last executing test programs: 13m36.440089824s ago: executing program 2 (id=19): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r2, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xac24) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) 13m34.420476599s ago: executing program 2 (id=22): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b840e000) 13m33.015159353s ago: executing program 2 (id=24): write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x10) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, 0x0, 0x0) 13m29.120190419s ago: executing program 2 (id=29): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) getsockname$packet(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) 13m25.318785378s ago: executing program 2 (id=36): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000001580)={0x6e, 0xfffffff7, 0x3, {0xa, @sdr={0x31324d4e, 0x8001}}, 0x7fff}) 13m24.830218209s ago: executing program 2 (id=38): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x94, &(0x7f0000000300)='trans=rdma,') r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@generic={0x83, 0x2}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 13m7.710050305s ago: executing program 32 (id=38): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0, @ANYRES32=0x41424344, @ANYBLOB], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(0x0, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) open(0x0, 0x14927e, 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x94, &(0x7f0000000300)='trans=rdma,') r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x2100, 0x700, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x60, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}, {[@generic={0x83, 0x2}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000000)={'tunl0\x00', r3, 0x20, 0x40, 0x1001000, 0x6, {{0x5, 0x4, 0x2, 0x6, 0x14, 0x67, 0x0, 0xf9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0xfe, 0x0}}}}}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000280)={r4, r4, 0x1, 0x0, 0x0, 0x48, 0x41, 0x1000, 0x8, 0x8, 0x1, 0x0, 'syz0\x00'}) 12m53.859888255s ago: executing program 3 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r2, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2fc, 0x18c, 0x203, 0x0, 0x19030000, 0x3e8, 0x2e0, 0x2e0, 0x3e8, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d4, 0x2fc, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0xfffc, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {0xffff}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4, 0x0, 0x10}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa4, 0xec}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x50c) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000019240)={0x1b, 0xb, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') mlock(&(0x7f000069f000/0x2000)=nil, 0x2000) pread64(r6, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000480)={'filter\x00', 0x104, 0x4, 0x3c0, 0x0, 0xe8, 0xe8, 0x2d8, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'dvmrp0\x00', 'macvlan0\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac=@local}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg0\x00', 'veth0\x00'}, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000400), 0xffffffffffffffff) syz_emit_ethernet(0x48, &(0x7f0000019100)=ANY=[@ANYBLOB="ffffffffffffaabcaaaaaaaa86dd6001010000121100fc010000000000003bfaa64c00000001fe800000802d2c580000000000000000000000aa00000e2200129078020200000000000e0a79"], 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) 12m49.948607289s ago: executing program 3 (id=92): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) getsockname$packet(r3, 0x0, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) 12m48.61372793s ago: executing program 3 (id=95): write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 12m46.062577401s ago: executing program 3 (id=99): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) ptrace$ARCH_SET_CPUID(0x1e, r1, 0x1, 0x1012) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000080)=0x3ff) 12m44.108715301s ago: executing program 3 (id=102): syz_init_net_socket$llc(0x1a, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x2, 0x2, &(0x7f00000000c0)=ANY=[@ANYBLOB="85000000ad00000095"], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f7}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_socket_connect_nvme_tcp() r0 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x7) getpgrp(0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b"]) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x40, 0xe, 0x7d, "810d0517aed1375ab187352442d9db0c1fc96057b897a59fc2b29fff06a97cf50f2b19501b16c2c47f607231c60018a70fe5865cca8d0edf9248a37c33fdd14075e08a7688b9cf9847f67b3590b4ec386be150775df674933964c49a482934eafed45470ad648ee1b51bd1e9ad6c376e43958d2d33576ac99397b9e745"}, &(0x7f00000006c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000700)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000740)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000780)={0x20, 0x0, 0x4, {0xe0}}, &(0x7f00000007c0)={0x40, 0x7, 0x2, 0x8}, &(0x7f0000000800)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000880)={0x40, 0xb, 0x2, "cdd9"}, 0x0, &(0x7f0000000900)={0x40, 0x13, 0x6, @random="8c727b382607"}, &(0x7f0000000940)={0x40, 0x17, 0x6, @local}, &(0x7f0000000980)={0x40, 0x19, 0x2, 'nN'}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x1c, 0x1, 0x2}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x1}, 0x0}) 12m39.147492191s ago: executing program 3 (id=111): r0 = socket(0x848000000015, 0x805, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 12m23.925078767s ago: executing program 33 (id=111): r0 = socket(0x848000000015, 0x805, 0x5) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) 11m57.18509568s ago: executing program 0 (id=168): write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 11m55.817230969s ago: executing program 0 (id=169): bind$rose(0xffffffffffffffff, 0x0, 0x0) 11m55.59556614s ago: executing program 0 (id=170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:10 0', 0x1e) 11m54.72264658s ago: executing program 0 (id=171): socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x60db, 0x0, 0x0, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2714, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m54.029238007s ago: executing program 0 (id=172): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0x1, &(0x7f0000000600)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x3}], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x65, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) mmap(&(0x7f0000780000/0x1000)=nil, 0x1000, 0xb, 0x4008032, r1, 0x3000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r2 = syz_clone3(&(0x7f0000000340)={0x10019180, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(r2, 0x0, &(0x7f0000000140)) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000340), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) r4 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r5 = add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x12, r6, 0x9a903000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) keyctl$revoke(0x3, r5) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r4, 0xc4c85513, &(0x7f0000000d80)={{0x9, 0x4, 0xfffffbdb, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0x10000009, 0xd, 0x2, 0x10001, 0x8c08, 0x9, 0x10000, 0x202, 0xf0f3, 0xffff, 0x87, 0x4, 0x6c2b, 0xfffffffffffffffe, 0x98f2, 0x4b05, 0x3ff, 0x400000004, 0x6, 0x8000000000000000, 0x0, 0x8, 0x2, 0x1ff, 0x1, 0x8, 0x6, 0x8, 0x6, 0x5, 0x1, 0xfff, 0x3, 0x4, 0x7, 0x8000000000000000, 0x3, 0x4000000000000000, 0x2, 0x1ff, 0x2, 0x0, 0xdb4, 0x5, 0x16, 0x9, 0xe, 0x5, 0xc, 0x6, 0x2, 0x3b7, 0x5, 0x0, 0xfffffffffffffff9, 0x4, 0x7fd, 0x5, 0x0, 0x8000, 0x5, 0x34b, 0x7, 0x7, 0x4, 0x15af, 0x1e, 0x8, 0xfff, 0x81, 0x9, 0x83, 0x7, 0xf8, 0x0, 0x6, 0x4, 0x5, 0x80, 0x0, 0xd, 0x8, 0xb, 0x8000000000000001, 0x12, 0x4, 0x2, 0x7, 0x7fffffff, 0x1, 0x4, 0x10000, 0xe72, 0x10000000000003ff, 0x7, 0xc08b, 0x410, 0x80000001, 0x40, 0x1, 0x200000100000002, 0x8000000000000001, 0x42, 0x3, 0x9, 0xc5, 0x0, 0x2, 0x3, 0x33, 0x2f6f, 0x7, 0x5a73, 0xfffffffffffffff9, 0x7fffffff, 0x8, 0xa, 0x4, 0xde, 0x6, 0x800000000, 0xfffffffffffffffe, 0x2, 0x105ba93c, 0x4000000000004, 0x7, 0xfffffffffffffff7, 0x10]}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00', 0x40}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 11m52.21681523s ago: executing program 0 (id=175): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000280, 0x0, 0x0, 0x20000000038e, 0x2000000003be], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000feffffff7ec429f248649cfcc4e4d7cba901000000110000004200000088f870696d726567300000000000000000006970366772653000000000000000000076657468305f766972745f776966690069703608000000617030000000000000bbbbbbbbbbbbff000000ff00aaaaaaaaaaaaffff000000ff6e0000006e000000a60000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00"/297]}, 0x1a1) socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, {&(0x7f0000000140)=""/156, 0x9c}, &(0x7f0000000040), 0x2}, 0xa0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r0) 11m35.550379252s ago: executing program 34 (id=175): r0 = socket$kcm(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000440)=@nat={'nat\x00', 0x19, 0x1, 0x136, [0x200000000280, 0x0, 0x0, 0x20000000038e, 0x2000000003be], 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="000000000000000000000000000000000000000000000000000000feffffff7ec429f248649cfcc4e4d7cba901000000110000004200000088f870696d726567300000000000000000006970366772653000000000000000000076657468305f766972745f776966690069703608000000617030000000000000bbbbbbbbbbbbff000000ff00aaaaaaaaaaaaffff000000ff6e0000006e000000a60000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff00"/297]}, 0x1a1) socket$rds(0x15, 0x5, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000000280)={@tipc=@id={0x1e, 0x3, 0x1, {0x4e21, 0x2}}, {&(0x7f0000000140)=""/156, 0x9c}, &(0x7f0000000040), 0x2}, 0xa0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) close(r0) 9m51.51009222s ago: executing program 1 (id=321): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) socket$kcm(0x2, 0x200000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r7, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x6b7}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x8000) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="010325bd700000dcdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) sendfile(r1, r1, 0x0, 0x68) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@remote, 0x4, 0x0, 0x0, 0x3, 0x4003, 0x4}, 0x20) 9m49.75262756s ago: executing program 1 (id=323): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000780)=0x3, 0x2) 9m49.108971065s ago: executing program 1 (id=325): write$FUSE_WRITE(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000002c0)={0x3, 0x6576, 0x7f}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r3}, 0x18) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x1000000000) 9m47.494170284s ago: executing program 1 (id=326): syz_open_dev$media(&(0x7f0000000700), 0x10ea, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) pipe2(&(0x7f0000000340), 0x0) socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$alg(0x26, 0x5, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000b80), 0x109800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000240)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 9m47.420496088s ago: executing program 1 (id=327): socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000000)={0x0, 0x2, 0x2, 0x0, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000a80), 0x40000) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0xb2, 0x15, 0xf4, 0x40, 0x54c, 0x6c1, 0xbe87, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xf9, 0x0, 0x2, 0x60, 0xd, 0x18, 0x0, [], [{{0x9, 0x5, 0x8, 0x2, 0x0, 0x1, 0x8, 0x3b}}, {{0x9, 0x5, 0xb, 0x8, 0x40, 0x4, 0x9, 0x78}}]}}]}}]}}, 0x0) 9m44.871585299s ago: executing program 1 (id=329): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xac24) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x33fe0, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9m28.946589662s ago: executing program 35 (id=329): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r3, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x5008, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x80400) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000040)) r5 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xac24) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r5, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x203, 0xfffd, 0xffffffffffffffff, 0x200000000000008, 0xfffffffffffffffd, 0x200, 0x8, 0x2c, 0x80000005, 0x1}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(0x0) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8202, 0x0) splice(0xffffffffffffffff, 0x0, r8, 0x0, 0x33fe0, 0x8) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r6, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="cf0400000000000000001300000008000300", @ANYRES32, @ANYBLOB="040013000a00060008021100000100000600100080050000060012"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.592920237s ago: executing program 4 (id=878): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x181942, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 3.314751489s ago: executing program 4 (id=879): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) sendmmsg(r1, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 3.110761557s ago: executing program 4 (id=880): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16"], 0x48) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c0c4}, 0x8010) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xa, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x5, "d58838"}]}}}}}}, 0x4a) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.872144899s ago: executing program 4 (id=881): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e22, @private=0xa010102}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000005c0)={0x2, 0x4, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x1008, 0xff}, &(0x7f0000000200)=0x8, 0x0, 0x10000000000f, 0x3, 0x80000000, 0x7f, 0x41, 0x6}}], 0x58, 0x4000000}, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x14) r2 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18, 0xfffffffffffffff5, 0x0, {0x8000000000000001}}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3, 0x0, 0xfffffffffffffffb}, 0x75) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}}) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$USBDEVFS_CONNECTINFO(r4, 0x80045503, &(0x7f00000000c0)) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) 2.095889283s ago: executing program 4 (id=882): r0 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[@ANYRES32=r0], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5}, 0x90) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r6, r5, 0x25, 0x2}, 0x14) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) r7 = socket(0x10, 0x80002, 0x0) getsockopt$sock_buf(r7, 0x1, 0x19, 0x0, &(0x7f0000000380)) prctl$PR_SET_MM(0x23, 0x4, &(0x7f0000ffd000/0x2000)=nil) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000500)=ANY=[@ANYBLOB="600000000314010000000000fcdbdf250900020073797a3000000000080041007369770014003300766c616e3100000000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000006aef9266d6de5d2d7469613cc34920a9d4785c6b8527fc413b58407687e46be8754385f9e963a3ec9ca955c0c8ee1f25ce854fb37dd51bebaacedc4e3afd5d125fbfcc1d9074ecd94f5443379a6f4dad15a3bdaaf2756ed76197f0d131458c10fd263e86"], 0x60}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = openat$audio1(0xffffffffffffff9c, 0x0, 0x101001, 0x0) ioctl$SNDCTL_DSP_GETTRIGGER(r9, 0x80045010, &(0x7f0000000040)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010038f9ffffff0000000c0000000c000000050000000600000000628fab90227700001311000000002e2e2e00000000"], 0x0, 0x29, 0x0, 0x1, 0x8000}, 0x28) 0s ago: executing program 4 (id=883): openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0xd, 0x141341) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, 0x0, 0x5a) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): _slave_0: left promiscuous mode [ 633.579523][ T1017] hsr_slave_1: left promiscuous mode [ 633.580221][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 633.619407][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 637.099327][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 637.431560][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 641.378911][ T6162] usb 5-1: new full-speed USB device number 55 using dummy_hcd [ 641.532779][ T6162] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 641.532806][ T6162] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 641.532841][ T6162] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 641.532863][ T6162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.537767][ T6162] usb 5-1: config 0 descriptor?? [ 641.649196][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 641.769724][ T5900] usb 5-1: USB disconnect, device number 55 [ 641.899147][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 647.561778][ T5986] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 647.714396][ T5986] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 