffffff, 0x0) 14m27.127820284s ago: executing program 2 (id=390): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x20400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000008004"]) 14m25.761824203s ago: executing program 2 (id=393): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x586, 0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, 0x0, 0x0) 14m24.629732942s ago: executing program 2 (id=395): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x240000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0xddc, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) ioperm(0x5, 0x100000003, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) read$msr(r2, &(0x7f0000000080)=""/74, 0x4a) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) bpf$LINK_DETACH(0x22, 0x0, 0x0) r8 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000480)=[{0x0, 0x0, &(0x7f0000000300)=[{0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53", 0x3e}], 0x2}], 0x1, 0x40800) ioctl$KVM_CHECK_EXTENSION(r7, 0xae03, 0x100000000) recvmsg(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) 14m22.772513446s ago: executing program 2 (id=398): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) sendfile(r2, 0xffffffffffffffff, 0x0, 0x8) read$dsp(r3, &(0x7f0000000100)=""/94, 0xfffffcf7) 14m20.682643829s ago: executing program 2 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000001"]) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 14m5.326303778s ago: executing program 33 (id=401): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="000001"]) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 9m8.960785252s ago: executing program 3 (id=767): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, 0x0, 0x0) 9m8.470596005s ago: executing program 3 (id=769): mkdir(&(0x7f0000000000)='./file0\x00', 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xeaf74dde) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000740)=ANY=[], 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000400000000fbdbdf2525000000000001006e657464657673696d000000000002006e657464657673696d300000"], 0x2d}, 0x1, 0x0, 0x0, 0x4041}, 0x40841) r5 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x300}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r6 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x1) r8 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r7, 0x4020aed2, &(0x7f0000000300)={0xdddd1000, 0x3000, 0x8}) ioctl$KVM_IOEVENTFD(r7, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r8}) 9m5.743221733s ago: executing program 3 (id=772): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000100), 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x3}}], 0x7, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x2, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r4, r4, &(0x7f0000000080), 0x7f03) socket$nl_generic(0x10, 0x3, 0x10) 9m3.936929616s ago: executing program 3 (id=774): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) connect$l2tp6(r1, &(0x7f0000000240)={0xa, 0x0, 0x3, @private1={0xfc, 0x1, '\x00', 0x20}, 0xa}, 0x20) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80202, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) read$dsp(r3, &(0x7f0000000100)=""/94, 0xfffffcf7) 8m54.901385471s ago: executing program 3 (id=781): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = eventfd(0x5f0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r2}) 8m54.419457761s ago: executing program 3 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x0, 0x0, r2}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) r6 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x65df50290ab3a73d) r7 = socket$caif_stream(0x25, 0x1, 0x3) close(r7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x94) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x20900, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 8m39.271690179s ago: executing program 34 (id=784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) prctl$PR_SCHED_CORE(0x3e, 0x4, 0x0, 0x3, &(0x7f00000002c0)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc1) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x74cd, 0x10100, 0x0, 0x0, 0x0, r2}, 0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0xef92, 0x0, 0x0, 0x0) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) readv(r5, &(0x7f0000000c40)=[{&(0x7f00000003c0)=""/7, 0x7}], 0x1) r6 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93', 0x65df50290ab3a73d) r7 = socket$caif_stream(0x25, 0x1, 0x3) close(r7) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4, 0x12, r6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) r9 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_SIOCINQ(r9, 0x541b, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0xf, &(0x7f0000000200)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x33}, {0x7, 0x0}}}, &(0x7f0000000100)='GPL\x00'}, 0x94) openat$dlm_monitor(0xffffff9c, &(0x7f0000000080), 0x20900, 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582239f"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 47.440404345s ago: executing program 1 (id=1303): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 42.924458828s ago: executing program 1 (id=1306): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x14, 0x6000, @fd, 0x0, 0x20000003, 0x8020, 0x0, 0x1, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, 0x0, 0x40000) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) 42.59694434s ago: executing program 1 (id=1307): r0 = socket$vsock_stream(0x28, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x100800) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x800) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 41.714899836s ago: executing program 1 (id=1308): fsopen(0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000180)=0x702cce7dd41ef6e, 0x4) socket(0x1a, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r1 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) r3 = shmat(r1, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r3) shmdt(r3) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x9) r6 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r6, 0x0, 0x200488c1) socket$kcm(0xa, 0x2, 0x73) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280)) 38.395538227s ago: executing program 4 (id=1311): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0xc, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r0, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x30}}) io_uring_enter(r1, 0x3516, 0x0, 0x4, 0x0, 0x0) 38.318380647s ago: executing program 1 (id=1312): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x6, 0xe0, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x6d, 0xaa, 0x28, 0x40, 0x12d1, 0xb4d5, 0x166c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x2, 0xb, 0x6, 0x50, 0x3, [{{0x9, 0x4, 0x31, 0x40, 0x0, 0xff, 0x3, 0x36, 0x7f}}, {{0x9, 0x4, 0x3, 0x1, 0x0, 0xf9, 0x76, 0x50, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@obex={0x5, 0x24, 0x15, 0x80}, @acm={0x4, 0x24, 0x2, 0xa}, @mdlm_detail={0x8d, 0x24, 0x13, 0x3, "2c8a5ff0fcc7e8a6a5cb9e9565622a76f100e9fec0c63171f2bd3c26cd756810d6903e73a31ac8c8d159a595713b5557eb4480662f4eafae0eb3b894094eeca90b59cd273c695ee549bc17b0bdcf18d2c70780859933e077e53b257e35d1d465282ab4d3e81987fa4e9d57d999028b6430348541cc0a92c0c338b27b6f3604471693db41da919ea20c"}]}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r3, r3) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) 37.686560371s ago: executing program 4 (id=1313): syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) clock_adjtime(0x0, &(0x7f0000000100)={0x2, 0x6a, 0x5, 0x8000000000000001, 0x48c, 0x5, 0xd, 0x424, 0x2, 0xffffffffffffffff, 0xf423f, 0xfffffffffffffff9, 0x7, 0x2, 0x1000000081, 0x5, 0x0, 0x5, 0x0, 0x9220000000000000, 0x3, 0x0, 0x80000001, 0x0, 0x5, 0x7}) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 34.097997414s ago: executing program 1 (id=1314): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 31.100179348s ago: executing program 4 (id=1315): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001e740)={&(0x7f000001e780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x26000000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000280)={0x0, "70587f5d4b7c4f60369ee6ec054fed73c330ccb22e40d20f0611b178c575d03cb32766ac92e0131a563460de3e2b5fc121fdb2e005796c28ba882fd9e990b8de", 0x25}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r5, &(0x7f00000016c0), 0x0) add_key$fscrypt_provisioning(&(0x7f000001e680), &(0x7f000001e6c0)={'syz', 0x1}, 0x0, 0x0, r5) semctl$SETVAL(0x0, 0x5cc49b4598cbd874, 0x10, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 19.042096137s ago: executing program 35 (id=1314): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 16.590723008s ago: executing program 4 (id=1317): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0/file0\x00', 0x228080, 0x0) syz_fuse_handle_req(r0, &(0x7f000000a200)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x90, 0x0, 0x4, {0x3, 0x0, 0x1000003, 0x105, 0x3fe, 0x80, {0x6, 0x3, 0x40000, 0xfe2b25d, 0x4, 0x0, 0x3, 0x4, 0x2000000, 0xc000, 0xe9, 0x0, 0x0, 0x8, 0xdffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 16.42911525s ago: executing program 4 (id=1318): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1002, &(0x7f0000000280)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$loop(r2, 0x0, 0x200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, 0x0, 0x0) shutdown(r4, 0x1) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000500)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x22, &(0x7f0000000000)=0x4, 0x4) 15.077714337s ago: executing program 4 (id=1319): fsopen(&(0x7f0000000100)='udf\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 36 (id=1319): fsopen(&(0x7f0000000100)='udf\x00', 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): found [ 863.963323][T10148] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.963412][T10148] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.963584][T10148] bridge_slave_0: entered allmulticast mode [ 863.964985][T10148] bridge_slave_0: entered promiscuous mode [ 864.567525][T10148] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.567596][T10148] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.567758][T10148] bridge_slave_1: entered allmulticast mode [ 864.569317][T10148] bridge_slave_1: entered promiscuous mode [ 864.623862][T10138] team0: Port device team_slave_0 added [ 864.845718][T10138] team0: Port device team_slave_1 added [ 865.460782][T10148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 865.764374][T10148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.814047][T10138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 865.814066][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 865.814079][T10138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 866.165792][T10138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 866.165817][T10138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.165847][T10138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 866.277707][T10443] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 866.645747][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.646191][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.646486][T10218] bridge_slave_0: entered allmulticast mode [ 866.719529][T10218] bridge_slave_0: entered promiscuous mode [ 867.875518][T10148] team0: Port device team_slave_0 added [ 868.002004][T10450] 9pnet_virtio: no channels available for device syz [ 868.958539][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.958720][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.958961][T10218] bridge_slave_1: entered allmulticast mode [ 868.962936][T10218] bridge_slave_1: entered promiscuous mode [ 868.984677][T10148] team0: Port device team_slave_1 added [ 869.370142][T10454] overlayfs: failed to resolve './file1': -2 [ 869.778853][T10462] overlayfs: failed to resolve './file1': -2 [ 870.057482][T10218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 870.058421][T10148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.058439][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.058466][T10148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.137067][T10138] hsr_slave_0: entered promiscuous mode [ 870.140582][T10138] hsr_slave_1: entered promiscuous mode [ 870.173920][T10138] debugfs: 'hsr0' already exists in 'hsr' [ 870.173952][T10138] Cannot create hsr debugfs directory [ 870.196002][T10218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 870.198596][T10148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.198610][T10148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.198634][T10148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.405847][T10469] 9pnet_virtio: no channels available for device syz [ 871.307920][T10218] team0: Port device team_slave_0 added [ 871.326077][T10218] team0: Port device team_slave_1 added [ 871.992029][T10475] 9pnet_virtio: no channels available for device syz [ 873.568483][T10483] overlayfs: failed to resolve './file1': -2 [ 873.714866][T10148] hsr_slave_0: entered promiscuous mode [ 873.715655][T10148] hsr_slave_1: entered promiscuous mode [ 873.716181][T10148] debugfs: 'hsr0' already exists in 'hsr' [ 873.716195][T10148] Cannot create hsr debugfs directory [ 873.716615][ T999] bridge_slave_1: left allmulticast mode [ 873.716632][ T999] bridge_slave_1: left promiscuous mode [ 873.716778][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.873824][ T999] bridge_slave_0: left allmulticast mode [ 873.873842][ T999] bridge_slave_0: left promiscuous mode [ 873.874061][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.163558][ T999] bridge_slave_1: left allmulticast mode [ 874.163597][ T999] bridge_slave_1: left promiscuous mode [ 874.163879][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 874.213563][ T999] bridge_slave_0: left allmulticast mode [ 874.213584][ T999] bridge_slave_0: left promiscuous mode [ 874.213740][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 874.713523][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 874.740515][T10487] qrtr: Invalid version 0 [ 874.793977][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 874.859331][ T999] bond0 (unregistering): Released all slaves [ 875.119936][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.120019][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.183965][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.264127][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.328645][ T999] bond0 (unregistering): Released all slaves [ 875.386987][T10218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 875.387005][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.387042][T10218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.439039][T10218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.439057][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.439088][T10218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.453868][T10218] hsr_slave_0: entered promiscuous mode [ 878.462156][T10218] hsr_slave_1: entered promiscuous mode [ 878.485088][T10218] debugfs: 'hsr0' already exists in 'hsr' [ 878.487908][T10218] Cannot create hsr debugfs directory [ 878.753166][ T999] hsr_slave_0: left promiscuous mode [ 878.773617][ T999] hsr_slave_1: left promiscuous mode [ 878.774175][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.813410][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.983259][ T999] hsr_slave_0: left promiscuous mode [ 879.022901][ T999] hsr_slave_1: left promiscuous mode [ 879.023757][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 879.073610][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.663221][ T999] team0 (unregistering): Port device team_slave_1 removed [ 880.852329][ T999] team0 (unregistering): Port device team_slave_0 removed [ 882.708890][ T8427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 882.724192][ T8427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 882.725872][ T8427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 882.742841][ T8427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 