last executing test programs: 5m9.550692602s ago: executing program 1 (id=534): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r0, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x800, 0x2, 0x3d6}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r0, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 5m8.823007589s ago: executing program 1 (id=539): socket$nl_audit(0x10, 0x3, 0x9) socket(0x1e, 0x1, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x0, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m8.008970365s ago: executing program 1 (id=544): clock_nanosleep(0xfffffff4, 0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000007540), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}}, 0x4) 5m7.636683006s ago: executing program 1 (id=546): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b0f33b49db96ad24d12595fbea5", 0x29) 5m7.28738891s ago: executing program 1 (id=548): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 5m6.374625672s ago: executing program 1 (id=556): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1, 0x0, 0x0, 0x140}, 0x38, 0x40010042) 4m51.152718354s ago: executing program 32 (id=556): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)}, 0x2ca998c3}], 0x4000032, 0x40000021, 0x0) recvmsg$qrtr(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/44, 0x2c}], 0x1, 0x0, 0x0, 0x140}, 0x38, 0x40010042) 2m21.021720186s ago: executing program 2 (id=1159): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = syz_io_uring_setup(0xbd9, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x3, 0x15f}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/216, 0xd8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m19.628207575s ago: executing program 2 (id=1164): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000080)=[{&(0x7f0000000100)=""/161, 0xa1}], 0x1) 2m18.622514048s ago: executing program 2 (id=1165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000680)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000002, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, 0x0, 0xfffffffffffffffd], 0x0, 0x8340}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m17.85200889s ago: executing program 2 (id=1171): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x74df82a6, @private2, 0xae3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0xb00) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 2m17.118649776s ago: executing program 2 (id=1175): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m16.941919017s ago: executing program 2 (id=1177): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m1.64596317s ago: executing program 33 (id=1177): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="b700000018000000bca30000000000002403000040feffff720af0ff0000000071a4f0ff000000001f030000000000002e140200000000002604fdffffff000061140400000000001d430000000000007a0a00fe0000001f6114000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767912d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce0900000000000000499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc682928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348de20f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97b4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b4f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb1bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb36e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b78825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e8a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b60000000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffff8, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 1m43.090077481s ago: executing program 5 (id=1312): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xf098, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, &(0x7f0000000780)=[{&(0x7f0000000e40)="ec", 0x1}], 0x1) syz_fuse_handle_req(r0, &(0x7f0000005040)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)={0x18, 0x0, 0x401, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m41.529224873s ago: executing program 0 (id=1320): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 1m41.350662311s ago: executing program 0 (id=1322): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) r1 = gettid() syz_clone3(&(0x7f0000000600)={0x80002200, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigaction(0x16, &(0x7f0000000540)={0x0, 0x80000000, 0x0, {[0x7]}}, 0x0, 0x8, &(0x7f00000004c0)) tkill(r1, 0x16) close(0x3) 1m40.485922726s ago: executing program 0 (id=1325): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 1m39.806213305s ago: executing program 5 (id=1327): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x82, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x40601) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) preadv2(r2, 0x0, 0x0, 0x5, 0x8001, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x7) ioctl$TIOCCONS(r1, 0x541d) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1m39.518810964s ago: executing program 5 (id=1329): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_io_uring_setup(0x4fa, &(0x7f0000010400)={0x0, 0x86e0, 0x1000, 0x8, 0x397}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) 1m39.504031773s ago: executing program 0 (id=1330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r4, 0x10c000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m38.918246731s ago: executing program 5 (id=1332): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000040c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f00000000c0)={0x40000000000000c1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)=ANY=[]) 