647.714427][ T5986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.714447][ T5986] usb 5-1: Product: syz [ 647.714461][ T5986] usb 5-1: Manufacturer: syz [ 647.714474][ T5986] usb 5-1: SerialNumber: syz [ 647.722592][ T5986] usb 5-1: config 0 descriptor?? [ 647.756938][ T5986] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 056 [ 647.939207][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 648.089212][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 648.158072][ T5986] (null): failure reading functionality [ 648.163122][ T5986] i2c i2c-1: failure reading functionality [ 648.168297][ T5986] i2c i2c-1: connected i2c-tiny-usb device [ 649.207153][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 649.495164][ T192] usb 5-1: USB disconnect, device number 56 [ 649.666521][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.666718][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.666944][ T9176] bridge_slave_0: entered allmulticast mode [ 649.670597][ T9176] bridge_slave_0: entered promiscuous mode [ 649.689083][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.689206][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.689450][ T9176] bridge_slave_1: entered allmulticast mode [ 649.691995][ T9176] bridge_slave_1: entered promiscuous mode [ 649.906674][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.954205][ T192] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 649.975203][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 650.137222][ T192] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 650.137251][ T192] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 650.137271][ T192] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 650.137320][ T192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 650.137346][ T192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 650.159451][ T192] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 650.159479][ T192] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 650.159499][ T192] usb 5-1: Product: syz [ 650.159512][ T192] usb 5-1: Manufacturer: syz [ 650.173513][ T192] cdc_wdm 5-1:1.0: skipping garbage [ 650.173533][ T192] cdc_wdm 5-1:1.0: skipping garbage [ 650.205924][ T192] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 650.205946][ T192] cdc_wdm 5-1:1.0: Unknown control protocol [ 650.381924][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 650.381947][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 650.382273][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 650.382285][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 650.382598][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 650.382610][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 650.382819][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 650.382830][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 650.382913][ T5900] usb 5-1: USB disconnect, device number 57 [ 650.383016][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 650.383026][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 650.383034][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 650.490053][ T9176] team0: Port device team_slave_0 added [ 650.514132][ T9176] team0: Port device team_slave_1 added [ 650.660474][ T9033] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 650.808452][ T9033] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 650.850745][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.850762][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.850782][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.853844][ T9033] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 650.937624][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.937641][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.937667][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.091881][ T9033] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 651.312450][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.518187][ T5986] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 651.626576][ T9176] hsr_slave_0: entered promiscuous mode [ 651.628158][ T9176] hsr_slave_1: entered promiscuous mode [ 651.671307][ T5986] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 651.671336][ T5986] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 651.671372][ T5986] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 651.671395][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.676915][ T5986] usb 5-1: config 0 descriptor?? [ 651.815757][ T9082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 651.886390][ T5986] usb 5-1: USB disconnect, device number 58 [ 651.949548][ T9082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 652.196261][ T9082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 652.262781][ T9082] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 652.333486][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 652.446883][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 652.447040][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 652.760727][ T1469] bridge0: port 2(bridge_slave_1) entered blocking state [ 652.760868][ T1469] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.969012][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.122543][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 656.150284][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 656.156231][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 656.163920][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 656.164802][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 657.073407][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.106839][ T9082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.116460][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.123809][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.182000][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.182146][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.250769][ T9082] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.294301][ T1017] bridge_slave_1: left allmulticast mode [ 657.294330][ T1017] bridge_slave_1: left promiscuous mode [ 657.294568][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.390182][ T1017] bridge_slave_0: left allmulticast mode [ 657.390211][ T1017] bridge_slave_0: left promiscuous mode [ 657.390465][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.289947][ T61] Bluetooth: hci0: command tx timeout [ 658.393839][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 658.397174][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 658.426290][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 658.445992][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 658.446869][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.488537][ T5808] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 658.643533][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.643561][ T5808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 658.643596][ T5808] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 658.643619][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.685351][ T5808] usb 5-1: config 0 descriptor?? [ 658.903589][ T991] usb 5-1: USB disconnect, device number 59 [ 660.358529][ T61] Bluetooth: hci0: command tx timeout [ 661.868848][ T61] Bluetooth: hci1: command tx timeout [ 661.990161][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 662.069351][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 662.115622][ T1017] bond0 (unregistering): Released all slaves [ 662.442829][ T61] Bluetooth: hci0: command tx timeout [ 662.533489][ T6260] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.533617][ T6260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 662.638564][ T5900] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 662.700838][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 662.701461][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 662.790567][ T5900] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 662.790595][ T5900] usb 5-1: config 0 has no interface number 1 [ 662.790656][ T5900] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 662.790678][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.797338][ T5900] usb 5-1: config 0 descriptor?? [ 662.889340][ T9176] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 663.260046][ T5900] usb 5-1: USB disconnect, device number 60 [ 663.279740][ T1017] hsr_slave_0: left promiscuous mode [ 663.319484][ T1017] hsr_slave_1: left promiscuous mode [ 663.324625][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.363237][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 663.878625][ T61] Bluetooth: hci1: command tx timeout [ 664.108541][ T5808] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 664.262450][ T5808] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 664.262478][ T5808] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 664.262497][ T5808] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 664.262541][ T5808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 664.262566][ T5808] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 664.265409][ T5808] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 664.265442][ T5808] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 664.265461][ T5808] usb 5-1: Product: syz [ 664.265474][ T5808] usb 5-1: Manufacturer: syz [ 664.294098][ T5808] cdc_wdm 5-1:1.0: skipping garbage [ 664.294119][ T5808] cdc_wdm 5-1:1.0: skipping garbage [ 664.299391][ T5808] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 664.299410][ T5808] cdc_wdm 5-1:1.0: Unknown control protocol [ 664.502035][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.502116][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.502334][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.502345][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.502533][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.502543][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.503259][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.503278][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.503481][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.503492][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.503679][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.503689][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.503766][ T991] usb 5-1: USB disconnect, device number 61 [ 664.503874][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 664.503883][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 664.503892][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 664.528535][ T61] Bluetooth: hci0: command tx timeout [ 664.649079][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 664.899488][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 665.738544][ T5808] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 665.900671][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.900700][ T5808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 665.900730][ T5808] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 665.900742][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.907923][ T5808] usb 5-1: config 0 descriptor?? [ 665.979028][ T61] Bluetooth: hci1: command tx timeout [ 666.116327][ T991] usb 5-1: USB disconnect, device number 62 [ 667.350699][ T9176] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 667.396125][ T9176] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 667.489321][ T9176] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 668.038641][ T61] Bluetooth: hci1: command tx timeout [ 668.227828][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 668.238817][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 668.240144][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 668.263891][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 668.271965][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 670.439969][ T61] Bluetooth: hci4: command tx timeout [ 670.608151][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 671.637651][ T9490] syz2: rxe_newlink: already configured on ipvlan0 [ 672.518693][ T61] Bluetooth: hci4: command tx timeout [ 673.272741][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.272937][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.273142][ T9360] bridge_slave_0: entered allmulticast mode [ 673.274809][ T9360] bridge_slave_0: entered promiscuous mode [ 673.276756][ T9396] chnl_net:caif_netlink_parms(): no params data found [ 673.306451][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.306578][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.306791][ T9360] bridge_slave_1: entered allmulticast mode [ 673.310147][ T9360] bridge_slave_1: entered promiscuous mode [ 673.745097][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.878287][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.398579][ T5808] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 674.442306][ T9360] team0: Port device team_slave_0 added [ 674.562281][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 674.562309][ T5808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 674.562367][ T5808] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 674.562381][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.565409][ T5808] usb 5-1: config 0 descriptor?? [ 674.598777][ T61] Bluetooth: hci4: command tx timeout [ 674.626225][ T5808] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 674.626258][ T5808] dvb-usb: bulk message failed: -22 (3/0) [ 674.633768][ T5808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 674.634735][ T5808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 674.634788][ T5808] usb 5-1: media controller created [ 674.636718][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 674.651409][ T5808] dvb-usb: bulk message failed: -22 (6/0) [ 674.651491][ T5808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 674.657041][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input28 [ 674.663784][ T5808] dvb-usb: schedule remote query interval to 150 msecs. [ 674.663808][ T5808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 674.821701][ T5808] dvb-usb: bulk message failed: -22 (1/0) [ 674.821751][ T5808] dvb-usb: error while querying for an remote control event. [ 674.822530][ T6162] usb 5-1: USB disconnect, device number 63 [ 674.853064][ T9360] team0: Port device team_slave_1 added [ 674.853553][ T9396] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.853757][ T9396] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.854214][ T9396] bridge_slave_0: entered allmulticast mode [ 674.855740][ T9396] bridge_slave_0: entered promiscuous mode [ 674.973382][ T6162] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 675.006866][ T9396] bridge0: port 2(bridge_slave_1) entered blocking state [ 675.006997][ T9396] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.007519][ T9396] bridge_slave_1: entered allmulticast mode [ 675.030917][ T9396] bridge_slave_1: entered promiscuous mode [ 675.361276][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.361293][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.361317][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.604893][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.606107][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.606118][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.606132][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.942120][ T9396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 676.153789][ T9396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.746027][ T61] Bluetooth: hci4: command tx timeout [ 677.912822][ T9396] team0: Port device team_slave_0 added [ 678.045122][ T9396] team0: Port device team_slave_1 added [ 678.078773][ T9360] hsr_slave_0: entered promiscuous mode [ 678.081988][ T9360] hsr_slave_1: entered promiscuous mode [ 678.082563][ T9360] debugfs: 'hsr0' already exists in 'hsr' [ 678.082587][ T9360] Cannot create hsr debugfs directory [ 678.083070][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 678.308010][ T9516] syz2: rxe_newlink: already configured on ipvlan0 [ 678.418127][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.420284][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.420298][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.420322][ T9396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.620362][ T9396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.620376][ T9396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.620390][ T9396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.823922][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.824120][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 679.090550][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.090717][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.275254][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 679.277114][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.277305][ T9450] bridge_slave_0: entered allmulticast mode [ 679.280125][ T9450] bridge_slave_0: entered promiscuous mode [ 679.293475][ T9396] hsr_slave_0: entered promiscuous mode [ 679.294836][ T9396] hsr_slave_1: entered promiscuous mode [ 679.295862][ T9396] debugfs: 'hsr0' already exists in 'hsr' [ 679.295884][ T9396] Cannot create hsr debugfs directory [ 679.329796][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.329920][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.330177][ T9450] bridge_slave_1: entered allmulticast mode [ 679.332996][ T9450] bridge_slave_1: entered promiscuous mode [ 679.852755][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.058686][ T5808] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 680.081091][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 680.218464][ T5808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 680.218492][ T5808] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 680.218543][ T5808] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 680.218587][ T5808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.222249][ T5808] usb 5-1: config 0 descriptor?? [ 680.233355][ T5808] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 680.233401][ T5808] dvb-usb: bulk message failed: -22 (3/0) [ 680.249669][ T5808] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 680.250597][ T5808] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 680.250648][ T5808] usb 5-1: media controller created [ 680.252686][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 680.272105][ T5808] dvb-usb: bulk message failed: -22 (6/0) [ 680.272188][ T5808] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 680.277068][ T5808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 680.289508][ T5808] dvb-usb: schedule remote query interval to 150 msecs. [ 680.289530][ T5808] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 680.434003][ T5808] usb 5-1: USB disconnect, device number 64 [ 680.542626][ T5808] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 680.702524][ T9450] team0: Port device team_slave_0 added [ 681.063151][ T9450] team0: Port device team_slave_1 added [ 681.218526][ T5986] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 681.370658][ T5986] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 681.370687][ T5986] usb 5-1: config 0 has no interface number 1 [ 681.370741][ T5986] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 681.370753][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.374835][ T5986] usb 5-1: config 0 descriptor?? [ 681.473567][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.473580][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.473594][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.580230][ T5808] usb 5-1: USB disconnect, device number 65 [ 681.745974][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.745988][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.746003][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 683.770215][ T9450] hsr_slave_0: entered promiscuous mode [ 683.771093][ T9450] hsr_slave_1: entered promiscuous mode [ 683.771710][ T9450] debugfs: 'hsr0' already exists in 'hsr' [ 683.771727][ T9450] Cannot create hsr debugfs directory [ 684.096125][ T1017] bridge_slave_1: left allmulticast mode [ 684.096166][ T1017] bridge_slave_1: left promiscuous mode [ 684.096427][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.189999][ T1017] bridge_slave_0: left allmulticast mode [ 684.190030][ T1017] bridge_slave_0: left promiscuous mode [ 684.190291][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.401749][ T1017] bridge_slave_1: left allmulticast mode [ 684.401770][ T1017] bridge_slave_1: left promiscuous mode [ 684.401923][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.669739][ T9546] syz2: rxe_newlink: already configured on ipvlan0 [ 685.430631][ T1017] bridge_slave_0: left allmulticast mode [ 685.430662][ T1017] bridge_slave_0: left promiscuous mode [ 685.430947][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.492821][ T1017] bridge_slave_1: left allmulticast mode [ 685.492850][ T1017] bridge_slave_1: left promiscuous mode [ 685.493086][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 685.549962][ T1017] bridge_slave_0: left allmulticast mode [ 685.549998][ T1017] bridge_slave_0: left promiscuous mode [ 685.550294][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.828217][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.828305][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.967851][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 685.986231][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 685.987941][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 686.003835][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 686.004732][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 687.729332][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 687.809256][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 687.871906][ T1017] bond0 (unregistering): Released all slaves [ 688.038620][ T5802] Bluetooth: hci3: command tx timeout [ 689.309283][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 689.389323][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 689.451800][ T1017] bond0 (unregistering): Released all slaves [ 690.118568][ T5802] Bluetooth: hci3: command tx timeout [ 690.859420][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 690.919743][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 690.941171][ T1017] bond0 (unregistering): Released all slaves [ 692.201138][ T5802] Bluetooth: hci3: command tx timeout [ 692.533794][ T9559] netlink: 'syz.4.701': attribute type 1 has an invalid length. [ 693.546422][ T9360] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 693.625112][ T9360] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 693.817634][ T9360] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 693.970922][ T1017] hsr_slave_0: left promiscuous mode [ 694.008668][ T1017] hsr_slave_1: left promiscuous mode [ 694.010530][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.053048][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.218575][ T1017] hsr_slave_0: left promiscuous mode [ 694.258648][ T1017] hsr_slave_1: left promiscuous mode [ 694.259264][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.288555][ T5802] Bluetooth: hci3: command tx timeout [ 694.290908][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.508606][ T1017] hsr_slave_0: left promiscuous mode [ 694.549192][ T1017] hsr_slave_1: left promiscuous mode [ 694.549851][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.599519][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.608508][ T192] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 694.761577][ T192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 694.761604][ T192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 694.761656][ T192] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 694.761679][ T192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 694.767922][ T192] usb 5-1: config 0 descriptor?? [ 694.783448][ T192] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 694.783496][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 694.797705][ T192] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 694.799557][ T192] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 694.799616][ T192] usb 5-1: media controller created [ 694.801533][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 694.836213][ T192] dvb-usb: bulk message failed: -22 (6/0) [ 694.836310][ T192] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 694.851794][ T192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input30 [ 694.873221][ T192] dvb-usb: schedule remote query interval to 150 msecs. [ 694.873245][ T192] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 694.983765][ T192] usb 5-1: USB disconnect, device number 66 [ 695.089106][ T192] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 695.693474][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 696.260908][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 701.119444][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 701.269376][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 703.799185][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 704.039139][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 706.379662][ T9360] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 706.413030][ T9619] netlink: 'syz.4.708': attribute type 1 has an invalid length. [ 706.526185][ T9548] chnl_net:caif_netlink_parms(): no params data found [ 706.740910][ T991] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 706.902316][ T991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 706.902343][ T991] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 706.902391][ T991] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 706.902410][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.969062][ T991] usb 5-1: config 0 descriptor?? [ 707.017762][ T991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 707.017813][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 707.022845][ T991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 707.026722][ T991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 707.026779][ T991] usb 5-1: media controller created [ 707.038294][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 707.056681][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 707.056766][ T991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 707.079501][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input31 [ 707.082730][ T991] dvb-usb: schedule remote query interval to 150 msecs. [ 707.082753][ T991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 707.226812][ T991] usb 5-1: USB disconnect, device number 67 [ 707.365767][ T991] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 707.401146][ T9548] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.401346][ T9548] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.401571][ T9548] bridge_slave_0: entered allmulticast mode [ 707.403259][ T9548] bridge_slave_0: entered promiscuous mode [ 707.469227][ T9548] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.469853][ T9548] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.470101][ T9548] bridge_slave_1: entered allmulticast mode [ 707.472741][ T9548] bridge_slave_1: entered promiscuous mode [ 707.767215][ T9548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.792737][ T9548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.008858][ T9548] team0: Port device team_slave_0 added [ 709.657150][ T9548] team0: Port device team_slave_1 added [ 710.031734][ T9548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.031753][ T9548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.031779][ T9548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.036894][ T9548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.036910][ T9548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.036934][ T9548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.510538][ T9548] hsr_slave_0: entered promiscuous mode [ 710.517643][ T9548] hsr_slave_1: entered promiscuous mode [ 710.539159][ T9548] debugfs: 'hsr0' already exists in 'hsr' [ 710.539187][ T9548] Cannot create hsr debugfs directory [ 710.541022][ T9396] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 710.591674][ T9396] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 710.656677][ T9396] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 710.874282][ T9396] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 711.421980][ T9360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 711.948499][ T9712] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 711.977951][ T9450] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 712.151320][ T9450] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 712.193304][ T9450] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 712.263411][ T9360] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.265851][ T9450] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 712.395742][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.395836][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 712.803950][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.804080][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.368651][ T991] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 713.531346][ T991] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 713.531373][ T991] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 713.531432][ T991] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 713.531455][ T991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.540304][ T991] usb 5-1: config 0 descriptor?? [ 713.555267][ T991] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 713.555317][ T991] dvb-usb: bulk message failed: -22 (3/0) [ 713.585404][ T991] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 713.586315][ T991] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 713.586794][ T991] usb 5-1: media controller created [ 713.594572][ T991] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 713.647508][ T991] dvb-usb: bulk message failed: -22 (6/0) [ 713.647597][ T991] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 713.679590][ T991] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input33 [ 713.689229][ T991] dvb-usb: schedule remote query interval to 150 msecs. [ 713.689251][ T991] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 713.756034][ T192] usb 5-1: USB disconnect, device number 68 [ 713.837258][ T192] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 713.998116][ T9396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.094482][ T9396] 8021q: adding VLAN 0 to HW filter on device team0 [ 714.114134][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 714.136024][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 714.136161][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 714.186470][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 714.187949][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 714.233803][ T1017] bridge_slave_1: left allmulticast mode [ 714.233824][ T1017] bridge_slave_1: left promiscuous mode [ 714.233973][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.329519][ T1017] bridge_slave_0: left allmulticast mode [ 714.329540][ T1017] bridge_slave_0: left promiscuous mode [ 714.329697][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.163897][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.180532][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.181721][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.183049][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.186325][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 717.869236][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.929072][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.971360][ T1017] bond0 (unregistering): Released all slaves [ 718.061333][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.348096][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.350659][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.448955][ T5920] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.449178][ T5920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 719.254832][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 719.264871][ T5802] Bluetooth: hci5: command tx timeout [ 719.266313][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 719.267633][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 719.269367][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 719.270269][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 719.591444][ T9548] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 719.877963][ T9754] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 719.928499][ T9548] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 720.148972][ T1017] hsr_slave_0: left promiscuous mode [ 720.189369][ T1017] hsr_slave_1: left promiscuous mode [ 720.197577][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.219137][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 721.588583][ T8564] Bluetooth: hci5: command tx timeout [ 721.785319][ T8564] Bluetooth: hci0: command tx timeout [ 723.648518][ T8564] Bluetooth: hci5: command tx timeout [ 723.784296][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 723.818682][ T8564] Bluetooth: hci0: command tx timeout [ 724.099262][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 725.728469][ T8564] Bluetooth: hci5: command tx timeout [ 725.878775][ T8564] Bluetooth: hci0: command tx timeout [ 726.718496][ T192] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 726.730624][ T9548] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 726.785797][ T9548] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 726.848510][ T192] usb 5-1: device descriptor read/64, error -71 [ 727.088928][ T192] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 727.218512][ T192] usb 5-1: device descriptor read/64, error -71 [ 727.338046][ T192] usb usb5-port1: attempt power cycle [ 727.601237][ T9742] chnl_net:caif_netlink_parms(): no params data found [ 727.698609][ T192] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 727.719253][ T192] usb 5-1: device descriptor read/8, error -71 [ 727.958684][ T192] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 727.958971][ T8564] Bluetooth: hci0: command tx timeout [ 727.989467][ T192] usb 5-1: device descriptor read/8, error -71 [ 728.103302][ T192] usb usb5-port1: unable to enumerate