882.758264][ T8427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 884.547647][ T8427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 884.562567][ T8427] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 884.564129][ T8427] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 884.565930][ T8427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 884.566858][ T8427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 884.872707][ T8427] Bluetooth: hci1: command tx timeout [ 885.894021][ T999] team0 (unregistering): Port device team_slave_1 removed [ 886.158243][T10543] fuse: Unknown parameter 'use00000000000000000000' [ 886.635725][ T8427] Bluetooth: hci3: command tx timeout [ 887.234691][ T8427] Bluetooth: hci1: command tx timeout [ 887.274811][T10543] orangefs_mount: mount request failed with -4 [ 887.345008][ T999] team0 (unregistering): Port device team_slave_0 removed [ 888.795151][ T8427] Bluetooth: hci3: command tx timeout [ 889.272749][ T8427] Bluetooth: hci1: command tx timeout [ 890.893314][ T8427] Bluetooth: hci3: command tx timeout [ 891.352731][ T8427] Bluetooth: hci1: command tx timeout [ 891.967223][T10218] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 892.163231][T10533] chnl_net:caif_netlink_parms(): no params data found [ 892.169124][T10218] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 892.306297][ T999] bridge_slave_1: left allmulticast mode [ 892.306316][ T999] bridge_slave_1: left promiscuous mode [ 892.306460][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.417919][ T999] bridge_slave_0: left allmulticast mode [ 892.417943][ T999] bridge_slave_0: left promiscuous mode [ 892.418145][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.516208][ T999] bridge_slave_1: left allmulticast mode [ 892.516230][ T999] bridge_slave_1: left promiscuous mode [ 892.516365][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.613997][ T999] bridge_slave_0: left allmulticast mode [ 892.614016][ T999] bridge_slave_0: left promiscuous mode [ 892.614159][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.734881][ T999] bridge_slave_1: left allmulticast mode [ 892.734916][ T999] bridge_slave_1: left promiscuous mode [ 892.735207][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.895835][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.943549][ T999] bridge_slave_0: left allmulticast mode [ 892.943570][ T999] bridge_slave_0: left promiscuous mode [ 892.943720][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.948676][T10588] 9pnet_virtio: no channels available for device syz [ 892.952886][ T8427] Bluetooth: hci3: command tx timeout [ 893.083446][T10590] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 893.637858][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 893.759468][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 893.816084][ T999] bond0 (unregistering): Released all slaves [ 894.208155][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.315710][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.376809][ T999] bond0 (unregistering): Released all slaves [ 894.683906][ C1] vkms_vblank_simulate: vblank timer overrun [ 894.902984][T10596] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 895.126833][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.225368][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.296626][ T999] bond0 (unregistering): Released all slaves [ 895.367819][T10218] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 895.551288][T10523] chnl_net:caif_netlink_parms(): no params data found [ 896.045805][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.485716][ C1] vkms_vblank_simulate: vblank timer overrun [ 896.909743][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 896.933902][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 896.935866][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 896.937529][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 896.952721][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 897.564931][ C1] vkms_vblank_simulate: vblank timer overrun [ 898.083799][T10533] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.084043][T10533] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.084305][T10533] bridge_slave_0: entered allmulticast mode [ 898.087639][T10533] bridge_slave_0: entered promiscuous mode [ 898.239440][T10620] tmpfs: Unknown parameter 'mpol' [ 898.245298][T10620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1059'. [ 898.245532][T10620] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1059'. [ 898.443386][T10533] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.443499][T10533] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.443674][T10533] bridge_slave_1: entered allmulticast mode [ 898.486653][T10533] bridge_slave_1: entered promiscuous mode [ 899.036710][ T61] Bluetooth: hci4: command tx timeout [ 899.422809][ T999] hsr_slave_0: left promiscuous mode [ 899.494030][ T999] hsr_slave_1: left promiscuous mode [ 899.494773][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.535438][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.722959][ T999] hsr_slave_0: left promiscuous mode [ 899.892958][ T999] hsr_slave_1: left promiscuous mode [ 899.893549][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.941282][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 900.153734][ T999] hsr_slave_0: left promiscuous mode [ 900.174530][ T999] hsr_slave_1: left promiscuous mode [ 900.175089][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 900.199545][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 901.113190][ T61] Bluetooth: hci4: command tx timeout [ 901.507740][T10631] input: syz1 as /devices/virtual/input/input33 [ 905.224748][ T61] Bluetooth: hci4: command tx timeout [ 905.725098][ T999] team0 (unregistering): Port device team_slave_1 removed [ 905.791656][T10638] 9pnet_virtio: no channels available for device syz [ 906.529764][ T999] team0 (unregistering): Port device team_slave_0 removed [ 906.830571][T10646] 9pnet_virtio: no channels available for device syz [ 907.626724][ T61] Bluetooth: hci4: command tx timeout [ 907.709490][T10648] random: crng reseeded on system resumption [ 909.894167][T10658] ubi31: attaching mtd0 [ 910.169278][T10658] ubi31: scanning is finished [ 910.169337][T10658] ubi31: empty MTD device detected [ 911.801053][T10658] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 912.358984][T10663] 9pnet_virtio: no channels available for device syz [ 912.734502][ T999] team0 (unregistering): Port device team_slave_1 removed [ 913.203456][ T999] team0 (unregistering): Port device team_slave_0 removed [ 914.065940][ T4200] Bluetooth: (null): Invalid header checksum [ 914.071323][ T4200] Bluetooth: (null): Invalid header checksum [ 915.373677][T10678] 9pnet_virtio: no channels available for device syz [ 916.383453][ T999] team0 (unregistering): Port device team_slave_1 removed [ 916.543256][ T999] team0 (unregistering): Port device team_slave_0 removed [ 917.114041][T10523] bridge0: port 1(bridge_slave_0) entered blocking state [ 917.114252][T10523] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.114500][T10523] bridge_slave_0: entered allmulticast mode [ 917.118214][T10523] bridge_slave_0: entered promiscuous mode [ 917.501656][T10683] vlan2: entered allmulticast mode [ 917.644650][T10523] bridge0: port 2(bridge_slave_1) entered blocking state [ 917.644733][T10523] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.644850][T10523] bridge_slave_1: entered allmulticast mode [ 917.675530][T10523] bridge_slave_1: entered promiscuous mode [ 917.692138][T10533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 917.857798][T10533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.172050][T10523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 918.515597][T10523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 918.745277][T10533] team0: Port device team_slave_0 added [ 918.848021][T10533] team0: Port device team_slave_1 added [ 919.321592][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.479155][T10699] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 919.501629][T10523] team0: Port device team_slave_0 added [ 919.537841][T10523] team0: Port device team_slave_1 added [ 919.586316][T10533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 919.586338][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 919.586363][T10533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 919.746218][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.002118][T10533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.002129][T10533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.002146][T10533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.294508][T10523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 920.294523][T10523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.294534][T10523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 920.300503][T10523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 920.300514][T10523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 920.300526][T10523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 920.428268][ C1] vkms_vblank_simulate: vblank timer overrun [ 920.919343][T10533] hsr_slave_0: entered promiscuous mode [ 920.924886][T10533] hsr_slave_1: entered promiscuous mode [ 921.113739][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.215054][T10704] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1081'. [ 921.375419][T10708] overlayfs: overlapping lowerdir path [ 921.427862][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.663061][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.747974][ C1] vkms_vblank_simulate: vblank timer overrun [ 921.941360][T10713] ubi31: attaching mtd0 [ 921.947724][T10523] hsr_slave_0: entered promiscuous mode [ 921.949191][T10523] hsr_slave_1: entered promiscuous mode [ 921.950209][T10523] debugfs: 'hsr0' already exists in 'hsr' [ 921.950234][T10523] Cannot create hsr debugfs directory [ 922.362699][T10713] ubi31: scanning is finished [ 923.360733][ C1] vkms_vblank_simulate: vblank timer overrun [ 923.623356][T10713] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 923.623376][T10713] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 923.623387][T10713] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 923.623396][T10713] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 923.623406][T10713] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 923.623415][T10713] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 923.623425][T10713] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2980271930 [ 923.623436][T10713] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 923.626111][T10721] ubi31: background thread "ubi_bgt31d" started, PID 10721 [ 923.743154][T10610] chnl_net:caif_netlink_parms(): no params data found [ 929.481424][T10610] bridge0: port 1(bridge_slave_0) entered blocking state [ 929.481492][T10610] bridge0: port 1(bridge_slave_0) entered disabled state [ 929.481628][T10610] bridge_slave_0: entered allmulticast mode [ 929.483919][T10610] bridge_slave_0: entered promiscuous mode [ 929.554914][T10610] bridge0: port 2(bridge_slave_1) entered blocking state [ 929.555075][T10610] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.555327][T10610] bridge_slave_1: entered allmulticast mode [ 929.557457][T10610] bridge_slave_1: entered promiscuous mode [ 929.714369][T10740] ubi: mtd0 is already attached to ubi31 [ 931.521744][T10744] ubi: mtd0 is already attached to ubi31 [ 933.019784][T10610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 933.059898][T10610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.454659][T10756] netlink: 'syz.4.1091': attribute type 1 has an invalid length. [ 935.857191][T10760] vlan2: entered allmulticast mode [ 936.162582][T10765] 9pnet_virtio: no channels available for device syz [ 936.789730][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.789816][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.191298][T10610] team0: Port device team_slave_0 added [ 937.239979][T10610] team0: Port device team_slave_1 added [ 939.838321][T10773] 9pnet_virtio: no channels available for device syz [ 940.160531][T10533] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 940.197898][T10610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.197909][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.197922][T10610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.436772][T10533] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 940.478397][T10610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.478412][T10610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.478428][T10610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.480621][T10777] random: crng reseeded on system resumption [ 940.548061][T10533] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 941.600092][T10533] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 942.294310][T10610] hsr_slave_0: entered promiscuous mode [ 942.295989][T10610] hsr_slave_1: entered promiscuous mode [ 942.299193][T10610] debugfs: 'hsr0' already exists in 'hsr' [ 942.299222][T10610] Cannot create hsr debugfs directory [ 942.954372][ T999] bridge_slave_1: left allmulticast mode [ 942.954404][ T999] bridge_slave_1: left promiscuous mode [ 942.954694][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.028784][ T999] bridge_slave_0: left allmulticast mode [ 943.028819][ T999] bridge_slave_0: left promiscuous mode [ 943.047447][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.339957][ C0] vkms_vblank_simulate: vblank timer overrun [ 943.505528][ T8427] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 943.511726][ T8427] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 943.529591][ T8427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 943.540057][ T8427] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 943.540871][ T8427] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 943.733614][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 943.873289][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 943.965966][ T999] bond0 (unregistering): Released all slaves [ 944.258549][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.357340][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.477669][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.505204][ C0] vkms_vblank_simulate: vblank timer overrun [ 944.678216][T10806] ubi: mtd0 is already attached to ubi31 [ 945.766390][ T8427] Bluetooth: hci5: command tx timeout [ 946.302562][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.321167][ T999] hsr_slave_0: left promiscuous mode [ 946.331605][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 946.354223][ T999] hsr_slave_1: left promiscuous mode [ 946.355331][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 946.387732][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 946.389541][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 946.391894][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 946.415220][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 946.447266][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 947.329793][T10818] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1103'. [ 947.608031][ T999] team0 (unregistering): Port device team_slave_1 removed [ 947.799526][ T999] team0 (unregistering): Port device team_slave_0 removed [ 947.856534][ T8427] Bluetooth: hci5: command tx timeout [ 948.487617][ T8427] Bluetooth: hci3: command tx timeout [ 949.144811][T10823] binfmt_misc: register: failed to install interpreter file ./file0 [ 949.914775][ T8427] Bluetooth: hci5: command tx timeout [ 949.993562][T10830] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 949.995270][T10830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 949.999651][T10830] vhci_hcd vhci_hcd.0: Device attached [ 950.011457][T10830] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 950.011483][T10830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 950.011540][T10830] vhci_hcd vhci_hcd.0: Device attached [ 