1m38.254443358s ago: executing program 0 (id=1335): r0 = memfd_secret(0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r0, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) readahead(0xffffffffffffffff, 0x3, 0x98dd) recvmmsg(r0, 0x0, 0x0, 0x10021, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, 0x0) 1m38.175738506s ago: executing program 5 (id=1336): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x101d0) sendmsg$kcm(r1, &(0x7f00000001c0)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(0x3) 1m38.042599482s ago: executing program 0 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m37.823291821s ago: executing program 5 (id=1339): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x80, 0x0, @vifc_lcl_addr=@rand_addr=0x640100fd, @local}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1m37.002591009s ago: executing program 3 (id=1343): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r0, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000001900)=""/4096, 0x1000, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r0, &(0x7f0000000540)={0x1, {&(0x7f0000000040)=""/63, 0x3f, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000cc0)=""/213, 0xd5, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000006c0)={0x2, 0x0, {&(0x7f0000000600)=""/17, 0x11, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000900)={0x2, 0x0, {&(0x7f0000000980)=""/200, 0xc8, 0x0, 0x1, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f00000004c0)={0x2, 0x0, {&(0x7f00000007c0)=""/192, 0xc0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000280)=""/184, 0x2562bac182d8b35a, 0x0, 0x2, 0x3}}, 0x48) 1m36.863215348s ago: executing program 3 (id=1344): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = eventfd2(0x8, 0x0) write$eventfd(r0, &(0x7f0000000140)=0xfffffffffffffffc, 0x8) read(r0, &(0x7f0000000180)=""/78, 0xfffffeab) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) 1m36.235248972s ago: executing program 3 (id=1345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) 1m35.243857475s ago: executing program 3 (id=1349): syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r0 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) readv(r1, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/109, 0x6d}], 0x1) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_MMIO(r0, 0x20, &(0x7f0000000100)="64be365de974de7ab149b947a8218d12625b0c29c0496e90", 0x0, 0x18) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='fdinfo/4\x00') read$FUSE(r2, &(0x7f00000033c0)={0x2020}, 0x2020) 1m34.247757374s ago: executing program 3 (id=1352): socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x55eb, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x168}) r1 = socket$inet(0x2, 0x80001, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m34.06281088s ago: executing program 3 (id=1353): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x2, r1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 1m22.61111742s ago: executing program 34 (id=1337): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000014c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfff2, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m22.390810347s ago: executing program 35 (id=1339): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x3, 0x4, 0x80, 0x0, @vifc_lcl_addr=@rand_addr=0x640100fd, @local}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 1m18.602297526s ago: executing program 36 (id=1353): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000280)={0x0, @local, @local}, &(0x7f0000000500)=0x50) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@remote, 0x2, r1}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r3 = socket(0xa, 0x1, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 23.977737309s ago: executing program 4 (id=1397): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) socket$l2tp6(0xa, 0x2, 0x73) socket(0x40000000015, 0x5, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) unshare(0x22020400) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0xc3ac}, 0x0, 0x0) 21.312427827s ago: executing program 4 (id=1398): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r1, 0x1) 18.866704374s ago: executing program 4 (id=1399): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x5, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x1007}]}) timer_create(0x2, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 17.800912063s ago: executing program 4 (id=1400): r0 = syz_open_dev$sndpcmp(0x0, 0xf, 0x1ef403) sched_setscheduler(0x0, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x6}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r1, &(0x7f00000001c0)="86d11d", 0x3, 0x20000045, &(0x7f0000000140)={0xa, 0x2, 0xffff, @loopback, 0xfffffffd}, 0x1c) write$P9_RMKNOD(r1, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x2}}, 0xfffffe5c) shutdown(r1, 0x1) close(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r0, 0xc0884123, 0x0) 16.997052959s ago: executing program 4 (id=1401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf7473000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) 15.194782807s ago: executing program 4 (id=1402): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 0s ago: executing program 37 (id=1402): syz_usb_connect(0x2, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8044) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000200)='bridge0\x00') ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) kernel console output (not intermixed with test programs): 60743][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 