USB device [ 728.378888][ T9742] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.379023][ T9742] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.379213][ T9742] bridge_slave_0: entered allmulticast mode [ 728.380713][ T9742] bridge_slave_0: entered promiscuous mode [ 728.437551][ T9742] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.437702][ T9742] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.437845][ T9742] bridge_slave_1: entered allmulticast mode [ 728.463163][ T9742] bridge_slave_1: entered promiscuous mode [ 728.728218][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 728.745554][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 728.753941][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 728.755009][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 728.756147][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 728.897914][ T9742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.924921][ T9742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.926414][ T9750] chnl_net:caif_netlink_parms(): no params data found [ 729.262498][ T9548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.512232][ T9742] team0: Port device team_slave_0 added [ 729.614865][ T9742] team0: Port device team_slave_1 added [ 729.880497][ T5810] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 730.030371][ T5810] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 730.030400][ T5810] usb 5-1: config 0 has no interface number 1 [ 730.030463][ T5810] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 730.030486][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.037063][ T5810] usb 5-1: config 0 descriptor?? [ 730.251609][ T5986] usb 5-1: USB disconnect, device number 73 [ 730.360749][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.360762][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.360776][ T9742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 730.491747][ T9742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 730.491765][ T9742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.491789][ T9742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.597024][ T9750] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.597149][ T9750] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.597293][ T9750] bridge_slave_0: entered allmulticast mode [ 730.609158][ T9750] bridge_slave_0: entered promiscuous mode [ 730.633410][ T9548] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.634751][ T9750] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.634878][ T9750] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.635066][ T9750] bridge_slave_1: entered allmulticast mode [ 730.638095][ T9750] bridge_slave_1: entered promiscuous mode [ 730.956470][ T8564] Bluetooth: hci1: command tx timeout [ 731.078294][ T9750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.149521][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.149748][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.162756][ T9742] hsr_slave_0: entered promiscuous mode [ 731.164255][ T9742] hsr_slave_1: entered promiscuous mode [ 731.271391][ T9750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.643115][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.643326][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.773490][ T9750] team0: Port device team_slave_0 added [ 731.835278][ T9750] team0: Port device team_slave_1 added [ 732.185602][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.185620][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.185647][ T9750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.243415][ T9750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.243430][ T9750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.243444][ T9750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.998941][ T8564] Bluetooth: hci1: command tx timeout [ 733.372010][ T9750] hsr_slave_0: entered promiscuous mode [ 733.373323][ T9750] hsr_slave_1: entered promiscuous mode [ 733.374284][ T9750] debugfs: 'hsr0' already exists in 'hsr' [ 733.374306][ T9750] Cannot create hsr debugfs directory [ 733.464633][ T9801] chnl_net:caif_netlink_parms(): no params data found [ 733.764058][ T5900] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 733.909169][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 733.911035][ T5900] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 733.911059][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.911077][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.913485][ T5900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 733.913512][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.913531][ T5900] usb 5-1: Product: syz [ 733.913540][ T5900] usb 5-1: Manufacturer: syz [ 733.913547][ T5900] usb 5-1: SerialNumber: syz [ 734.398981][ T5900] usb 5-1: 0:2 : does not exist [ 734.477192][ T9801] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.477335][ T9801] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.477554][ T9801] bridge_slave_0: entered allmulticast mode [ 734.504306][ T9801] bridge_slave_0: entered promiscuous mode [ 734.625750][ T9801] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.625878][ T9801] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.626097][ T9801] bridge_slave_1: entered allmulticast mode [ 734.650725][ T9801] bridge_slave_1: entered promiscuous mode [ 734.818714][ T5900] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 734.859363][ T5900] usb 5-1: USB disconnect, device number 74 [ 734.893521][ T9779] udevd[9779]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.951240][ T9801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 734.986684][ T9801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 735.073686][ T1017] bridge_slave_1: left allmulticast mode [ 735.073716][ T1017] bridge_slave_1: left promiscuous mode [ 735.073963][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.079261][ T8564] Bluetooth: hci1: command tx timeout [ 735.160464][ T1017] bridge_slave_0: left allmulticast mode [ 735.160494][ T1017] bridge_slave_0: left promiscuous mode [ 735.160759][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.231546][ T1017] bridge_slave_1: left allmulticast mode [ 735.231568][ T1017] bridge_slave_1: left promiscuous mode [ 735.231714][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.309504][ T1017] bridge_slave_0: left allmulticast mode [ 735.309527][ T1017] bridge_slave_0: left promiscuous mode [ 735.309692][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.178526][ T8564] Bluetooth: hci1: command tx timeout [ 737.295209][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.369189][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.431422][ T1017] bond0 (unregistering): Released all slaves [ 738.668591][ T192] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 738.823554][ T192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 738.823582][ T192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 738.823634][ T192] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 738.823647][ T192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.826682][ T192] usb 5-1: config 0 descriptor?? [ 738.873556][ T192] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 738.873612][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 738.895238][ T192] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 738.907523][ T192] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 738.907583][ T192] usb 5-1: media controller created [ 738.922194][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 738.941227][ T192] dvb-usb: bulk message failed: -22 (6/0) [ 738.941312][ T192] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 738.945754][ T192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input35 [ 738.973075][ T192] dvb-usb: schedule remote query interval to 150 msecs. [ 738.973097][ T192] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 739.032928][ T5900] usb 5-1: USB disconnect, device number 75 [ 739.134218][ T5900] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 739.220273][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 739.299128][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 739.322600][ T1017] bond0 (unregistering): Released all slaves [ 739.657837][ T9801] team0: Port device team_slave_0 added [ 739.775891][ T9801] team0: Port device team_slave_1 added [ 740.141460][ T9548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 740.302866][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.302884][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.302909][ T9801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.359176][ T9801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.359194][ T9801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.359220][ T9801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 741.128639][ T1017] hsr_slave_0: left promiscuous mode [ 741.168541][ T1017] hsr_slave_1: left promiscuous mode [ 741.169358][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.209153][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.348581][ T1017] hsr_slave_0: left promiscuous mode [ 741.368551][ T1017] hsr_slave_1: left promiscuous mode [ 741.369194][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.391616][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 742.473326][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 742.660053][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 744.728731][ T5900] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 744.918042][ T5900] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 744.918070][ T5900] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 744.918124][ T5900] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 744.918146][ T5900] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.930920][ T5900] usb 5-1: config 0 descriptor?? [ 744.974290][ T5900] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 744.974323][ T5900] dvb-usb: bulk message failed: -22 (3/0) [ 744.987297][ T5900] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 744.988232][ T5900] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 744.988284][ T5900] usb 5-1: media controller created [ 744.992294][ T5900] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 745.019416][ T5900] dvb-usb: bulk message failed: -22 (6/0) [ 745.019501][ T5900] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 745.033147][ T5900] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 745.040518][ T5900] dvb-usb: schedule remote query interval to 150 msecs. [ 745.040540][ T5900] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 745.165118][ T5900] usb 5-1: USB disconnect, device number 76 [ 745.297375][ T5900] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 745.889350][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 746.137990][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 746.896103][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 746.925328][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 746.938948][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 746.964267][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 746.987774][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 747.249594][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.250018][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.083804][ T8564] Bluetooth: hci4: command tx timeout [ 749.638134][ T9801] hsr_slave_0: entered promiscuous mode [ 749.639853][ T9801] hsr_slave_1: entered promiscuous mode [ 749.640746][ T9801] debugfs: 'hsr0' already exists in 'hsr' [ 749.640770][ T9801] Cannot create hsr debugfs directory [ 751.165033][ T8564] Bluetooth: hci4: command tx timeout [ 752.078018][ T9876] chnl_net:caif_netlink_parms(): no params data found [ 752.144623][ T9742] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 752.461171][ T9742] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 752.568602][ T5900] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 752.609456][ T9742] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.688781][ T9742] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 752.718600][ T5900] usb 5-1: Using ep0 maxpacket: 16 [ 752.720345][ T5900] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 752.720369][ T5900] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 752.720388][ T5900] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 752.722580][ T5900] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 752.722600][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.722610][ T5900] usb 5-1: Product: syz [ 752.722617][ T5900] usb 5-1: Manufacturer: syz [ 752.722625][ T5900] usb 5-1: SerialNumber: syz [ 753.139239][ T5900] usb 5-1: 0:2 : does not exist [ 753.154923][ T5900] usb 5-1: 1:0: cannot get min/max values for control 4 (id 1) [ 753.186305][ T5900] usb 5-1: USB disconnect, device number 77 [ 753.226877][ T9870] udevd[9870]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 753.238918][ T8564] Bluetooth: hci4: command tx timeout [ 753.371790][ T9876] bridge0: port 1(bridge_slave_0) entered blocking state [ 753.374798][ T9876] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.375066][ T9876] bridge_slave_0: entered allmulticast mode [ 753.377542][ T9876] bridge_slave_0: entered promiscuous mode [ 753.389196][ T9876] bridge0: port 2(bridge_slave_1) entered blocking state [ 753.389348][ T9876] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.389567][ T9876] bridge_slave_1: entered allmulticast mode [ 753.392215][ T9876] bridge_slave_1: entered promiscuous mode [ 753.972838][ T9876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.077621][ T9876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.521448][ T9876] team0: Port device team_slave_0 added [ 754.710758][ T9876] team0: Port device team_slave_1 added [ 755.050471][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.050482][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.050497][ T9876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.089990][ T9876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.090003][ T9876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 755.090017][ T9876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.318833][ T8564] Bluetooth: hci4: command tx timeout [ 755.462482][ T9750] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 755.560166][ T9750] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 755.620283][ T9876] hsr_slave_0: entered promiscuous mode [ 755.621215][ T9876] hsr_slave_1: entered promiscuous mode [ 755.621843][ T9876] debugfs: 'hsr0' already exists in 'hsr' [ 755.621861][ T9876] Cannot create hsr debugfs directory [ 755.622532][ T9750] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 755.705366][ T9750] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 756.161829][ T9801] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 756.218261][ T9801] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 756.271209][ T1017] bridge_slave_1: left allmulticast mode [ 756.271230][ T1017] bridge_slave_1: left promiscuous mode [ 756.271406][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.330009][ T1017] bridge_slave_0: left allmulticast mode [ 756.330030][ T1017] bridge_slave_0: left promiscuous mode [ 756.330185][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.401323][ T1017] bridge_slave_1: left allmulticast mode [ 756.401345][ T1017] bridge_slave_1: left promiscuous mode [ 756.401492][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.469564][ T1017] bridge_slave_0: left allmulticast mode [ 756.469586][ T1017] bridge_slave_0: left promiscuous mode [ 756.469804][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.652436][ T192] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 757.827519][ T192] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 757.827548][ T192] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 757.827595][ T192] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 757.827609][ T192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.871157][ T192] usb 5-1: config 0 descriptor?? [ 757.907224][ T192] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 757.907258][ T192] dvb-usb: bulk message failed: -22 (3/0) [ 757.931656][ T192] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 757.932651][ T192] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 757.932706][ T192] usb 5-1: media controller created [ 757.934810][ T192] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 758.003247][ T192] dvb-usb: bulk message failed: -22 (6/0) [ 758.003336][ T192] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 758.022377][ T192] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 758.053630][ T192] dvb-usb: schedule remote query interval to 150 msecs. [ 758.053653][ T192] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 758.086704][ T192] usb 5-1: USB disconnect, device number 78 [ 758.208217][ T192] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 758.439728][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.529514][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.560657][ T1017] bond0 (unregistering): Released all slaves [ 761.902414][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.979006][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.002291][ T1017] bond0 (unregistering): Released all slaves [ 762.039004][ T9801] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 762.224936][ T9801] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 762.771818][ T9742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.514674][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.999962][ T1017] hsr_slave_0: left promiscuous mode [ 765.018619][ T1017] hsr_slave_1: left promiscuous mode [ 765.019321][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.061463][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 765.228609][ T1017] hsr_slave_0: left promiscuous mode [ 765.268655][ T1017] hsr_slave_1: left promiscuous mode [ 765.271457][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 765.299233][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 766.442897][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 766.688993][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 768.588654][ T5810] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 768.750593][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 768.750619][ T5810] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 768.750666][ T5810] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 768.750687][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.755958][ T5810] usb 5-1: config 0 descriptor?? [ 768.803973][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 768.804024][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 768.809735][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 768.810974][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 768.811025][ T5810] usb 5-1: media controller created [ 768.813011][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 768.857703][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 768.857786][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 768.867540][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input38 [ 768.875999][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 768.876020][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 769.020292][ T5810] usb 5-1: USB disconnect, device number 79 [ 769.137015][ T5810] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 772.759854][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 772.999022][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 775.245208][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.245513][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 775.363888][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.364358][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.637889][ T9750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.821469][ T9750] 8021q: adding VLAN 0 to HW filter on device team0 [ 775.925518][ T9801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.999183][ T9607] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.999399][ T9607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 776.074840][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.075014][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 776.225580][ T9801] 8021q: adding VLAN 0 to HW filter on device team0 [ 776.259543][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 776.259669][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.497898][ T1333] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.498039][ T1333] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.924369][ T9876] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 778.031575][ T9876] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 778.111906][ T9876] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 778.261450][ T9876] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 778.738062][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 778.761361][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 778.794064][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 778.815305][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 778.817143][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 779.579463][ T9801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 779.809286][ T9876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.914676][ T9876] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.952013][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.952142][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.016838][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.017023][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.330553][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 780.336827][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 780.360674][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 780.376015][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 780.376868][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 780.918580][ T8564] Bluetooth: hci3: command tx timeout [ 781.808784][ T5881] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 781.938843][ T5881] usb 5-1: device descriptor read/64, error -71 [ 782.073087][ T9801] veth0_vlan: entered promiscuous mode [ 782.198525][ T5881] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 782.300994][T10005] chnl_net:caif_netlink_parms(): no params data found [ 782.322741][ T9801] veth1_vlan: entered promiscuous mode [ 782.338475][ T5881] usb 5-1: device descriptor read/64, error -71 [ 782.439902][ T8564] Bluetooth: hci5: command tx timeout [ 782.458784][ T5881] usb usb5-port1: attempt power cycle [ 782.567622][ T1017] bridge_slave_1: left allmulticast mode [ 782.567653][ T1017] bridge_slave_1: left promiscuous mode [ 782.567890][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.651956][ T1017] bridge_slave_0: left allmulticast mode [ 782.651979][ T1017] bridge_slave_0: left promiscuous mode [ 782.652150][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.818472][ T5881] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 782.862426][ T5881] usb 5-1: device descriptor read/8, error -71 [ 782.998688][ T8564] Bluetooth: hci3: command tx timeout [ 783.099203][ T5881] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 783.119074][ T5881] usb 5-1: device descriptor read/8, error -71 [ 783.238805][ T5881] usb usb5-port1: unable to enumerate USB device [ 784.459769][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 784.518466][ T8564] Bluetooth: hci5: command tx timeout [ 784.520803][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 784.586288][ T1017] bond0 (unregistering): Released all slaves [ 784.659947][ T9876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.789861][T10030] chnl_net:caif_netlink_parms(): no params data found [ 784.959423][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.959629][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.959878][T10005] bridge_slave_0: entered allmulticast mode [ 784.996421][T10005] bridge_slave_0: entered promiscuous mode [ 784.998745][ T5810] usb 5-1: new full-speed USB device number 84 using dummy_hcd [ 785.060698][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.060830][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.061085][T10005] bridge_slave_1: entered allmulticast mode [ 785.077245][T10005] bridge_slave_1: entered promiscuous mode [ 785.079669][ T8564] Bluetooth: hci3: command tx timeout [ 785.161877][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 785.161905][ T5810] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 785.161958][ T5810] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 785.161980][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.221432][ T5810] usb 5-1: config 0 descriptor?? [ 785.251716][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 785.251770][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 785.281804][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 785.292417][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 785.292475][ T5810] usb 5-1: media controller created [ 785.294442][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 785.373086][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 785.373178][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 785.377643][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input39 [ 785.394348][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 785.394372][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 785.433381][ T5881] usb 5-1: USB disconnect, device number 84 [ 785.526537][ T5881] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 785.678526][ T1017] hsr_slave_0: left promiscuous mode [ 785.698551][ T1017] hsr_slave_1: left promiscuous mode [ 785.699670][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.740029][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.598472][ T8564] Bluetooth: hci5: command tx timeout [ 787.158501][ T8564] Bluetooth: hci3: command tx timeout [ 788.649110][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 788.678493][ T8564] Bluetooth: hci5: command tx timeout [ 788.889050][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 790.745857][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 790.882537][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 790.950888][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 790.957653][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 790.999745][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 791.290655][T10111] random: crng reseeded on system resumption [ 792.178592][ T5810] usb 5-1: new full-speed USB device number 85 using dummy_hcd [ 792.263454][T10005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.315101][T10005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.330956][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 792.330982][ T5810] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 792.331035][ T5810] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 792.331057][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.385813][ T5810] usb 5-1: config 0 descriptor?? [ 792.396592][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 792.396644][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 792.424141][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 792.426267][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 792.426324][ T5810] usb 5-1: media controller created [ 792.459069][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 792.480036][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 792.480124][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 792.484612][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input41 [ 792.490704][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 792.490727][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 792.596281][T10113] dvb-usb: bulk message failed: -22 (2/0) [ 792.598256][ T5910] usb 5-1: USB disconnect, device number 85 [ 792.765673][ T5910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 792.881605][T10030] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.881804][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.881995][T10030] bridge_slave_0: entered allmulticast mode [ 792.883574][T10030] bridge_slave_0: entered promiscuous mode [ 792.916021][T10005] team0: Port device team_slave_0 added [ 792.917858][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.917993][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.918224][T10030] bridge_slave_1: entered allmulticast mode [ 792.946367][T10030] bridge_slave_1: entered promiscuous mode [ 792.955248][T10005] team0: Port device team_slave_1 added [ 793.264610][ T5802] Bluetooth: hci0: command tx timeout [ 794.779765][T10030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.799165][T10005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.799182][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 794.799208][T10005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.816253][T10030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.568147][ T5802] Bluetooth: hci0: command tx timeout [ 795.852281][T10005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.852301][T10005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.852327][T10005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.190321][T10030] team0: Port device team_slave_0 added [ 797.220612][T10030] team0: Port device team_slave_1 added [ 797.617778][T10005] hsr_slave_0: entered promiscuous mode [ 797.625280][T10005] hsr_slave_1: entered promiscuous mode [ 797.627187][T10030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.627202][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.627227][T10030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.638445][ T5802] Bluetooth: hci0: command tx timeout [ 797.685522][T10030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.685539][T10030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.685553][T10030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.686720][ T9876] veth0_vlan: entered promiscuous mode [ 798.368596][ T5810] usb 5-1: new full-speed USB device number 86 using dummy_hcd [ 798.506108][T10030] hsr_slave_0: entered promiscuous mode [ 798.507550][T10030] hsr_slave_1: entered promiscuous mode [ 798.508122][T10030] debugfs: 'hsr0' already exists in 'hsr' [ 798.508143][T10030] Cannot create hsr debugfs directory [ 798.535386][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 798.535412][ T5810] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 798.535465][ T5810] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 798.535488][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.542058][ T5810] usb 5-1: config 0 descriptor?? [ 798.573196][ T5810] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 798.573247][ T5810] dvb-usb: bulk message failed: -22 (3/0) [ 798.589944][ T5810] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 798.593558][ T5810] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 798.593617][ T5810] usb 5-1: media controller created [ 798.595562][ T5810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 798.626090][ T9876] veth1_vlan: entered promiscuous mode [ 798.630896][ T5810] dvb-usb: bulk message failed: -22 (6/0) [ 798.630992][ T5810] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 798.635401][ T5810] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input43 [ 798.656551][ T5810] dvb-usb: schedule remote query interval to 150 msecs. [ 798.656575][ T5810] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 798.776355][T10144] dvb-usb: bulk message failed: -22 (2/0) [ 798.777757][ T5910] usb 5-1: USB disconnect, device number 86 [ 798.880366][ T5910] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 799.718626][ T5802] Bluetooth: hci0: command tx timeout [ 801.122865][T10106] chnl_net:caif_netlink_parms(): no params data found [ 802.372977][T10166] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 803.381422][ T9876] veth0_macvtap: entered promiscuous mode [ 804.020335][ T9876] veth1_macvtap: entered promiscuous mode [ 804.293393][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 804.293526][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.293772][T10106] bridge_slave_0: entered allmulticast mode [ 804.297657][T10106] bridge_slave_0: entered promiscuous mode [ 804.312485][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 804.312617][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.312791][T10106] bridge_slave_1: entered allmulticast mode [ 804.323277][T10106] bridge_slave_1: entered promiscuous mode [ 804.668554][ T5986] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 804.693843][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.721521][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 804.813162][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.830500][ T5986] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 804.830526][ T5986] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 804.830564][ T5986] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 804.830577][ T5986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.834307][ T5986] usb 5-1: config 0 descriptor?? [ 804.885526][ T5986] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 804.885576][ T5986] dvb-usb: bulk message failed: -22 (3/0) [ 804.900513][ T5986] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 804.901750][ T5986] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 804.901804][ T5986] usb 5-1: media controller created [ 804.903738][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 804.939901][ T5986] dvb-usb: bulk message failed: -22 (6/0) [ 804.939993][ T5986] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 804.955726][ T5986] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input45 [ 804.962658][ T5986] dvb-usb: schedule remote query interval to 150 msecs. [ 804.962680][ T5986] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 805.087769][T10179] dvb-usb: bulk message failed: -22 (2/0) [ 805.089815][ T5986] usb 5-1: USB disconnect, device number 87 [ 805.191688][ T5986] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 805.210738][T10106] team0: Port device team_slave_0 added [ 805.216152][ T9876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.220788][T10106] team0: Port device team_slave_1 added [ 805.443607][ T1436] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.446348][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.446361][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.446376][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.451442][ T1436] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.453099][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.453112][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.453134][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.590622][ T1436] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.758169][ T1436] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.936330][T10106] hsr_slave_0: entered promiscuous mode [ 805.972678][T10106] hsr_slave_1: entered promiscuous mode [ 805.976534][T10106] debugfs: 'hsr0' already exists in 'hsr' [ 805.976560][T10106] Cannot create hsr debugfs directory [ 807.140088][ T1017] bridge_slave_1: left allmulticast mode [ 807.140117][ T1017] bridge_slave_1: left promiscuous mode [ 807.140333][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.209484][ T1017] bridge_slave_0: left allmulticast mode [ 807.209506][ T1017] bridge_slave_0: left promiscuous mode [ 807.209671][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.320859][ T1017] bridge_slave_1: left allmulticast mode [ 807.320882][ T1017] bridge_slave_1: left promiscuous mode [ 807.321032][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 807.410325][ T1017] bridge_slave_0: left allmulticast mode [ 807.410355][ T1017] bridge_slave_0: left promiscuous mode [ 807.410665][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.081415][ T8564] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 808.115369][ T8564] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 808.129560][ T8564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 808.134808][ T8564] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 808.135684][ T8564] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 808.693160][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.693231][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.198441][ T8564] Bluetooth: hci1: command tx timeout [ 810.658539][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 810.699034][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 810.720986][ T1017] bond0 (unregistering): Released all slaves [ 811.969215][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.009321][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.030750][ T1017] bond0 (unregistering): Released all slaves [ 812.278581][ T8564] Bluetooth: hci1: command tx timeout [ 812.538586][ T5810] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 812.697849][ T5810] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.697877][ T5810] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.697913][ T5810] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 812.697935][ T5810] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.705450][ T5810] usb 5-1: config 0 descriptor?? [ 812.981069][ T5881] usb 5-1: USB disconnect, device number 88 [ 813.278574][ T1017] hsr_slave_0: left promiscuous mode [ 813.318590][ T1017] hsr_slave_1: left promiscuous mode [ 813.319308][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.351386][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.508603][ T1017] hsr_slave_0: left promiscuous mode [ 813.530163][ T1017] hsr_slave_1: left promiscuous mode [ 813.532523][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 813.579718][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.612434][T10209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.795'. [ 813.614101][T10209] netlink: 8 bytes leftover after parsing attributes in process `syz.4.795'. [ 813.614123][T10209] netlink: 'syz.4.795': attribute type 20 has an invalid length. [ 813.614131][T10209] netlink: 'syz.4.795': attribute type 21 has an invalid length. [ 813.684388][ T1017] veth1_vlan: left promiscuous mode [ 813.684531][ T1017] veth0_vlan: left promiscuous mode [ 814.358416][ T8564] Bluetooth: hci1: command tx timeout [ 815.540612][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 815.789181][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 816.438464][ T8564] Bluetooth: hci1: command tx timeout [ 819.079258][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 819.339936][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 824.615266][T10005] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 825.098951][T10005] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 825.177031][T10005] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 825.407395][T10005] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 827.294401][T10261] syz2: rxe_newlink: already configured on ipvlan0 [ 827.745697][T10186] chnl_net:caif_netlink_parms(): no params data found [ 828.085672][T10030] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 828.922856][T10030] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 829.290326][T10030] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 829.392185][T10030] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 829.508520][ T9554] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 829.677432][ T9554] usb 5-1: config 0 has an invalid interface number: 182 but max is 1 [ 829.677461][ T9554] usb 5-1: config 0 has no interface number 1 [ 829.677512][ T9554] usb 5-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af [ 829.677525][ T9554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.731241][ T9554] usb 5-1: config 0 descriptor?? [ 829.900861][T10005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 829.901261][T10186] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.901465][T10186] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.901673][T10186] bridge_slave_0: entered allmulticast mode [ 829.903198][T10186] bridge_slave_0: entered promiscuous mode [ 829.921272][T10186] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.921803][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.922057][T10186] bridge_slave_1: entered allmulticast mode [ 829.924833][T10186] bridge_slave_1: entered promiscuous mode [ 831.199685][T10186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 831.393848][ T1017] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.433232][T10106] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 831.482822][T10186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 831.485908][T10106] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 831.620254][T10106] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 831.742068][T10005] 8021q: adding VLAN 0 to HW filter on device team0 [ 831.892021][ T1017] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 831.928928][T10106] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 831.956912][T10186] team0: Port device team_slave_0 added [ 831.968148][T10186] team0: Port device team_slave_1 added [ 832.133221][ T1436] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.134840][ T1436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 832.338705][ T5810] usb 5-1: USB disconnect, device number 89 [ 832.656320][ T1017] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.692049][T10186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.692062][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.692077][T10186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.462441][T10186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.462456][T10186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.462470][T10186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.464595][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 833.509183][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 833.828154][ T1017] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.332120][T10186] hsr_slave_0: entered promiscuous mode [ 834.332895][T10186] hsr_slave_1: entered promiscuous mode [ 834.333416][T10186] debugfs: 'hsr0' already exists in 'hsr' [ 834.333429][T10186] Cannot create hsr debugfs directory [ 836.313251][ T1017] bridge_slave_1: left allmulticast mode [ 836.313280][ T1017] bridge_slave_1: left promiscuous mode [ 836.313527][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.379270][ T1017] bridge_slave_0: left allmulticast mode [ 836.379291][ T1017] bridge_slave_0: left promiscuous mode [ 836.379452][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.711920][T10321] syz2: rxe_newlink: already configured on ipvlan0 [ 839.961430][ T5802] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 839.964669][ T5802] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 839.965806][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 839.967146][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 839.967919][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 840.089241][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 840.149829][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 840.170721][ T1017] bond0 (unregistering): Released all slaves [ 840.993378][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.559613][ T8564] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 841.584864][ T8564] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 841.586269][ T8564] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 841.588052][ T8564] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 841.590349][ T8564] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.348517][ T8564] Bluetooth: hci4: command tx timeout [ 842.421941][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 842.939318][ T1017] hsr_slave_0: left promiscuous mode [ 842.979646][ T1017] hsr_slave_1: left promiscuous mode [ 842.982539][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.982557][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 843.020668][ T1017] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 843.020694][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 843.147987][ T1017] veth1_macvtap: left promiscuous mode [ 843.148054][ T1017] veth0_macvtap: left promiscuous mode [ 843.148197][ T1017] veth1_vlan: left promiscuous mode [ 843.171210][ T1017] veth0_vlan: left promiscuous mode [ 843.640248][ T8564] Bluetooth: hci3: command tx timeout [ 843.745749][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.809'. [ 844.358548][ T8564] Bluetooth: hci4: command tx timeout [ 845.728434][ T8564] Bluetooth: hci3: command tx timeout [ 845.758892][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 846.002834][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 846.438925][ T8564] Bluetooth: hci4: command tx timeout [ 847.808489][ T8564] Bluetooth: hci3: command tx timeout [ 848.518526][ T8564] Bluetooth: hci4: command tx timeout [ 848.574965][T10345] tipc: Started in network mode [ 848.574992][T10345] tipc: Node identity 080211000001, cluster identity 4711 [ 848.575737][T10345] tipc: Enabled bearer , priority 0 [ 848.582687][T10347] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 848.582727][T10347] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 848.667441][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.667660][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 848.716757][ T1923] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.716922][ T1923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.879198][ T8564] Bluetooth: hci3: command tx timeout [ 849.912219][ T9] tipc: Node number set to 134418688 [ 850.156704][T10186] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 850.246280][T10186] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 850.301533][T10186] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 850.415053][T10186] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 850.495719][T10323] chnl_net:caif_netlink_parms(): no params data found [ 851.275845][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.275964][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.276103][T10323] bridge_slave_0: entered allmulticast mode [ 851.277605][T10323] bridge_slave_0: entered promiscuous mode [ 851.308991][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.309121][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.309335][T10323] bridge_slave_1: entered allmulticast mode [ 851.312009][T10323] bridge_slave_1: entered promiscuous mode [ 851.602044][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 851.608625][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 851.615632][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 851.641816][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 851.643193][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 851.955059][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.135592][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.781409][T10323] team0: Port device team_slave_0 added [ 853.908534][ T8564] Bluetooth: hci0: command tx timeout [ 854.170207][T10323] team0: Port device team_slave_1 added [ 854.374652][T10332] chnl_net:caif_netlink_parms(): no params data found [ 854.382469][T10401] netlink: 'syz.4.817': attribute type 7 has an invalid length. [ 854.382491][T10401] netlink: 'syz.4.817': attribute type 8 has an invalid length. [ 854.670580][T10323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.670596][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.670619][T10323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.737006][T10323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.737018][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.737032][T10323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 855.596562][T10323] hsr_slave_0: entered promiscuous mode [ 855.597497][T10323] hsr_slave_1: entered promiscuous mode [ 855.598091][T10323] debugfs: 'hsr0' already exists in 'hsr' [ 855.598112][T10323] Cannot create hsr debugfs directory [ 855.926710][T10332] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.926862][T10332] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.927043][T10332] bridge_slave_0: entered allmulticast mode [ 855.931296][T10332] bridge_slave_0: entered promiscuous mode [ 855.958556][ T8564] Bluetooth: hci0: command tx timeout [ 856.051708][T10332] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.051862][T10332] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.052135][T10332] bridge_slave_1: entered allmulticast mode [ 856.055144][T10332] bridge_slave_1: entered promiscuous mode [ 856.310709][T10412] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 856.689682][T10332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 856.786240][T10332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.070769][ T8564] Bluetooth: hci0: command tx timeout [ 859.027566][T10332] team0: Port device team_slave_0 added [ 859.157805][T10332] team0: Port device team_slave_1 added [ 859.368514][ T9554] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 859.519293][ T9554] usb 5-1: Using ep0 maxpacket: 32 [ 859.521848][ T9554] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 859.521904][ T9554] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 859.523578][ T9554] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 859.523600][ T9554] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 859.523611][ T9554] usb 5-1: Product: syz [ 859.523618][ T9554] usb 5-1: Manufacturer: syz [ 859.543851][ T9554] hub 5-1:4.0: bad descriptor, ignoring hub [ 859.543888][ T9554] hub 5-1:4.0: probe with driver hub failed with error -5 [ 859.547065][ T9554] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 859.592062][T10332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.592078][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.592101][T10332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.667708][T10186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 859.669597][T10332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.669611][T10332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.669635][T10332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.118515][ T8564] Bluetooth: hci0: command tx timeout [ 860.633620][T10332] hsr_slave_0: entered promiscuous mode [ 860.634458][T10332] hsr_slave_1: entered promiscuous mode [ 860.635063][T10332] debugfs: 'hsr0' already exists in 'hsr' [ 860.635081][T10332] Cannot create hsr debugfs directory [ 860.635540][T10382] chnl_net:caif_netlink_parms(): no params data found [ 860.821224][T10186] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.521055][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.521161][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.781632][ T3982] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.781854][ T3982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.804522][T10382] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.804594][T10382] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.804797][T10382] bridge_slave_0: entered allmulticast mode [ 861.806492][T10382] bridge_slave_0: entered promiscuous mode [ 861.894771][T10382] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.894894][T10382] bridge0: port 2(bridge_slave_1) entered disabled state [ 861.895031][T10382] bridge_slave_1: entered allmulticast mode [ 861.897214][T10382] bridge_slave_1: entered promiscuous mode [ 862.220613][T10382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.249485][ T9] usb 5-1: USB disconnect, device number 90 [ 862.334503][T10382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.753572][T10382] team0: Port