950.016300][T10830] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 950.016326][T10830] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 950.016441][T10830] vhci_hcd vhci_hcd.0: Device attached [ 950.019385][T10830] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 950.019408][T10830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 950.019529][T10830] vhci_hcd vhci_hcd.0: Device attached [ 950.020801][T10837] vhci_hcd: connection closed [ 950.021266][ T1010] vhci_hcd: stop threads [ 950.021284][ T1010] vhci_hcd: release socket [ 950.021316][ T1010] vhci_hcd: disconnect device [ 950.021809][T10835] vhci_hcd: connection closed [ 950.022207][ T1010] vhci_hcd: stop threads [ 950.022216][ T1010] vhci_hcd: release socket [ 950.022246][ T1010] vhci_hcd: disconnect device [ 950.024841][T10833] vhci_hcd: connection closed [ 950.025181][ T1010] vhci_hcd: stop threads [ 950.025192][ T1010] vhci_hcd: release socket [ 950.025222][ T1010] vhci_hcd: disconnect device [ 950.025861][T10831] vhci_hcd: connection closed [ 950.026377][ T1010] vhci_hcd: stop threads [ 950.026387][ T1010] vhci_hcd: release socket [ 950.026416][ T1010] vhci_hcd: disconnect device [ 950.365203][ C1] vkms_vblank_simulate: vblank timer overrun [ 950.560104][ T8427] Bluetooth: hci3: command tx timeout [ 950.655815][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.033092][ C1] vkms_vblank_simulate: vblank timer overrun [ 951.245928][T10845] ubi: mtd0 is already attached to ubi31 [ 952.162713][ T8427] Bluetooth: hci5: command tx timeout [ 952.632586][ T8427] Bluetooth: hci3: command tx timeout [ 953.321880][ C1] vkms_vblank_simulate: vblank timer overrun [ 954.800331][ T8427] Bluetooth: hci3: command tx timeout [ 956.245438][T10863] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 956.840396][T10793] chnl_net:caif_netlink_parms(): no params data found [ 957.981354][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 957.995436][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 957.996994][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 958.000650][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 958.001570][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 959.146392][T10887] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 959.639777][T10888] input: syz1 as /devices/virtual/input/input34 [ 960.219148][ T8427] Bluetooth: hci1: command tx timeout [ 960.939544][T10892] fuse: Unknown parameter '0x0000000000000005' [ 961.825197][ T1010] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 962.321723][ T8427] Bluetooth: hci1: command tx timeout [ 962.412983][T10898] ubi: mtd0 is already attached to ubi31 [ 963.589571][T10899] ubi: mtd0 is already attached to ubi31 [ 963.613395][T10809] chnl_net:caif_netlink_parms(): no params data found [ 964.393104][ T8427] Bluetooth: hci1: command tx timeout [ 965.809545][T10793] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.809613][T10793] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.809726][T10793] bridge_slave_0: entered allmulticast mode [ 965.811059][T10793] bridge_slave_0: entered promiscuous mode [ 965.866774][T10793] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.866841][T10793] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.866989][T10793] bridge_slave_1: entered allmulticast mode [ 965.868863][T10793] bridge_slave_1: entered promiscuous mode [ 965.946155][T10915] binder_alloc: 10914: binder_alloc_buf, no vma [ 965.992803][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 966.717687][ T8427] Bluetooth: hci1: command tx timeout [ 967.101822][T10793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 967.328746][T10793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 967.329987][T10809] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.330519][T10809] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.334567][T10809] bridge_slave_0: entered allmulticast mode [ 967.386268][T10809] bridge_slave_0: entered promiscuous mode [ 967.689037][T10809] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.689201][T10809] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.689600][T10809] bridge_slave_1: entered allmulticast mode [ 967.717273][T10809] bridge_slave_1: entered promiscuous mode [ 968.269878][T10938] 9pnet_virtio: no channels available for device syz [ 969.291347][T10940] random: crng reseeded on system resumption [ 970.511006][T10793] team0: Port device team_slave_0 added [ 970.650101][T10946] ubi: mtd0 is already attached to ubi31 [ 970.891375][T10793] team0: Port device team_slave_1 added [ 970.896539][T10809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.078917][T10809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.215924][T10950] ubi: mtd0 is already attached to ubi31 [ 973.314142][T10793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.314160][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.314174][T10793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.387872][T10809] team0: Port device team_slave_0 added [ 973.393861][T10793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.393877][T10793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.393903][T10793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.457932][T10957] ubi: mtd0 is already attached to ubi31 [ 973.479108][T10809] team0: Port device team_slave_1 added [ 974.312723][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 975.013972][ T999] bridge_slave_1: left allmulticast mode [ 975.014008][ T999] bridge_slave_1: left promiscuous mode [ 975.014303][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.076944][ T999] bridge_slave_0: left allmulticast mode [ 975.076975][ T999] bridge_slave_0: left promiscuous mode [ 975.077432][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.114784][T10962] random: crng reseeded on system resumption [ 975.434054][ T999] bridge_slave_1: left allmulticast mode [ 975.434340][ T999] bridge_slave_1: left promiscuous mode [ 975.460276][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.255342][ T999] bridge_slave_0: left allmulticast mode [ 976.255360][ T999] bridge_slave_0: left promiscuous mode [ 976.255508][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.832965][T10970] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 977.472947][ T9319] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 977.631732][ T9319] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 977.631767][ T9319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.631789][ T9319] usb 2-1: Product: syz [ 977.631804][ T9319] usb 2-1: Manufacturer: syz [ 977.631820][ T9319] usb 2-1: SerialNumber: syz [ 978.033839][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 978.866615][T10976] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 979.073498][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.136018][ T999] bond0 (unregistering): Released all slaves [ 979.430667][ T9319] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -EPROTO [ 979.430736][ T9319] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 979.431678][ T9319] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 979.527629][ T9319] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 979.586076][ T9319] usb 2-1: USB disconnect, device number 47 [ 979.819714][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 979.923604][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 979.988795][ T999] bond0 (unregistering): Released all slaves [ 980.658822][T10809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 980.658841][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 980.658908][T10809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.640378][T10809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.640389][T10809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.640401][T10809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 981.748711][T10793] hsr_slave_0: entered promiscuous mode [ 981.749483][T10793] hsr_slave_1: entered promiscuous mode [ 981.750033][T10793] debugfs: 'hsr0' already exists in 'hsr' [ 981.750047][T10793] Cannot create hsr debugfs directory [ 982.195580][T11002] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 982.306698][ T999] hsr_slave_0: left promiscuous mode [ 982.771002][ T999] hsr_slave_1: left promiscuous mode [ 982.789526][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.031416][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.642641][ T999] hsr_slave_0: left promiscuous mode [ 984.684866][ T999] hsr_slave_1: left promiscuous mode [ 984.685421][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.707720][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.711917][T11014] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 986.183241][ T999] team0 (unregistering): Port device team_slave_1 removed [ 986.393649][ T999] team0 (unregistering): Port device team_slave_0 removed [ 988.271030][T11031] 9pnet_virtio: no channels available for device syz [ 989.124845][T11034] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 990.053827][T11036] binder: 11035:11036 ioctl 4018620d 0 returned -22 [ 990.783619][ T999] team0 (unregistering): Port device team_slave_1 removed [ 990.923619][ T999] team0 (unregistering): Port device team_slave_0 removed [ 990.962797][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 994.352635][ C1] vkms_vblank_simulate: vblank timer overrun [ 994.419128][T10877] chnl_net:caif_netlink_parms(): no params data found [ 994.628326][T10809] hsr_slave_0: entered promiscuous mode [ 994.629054][T10809] hsr_slave_1: entered promiscuous mode [ 994.807174][ T9355] Bluetooth: (null): Invalid header checksum [ 994.807273][ T9355] Bluetooth: (null): Invalid header checksum [ 994.914556][ T13] Bluetooth: (null): Invalid header checksum [ 995.043574][ T9355] Bluetooth: (null): Invalid header checksum [ 995.152993][ T9355] Bluetooth: (null): Invalid header checksum [ 995.263974][ C1] vkms_vblank_simulate: vblank timer overrun [ 995.266330][ T12] Bluetooth: (null): Invalid header checksum [ 995.372997][ T9355] Bluetooth: (null): Invalid header checksum [ 995.878200][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.505591][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.567638][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.644148][T10877] bridge0: port 1(bridge_slave_0) entered blocking state [ 996.644317][T10877] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.644571][T10877] bridge_slave_0: entered allmulticast mode [ 996.649159][T10877] bridge_slave_0: entered promiscuous mode [ 996.719824][T10877] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.719987][T10877] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.720210][T10877] bridge_slave_1: entered allmulticast mode [ 996.723997][T10877] bridge_slave_1: entered promiscuous mode [ 996.942192][ C1] vkms_vblank_simulate: vblank timer overrun [ 996.980803][ C1] vkms_vblank_simulate: vblank timer overrun [ 998.076798][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.078032][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.269028][T10877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 998.368528][T10877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 998.707915][T10877] team0: Port device team_slave_0 added [ 998.866422][T10877] team0: Port device team_slave_1 added [ 1000.176939][T10877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.176960][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.176990][T10877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.242678][T10793] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1000.309258][T10877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.309270][T10877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1000.309286][T10877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1000.530573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.583456][T10793] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1000.775178][T11096] ubi: mtd0 is already attached to ubi31 [ 1002.482782][T10793] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1002.650546][T10793] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1003.910682][T10793] kthread_run failed with err -4 [ 1004.437648][T10877] hsr_slave_0: entered promiscuous mode [ 1004.439382][T10877] hsr_slave_1: entered promiscuous mode [ 1004.454959][T10877] debugfs: 'hsr0' already exists in 'hsr' [ 1004.454991][T10877] Cannot create hsr debugfs directory [ 1005.219451][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1005.232381][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1005.241670][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1005.259811][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1005.271130][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1006.030294][ T999] bridge_slave_1: left allmulticast mode [ 1006.030324][ T999] bridge_slave_1: left promiscuous mode [ 1006.046104][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.148575][ T999] bridge_slave_0: left allmulticast mode [ 1006.148610][ T999] bridge_slave_0: left promiscuous mode [ 1006.148976][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.230248][T11110] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(13) [ 1006.230279][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.230387][T11110] vhci_hcd vhci_hcd.0: Device attached [ 1006.236831][T11110] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(15) [ 1006.236858][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.242161][T11110] vhci_hcd vhci_hcd.0: Device attached [ 1006.248845][T11110] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(17) [ 1006.248872][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1006.249001][T11110] vhci_hcd vhci_hcd.0: Device attached [ 1006.260605][T11110] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(19) [ 1006.260632][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1006.260681][T11110] vhci_hcd vhci_hcd.0: Device attached [ 1006.264531][T11110] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(21) [ 1006.264556][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1006.264831][T11110] vhci_hcd vhci_hcd.0: Device attached [ 1006.266505][T11110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1006.267823][T11110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1006.273357][T11110] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1006.278079][T11110] vhci_hcd vhci_hcd.0: pdev(4) rhport(7) sockfd(31) [ 1006.278103][T11110] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1006.278203][T11110] vhci_hcd vhci_hcd.0: Device attached [ 1006.348534][T11120] vhci_hcd: connection closed [ 1006.349020][ T69] vhci_hcd: stop threads [ 1006.349040][ T69] vhci_hcd: release socket [ 1006.349073][ T69] vhci_hcd: disconnect device [ 1006.349817][T11118] vhci_hcd: connection closed [ 1006.350366][ T69] vhci_hcd: stop threads [ 1006.350384][ T69] vhci_hcd: release socket [ 1006.350455][ T69] vhci_hcd: disconnect device [ 1006.350852][T11116] vhci_hcd: connection closed [ 1006.351605][ T69] vhci_hcd: stop threads [ 1006.351615][ T69] vhci_hcd: release socket [ 1006.351676][ T69] vhci_hcd: disconnect device [ 1006.352001][T11114] vhci_hcd: connection closed [ 1006.357275][ T69] vhci_hcd: stop threads [ 1006.357289][ T69] vhci_hcd: release socket [ 1006.357513][ T69] vhci_hcd: disconnect device [ 1006.358109][T11112] vhci_hcd: connection closed [ 1006.358681][ T69] vhci_hcd: stop threads [ 1006.358690][ T69] vhci_hcd: release socket [ 1006.358871][ T69] vhci_hcd: disconnect device [ 1006.420559][ T31] vhci_hcd: vhci_device speed not set [ 1007.093059][T11122] vhci_hcd: connection closed [ 1007.093515][ T69] vhci_hcd: stop threads [ 1007.093534][ T69] vhci_hcd: release socket [ 1007.093611][ T69] vhci_hcd: disconnect device [ 1007.361581][ T61] Bluetooth: hci4: command tx timeout [ 1007.873356][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1007.950018][ T8427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1007.970542][ T8427] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1007.973527][ T8427] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1007.975420][ T8427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1007.976323][ T8427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1008.046633][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.127479][T11137] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1163'. [ 1008.477620][ T999] bond0 (unregistering): Released all slaves [ 1009.465403][ T8427] Bluetooth: hci4: command tx timeout [ 1010.049962][T11149] input: syz1 as /devices/virtual/input/input35 [ 1010.104756][ T8427] Bluetooth: hci3: command tx timeout [ 1011.514770][ T8427] Bluetooth: hci4: command tx timeout [ 1011.813889][ T999] hsr_slave_0: left promiscuous mode [ 1011.939872][ T999] hsr_slave_1: left promiscuous mode [ 1011.940988][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1012.120483][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1012.154598][ T8427] Bluetooth: hci3: command tx timeout [ 1013.593075][ T8427] Bluetooth: hci4: command tx timeout [ 1013.773537][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1014.239472][ T8427] Bluetooth: hci3: command tx timeout [ 1015.033586][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1016.312608][ T8427] Bluetooth: hci3: command tx timeout [ 1017.879363][T11105] chnl_net:caif_netlink_parms(): no params data found [ 1018.402669][ T7355] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1018.552725][ T7355] usb 5-1: Using ep0 maxpacket: 8 [ 1018.555381][ T7355] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1018.555446][ T7355] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1018.555469][ T7355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1018.555495][ T7355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1018.555520][ T7355] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1018.555565][ T7355] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1018.555586][ T7355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.784635][ T7355] usb 5-1: GET_CAPABILITIES returned 0 [ 1018.784694][ T7355] usbtmc 5-1:16.0: can't read capabilities [ 1018.984218][ T5806] usb 5-1: USB disconnect, device number 25 [ 1019.492410][T11105] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.500657][T11105] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.500924][T11105] bridge_slave_0: entered allmulticast mode [ 1019.535466][T11105] bridge_slave_0: entered promiscuous mode [ 1019.650371][T11105] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.650540][T11105] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.650804][T11105] bridge_slave_1: entered allmulticast mode [ 1019.847223][T11105] bridge_slave_1: entered promiscuous mode [ 1020.121246][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1020.149563][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1020.155096][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1020.160932][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1020.180740][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1020.890540][T11105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.188988][T11216] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 1022.063642][T11105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.232672][ T8427] Bluetooth: hci1: command tx timeout [ 1023.398098][T11105] team0: Port device team_slave_0 added [ 1023.593804][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1023.749604][T11132] chnl_net:caif_netlink_parms(): no params data found [ 1023.795317][T11105] team0: Port device team_slave_1 added [ 1024.318395][ T8427] Bluetooth: hci1: command tx timeout [ 1025.756065][T11259] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1026.285318][T11263] input: syz1 as /devices/virtual/input/input36 [ 1026.393572][ T8427] Bluetooth: hci1: command tx timeout [ 1027.482159][T11105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.482178][T11105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1027.482209][T11105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.997365][T11275] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1028.537128][T11274] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1028.605896][ T8427] Bluetooth: hci1: command tx timeout [ 1028.769808][T11105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.769828][T11105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.769858][T11105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.027172][T11283] tipc: Can't bind to reserved service type 0 [ 1030.503430][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.128481][ C1] vkms_vblank_simulate: vblank timer overrun [ 1031.772916][ T31] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1031.922816][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1031.925573][ T31] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1031.925640][ T31] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.925664][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1031.925690][ T31] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1031.925715][ T31] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.925763][ T31] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1031.925787][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.045117][T11132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.045306][T11132] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.045556][T11132] bridge_slave_0: entered allmulticast mode [ 1032.111983][T11132] bridge_slave_0: entered promiscuous mode [ 1032.188625][ T31] usb 5-1: usb_control_msg returned -71 [ 1032.188682][ T31] usbtmc 5-1:16.0: can't read capabilities [ 1032.287051][ T31] usb 5-1: USB disconnect, device number 26 [ 1032.329235][T11105] hsr_slave_0: entered promiscuous mode [ 1032.331807][T11105] hsr_slave_1: entered promiscuous mode [ 1032.340920][T11105] debugfs: 'hsr0' already exists in 'hsr' [ 1032.340950][T11105] Cannot create hsr debugfs directory [ 1032.422235][T11132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.422396][T11132] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.428379][T11132] bridge_slave_1: entered allmulticast mode [ 1032.449831][T11132] bridge_slave_1: entered promiscuous mode [ 1032.760313][T11132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1032.838348][T11132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1033.011282][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.191110][T11328] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 1033.336748][ C1] vkms_vblank_simulate: vblank timer overrun [ 1033.367724][ T999] bridge_slave_1: left allmulticast mode [ 1033.367750][ T999] bridge_slave_1: left promiscuous mode [ 1033.367931][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.433576][ T999] bridge_slave_0: left allmulticast mode [ 1033.433595][ T999] bridge_slave_0: left promiscuous mode [ 1033.433770][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1033.505180][ T999] bridge_slave_1: left allmulticast mode [ 1033.505198][ T999] bridge_slave_1: left promiscuous mode [ 1033.505412][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1033.563704][ T999] bridge_slave_0: left allmulticast mode [ 1033.563723][ T999] bridge_slave_0: left promiscuous mode [ 1033.563899][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.044035][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.110636][ C1] vkms_vblank_simulate: vblank timer overrun [ 1034.393604][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.463136][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.535508][ T999] bond0 (unregistering): Released all slaves [ 1034.740533][ C1] vkms_vblank_simulate: vblank timer overrun [ 1035.700994][T11335] netlink: 356 bytes leftover after parsing attributes in process `syz.4.1193'. [ 1036.010328][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.103129][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.188178][ T999] bond0 (unregistering): Released all slaves [ 1036.544928][T11132] team0: Port device team_slave_0 added [ 1036.631839][T11132] team0: Port device team_slave_1 added [ 1037.108207][T11350] ubi: mtd0 is already attached to ubi31 [ 1038.402738][T11132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.402749][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1038.402762][T11132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.763353][ T999] hsr_slave_0: left promiscuous mode [ 1038.807120][ T999] hsr_slave_1: left promiscuous mode [ 1038.808276][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1038.894067][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1039.302186][ T999] hsr_slave_0: left promiscuous mode [ 1039.322673][ T999] hsr_slave_1: left promiscuous mode [ 1039.326016][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.476218][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.905226][T11362] 9pnet_virtio: no channels available for device syz [ 1041.504240][T11370] 9pnet_virtio: no channels available for device syz [ 1041.848050][T11371] tmpfs: Unknown parameter 'mpol' [ 1043.386086][T11378] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1044.338524][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1044.575785][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1046.910484][T11400] ubi: mtd0 is already attached to ubi31 [ 1048.732372][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1049.075384][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1050.254881][T11132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1050.254895][T11132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1050.254911][T11132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1050.416199][T11209] chnl_net:caif_netlink_parms(): no params data found [ 1052.050437][T11132] hsr_slave_0: entered promiscuous mode [ 1052.052031][T11132] hsr_slave_1: entered promiscuous mode [ 1052.582638][ T7355] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1052.767893][T11430] ubi: mtd0 is already attached to ubi31 [ 1052.792648][ T7355] usb 5-1: Using ep0 maxpacket: 8 [ 1052.797493][ T7355] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1052.797525][ T7355] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1052.797536][ T7355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1052.797548][ T7355] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1052.797559][ T7355] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1052.797580][ T7355] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1052.797590][ T7355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.359887][ T7355] usb 5-1: GET_CAPABILITIES returned 0 [ 1053.359923][ T7355] usbtmc 5-1:16.0: can't read capabilities [ 1053.703193][ T7355] usb 5-1: USB disconnect, device number 27 [ 1055.804584][T11209] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.804653][T11209] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.804757][T11209] bridge_slave_0: entered allmulticast mode [ 1055.806082][T11209] bridge_slave_0: entered promiscuous mode [ 1055.808325][T11209] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.808395][T11209] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.808502][T11209] bridge_slave_1: entered allmulticast mode [ 1055.809859][T11209] bridge_slave_1: entered promiscuous mode [ 1055.927997][T11442] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1055.928013][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1055.931293][T11442] vhci_hcd vhci_hcd.0: Device attached [ 1055.934761][T11442] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 1055.934787][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1055.934927][T11442] vhci_hcd vhci_hcd.0: Device attached [ 1056.002752][T11442] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 1056.002770][T11442] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1056.002810][T11442] vhci_hcd vhci_hcd.0: Device attached [ 1056.003891][T11443] vhci_hcd: connection closed [ 1056.004415][T11445] vhci_hcd: connection closed [ 1056.004471][ T6937] vhci_hcd: stop threads [ 1056.004489][ T6937] vhci_hcd: release socket [ 1056.004527][ T6937] vhci_hcd: disconnect device [ 1056.004855][ T6937] vhci_hcd: stop threads [ 1056.004861][ T6937] vhci_hcd: release socket [ 1056.004879][ T6937] vhci_hcd: disconnect device [ 1056.009111][T11447] vhci_hcd: connection closed [ 1056.009493][ T6937] vhci_hcd: stop threads [ 1056.009505][ T6937] vhci_hcd: release socket [ 1056.009542][ T6937] vhci_hcd: disconnect device [ 1057.050919][T11209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.098222][T11209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.078977][T11455] fuse: Bad value for 'user_id' [ 1058.078989][T11455] fuse: Bad value for 'user_id' [ 1058.216866][T11209] team0: Port device team_slave_0 added [ 1058.285664][T11209] team0: Port device team_slave_1 added [ 1059.347343][T11209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.347409][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.347478][T11209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.428674][T11209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.428693][T11209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1059.428723][T11209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.438543][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.438670][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.630705][ T999] bridge_slave_1: left allmulticast mode [ 1061.630736][ T999] bridge_slave_1: left promiscuous mode [ 1061.631020][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.737381][ T999] bridge_slave_0: left allmulticast mode [ 1061.737415][ T999] bridge_slave_0: left promiscuous mode [ 1061.737713][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.198609][T11501] ubi: mtd0 is already attached to ubi31 [ 1063.990856][T11510] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 1063.999174][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.149037][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.251967][ T999] bond0 (unregistering): Released all slaves [ 1064.380167][T11209] hsr_slave_0: entered promiscuous mode [ 1064.381876][T11209] hsr_slave_1: entered promiscuous mode [ 1064.415962][T11209] debugfs: 'hsr0' already exists in 'hsr' [ 1064.415994][T11209] Cannot create hsr debugfs directory [ 1064.444099][T11105] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1065.391968][T11529] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1065.621970][T11105] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1066.542776][ T999] hsr_slave_0: left promiscuous mode [ 1066.625031][ T999] hsr_slave_1: left promiscuous mode [ 1066.626130][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1066.674502][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1067.745438][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1067.749021][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1067.814340][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1067.816333][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1067.817265][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1068.006576][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1068.203502][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1069.912593][ T8427] Bluetooth: hci4: command tx timeout [ 1070.129210][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1070.149325][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1070.170648][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1070.171912][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1070.182168][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1071.995214][ T8427] Bluetooth: hci4: command tx timeout [ 1072.261338][ T8427] Bluetooth: hci5: command tx timeout [ 1073.032377][T11638] input: syz1 as /devices/virtual/input/input37 [ 1073.202871][T11639] overlayfs: failed to resolve './file1': -2 [ 1074.912332][ T8427] Bluetooth: hci4: command tx timeout [ 1074.912373][ T8427] Bluetooth: hci5: command tx timeout [ 1076.959777][ T61] Bluetooth: hci5: command tx timeout [ 1076.959815][ T61] Bluetooth: hci4: command tx timeout [ 1077.034545][T11680] overlayfs: failed to resolve './file1': -2 [ 1077.668554][T11209] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1077.981582][T11697] ubi: mtd0 is already attached to