232.160778][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.160801][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 232.160846][ T5876] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 232.160869][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.175096][ T5876] usb 1-1: config 0 descriptor?? [ 232.232248][ T8032] netlink: 'syz.4.827': attribute type 1 has an invalid length. [ 232.232270][ T8032] netlink: 56 bytes leftover after parsing attributes in process `syz.4.827'. [ 232.638879][ T5876] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 232.939740][ T5876] usb 1-1: USB disconnect, device number 8 [ 233.997999][ T7896] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.998130][ T7896] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.998374][ T7896] bridge_slave_0: entered allmulticast mode [ 234.029797][ T7896] bridge_slave_0: entered promiscuous mode [ 234.078798][ T7896] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.078930][ T7896] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.079160][ T7896] bridge_slave_1: entered allmulticast mode [ 234.112037][ T7896] bridge_slave_1: entered promiscuous mode [ 234.628203][ T12] hsr_slave_0: left promiscuous mode [ 234.668007][ T12] hsr_slave_1: left promiscuous mode [ 234.669264][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.669510][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.730746][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.730777][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.881895][ T12] veth1_macvtap: left promiscuous mode [ 234.882121][ T12] veth0_macvtap: left promiscuous mode [ 234.882444][ T12] veth1_vlan: left promiscuous mode [ 234.882843][ T12] veth0_vlan: left promiscuous mode [ 236.240002][ T8081] loop5: detected capacity change from 0 to 7 [ 236.253874][ T8081] Dev loop5: unable to read RDB block 7 [ 236.253907][ T8081] loop5: AHDI p3 [ 236.253942][ T8081] loop5: partition table partially beyond EOD, truncated [ 237.811609][ T12] team0 (unregistering): Port device team_slave_1 removed [ 238.181065][ T12] team0 (unregistering): Port device team_slave_0 removed [ 238.408072][ T5891] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 238.583192][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14385, setting to 64 [ 238.583230][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 238.583258][ T5891] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 238.583271][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.586902][ T5891] usb 1-1: config 0 descriptor?? [ 239.090890][ T5891] hid-multitouch 0003:0457:07DA.0008: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 239.379869][ T5891] usb 1-1: USB disconnect, device number 9 [ 240.238018][ T5892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 240.391672][ T5892] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.391695][ T5892] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.392967][ T5892] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 240.392992][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 240.393011][ T5892] usb 1-1: SerialNumber: syz [ 240.673349][ T5892] usb 1-1: 0:2 : does not exist [ 240.686972][ T5892] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 240.724913][ T5892] usb 1-1: USB disconnect, device number 10 [ 240.791414][ T7896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.907678][ T5985] udevd[5985]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.950417][ T7896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.253880][ T8108] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.015608][ T8108] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.064455][ T8127] input: syz1 as /devices/virtual/input/input14 [ 242.112917][ T7896] team0: Port device team_slave_0 added [ 242.220566][ T7896] team0: Port device team_slave_1 added [ 242.402199][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 242.402578][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 242.406822][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 242.407056][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 242.441505][ T8108] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.482990][ T5892] libceph: connect (1)[b::]:6789 error -101 [ 242.483200][ T5892] libceph: mon0 (1)[b::]:6789 connect error [ 242.498570][ T5892] libceph: connect (1)[b::]:6789 error -101 [ 242.498780][ T5892] libceph: mon0 (1)[b::]:6789 connect error [ 242.661767][ T5876] libceph: connect (1)[c::]:6789 error -101 [ 242.661909][ T5876] libceph: mon0 (1)[c::]:6789 connect error [ 242.762084][ T5892] libceph: connect (1)[b::]:6789 error -101 [ 242.762310][ T5892] libceph: mon0 (1)[b::]:6789 connect error [ 242.850083][ T8108] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.031975][ T7508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.040926][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.040943][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.040965][ T7896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.053133][ T7896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.053149][ T7896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.053172][ T7896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.072129][ T12] IPVS: stop unused estimator thread 0... [ 243.168278][ T5899] libceph: connect (1)[c::]:6789 error -101 [ 243.168546][ T5899] libceph: mon0 (1)[c::]:6789 connect error [ 243.190690][ T8135] ceph: No mds server is up or the cluster is laggy [ 243.191352][ T8138] ceph: No mds server is up or the cluster is laggy [ 243.198035][ T5876] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 