device team_slave_0 added [ 863.766266][T10323] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 863.806139][T10382] team0: Port device team_slave_1 added [ 863.845699][ T1017] bridge_slave_1: left allmulticast mode [ 863.845728][ T1017] bridge_slave_1: left promiscuous mode [ 863.845969][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.900521][ T1017] bridge_slave_0: left allmulticast mode [ 863.900542][ T1017] bridge_slave_0: left promiscuous mode [ 863.900693][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.971101][ T1017] bridge_slave_1: left allmulticast mode [ 863.971122][ T1017] bridge_slave_1: left promiscuous mode [ 863.971273][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.040017][ T1017] bridge_slave_0: left allmulticast mode [ 864.040046][ T1017] bridge_slave_0: left promiscuous mode [ 864.040277][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.111140][ T1017] bridge_slave_1: left allmulticast mode [ 864.111169][ T1017] bridge_slave_1: left promiscuous mode [ 864.111321][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.169677][ T1017] bridge_slave_0: left allmulticast mode [ 864.169699][ T1017] bridge_slave_0: left promiscuous mode [ 864.169901][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.627082][T10442] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 866.929435][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 866.999179][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.022470][ T1017] bond0 (unregistering): Released all slaves [ 867.850012][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.929256][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.996513][ T1017] bond0 (unregistering): Released all slaves [ 869.609710][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 869.672020][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 869.717143][ T1017] bond0 (unregistering): Released all slaves [ 869.792501][T10461] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 869.849242][T10323] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 869.897083][ T5802] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.909894][ T5802] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 869.911300][ T5802] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 869.912616][ T5802] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 869.913404][ T5802] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 870.122597][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.122689][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.178641][ T192] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 870.290307][T10323] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 870.330854][ T192] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 870.330884][ T192] usb 5-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 870.330902][ T192] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 870.330949][ T192] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 870.332954][ T192] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 870.332982][ T192] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 870.333002][ T192] usb 5-1: Product: syz [ 870.333016][ T192] usb 5-1: Manufacturer: syz [ 870.421274][ T192] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 870.496537][T10323] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 870.557798][T10382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.557811][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.557824][T10382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.622045][ T5910] usb 5-1: USB disconnect, device number 91 [ 870.736971][T10382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.736989][T10382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.737010][T10382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.770568][T10382] hsr_slave_0: entered promiscuous mode [ 871.771974][T10382] hsr_slave_1: entered promiscuous mode [ 871.773089][T10382] debugfs: 'hsr0' already exists in 'hsr' [ 871.773113][T10382] Cannot create hsr debugfs directory [ 871.898609][ T1017] hsr_slave_0: left promiscuous mode [ 871.918738][ T1017] hsr_slave_1: left promiscuous mode [ 871.919850][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 871.958466][ T8564] Bluetooth: hci5: command tx timeout [ 871.976540][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.138626][ T1017] hsr_slave_0: left promiscuous mode [ 872.158430][ T1017] hsr_slave_1: left promiscuous mode [ 872.160128][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.211072][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 872.348785][ T1017] hsr_slave_0: left promiscuous mode [ 872.388464][ T1017] hsr_slave_1: left promiscuous mode [ 872.389593][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.413860][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 873.511094][T10480] [U] á [ 874.038614][ T8564] Bluetooth: hci5: command tx timeout [ 874.360626][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 874.618869][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 876.118536][ T8564] Bluetooth: hci5: command tx timeout [ 877.309304][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 877.449499][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 878.198438][ T8564] Bluetooth: hci5: command tx timeout [ 878.839473][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 879.092438][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 882.121787][T10332] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 882.181589][T10332] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 882.284016][T10332] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 882.502720][T10332] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 882.660936][T10499] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 882.874641][T10505] netlink: 'syz.4.842': attribute type 1 has an invalid length. [ 883.177391][T10462] chnl_net:caif_netlink_parms(): no params data found [ 883.866109][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 883.877253][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.877486][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.877674][T10462] bridge_slave_0: entered allmulticast mode [ 883.898667][T10462] bridge_slave_0: entered promiscuous mode [ 884.013542][T10462] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.013746][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.013955][T10462] bridge_slave_1: entered allmulticast mode [ 884.016337][T10462] bridge_slave_1: entered promiscuous mode [ 884.344538][T10462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 884.437450][T10462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 884.812466][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.813629][T10382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 884.885183][T10462] team0: Port device team_slave_0 added [ 884.885254][T10382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 884.976615][T10462] team0: Port device team_slave_1 added [ 884.976701][T10382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 885.145828][ T5920] bridge0: port 1(bridge_slave_0) entered blocking state [ 885.146049][ T5920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 885.164753][T10382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 885.390614][T10462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 885.390625][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.390639][T10462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 885.394947][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 885.395155][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 885.397391][T10462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 885.397404][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 885.397429][T10462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 885.797945][T10462] hsr_slave_0: entered promiscuous mode [ 885.800661][T10462] hsr_slave_1: entered promiscuous mode [ 885.902268][T10332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.529616][T10518] syz.4.845 (10518): drop_caches: 2 [ 886.960394][T10332] 8021q: adding VLAN 0 to HW filter on device team0 [ 887.483797][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.484145][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 887.576138][T10532] comedi comedi0: pcl816: I/O port conflict (0x6,16) [ 887.622478][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.624475][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 888.052881][T10382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 888.919921][ T1017] bridge_slave_1: left allmulticast mode [ 888.919999][ T1017] bridge_slave_1: left promiscuous mode [ 888.920260][ T1017] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.009933][ T1017] bridge_slave_0: left allmulticast mode [ 889.009966][ T1017] bridge_slave_0: left promiscuous mode [ 889.010223][ T1017] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.129402][ T1017] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.189029][ T1017] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.242660][ T1017] bond0 (unregistering): Released all slaves [ 892.421921][T10382] 8021q: adding VLAN 0 to HW filter on device team0 [ 892.486516][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.486728][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 892.509350][T10323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 892.513859][ T6260] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.514045][ T6260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.678422][ T1017] hsr_slave_0: left promiscuous mode [ 894.720023][ T1017] hsr_slave_1: left promiscuous mode [ 894.722498][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.741882][ T1017] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.633991][ T1017] team0 (unregistering): Port device team_slave_1 removed [ 896.751665][T10591] netlink: 28 bytes leftover after parsing attributes in process `syz.4.859'. [ 896.753007][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.859'. [ 896.753038][T10591] netlink: 'syz.4.859': attribute type 20 has an invalid length. [ 896.753052][T10591] netlink: 'syz.4.859': attribute type 21 has an invalid length. [ 896.910493][ T1017] team0 (unregistering): Port device team_slave_0 removed [ 899.231363][T10332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 899.517412][T10323] veth0_vlan: entered promiscuous mode [ 899.650219][T10323] veth1_vlan: entered promiscuous mode [ 899.743253][T10462] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 899.877995][T10462] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 899.964978][T10462] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 900.003310][T10462] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 900.111679][T10382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 900.467655][T10332] veth0_vlan: entered promiscuous mode [ 900.498936][T10332] veth1_vlan: entered promiscuous mode [ 900.648767][T10332] veth0_macvtap: entered promiscuous mode [ 900.887958][T10332] veth1_macvtap: entered promiscuous mode [ 900.905954][T10462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.055726][T10332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.303827][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 901.317010][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 901.332176][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 901.333659][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 901.334511][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 901.431992][T10462] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.860304][ T1333] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.860455][ T1333] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.903750][ T6334] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.904399][ T6334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.913094][T10382] veth0_vlan: entered promiscuous mode [ 903.462072][ T5802] Bluetooth: hci1: command tx timeout [ 903.729419][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 903.762062][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 903.776930][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 903.813409][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 903.817906][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 905.251095][T10382] veth1_vlan: entered promiscuous mode [ 905.478388][ T5802] Bluetooth: hci1: command tx timeout [ 905.951906][T10382] veth0_macvtap: entered promiscuous mode [ 905.968668][ T5802] Bluetooth: hci3: command tx timeout [ 906.252199][T10382] veth1_macvtap: entered promiscuous mode [ 906.323690][ T43] bridge_slave_1: left allmulticast mode [ 906.323718][ T43] bridge_slave_1: left promiscuous mode [ 906.323919][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 906.399306][ T43] bridge_slave_0: left allmulticast mode [ 906.399330][ T43] bridge_slave_0: left promiscuous mode [ 906.399503][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.558417][ T5802] Bluetooth: hci1: command tx timeout [ 908.042938][ T5802] Bluetooth: hci3: command tx timeout [ 908.678969][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 909.278913][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 909.319522][ T43] bond0 (unregistering): Released all slaves [ 909.416861][T10633] chnl_net:caif_netlink_parms(): no params data found [ 909.551730][T10382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 909.650128][ T5802] Bluetooth: hci1: command tx timeout [ 909.771285][T10382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 909.850154][T10462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 910.123193][ T5802] Bluetooth: hci3: command tx timeout [ 910.140885][ T6334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 910.291548][ T43] hsr_slave_0: left promiscuous mode [ 910.308477][ T43] hsr_slave_1: left promiscuous mode [ 910.309115][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.364610][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.456408][ T43] veth1_vlan: left promiscuous mode [ 910.456524][ T43] veth0_vlan: left promiscuous mode [ 910.756912][T10687] netlink: 512 bytes leftover after parsing attributes in process `syz.4.869'. [ 912.204530][ T5802] Bluetooth: hci3: command tx timeout [ 912.943127][ T8564] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.959994][ T8564] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.968514][ T8564] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.981209][ T8564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 912.985869][ T8564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 915.109224][ T43] team0 (unregistering): Port device team_slave_1 removed [ 915.370813][ T43] team0 (unregistering): Port device team_slave_0 removed [ 915.567179][ T8564] Bluetooth: hci4: command tx timeout [ 917.638502][ T8564] Bluetooth: hci4: command tx timeout [ 918.916007][T10633] bridge0: port 1(bridge_slave_0) entered blocking state [ 918.916222][T10633] bridge0: port 1(bridge_slave_0) entered disabled state [ 918.916480][T10633] bridge_slave_0: entered allmulticast mode [ 918.922816][T10633] bridge_slave_0: entered promiscuous mode [ 918.927258][ T6334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.955454][ T6334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.955899][T10633] bridge0: port 2(bridge_slave_1) entered blocking state [ 918.956018][T10633] bridge0: port 2(bridge_slave_1) entered disabled state [ 918.956266][T10633] bridge_slave_1: entered allmulticast mode [ 918.959842][T10633] bridge_slave_1: entered promiscuous mode [ 919.016031][ T6334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 919.371322][T10633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 919.395783][T10633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 919.720711][ T8564] Bluetooth: hci4: command tx timeout [ 920.730125][T10633] team0: Port device team_slave_0 added [ 920.770867][T10633] team0: Port device team_slave_1 added [ 921.055988][T10646] chnl_net:caif_netlink_parms(): no params data found [ 921.091466][T10633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 921.091484][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.091509][T10633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 921.164460][T10633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 921.164476][T10633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 921.164491][T10633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 921.437695][T10753] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 921.535315][T10754] loop9: detected capacity change from 0 to 7 [ 921.561335][T10754] Dev loop9: unable to read RDB block 7 [ 921.561392][T10754] loop9: unable to read partition table [ 921.561647][T10754] loop9: partition table beyond EOD, truncated [ 921.561670][T10754] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 921.808351][ T5802] Bluetooth: hci4: command tx timeout [ 922.379873][T10769] syz2: rxe_newlink: already configured on ipvlan0 [ 923.706860][T10633] hsr_slave_0: entered promiscuous mode [ 923.708319][T10633] hsr_slave_1: entered promiscuous mode [ 923.709356][T10633] debugfs: 'hsr0' already exists in 'hsr' [ 923.709379][T10633] Cannot create hsr debugfs directory [ 923.919479][ T5802] Bluetooth: hci4: command 0x0405 tx timeout [ 923.997051][T10772] netlink: 'syz.4.883': attribute type 10 has an invalid length. [ 924.090399][T10646] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.090530][T10646] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.090706][T10646] bridge_slave_0: entered allmulticast mode [ 924.092394][T10646] bridge_slave_0: entered promiscuous mode [ 924.191703][T10772] ================================================================== [ 924.191715][T10772] BUG: KASAN: use-after-free in ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.191851][T10772] Read of size 1 at addr ffff888031a48560 by task syz.4.883/10772 [ 924.191862][T10772] [ 924.191880][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.4.883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 924.191896][T10772] Tainted: [L]=SOFTLOCKUP [ 924.191900][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.191913][T10772] Call Trace: [ 924.191923][T10772] [ 924.191928][T10772] dump_stack_lvl+0x189/0x250 [ 924.191970][T10772] ? __virt_addr_valid+0x1c8/0x5c0 [ 924.191998][T10772] ? rcu_is_watching+0x15/0xb0 [ 924.192017][T10772] ? __kasan_check_byte+0x12/0x40 [ 924.192055][T10772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.192067][T10772] ? rcu_is_watching+0x15/0xb0 [ 924.192077][T10772] ? lock_release+0x4b/0x3b0 [ 924.192098][T10772] ? __virt_addr_valid+0x1c8/0x5c0 [ 924.192112][T10772] ? __virt_addr_valid+0x4a5/0x5c0 [ 924.192126][T10772] print_report+0xca/0x240 [ 924.192144][T10772] ? ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.192155][T10772] kasan_report+0x118/0x150 [ 924.192170][T10772] ? ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.192181][T10772] ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.192194][T10772] ieee80211_do_stop+0x17e9/0x1fd0 [ 924.192207][T10772] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 924.192277][T10772] ? lockdep_hardirqs_on+0x98/0x140 [ 924.192310][T10772] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 924.192321][T10772] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 924.192338][T10772] ? rt_mutex_slowunlock+0x493/0x8a0 [ 924.192349][T10772] ? rt_spin_lock+0x1c1/0x3e0 [ 924.192363][T10772] ? rt_spin_unlock+0x150/0x200 [ 924.192375][T10772] ? rt_spin_unlock+0x161/0x200 [ 924.192387][T10772] ieee80211_stop+0x1b1/0x240 [ 924.192405][T10772] ? __pfx_ieee80211_stop+0x10/0x10 [ 924.192426][T10772] __dev_close_many+0x344/0x6b0 [ 924.192535][T10772] ? __pfx___dev_close_many+0x10/0x10 [ 924.192549][T10772] ? rt_spin_unlock+0x161/0x200 [ 924.192561][T10772] ? dev_set_rx_mode+0x4d/0x300 [ 924.192591][T10772] ? dev_set_rx_mode+0x244/0x300 [ 924.192601][T10772] __dev_change_flags+0x2be/0x680 [ 924.192613][T10772] ? __pfx___dev_change_flags+0x10/0x10 [ 924.192625][T10772] ? __schedule+0x1496/0x50a0 [ 924.192638][T10772] netif_change_flags+0x88/0x1a0 [ 924.192650][T10772] do_setlink+0xc55/0x41c0 [ 924.192687][T10772] ? __pfx_do_setlink+0x10/0x10 [ 924.192697][T10772] ? do_raw_spin_unlock+0x122/0x240 [ 924.192710][T10772] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 924.192723][T10772] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 924.192736][T10772] ? lockdep_hardirqs_on+0x98/0x140 [ 924.192750][T10772] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 924.192764][T10772] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 924.192782][T10772] ? rt_mutex_slowlock+0x3cc/0x6b0 [ 924.192793][T10772] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 924.192804][T10772] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 924.192817][T10772] ? rtnl_newlink+0x8ec/0x1c90 [ 924.192851][T10772] ? safesetid_security_capable+0xa9/0x1a0 [ 924.192911][T10772] ? bpf_lsm_capable+0x9/0x20 [ 924.192929][T10772] ? security_capable+0x7e/0x2e0 [ 924.192978][T10772] ? mutex_lock_nested+0x16a/0x1d0 [ 924.192989][T10772] rtnl_newlink+0x161c/0x1c90 [ 924.193003][T10772] ? kasan_save_track+0x3e/0x80 [ 924.193025][T10772] ? __pfx_rtnl_newlink+0x10/0x10 [ 924.193041][T10772] ? __lock_acquire+0x6b6/0x2cf0 [ 924.193058][T10772] ? __local_bh_enable+0x27b/0x410 [ 924.193072][T10772] ? __local_bh_enable+0x28c/0x410 [ 924.193083][T10772] ? reacquire_held_locks+0x121/0x1c0 [ 924.193098][T10772] ? __pfx___local_bh_enable+0x10/0x10 [ 924.193111][T10772] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 924.193123][T10772] ? lockdep_hardirqs_on+0x98/0x140 [ 924.193137][T10772] ? __lock_acquire+0x6b6/0x2cf0 [ 924.193151][T10772] ? __dev_queue_xmit+0x259/0x31d0 [ 924.193163][T10772] ? __dev_queue_xmit+0x259/0x31d0 [ 924.193174][T10772] ? __dev_queue_xmit+0x1936/0x31d0 [ 924.193185][T10772] ? netlink_unicast+0x811/0xa10 [ 924.193230][T10772] ? netlink_sendmsg+0x805/0xb30 [ 924.193246][T10772] ? __pfx_rtnl_newlink+0x10/0x10 [ 924.193261][T10772] rtnetlink_rcv_msg+0x7cf/0xb70 [ 924.193277][T10772] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 924.193290][T10772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 924.193304][T10772] ? ref_tracker_free+0x61e/0x7c0 [ 924.193349][T10772] ? __asan_memcpy+0x40/0x70 [ 924.193362][T10772] ? __pfx_ref_tracker_free+0x10/0x10 [ 924.193374][T10772] ? __skb_clone+0x63/0x7a0 [ 924.193405][T10772] netlink_rcv_skb+0x208/0x470 [ 924.193417][T10772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 924.193432][T10772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 924.193445][T10772] ? netlink_deliver_tap+0x2e/0x1b0 [ 924.193457][T10772] netlink_unicast+0x846/0xa10 [ 924.193469][T10772] ? __pfx_netlink_unicast+0x10/0x10 [ 924.193479][T10772] ? netlink_sendmsg+0x642/0xb30 [ 924.193490][T10772] ? skb_put+0x11b/0x210 [ 924.193500][T10772] netlink_sendmsg+0x805/0xb30 [ 924.193514][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.193526][T10772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.193539][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.193551][T10772] __sock_sendmsg+0x21c/0x270 [ 924.193626][T10772] ____sys_sendmsg+0x508/0x810 [ 924.193647][T10772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.193671][T10772] ? import_iovec+0x74/0xa0 [ 924.193721][T10772] ___sys_sendmsg+0x21f/0x2a0 [ 924.193733][T10772] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.193744][T10772] ? futex_wake+0x4b5/0x560 [ 924.193764][T10772] ? __fget_files+0x2a/0x420 [ 924.193781][T10772] ? __fget_files+0x3a6/0x420 [ 924.193794][T10772] __x64_sys_sendmsg+0x1a1/0x260 [ 924.193805][T10772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.193819][T10772] ? do_syscall_64+0xbe/0xf80 [ 924.193856][T10772] do_syscall_64+0xfa/0xf80 [ 924.193871][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.193891][T10772] ? clear_bhb_loop+0x60/0xb0 [ 924.193902][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.193913][T10772] RIP: 0033:0x7f3b7d22f749 [ 924.193926][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.193937][T10772] RSP: 002b:00007f3b7b48e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.193949][T10772] RAX: ffffffffffffffda RBX: 00007f3b7d485fa0 RCX: 00007f3b7d22f749 [ 924.193957][T10772] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 924.193965][T10772] RBP: 00007f3b7d2b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.193972][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.193979][T10772] R13: 00007f3b7d486038 R14: 00007f3b7d485fa0 R15: 00007ffd08514a78 [ 924.193990][T10772] [ 924.193994][T10772] [ 924.193997][T10772] The buggy address belongs to the physical page: [ 924.194005][T10772] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888031a49e00 pfn:0x31a48 [ 924.194017][T10772] flags: 0x80000000000000(node=0|zone=1) [ 924.194033][T10772] page_type: f0(buddy) [ 924.194044][T10772] raw: 0080000000000000 ffffea000079fb08 ffffea0001712d08 0000000000000000 [ 924.194053][T10772] raw: ffff888031a49e00 0000000000000002 00000000f0000000 0000000000000000 [ 924.194058][T10772] page dumped because: kasan: bad access detected [ 924.194067][T10772] page_owner tracks the page as freed [ 924.194071][T10772] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7537, tgid 7535 (syz.4.370), ts 373076189587, free_ts 408490809935 [ 924.194091][T10772] post_alloc_hook+0x234/0x290 [ 924.194114][T10772] get_page_from_freelist+0x28c0/0x2960 [ 924.194123][T10772] __alloc_frozen_pages_noprof+0x181/0x370 [ 924.194131][T10772] alloc_pages_mpol+0xd1/0x380 [ 924.194140][T10772] allocate_slab+0x86/0x3b0 [ 924.194151][T10772] ___slab_alloc+0xb10/0x1400 [ 924.194160][T10772] __slab_alloc+0xc6/0x1f0 [ 924.194169][T10772] __kmalloc_cache_noprof+0x101/0x6d0 [ 924.194182][T10772] io_setxattr_prep+0x1bd/0x330 [ 924.194232][T10772] io_submit_sqes+0xad3/0x2140 [ 924.194260][T10772] __se_sys_io_uring_enter+0x2df/0x2b00 [ 924.194269][T10772] do_syscall_64+0xfa/0xf80 [ 924.194282][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.194291][T10772] page last free pid 1017 tgid 1017 stack trace: [ 924.194298][T10772] __free_frozen_pages+0xfe1/0x1170 [ 924.194311][T10772] __put_partials+0x149/0x170 [ 924.194320][T10772] __slab_free+0x139/0x210 [ 924.194330][T10772] qlist_free_all+0x97/0x100 [ 924.194343][T10772] kasan_quarantine_reduce+0x148/0x160 [ 924.194354][T10772] __kasan_slab_alloc+0x22/0x80 [ 924.194366][T10772] __kmalloc_cache_noprof+0x18d/0x6d0 [ 924.194379][T10772] netdevice_event+0x3a1/0x8a0 [ 924.194446][T10772] notifier_call_chain+0x19d/0x3a0 [ 924.194463][T10772] unregister_netdevice_many_notify+0x1867/0x2330 [ 924.194476][T10772] default_device_exit_batch+0x964/0x9e0 [ 924.194504][T10772] ops_undo_list+0x525/0x990 [ 924.194513][T10772] cleanup_net+0x4de/0x7b0 [ 924.194521][T10772] process_scheduled_works+0xad1/0x1770 [ 924.194531][T10772] worker_thread+0x8a0/0xda0 [ 924.194541][T10772] kthread+0x711/0x8a0 [ 924.194553][T10772] [ 924.194556][T10772] Memory state around the buggy address: [ 924.194562][T10772] ffff888031a48400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 924.194569][T10772] ffff888031a48480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 924.194576][T10772] >ffff888031a48500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 924.194581][T10772] ^ [ 924.194587][T10772] ffff888031a48580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 924.194594][T10772] ffff888031a48600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 924.194599][T10772] ================================================================== [ 924.194620][T10772] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 924.194635][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.4.883 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 924.194649][T10772] Tainted: [L]=SOFTLOCKUP [ 924.194653][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 924.194660][T10772] Call Trace: [ 924.194665][T10772] [ 924.194669][T10772] dump_stack_lvl+0x99/0x250 [ 924.194683][T10772] ? __asan_memcpy+0x40/0x70 [ 924.194695][T10772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 924.194711][T10772] ? __pfx__printk+0x10/0x10 [ 924.194732][T10772] vpanic+0x237/0x6d0 [ 924.194756][T10772] ? __pfx_vpanic+0x10/0x10 [ 924.194779][T10772] ? preempt_schedule_common+0x83/0xd0 [ 924.194803][T10772] ? preempt_schedule+0xae/0xc0 [ 924.194828][T10772] panic+0xb9/0xc0 [ 924.194851][T10772] ? __pfx_panic+0x10/0x10 [ 924.194866][T10772] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 924.194880][T10772] ? ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.194891][T10772] check_panic_on_warn+0x89/0xb0 [ 924.194906][T10772] ? ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.194916][T10772] end_report+0x6f/0x140 [ 924.194929][T10772] kasan_report+0x129/0x150 [ 924.194944][T10772] ? ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.194956][T10772] ieee80211_add_virtual_monitor+0x902/0xb60 [ 924.194969][T10772] ieee80211_do_stop+0x17e9/0x1fd0 [ 924.194982][T10772] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 924.194995][T10772] ? lockdep_hardirqs_on+0x98/0x140 [ 924.195008][T10772] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 924.195024][T10772] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 924.195041][T10772] ? rt_mutex_slowunlock+0x493/0x8a0 [ 924.195052][T10772] ? rt_spin_lock+0x1c1/0x3e0 [ 924.195064][T10772] ? rt_spin_unlock+0x150/0x200 [ 924.195076][T10772] ? rt_spin_unlock+0x161/0x200 [ 924.195087][T10772] ieee80211_stop+0x1b1/0x240 [ 924.195098][T10772] ? __pfx_ieee80211_stop+0x10/0x10 [ 924.195109][T10772] __dev_close_many+0x344/0x6b0 [ 924.195125][T10772] ? __pfx___dev_close_many+0x10/0x10 [ 924.195138][T10772] ? rt_spin_unlock+0x161/0x200 [ 924.195149][T10772] ? dev_set_rx_mode+0x4d/0x300 [ 924.195158][T10772] ? dev_set_rx_mode+0x244/0x300 [ 924.195168][T10772] __dev_change_flags+0x2be/0x680 [ 924.195180][T10772] ? __pfx___dev_change_flags+0x10/0x10 [ 924.195191][T10772] ? __schedule+0x1496/0x50a0 [ 924.195204][T10772] netif_change_flags+0x88/0x1a0 [ 924.195215][T10772] do_setlink+0xc55/0x41c0 [ 924.195228][T10772] ? __pfx_do_setlink+0x10/0x10 [ 924.195238][T10772] ? do_raw_spin_unlock+0x122/0x240 [ 924.195251][T10772] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 924.195263][T10772] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 924.195276][T10772] ? lockdep_hardirqs_on+0x98/0x140 [ 924.195289][T10772] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 924.195302][T10772] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 924.195317][T10772] ? rt_mutex_slowlock+0x3cc/0x6b0 [ 924.195328][T10772] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 924.195338][T10772] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 924.195351][T10772] ? rtnl_newlink+0x8ec/0x1c90 [ 924.195366][T10772] ? safesetid_security_capable+0xa9/0x1a0 [ 924.195379][T10772] ? bpf_lsm_capable+0x9/0x20 [ 924.195388][T10772] ? security_capable+0x7e/0x2e0 [ 924.195402][T10772] ? mutex_lock_nested+0x16a/0x1d0 [ 924.195414][T10772] rtnl_newlink+0x161c/0x1c90 [ 924.195427][T10772] ? kasan_save_track+0x3e/0x80 [ 924.195442][T10772] ? __pfx_rtnl_newlink+0x10/0x10 [ 924.195458][T10772] ? __lock_acquire+0x6b6/0x2cf0 [ 924.195474][T10772] ? __local_bh_enable+0x27b/0x410 [ 924.195486][T10772] ? __local_bh_enable+0x28c/0x410 [ 924.195496][T10772] ? reacquire_held_locks+0x121/0x1c0 [ 924.195511][T10772] ? __pfx___local_bh_enable+0x10/0x10 [ 924.195524][T10772] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 924.195535][T10772] ? lockdep_hardirqs_on+0x98/0x140 [ 924.195549][T10772] ? __lock_acquire+0x6b6/0x2cf0 [ 924.195563][T10772] ? __dev_queue_xmit+0x259/0x31d0 [ 924.195575][T10772] ? __dev_queue_xmit+0x259/0x31d0 [ 924.195586][T10772] ? __dev_queue_xmit+0x1936/0x31d0 [ 924.195597][T10772] ? netlink_unicast+0x811/0xa10 [ 924.195607][T10772] ? netlink_sendmsg+0x805/0xb30 [ 924.195623][T10772] ? __pfx_rtnl_newlink+0x10/0x10 [ 924.195637][T10772] rtnetlink_rcv_msg+0x7cf/0xb70 [ 924.195652][T10772] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 924.195666][T10772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 924.195679][T10772] ? ref_tracker_free+0x61e/0x7c0 [ 924.195691][T10772] ? __asan_memcpy+0x40/0x70 [ 924.195702][T10772] ? __pfx_ref_tracker_free+0x10/0x10 [ 924.195713][T10772] ? __skb_clone+0x63/0x7a0 [ 924.195725][T10772] netlink_rcv_skb+0x208/0x470 [ 924.195736][T10772] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 924.195750][T10772] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 924.195763][T10772] ? netlink_deliver_tap+0x2e/0x1b0 [ 924.195778][T10772] netlink_unicast+0x846/0xa10 [ 924.195789][T10772] ? __pfx_netlink_unicast+0x10/0x10 [ 924.195799][T10772] ? netlink_sendmsg+0x642/0xb30 [ 924.195809][T10772] ? skb_put+0x11b/0x210 [ 924.195819][T10772] netlink_sendmsg+0x805/0xb30 [ 924.195831][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.195844][T10772] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 924.195857][T10772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 924.195869][T10772] __sock_sendmsg+0x21c/0x270 [ 924.195891][T10772] ____sys_sendmsg+0x508/0x810 [ 924.195912][T10772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 924.195936][T10772] ? import_iovec+0x74/0xa0 [ 924.195962][T10772] ___sys_sendmsg+0x21f/0x2a0 [ 924.195982][T10772] ? __pfx____sys_sendmsg+0x10/0x10 [ 924.196000][T10772] ? futex_wake+0x4b5/0x560 [ 924.196015][T10772] ? __fget_files+0x2a/0x420 [ 924.196032][T10772] ? __fget_files+0x3a6/0x420 [ 924.196044][T10772] __x64_sys_sendmsg+0x1a1/0x260 [ 924.196055][T10772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 924.196070][T10772] ? do_syscall_64+0xbe/0xf80 [ 924.196084][T10772] do_syscall_64+0xfa/0xf80 [ 924.196098][T10772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.196108][T10772] ? clear_bhb_loop+0x60/0xb0 [ 924.196119][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.196129][T10772] RIP: 0033:0x7f3b7d22f749 [ 924.196138][T10772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.196147][T10772] RSP: 002b:00007f3b7b48e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 924.196159][T10772] RAX: ffffffffffffffda RBX: 00007f3b7d485fa0 RCX: 00007f3b7d22f749 [ 924.196167][T10772] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000005 [ 924.196174][T10772] RBP: 00007f3b7d2b3f91 R08: 0000000000000000 R09: 0000000000000000 [ 924.196181][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 924.196187][T10772] R13: 00007f3b7d486038 R14: 00007f3b7d485fa0 R15: 00007ffd08514a78 [ 924.196198][T10772] [ 924.196533][T10772] Kernel Offset: disabled