ubi31 [ 1079.178097][ T61] Bluetooth: hci5: command tx timeout [ 1079.917727][T11209] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1080.316073][T11602] chnl_net:caif_netlink_parms(): no params data found [ 1080.408895][T11560] chnl_net:caif_netlink_parms(): no params data found [ 1080.975594][ C1] vkms_vblank_simulate: vblank timer overrun [ 1081.696670][ T8427] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1081.704472][ T8427] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1081.707216][ T8427] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1081.719919][ T8427] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1081.725346][ T8427] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1081.800562][T11726] overlayfs: failed to resolve './file1': -2 [ 1082.545809][T11602] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.545964][T11602] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.546232][T11602] bridge_slave_0: entered allmulticast mode [ 1082.549520][T11602] bridge_slave_0: entered promiscuous mode [ 1082.705223][T11742] netlink: 'syz.4.1265': attribute type 1 has an invalid length. [ 1082.814043][ C1] vkms_vblank_simulate: vblank timer overrun [ 1083.950536][ T61] Bluetooth: hci1: command tx timeout [ 1083.966579][T11602] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.966732][T11602] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.966972][T11602] bridge_slave_1: entered allmulticast mode [ 1083.968813][T11602] bridge_slave_1: entered promiscuous mode [ 1084.012277][T11742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1084.182036][T11743] bond3: (slave veth9): Enslaving as an active interface with an up link [ 1084.202735][T11744] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1084.353216][T11750] 9pnet_virtio: no channels available for device syz [ 1084.784290][T11560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.784454][T11560] bridge0: port 1(bridge_slave_0) entered disabled state [ 1084.784728][T11560] bridge_slave_0: entered allmulticast mode [ 1084.824142][T11560] bridge_slave_0: entered promiscuous mode [ 1085.669320][T11760] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1085.697204][T11757] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1085.913763][T11560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.913925][T11560] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.914156][T11560] bridge_slave_1: entered allmulticast mode [ 1085.944105][T11560] bridge_slave_1: entered promiscuous mode [ 1086.196274][ T61] Bluetooth: hci1: command tx timeout [ 1087.287421][T11602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1087.508298][T11602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.071578][T11560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1088.220929][T11560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1088.232610][ T61] Bluetooth: hci1: command tx timeout [ 1088.341008][T11602] team0: Port device team_slave_0 added [ 1088.437731][T11602] team0: Port device team_slave_1 added [ 1089.736065][T11560] team0: Port device team_slave_0 added [ 1090.324473][ T61] Bluetooth: hci1: command tx timeout [ 1090.717387][T11560] team0: Port device team_slave_1 added [ 1090.724458][T11602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1090.724475][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.724501][T11602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.694471][T11802] ubi: mtd0 is already attached to ubi31 [ 1095.272693][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1096.191811][T11602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.191831][T11602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.191859][T11602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.497250][T11560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1096.497269][T11560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.497300][T11560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1096.506210][T11560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1096.506228][T11560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1096.506253][T11560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1097.030995][T11812] 9pnet_virtio: no channels available for device syz [ 1098.749415][T11816] orangefs_mount: mount request failed with -4 [ 1100.030491][T11602] hsr_slave_0: entered promiscuous mode [ 1100.036410][T11602] hsr_slave_1: entered promiscuous mode [ 1100.041434][T11602] debugfs: 'hsr0' already exists in 'hsr' [ 1100.041466][T11602] Cannot create hsr debugfs directory [ 1103.001919][T11560] hsr_slave_0: entered promiscuous mode [ 1103.011135][T11560] hsr_slave_1: entered promiscuous mode [ 1103.100335][T11560] debugfs: 'hsr0' already exists in 'hsr' [ 1103.100369][T11560] Cannot create hsr debugfs directory [ 1108.741198][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1108.741308][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1108.741505][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1108.741962][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1108.742062][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1108.742105][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1108.742209][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1108.742245][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1108.742328][T11853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1108.742362][T11853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1109.873545][T11723] chnl_net:caif_netlink_parms(): no params data found [ 1111.346173][T11872] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0 [ 1111.407076][ T999] bridge_slave_1: left allmulticast mode [ 1111.407109][ T999] bridge_slave_1: left promiscuous mode [ 1111.407430][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.781037][ T999] bridge_slave_0: left allmulticast mode [ 1111.781073][ T999] bridge_slave_0: left promiscuous mode [ 1111.781377][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.305606][ T999] bridge_slave_1: left allmulticast mode [ 1112.305639][ T999] bridge_slave_1: left promiscuous mode [ 1112.307239][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.562009][ T999] bridge_slave_0: left allmulticast mode [ 1112.562044][ T999] bridge_slave_0: left promiscuous mode [ 1112.562355][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.184169][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1118.528678][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1119.075377][ T999] bond0 (unregistering): Released all slaves [ 1120.879838][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.879951][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1123.008577][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1123.426160][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1123.797349][ T999] bond0 (unregistering): Released all slaves [ 1124.909991][T11895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.828530][T11900] netlink: 'syz.4.1304': attribute type 1 has an invalid length. [ 1129.049900][ T8427] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1129.061446][ T8427] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1129.078997][ T8427] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1129.080494][ T8427] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1129.081423][ T8427] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1129.987188][T11919] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1305'. [ 1131.218351][ T8427] Bluetooth: hci3: command tx timeout [ 1132.121728][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1132.142144][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1132.157486][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1132.170407][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1132.190384][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1133.272555][ T8427] Bluetooth: hci3: command tx timeout [ 1133.725649][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.725851][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.726075][T11723] bridge_slave_0: entered allmulticast mode [ 1133.729334][T11723] bridge_slave_0: entered promiscuous mode [ 1133.736541][T11938] warning: `syz.4.1309' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1133.795371][T11723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.795528][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.795806][T11723] bridge_slave_1: entered allmulticast mode [ 1133.804586][T11723] bridge_slave_1: entered promiscuous mode [ 1134.233053][ T8427] Bluetooth: hci4: command tx timeout [ 1135.353787][ T8427] Bluetooth: hci3: command tx timeout [ 1135.722843][ T999] hsr_slave_0: left promiscuous mode [ 1135.800680][ T999] hsr_slave_1: left promiscuous mode [ 1135.801830][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1135.962800][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1136.312907][ T8427] Bluetooth: hci4: command tx timeout [ 1137.433366][ T8427] Bluetooth: hci3: command tx timeout [ 1137.491633][ T999] hsr_slave_0: left promiscuous mode [ 1137.764849][ T999] hsr_slave_1: left promiscuous mode [ 1137.766080][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.871811][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.400214][ T8427] Bluetooth: hci4: command tx timeout [ 1140.902873][ T8427] Bluetooth: hci4: command tx timeout [ 1142.156699][T11991] netlink: 'syz.4.1315': attribute type 1 has an invalid length. [ 1143.872117][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1143.893542][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1143.895192][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1143.897068][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1143.898411][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1144.433473][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1144.646885][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1145.992828][ T8427] Bluetooth: hci6: command tx timeout [ 1148.072540][ T8427] Bluetooth: hci6: command tx timeout [ 1150.070219][ T999] team0 (unregistering): Port device team_slave_1 removed [ 1150.152589][ T8427] Bluetooth: hci6: command tx timeout [ 1151.185064][ T999] team0 (unregistering): Port device team_slave_0 removed [ 1152.262087][ T8427] Bluetooth: hci6: command tx timeout [ 1154.617589][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1154.650433][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1154.652000][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1154.697419][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1154.698715][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1156.344278][T11988] bond3: (slave veth0_to_bond): Releasing active interface [ 1156.413519][T11991] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1156.795177][ T8427] Bluetooth: hci7: command tx timeout [ 1158.882098][ T8427] Bluetooth: hci7: command tx timeout [ 1160.954505][ T8427] Bluetooth: hci7: command tx timeout [ 1161.078639][T11915] chnl_net:caif_netlink_parms(): no params data found [ 1161.347724][T11933] chnl_net:caif_netlink_parms(): no params data found [ 1162.025557][T11998] chnl_net:caif_netlink_parms(): no params data found [ 1162.031961][T12002] chnl_net:caif_netlink_parms(): no params data found [ 1163.042780][ T8427] Bluetooth: hci7: command tx timeout [ 1164.392079][T11915] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.392326][T11915] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.412277][T11915] bridge_slave_0: entered allmulticast mode [ 1164.437690][T11915] bridge_slave_0: entered promiscuous mode [ 1165.028601][T11915] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.029084][T11915] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.029324][T11915] bridge_slave_1: entered allmulticast mode [ 1165.063881][T11915] bridge_slave_1: entered promiscuous mode [ 1166.463098][T11933] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.463256][T11933] bridge0: port 1(bridge_slave_0) entered disabled state [ 1166.463514][T11933] bridge_slave_0: entered allmulticast mode [ 1166.467041][T11933] bridge_slave_0: entered promiscuous mode [ 1168.620888][T11933] bridge0: port 2(bridge_slave_1) entered blocking state [ 1168.621279][T11933] bridge0: port 2(bridge_slave_1) entered disabled state [ 1168.621545][T11933] bridge_slave_1: entered allmulticast mode [ 1168.625759][T11933] bridge_slave_1: entered promiscuous mode [ 1168.632123][T11915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1170.068023][T11915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1170.068846][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.069014][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.069256][T11998] bridge_slave_0: entered allmulticast mode [ 1170.074886][T11998] bridge_slave_0: entered promiscuous mode [ 1170.080775][T12002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1170.080953][T12002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.081169][T12002] bridge_slave_0: entered allmulticast mode [ 1170.086695][T12002] bridge_slave_0: entered promiscuous mode [ 1171.498555][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.498740][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.498984][T11998] bridge_slave_1: entered allmulticast mode [ 1171.503933][T11998] bridge_slave_1: entered promiscuous mode [ 1171.508742][T12002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.508900][T12002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.509168][T12002] bridge_slave_1: entered allmulticast mode [ 1171.518682][T12002] bridge_slave_1: entered promiscuous mode [ 1171.528275][T11933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.624644][T11933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.633751][T11915] team0: Port device team_slave_0 added [ 1174.036698][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1174.050561][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1174.052187][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1174.087142][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1174.088782][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1175.112176][T11915] team0: Port device team_slave_1 added [ 1175.130002][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1175.154923][T12002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.152648][ T8427] Bluetooth: hci1: command tx timeout [ 1176.184832][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.213133][T12002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.216196][T11933] team0: Port device team_slave_0 added [ 1178.211506][T11933] team0: Port device team_slave_1 added [ 1178.232640][ T8427] Bluetooth: hci1: command tx timeout [ 1178.243007][T11915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1178.243025][T11915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1178.243049][T11915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.579074][T11915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1179.579094][T11915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.579125][T11915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1179.585021][T11998] team0: Port device team_slave_0 added [ 1179.588246][T12002] team0: Port device team_slave_0 added [ 1180.116472][T12002] team0: Port device team_slave_1 added [ 1180.119917][T11998] team0: Port device team_slave_1 added [ 1180.135189][T11933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.135207][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.135236][T11933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.313084][ T8427] Bluetooth: hci1: command tx timeout [ 1180.845185][T11933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.845214][T11933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.845245][T11933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1182.318479][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1182.318579][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.389208][T12002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.389227][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.389257][T12002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.391342][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1182.391357][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1182.391386][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1182.393114][ T8427] Bluetooth: hci1: command tx timeout [ 1184.079417][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.079438][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.079468][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.093531][T12002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.093548][T12002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.093573][T12002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.200151][T11915] hsr_slave_0: entered promiscuous mode [ 1184.202019][T11915] hsr_slave_1: entered promiscuous mode [ 1187.964779][T11933] hsr_slave_0: entered promiscuous mode [ 1187.966592][T11933] hsr_slave_1: entered promiscuous mode [ 1187.967837][T11933] debugfs: 'hsr0' already exists in 'hsr' [ 1187.967865][T11933] Cannot create hsr debugfs directory [ 1190.654084][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1190.681492][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1190.692200][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1190.704574][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1190.705515][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1192.174110][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1192.204337][ T61] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1192.207185][ T61] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1192.209612][ T61] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1192.210599][ T61] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1192.872675][ T61] Bluetooth: hci0: command tx timeout [ 1193.292320][T11998] hsr_slave_0: entered promiscuous mode [ 1193.329394][T11998] hsr_slave_1: entered promiscuous mode [ 1193.354401][T11998] debugfs: 'hsr0' already exists in 'hsr' [ 1193.354436][T11998] Cannot create hsr debugfs directory [ 1193.443355][T12002] hsr_slave_0: entered promiscuous mode [ 1193.445090][T12002] hsr_slave_1: entered promiscuous mode [ 1193.446307][T12002] debugfs: 'hsr0' already exists in 'hsr' [ 1193.446334][T12002] Cannot create hsr debugfs directory [ 1194.312684][ T61] Bluetooth: hci2: command tx timeout [ 1194.632792][ T61] Bluetooth: hci5: command 0x0406 tx timeout [ 1194.962566][ T61] Bluetooth: hci0: command tx timeout [ 1196.392688][ T8427] Bluetooth: hci2: command tx timeout [ 1197.032620][ T8427] Bluetooth: hci0: command tx timeout [ 1198.472749][ T8427] Bluetooth: hci2: command tx timeout [ 1199.122760][ T8427] Bluetooth: hci0: command tx timeout [ 1200.398759][T12053] chnl_net:caif_netlink_parms(): no params data found [ 1200.552719][ T8427] Bluetooth: hci2: command tx timeout [ 1202.441529][T12061] chnl_net:caif_netlink_parms(): no params data found [ 1202.486292][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1202.486453][T12053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1202.486753][T12053] bridge_slave_0: entered allmulticast mode [ 1202.490196][T12053] bridge_slave_0: entered promiscuous mode [ 1202.521992][T12065] chnl_net:caif_netlink_parms(): no params data found [ 1202.539851][T12053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1202.540173][T12053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1202.540841][T12053] bridge_slave_1: entered allmulticast mode [ 1202.566755][T12053] bridge_slave_1: entered promiscuous mode [ 1203.717488][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1203.744459][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1203.747043][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1203.748961][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1203.749898][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1205.152076][T12053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.204964][T12053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1205.832633][ T8427] Bluetooth: hci3: command tx timeout [ 1207.206707][T12053] team0: Port device team_slave_0 added [ 1207.913346][ T8427] Bluetooth: hci3: command tx timeout [ 1208.407463][T12053] team0: Port device team_slave_1 added [ 1208.945970][T12065] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.946132][T12065] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.946398][T12065] bridge_slave_0: entered allmulticast mode [ 1208.951164][T12065] bridge_slave_0: entered promiscuous mode [ 1209.243564][T12061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.243810][T12061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.244084][T12061] bridge_slave_0: entered allmulticast mode [ 1209.247832][T12061] bridge_slave_0: entered promiscuous mode [ 1209.251078][T12065] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.251243][T12065] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.251495][T12065] bridge_slave_1: entered allmulticast mode [ 1209.259754][T12065] bridge_slave_1: entered promiscuous mode [ 1209.495878][T12061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.496054][T12061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.496387][T12061] bridge_slave_1: entered allmulticast mode [ 1209.499922][T12061] bridge_slave_1: entered promiscuous mode [ 1210.002991][ T8427] Bluetooth: hci3: command tx timeout [ 1210.275166][T12053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.275187][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.275215][T12053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.374883][T12053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.374911][T12053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.374941][T12053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.072705][ T8427] Bluetooth: hci3: command tx timeout [ 1212.218203][T12065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.226567][T12061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1213.088587][T12061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1213.101618][T12065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.997500][T12053] hsr_slave_0: entered promiscuous mode [ 1214.999284][T12053] hsr_slave_1: entered promiscuous mode [ 1215.000480][T12053] debugfs: 'hsr0' already exists in 'hsr' [ 1215.000508][T12053] Cannot create hsr debugfs directory [ 1215.266617][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1215.294512][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1215.319430][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1215.335375][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1215.337371][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1217.151012][T12061] team0: Port device team_slave_0 added [ 1217.160132][T12065] team0: Port device team_slave_0 added [ 1217.185016][T12061] team0: Port device team_slave_1 added [ 1217.190493][T12065] team0: Port device team_slave_1 added [ 1217.432794][ T61] Bluetooth: hci4: command tx timeout [ 1219.514675][ T61] Bluetooth: hci4: command tx timeout [ 1220.461363][T12061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.461383][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.461411][T12061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.523764][T12065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.523784][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.523814][T12065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.614701][T12061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.614720][T12061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.614749][T12061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.616501][T12065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.616515][T12065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.616542][T12065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1221.592588][ T61] Bluetooth: hci4: command tx timeout [ 1223.609368][T12061] hsr_slave_0: entered promiscuous mode [ 1223.611276][T12061] hsr_slave_1: entered promiscuous mode [ 1223.629918][T12061] debugfs: 'hsr0' already exists in 'hsr' [ 1223.629952][T12061] Cannot create hsr debugfs directory [ 1223.656032][T12065] hsr_slave_0: entered promiscuous mode [ 1223.657887][T12065] hsr_slave_1: entered promiscuous mode [ 1223.659215][T12065] debugfs: 'hsr0' already exists in 'hsr' [ 1223.659242][T12065] Cannot create hsr debugfs directory [ 1223.678636][ T61] Bluetooth: hci4: command tx timeout [ 1225.181830][T12081] chnl_net:caif_netlink_parms(): no params data found [ 1228.393031][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1228.999488][T12081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1228.999648][T12081] bridge0: port 1(bridge_slave_0) entered disabled state [ 1228.999946][T12081] bridge_slave_0: entered allmulticast mode [ 1229.035396][T12081] bridge_slave_0: entered promiscuous mode [ 1229.092796][T12081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1229.092968][T12081] bridge0: port 2(bridge_slave_1) entered disabled state [ 1229.093296][T12081] bridge_slave_1: entered allmulticast mode [ 1229.096843][T12081] bridge_slave_1: entered promiscuous mode [ 1230.607644][T12093] chnl_net:caif_netlink_parms(): no params data found [ 1230.639171][T12081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1230.686426][T12081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.061006][T12081] team0: Port device team_slave_0 added [ 1232.096660][T12081] team0: Port device team_slave_1 added [ 1234.330694][ T8427] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1234.345221][ T8427] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1234.346885][ T8427] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1234.376665][ T8427] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1234.380199][ T8427] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1234.443295][T12081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.443313][T12081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.443336][T12081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.448865][T12093] bridge0: port 1(bridge_slave_0) entered blocking state [ 1234.449109][T12093] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.449447][T12093] bridge_slave_0: entered allmulticast mode [ 1234.522274][T12093] bridge_slave_0: entered promiscuous mode [ 1234.539931][T12081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1234.539950][T12081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.539978][T12081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1234.601821][T12093] bridge0: port 2(bridge_slave_1) entered blocking state [ 1234.602059][T12093] bridge0: port 2(bridge_slave_1) entered disabled state [ 1234.617154][T12093] bridge_slave_1: entered allmulticast mode [ 1234.620652][T12093] bridge_slave_1: entered promiscuous mode [ 1236.478655][ T8427] Bluetooth: hci8: command tx timeout [ 1237.251413][T12093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1237.470313][T12093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1237.511930][T12081] hsr_slave_0: entered promiscuous mode [ 1237.523943][T12081] hsr_slave_1: entered promiscuous mode [ 1237.525022][T12081] debugfs: 'hsr0' already exists in 'hsr' [ 1237.525046][T12081] Cannot create hsr debugfs directory [ 1238.558138][ T8427] Bluetooth: hci8: command tx timeout [ 1238.856271][T12093] team0: Port device team_slave_0 added [ 1239.722012][T12093] team0: Port device team_slave_1 added [ 1240.632714][ T8427] Bluetooth: hci8: command tx timeout [ 1241.298562][T12093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.298584][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.298614][T12093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.332016][T12093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.332034][T12093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1241.332058][T12093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1242.712923][ T8427] Bluetooth: hci8: command tx timeout [ 1242.882695][T12093] hsr_slave_0: entered promiscuous mode [ 1242.884765][T12093] hsr_slave_1: entered promiscuous mode [ 1242.886060][T12093] debugfs: 'hsr0' already exists in 'hsr' [ 1242.886089][T12093] Cannot create hsr debugfs directory [ 1243.763243][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1243.763327][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1244.639989][T12112] chnl_net:caif_netlink_parms(): no params data found [ 1246.715671][T12112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1246.715909][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.716261][T12112] bridge_slave_0: entered allmulticast mode [ 1246.727357][T12112] bridge_slave_0: entered promiscuous mode [ 1246.734759][T12112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1246.736928][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.737256][T12112] bridge_slave_1: entered allmulticast mode [ 1246.742253][T12112] bridge_slave_1: entered promiscuous mode [ 1247.711360][T12112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.733485][T12112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.381695][T12112] team0: Port device team_slave_0 added [ 1250.394505][T12112] team0: Port device team_slave_1 added [ 1251.785276][T12112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.785296][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.785325][T12112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.792503][T12112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.792518][T12112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.792541][T12112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.890919][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1252.907494][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1252.914468][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1252.915808][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1252.916725][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1253.395809][T12112] hsr_slave_0: entered promiscuous mode [ 1253.397764][T12112] hsr_slave_1: entered promiscuous mode [ 1253.399177][T12112] debugfs: 'hsr0' already exists in 'hsr' [ 1253.399205][T12112] Cannot create hsr debugfs directory [ 1254.549558][ T8427] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1254.568480][ T8427] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1254.570880][ T8427] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1254.575756][ T8427] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1254.576640][ T8427] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1254.952810][ T8427] Bluetooth: hci9: command tx timeout [ 1256.632883][ T8427] Bluetooth: hci10: command tx timeout [ 1257.032688][ T8427] Bluetooth: hci9: command tx timeout [ 1257.791563][T12126] chnl_net:caif_netlink_parms(): no params data found [ 1258.712768][ T8427] Bluetooth: hci10: command tx timeout [ 1258.794902][T12130] chnl_net:caif_netlink_parms(): no params data found [ 1259.112798][ T8427] Bluetooth: hci9: command tx timeout [ 1260.792598][ T61] Bluetooth: hci10: command tx timeout [ 1261.192731][ T61] Bluetooth: hci9: command tx timeout [ 1262.510724][T12126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1262.526142][T12126] bridge0: port 1(bridge_slave_0) entered disabled state [ 1262.526541][T12126] bridge_slave_0: entered allmulticast mode [ 1262.549868][T12126] bridge_slave_0: entered promiscuous mode [ 1262.597901][T12126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1262.599101][T12126] bridge0: port 2(bridge_slave_1) entered disabled state [ 1262.599478][T12126] bridge_slave_1: entered allmulticast mode [ 1262.642746][T12126] bridge_slave_1: entered promiscuous mode [ 1262.872610][ T61] Bluetooth: hci10: command tx timeout [ 1264.082233][T12126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1264.960131][T11564] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1264.979064][T11564] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1264.990264][T11564] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1265.012749][T11564] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1265.014375][T11564] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1265.197399][T12126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1265.199311][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 1265.199544][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.199862][T12130] bridge_slave_0: entered allmulticast mode [ 1265.234304][T12130] bridge_slave_0: entered promiscuous mode [ 1265.787185][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 1265.787346][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 1265.787665][T12130] bridge_slave_1: entered allmulticast mode [ 1265.791230][T12130] bridge_slave_1: entered promiscuous mode [ 1266.325436][ T61] Bluetooth: hci6: command 0x0406 tx timeout [ 1267.112721][ T8427] Bluetooth: hci11: command tx timeout [ 1267.235354][T12126] team0: Port device team_slave_0 added [ 1268.137703][T12126] team0: Port device team_slave_1 added [ 1268.174196][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.202537][ T8427] Bluetooth: hci11: command tx timeout [ 1269.244492][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1270.722007][T12126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1270.722027][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.722057][T12126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1270.804928][T12126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1270.804948][T12126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1270.804978][T12126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1271.272735][ T8427] Bluetooth: hci11: command tx timeout [ 1271.600668][T12130] team0: Port device team_slave_0 added [ 1271.636314][T12130] team0: Port device team_slave_1 added [ 1273.355540][ T8427] Bluetooth: hci11: command tx timeout [ 1274.381565][T12126] hsr_slave_0: entered promiscuous mode [ 1274.390251][T12126] hsr_slave_1: entered promiscuous mode [ 1274.391639][T12126] debugfs: 'hsr0' already exists in 'hsr' [ 1274.391668][T12126] Cannot create hsr debugfs directory [ 1274.419973][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.419992][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.420022][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1274.487143][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1274.487162][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1274.487191][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.984107][ T61] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1276.022701][ T61] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1276.025290][ T61] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1276.050469][ T61] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1276.051488][ T61] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1278.152825][ T8427] Bluetooth: hci12: command tx timeout [ 1280.200987][T12130] hsr_slave_0: entered promiscuous mode [ 1280.216956][T12130] hsr_slave_1: entered promiscuous mode [ 1280.234208][T11564] Bluetooth: hci12: command tx timeout [ 1280.242214][T12130] debugfs: 'hsr0' already exists in 'hsr' [ 1280.242246][T12130] Cannot create hsr debugfs directory [ 1281.676246][ T8427] Bluetooth: hci7: command 0x0406 tx timeout [ 1282.312775][ T61] Bluetooth: hci12: command tx timeout [ 1283.936408][T12185] chnl_net:caif_netlink_parms(): no params data found [ 1284.392686][ T61] Bluetooth: hci12: command tx timeout [ 1290.980213][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.980460][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 1290.980824][T12185] bridge_slave_0: entered allmulticast mode [ 1291.013370][T12185] bridge_slave_0: entered promiscuous mode [ 1291.078699][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.078953][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 1291.079331][T12185] bridge_slave_1: entered allmulticast mode [ 1291.107364][T12185] bridge_slave_1: entered promiscuous mode [ 1291.778573][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1291.821236][T12230] chnl_net:caif_netlink_parms(): no params data found [ 1291.887686][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1295.189414][ T8427] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1295.243036][ T8427] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1295.259929][ T8427] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1295.277173][ T8427] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1295.278904][ T8427] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1295.865049][T12185] team0: Port device team_slave_0 added [ 1296.144187][T12185] team0: Port device team_slave_1 added [ 1297.036890][T11564] Bluetooth: hci1: command 0x0406 tx timeout [ 1297.352737][T11564] Bluetooth: hci13: command tx timeout [ 1298.058818][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.058839][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1298.058880][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.365969][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.365990][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1299.366020][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.432904][ T61] Bluetooth: hci13: command tx timeout [ 1300.216898][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.217152][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.217530][T12230] bridge_slave_0: entered allmulticast mode [ 1300.221126][T12230] bridge_slave_0: entered promiscuous mode [ 1300.250125][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.250305][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.250618][T12230] bridge_slave_1: entered allmulticast mode [ 1300.255189][T12230] bridge_slave_1: entered promiscuous mode [ 1301.512634][T11564] Bluetooth: hci13: command tx timeout [ 1302.836122][T12185] hsr_slave_0: entered promiscuous mode [ 1302.838200][T12185] hsr_slave_1: entered promiscuous mode [ 1302.839580][T12185] debugfs: 'hsr0' already exists in 'hsr' [ 1302.839609][T12185] Cannot create hsr debugfs directory [ 1302.856815][T12230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.877424][T12230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.592669][T11564] Bluetooth: hci13: command tx timeout [ 1305.200608][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.200721][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.742181][T12230] team0: Port device team_slave_0 added [ 1305.770913][T12230] team0: Port device team_slave_1 added [ 1306.242923][T12230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1306.242942][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.242970][T12230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1306.265618][T12230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.265636][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.265665][T12230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1308.416186][T12230] hsr_slave_0: entered promiscuous mode [ 1308.418248][T12230] hsr_slave_1: entered promiscuous mode [ 1308.419606][T12230] debugfs: 'hsr0' already exists in 'hsr' [ 1308.419633][T12230] Cannot create hsr debugfs directory [ 1309.206422][T12395] chnl_net:caif_netlink_parms(): no params data found [ 1312.246916][T12395] bridge0: port 1(bridge_slave_0) entered blocking state [ 1312.248021][T12395] bridge0: port 1(bridge_slave_0) entered disabled state [ 1312.248427][T12395] bridge_slave_0: entered allmulticast mode [ 1312.283579][T12395] bridge_slave_0: entered promiscuous mode [ 1312.311303][T12395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1312.311463][T12395] bridge0: port 2(bridge_slave_1) entered disabled state [ 1312.311778][T12395] bridge_slave_1: entered allmulticast mode [ 1312.338218][T12395] bridge_slave_1: entered promiscuous mode [ 1313.218783][T12395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1313.234517][T12395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1314.600546][ T61] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1314.620173][ T61] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1314.635868][ T61] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1314.637916][ T61] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1314.726635][ T61] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1316.454930][T10140] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1316.489931][T10140] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1316.491710][T10140] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1316.510199][T10140] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1316.511113][T10140] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1316.793040][T11564] Bluetooth: hci14: command tx timeout [ 1317.466544][T12395] team0: Port device team_slave_0 added [ 1317.471273][T12395] team0: Port device team_slave_1 added [ 1317.518791][T11564] Bluetooth: hci2: command 0x0406 tx timeout [ 1317.518842][T11564] Bluetooth: hci0: command 0x0406 tx timeout [ 1318.552556][ T61] Bluetooth: hci15: command tx timeout [ 1318.873186][ T61] Bluetooth: hci14: command tx timeout [ 1319.403616][T12395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1319.403636][T12395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.403667][T12395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1319.491845][T12395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1319.491861][T12395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1319.491887][T12395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1320.632587][ T61] Bluetooth: hci15: command tx timeout [ 1320.952820][ T61] Bluetooth: hci14: command tx timeout [ 1321.619795][T12395] hsr_slave_0: entered promiscuous mode [ 1321.621842][T12395] hsr_slave_1: entered promiscuous mode [ 1321.635794][T12395] debugfs: 'hsr0' already exists in 'hsr' [ 1321.635824][T12395] Cannot create hsr debugfs directory [ 1322.712813][ T61] Bluetooth: hci15: command tx timeout [ 1323.042498][ T61] Bluetooth: hci14: command tx timeout [ 1324.457123][T12456] chnl_net:caif_netlink_parms(): no params data found [ 1324.493027][T12461] chnl_net:caif_netlink_parms(): no params data found [ 1324.792609][ T61] Bluetooth: hci15: command tx timeout [ 1326.654070][T10140] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1326.681391][T10140] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1326.690733][T10140] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1326.692222][T10140] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1326.730703][T10140] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1327.763967][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 1328.530086][T12456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.530254][T12456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.530637][T12456] bridge_slave_0: entered allmulticast mode [ 1328.558765][T12456] bridge_slave_0: entered promiscuous mode [ 1328.570972][T12461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1328.571142][T12461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1328.571547][T12461] bridge_slave_0: entered allmulticast mode [ 1328.596513][T12461] bridge_slave_0: entered promiscuous mode [ 1328.625365][T12456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.625568][T12456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.625979][T12456] bridge_slave_1: entered allmulticast mode [ 1328.654670][T12456] bridge_slave_1: entered promiscuous mode [ 1328.664110][T12461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1328.664246][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1328.664549][T12461] bridge_slave_1: entered allmulticast mode [ 1328.667578][T12461] bridge_slave_1: entered promiscuous mode [ 1328.792584][ T8427] Bluetooth: hci16: command tx timeout [ 1330.872588][ T8427] Bluetooth: hci16: command tx timeout [ 1331.287267][T12456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.318560][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1331.356095][T12456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1331.726305][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1332.952557][ T8427] Bluetooth: hci16: command tx timeout [ 1333.013631][T12456] team0: Port device team_slave_0 added [ 1333.409308][T12456] team0: Port device team_slave_1 added [ 1333.420492][T12461] team0: Port device team_slave_0 added [ 1333.801450][T12461] team0: Port device team_slave_1 added [ 1334.694427][T12456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.694446][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.694474][T12456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1334.993254][T12456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1334.993275][T12456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.993305][T12456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1334.995321][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1334.995336][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1334.995365][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1335.035839][ T8427] Bluetooth: hci16: command tx timeout [ 1335.174602][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1335.174621][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1335.174652][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1336.037561][ T61] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1336.071944][ T61] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1336.085603][ T61] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1336.087523][ T61] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1336.088441][ T61] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1338.002526][T10140] Bluetooth: hci4: command 0x0406 tx timeout [ 1338.007733][T12456] hsr_slave_0: entered promiscuous mode [ 1338.009593][T12456] hsr_slave_1: entered promiscuous mode [ 1338.010781][T12456] debugfs: 'hsr0' already exists in 'hsr' [ 1338.010805][T12456] Cannot create hsr debugfs directory [ 1338.067838][T12461] hsr_slave_0: entered promiscuous mode [ 1338.070066][T12461] hsr_slave_1: entered promiscuous mode [ 1338.071537][T12461] debugfs: 'hsr0' already exists in 'hsr' [ 1338.071565][T12461] Cannot create hsr debugfs directory [ 1338.152754][T10140] Bluetooth: hci17: command tx timeout [ 1340.232488][ T8427] Bluetooth: hci17: command tx timeout [ 1340.839872][T12484] chnl_net:caif_netlink_parms(): no params data found [ 1342.312473][ T8427] Bluetooth: hci17: command tx timeout [ 1344.393070][ T8427] Bluetooth: hci17: command tx timeout [ 1345.261291][T12484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.261530][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.261908][T12484] bridge_slave_0: entered allmulticast mode [ 1345.304689][T12484] bridge_slave_0: entered promiscuous mode [ 1345.331760][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.340444][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.340882][T12484] bridge_slave_1: entered allmulticast mode [ 1345.359274][T12484] bridge_slave_1: entered promiscuous mode [ 1346.630618][T12484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.675037][T12484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1348.608221][T12484] team0: Port device team_slave_0 added [ 1348.609369][T12506] chnl_net:caif_netlink_parms(): no params data found [ 1348.656819][T12484] team0: Port device team_slave_1 added [ 1349.622897][T12484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1349.622917][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.622946][T12484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1349.638666][T12484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1349.638684][T12484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1349.638708][T12484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.435108][T12484] hsr_slave_0: entered promiscuous mode [ 1354.437100][T12484] hsr_slave_1: entered promiscuous mode [ 1354.438436][T12484] debugfs: 'hsr0' already exists in 'hsr' [ 1354.438463][T12484] Cannot create hsr debugfs directory [ 1354.458006][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.458146][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 1354.458524][T12506] bridge_slave_0: entered allmulticast mode [ 1354.474088][T12506] bridge_slave_0: entered promiscuous mode [ 1355.630295][T10140] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1355.649316][T10140] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1355.650859][T10140] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1355.651875][T10140] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1355.654552][T10140] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1356.521373][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 1356.521536][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 1356.521921][T12506] bridge_slave_1: entered allmulticast mode [ 1356.526105][T12506] bridge_slave_1: entered promiscuous mode [ 1357.672994][ T8427] Bluetooth: hci5: command tx timeout [ 1358.484829][ T8427] Bluetooth: hci8: command 0x0406 tx timeout [ 1358.952657][ T38] INFO: task syz-executor:12002 blocked for more than 143 seconds. [ 1358.952681][ T38] Not tainted syzkaller #0 [ 1358.952690][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1358.952698][ T38] task:syz-executor state:D stack:19528 pid:12002 tgid:12002 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1358.952742][ T38] Call Trace: [ 1358.952749][ T38] [ 1358.952761][ T38] __schedule+0x16f3/0x4c20 [ 1358.952825][ T38] ? __pfx___schedule+0x10/0x10 [ 1358.952866][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1358.952900][ T38] rt_mutex_schedule+0x77/0xf0 [ 1358.952927][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1358.952953][ T38] ? task_blocks_on_rt_mutex+0xf04/0x1380 [ 1358.952999][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 1358.953028][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1358.953055][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1358.953079][ T38] ? __lock_acquire+0xab9/0xd20 [ 1358.953115][ T38] ? del_device_store+0xd1/0x360 [ 1358.953154][ T38] ? __pfx_sscanf+0x10/0x10 [ 1358.953187][ T38] ? del_device_store+0xd1/0x360 [ 1358.953216][ T38] mutex_lock_nested+0x16a/0x1d0 [ 1358.953250][ T38] del_device_store+0xd1/0x360 [ 1358.953281][ T38] ? sysfs_file_kobj+0x1a/0x230 [ 1358.953311][ T38] ? __pfx_del_device_store+0x10/0x10 [ 1358.953343][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 1358.953370][ T38] ? sysfs_kf_write+0x166/0x260 [ 1358.953401][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1358.953426][ T38] kernfs_fop_write_iter+0x3b0/0x540 [ 1358.953459][ T38] vfs_write+0x5d5/0xb40 [ 1358.953500][ T38] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1358.953524][ T38] ? __pfx_vfs_write+0x10/0x10 [ 1358.953569][ T38] ? do_sys_openat2+0x154/0x1c0 [ 1358.953609][ T38] ksys_write+0x14b/0x260 [ 1358.953646][ T38] ? __pfx_ksys_write+0x10/0x10 [ 1358.953684][ T38] ? do_syscall_64+0xbe/0xfa0 [ 1358.953721][ T38] do_syscall_64+0xfa/0xfa0 [ 1358.953752][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1358.953792][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.953815][ T38] ? clear_bhb_loop+0x60/0xb0 [ 1358.953843][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.953865][ T38] RIP: 0033:0x7f9b709fd97f [ 1358.953884][ T38] RSP: 002b:00007ffff1a9dfa0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1358.953907][ T38] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f9b709fd97f [ 1358.953922][ T38] RDX: 0000000000000001 RSI: 00007ffff1a9dff0 RDI: 0000000000000005 [ 1358.953936][ T38] RBP: 00007f9b70a83239 R08: 0000000000000000 R09: 00007ffff1a9ddf7 [ 1358.953950][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1358.953963][ T38] R13: 00007ffff1a9dff0 R14: 00007f9b71784620 R15: 0000000000000003 [ 1358.954001][ T38] [ 1358.954057][ T38] [ 1358.954057][ T38] Showing all locks held in the system: [ 1358.954066][ T38] 4 locks held by rcuc/0/20: [ 1358.954081][ T38] 1 lock held by khungtaskd/38: [ 1358.954092][ T38] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1358.954151][ T38] 5 locks held by kworker/u8:4/69: [ 1358.954168][ T38] 5 locks held by kworker/u8:7/999: [ 1358.954180][ T38] #0: ffff88801a294938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1358.954241][ T38] #1: ffffc9000472fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1358.954301][ T38] #2: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1358.954359][ T38] #3: ffff8880318157b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x2f0 [ 1358.954418][ T38] #4: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1358.954491][ T38] 2 locks held by dhcpcd/5463: [ 1358.954502][ T38] #0: ffff88807683e918 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xbd/0xe90 [ 1358.954559][ T38] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 1358.954615][ T38] 2 locks held by getty/5567: [ 1358.954626][ T38] #0: ffff88823bf4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1358.954680][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1358.954744][ T38] 3 locks held by kworker/u8:11/9355: [ 1358.954756][ T38] #0: ffff88813fe29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1358.954832][ T38] #1: ffffc90004077ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1358.954893][ T38] #2: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1358.954944][ T38] 6 locks held by kworker/u9:1/10140: [ 1358.954956][ T38] #0: ffff88805e81d938 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1358.955018][ T38] #1: ffffc9000513fba0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1358.955079][ T38] #2: ffff888070238e88 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1358.955134][ T38] #3: ffff8880702380a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1358.955195][ T38] #4: ffffffff8ebdfa78 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1358.955257][ T38] #5: ffff88814d39cb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1358.955312][ T38] 1 lock held by syz-executor/11602: [ 1358.955324][ T38] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1358.955384][ T38] 7 locks held by syz-executor/11998: [ 1358.955396][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.955461][ T38] #1: ffff888029cd8078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.955510][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.955564][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.955624][ T38] #4: ffff88803613c0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 1358.955684][ T38] #5: ffff88803613a300 (&devlink->lock_key#16){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1358.955740][ T38] #6: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1358.955803][ T38] 4 locks held by syz-executor/12002: [ 1358.955815][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.955880][ T38] #1: ffff88805cc99478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.955933][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.955988][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.956050][ T38] 4 locks held by syz-executor/12053: [ 1358.956062][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.956127][ T38] #1: ffff88814bd16078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.956176][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.956231][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.956291][ T38] 4 locks held by syz-executor/12061: [ 1358.956303][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.956366][ T38] #1: ffff8880781d4c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.956415][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.956471][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.956531][ T38] 4 locks held by syz-executor/12065: [ 1358.956543][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.956608][ T38] #1: ffff8880310bcc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.956656][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.956711][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.956772][ T38] 4 locks held by syz-executor/12081: [ 1358.956790][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.956854][ T38] #1: ffff88805c202c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.956903][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.956958][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.957018][ T38] 4 locks held by syz-executor/12093: [ 1358.957029][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.957093][ T38] #1: ffff8880592c4478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.957143][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.957199][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.957260][ T38] 4 locks held by syz-executor/12112: [ 1358.957272][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.957334][ T38] #1: ffff888078349078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.957383][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.957436][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.957497][ T38] 4 locks held by syz-executor/12126: [ 1358.957508][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.957572][ T38] #1: ffff88814d419c78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.957621][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.957676][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.957737][ T38] 4 locks held by syz-executor/12130: [ 1358.957749][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.957820][ T38] #1: ffff888079261078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.957869][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.957924][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.957987][ T38] 4 locks held by syz-executor/12185: [ 1358.957999][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.958061][ T38] #1: ffff88805c5fd078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.958112][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.958168][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.958229][ T38] 4 locks held by syz-executor/12230: [ 1358.958240][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.958304][ T38] #1: ffff8880832fdc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.958354][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.958410][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.958471][ T38] 4 locks held by syz-executor/12395: [ 1358.958483][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.958547][ T38] #1: ffff88808815b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.958598][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.958653][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.958716][ T38] 4 locks held by syz-executor/12456: [ 1358.958728][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.958895][ T38] #1: ffff888097a3b878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.958945][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.959001][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.959061][ T38] 4 locks held by syz-executor/12461: [ 1358.959073][ T38] #0: ffff888010826480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 1358.959134][ T38] #1: ffff888087673878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1358.959180][ T38] #2: ffff8881453acf08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1358.959230][ T38] #3: ffffffff8e30a298 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1358.959287][ T38] 2 locks held by syz-executor/12484: [ 1358.959299][ T38] #0: ffffffff8e2d45e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1358.959346][ T38] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1358.959377][ T38] 2 locks held by syz-executor/12506: [ 1358.959384][ T38] #0: ffffffff8e2035e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1358.959418][ T38] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1358.959449][ T38] 1 lock held by syz-executor/12625: [ 1358.959456][ T38] #0: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1358.959484][ T38] [ 1358.959487][ T38] ============================================= [ 1358.959487][ T38] [ 1358.959493][ T38] NMI backtrace for cpu 0 [ 1358.959503][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1358.959516][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1358.959524][ T38] Call Trace: [ 1358.959530][ T38] [ 1358.959535][ T38] dump_stack_lvl+0x189/0x250 [ 1358.959552][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.959566][ T38] ? __pfx__printk+0x10/0x10 [ 1358.959587][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1358.959604][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1358.959620][ T38] ? __pfx__printk+0x10/0x10 [ 1358.959636][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1358.959654][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1358.959670][ T38] watchdog+0xf60/0xfa0 [ 1358.959686][ T38] ? watchdog+0x1e2/0xfa0 [ 1358.959701][ T38] kthread+0x711/0x8a0 [ 1358.959717][ T38] ? __pfx_watchdog+0x10/0x10 [ 1358.959728][ T38] ? __pfx_kthread+0x10/0x10 [ 1358.959740][ T38] ? rt_spin_unlock+0x150/0x200 [ 1358.959757][ T38] ? rt_spin_unlock+0x161/0x200 [ 1358.959770][ T38] ? __pfx_kthread+0x10/0x10 [ 1358.959825][ T38] ret_from_fork+0x4bc/0x870 [ 1358.959844][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.959860][ T38] ? __switch_to_asm+0x39/0x70 [ 1358.959871][ T38] ? __switch_to_asm+0x33/0x70 [ 1358.959882][ T38] ? __pfx_kthread+0x10/0x10 [ 1358.959893][ T38] ret_from_fork_asm+0x1a/0x30 [ 1358.959911][ T38] [ 1358.959915][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1358.959951][ C1] NMI backtrace for cpu 1 [ 1358.959963][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1358.959977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1358.959985][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1358.960005][ C1] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 87 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1358.960017][ C1] RSP: 0000:ffffc900001d7de0 EFLAGS: 000002c2 [ 1358.960034][ C1] RAX: 05395ac426e24b00 RBX: ffffffff81958d07 RCX: 05395ac426e24b00 [ 1358.960044][ C1] RDX: 0000000000000001 RSI: ffffffff8ce64b93 RDI: ffffffff8b3f5460 [ 1358.960053][ C1] RBP: ffffc900001d7f10 R08: ffff8880b89334db R09: 1ffff1101712669b [ 1358.960063][ C1] R10: dffffc0000000000 R11: ffffed101712669c R12: ffffffff8ef77270 [ 1358.960072][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110037d7b40 [ 1358.960080][ C1] FS: 0000000000000000(0000) GS:ffff888126cc6000(0000) knlGS:0000000000000000 [ 1358.960091][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1358.960100][ C1] CR2: 00007f12f7da3d21 CR3: 000000002833a000 CR4: 00000000003526f0 [ 1358.960113][ C1] Call Trace: [ 1358.960118][ C1] [ 1358.960122][ C1] default_idle+0x13/0x20 [ 1358.960136][ C1] default_idle_call+0x73/0xb0 [ 1358.960148][ C1] do_idle+0x1e7/0x510 [ 1358.960167][ C1] ? __pfx_do_idle+0x10/0x10 [ 1358.960187][ C1] cpu_startup_entry+0x44/0x60 [ 1358.960203][ C1] start_secondary+0x101/0x110 [ 1358.960219][ C1] common_startup_64+0x13e/0x147 [ 1358.960240][ C1] [ 1358.960931][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1358.960939][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1358.960949][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1358.960955][ T38] Call Trace: [ 1358.960959][ T38] [ 1358.960963][ T38] dump_stack_lvl+0x99/0x250 [ 1358.960974][ T38] ? __asan_memcpy+0x40/0x70 [ 1358.960988][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1358.960998][ T38] ? __pfx__printk+0x10/0x10 [ 1358.961014][ T38] vpanic+0x237/0x6d0 [ 1358.961024][ T38] ? __pfx_vpanic+0x10/0x10 [ 1358.961036][ T38] panic+0xb9/0xc0 [ 1358.961044][ T38] ? __pfx_panic+0x10/0x10 [ 1358.961054][ T38] ? irq_work_queue+0xc3/0x140 [ 1358.961066][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1358.961079][ T38] watchdog+0xf9f/0xfa0 [ 1358.961091][ T38] ? watchdog+0x1e2/0xfa0 [ 1358.961103][ T38] kthread+0x711/0x8a0 [ 1358.961114][ T38] ? __pfx_watchdog+0x10/0x10 [ 1358.961124][ T38] ? __pfx_kthread+0x10/0x10 [ 1358.961133][ T38] ? rt_spin_unlock+0x150/0x200 [ 1358.961146][ T38] ? rt_spin_unlock+0x161/0x200 [ 1358.961156][ T38] ? __pfx_kthread+0x10/0x10 [ 1358.961167][ T38] ret_from_fork+0x4bc/0x870 [ 1358.961181][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1358.961198][ T38] ? __switch_to_asm+0x39/0x70 [ 1358.961209][ T38] ? __switch_to_asm+0x33/0x70 [ 1358.961220][ T38] ? __pfx_kthread+0x10/0x10 [ 1358.961231][ T38] ret_from_fork_asm+0x1a/0x30 [ 1358.961250][ T38] [ 1358.961828][ T38] Kernel Offset: disabled