243.268477][ T5892] libceph: connect (1)[b::]:6789 error -101 [ 243.268708][ T5892] libceph: mon0 (1)[b::]:6789 connect error [ 243.347931][ T5876] usb 1-1: Using ep0 maxpacket: 32 [ 243.379725][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10 [ 243.379763][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 243.379790][ T5876] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 243.423845][ T5876] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 243.423876][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 243.423897][ T5876] usb 1-1: Product: syz [ 243.423909][ T5876] usb 1-1: Manufacturer: syz [ 243.423921][ T5876] usb 1-1: SerialNumber: syz [ 243.524624][ T5799] cgroup: fork rejected by pids controller in /syz4 [ 243.552516][ T5876] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input15 [ 243.566434][ T7896] hsr_slave_0: entered promiscuous mode [ 243.571397][ T7896] hsr_slave_1: entered promiscuous mode [ 243.575218][ T7896] debugfs: 'hsr0' already exists in 'hsr' [ 243.575245][ T7896] Cannot create hsr debugfs directory [ 243.643706][ T7508] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.767613][ T13] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.816472][ T10] usb 1-1: USB disconnect, device number 11 [ 243.816563][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 243.975182][ T10] appletouch 1-1:1.0: input: appletouch disconnected [ 244.337976][ T1134] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.481619][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.481936][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.949456][ T3524] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.295423][ T1134] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.335390][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 245.352687][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 245.354356][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 245.356202][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 245.357384][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.440147][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.441900][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.447364][ T3524] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.856494][ T1134] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.935166][ T5876] IPVS: starting estimator thread 0... [ 246.041409][ T8184] IPVS: using max 7 ests per chain, 16800 per kthread [ 246.451855][ T1134] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.224220][ T1134] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.448932][ T5118] Bluetooth: hci0: command tx timeout [ 247.972619][ T8203] binder: 8202:8203 ioctl c0306201 0 returned -14 [ 247.986910][ T8203] binder: 8202:8203 ioctl c00c620f 200000000140 returned -22 [ 249.527849][ T5118] Bluetooth: hci0: command tx timeout [ 249.761076][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88803145fc00: rx timeout, send abort [ 249.761413][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88803145fc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 250.107010][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.129814][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.135276][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.137237][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.138715][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.181777][ T1134] bridge_slave_1: left allmulticast mode [ 251.181811][ T1134] bridge_slave_1: left promiscuous mode [ 251.182100][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.627806][ T5806] Bluetooth: hci0: command tx timeout [ 251.736360][ T1134] bridge_slave_0: left allmulticast mode [ 251.736392][ T1134] bridge_slave_0: left promiscuous mode [ 251.736682][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.332036][ T5806] Bluetooth: hci4: command tx timeout [ 253.688482][ T5806] Bluetooth: hci0: command tx timeout [ 254.437104][ T5806] Bluetooth: hci4: command tx timeout [ 255.039148][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 255.120745][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 255.156039][ T1134] bond0 (unregistering): Released all slaves [ 255.632245][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.632329][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.685192][ T5899] syz0: Port: 1 Link DOWN [ 256.353323][ T8316] uprobe: syz.0.927:8316 failed to unregister, leaking uprobe [ 256.507335][ T8172] chnl_net:caif_netlink_parms(): no params data found [ 256.509105][ T5806] Bluetooth: hci4: command tx timeout [ 256.980976][ T8322] hsr0: entered allmulticast mode [ 256.981001][ T8322] hsr_slave_0: entered allmulticast mode [ 256.981021][ T8322] hsr_slave_1: entered allmulticast mode [ 257.027948][ T8323] hsr_slave_0: left promiscuous mode [ 257.068038][ T8323] hsr_slave_1: left promiscuous mode [ 257.164633][ T8323] hsr0 (unregistering): left allmulticast mode [ 258.300842][ T10] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 258.383353][ T10] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 258.569510][ T5806] Bluetooth: hci4: command tx timeout [ 258.859569][ T1134] hsr_slave_0: left promiscuous mode [ 258.900568][ T1134] hsr_slave_1: left promiscuous mode [ 258.901843][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.901871][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.949209][ T1134] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.949240][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.066929][ T1134] veth1_macvtap: left promiscuous mode [ 259.066990][ T1134] veth0_macvtap: left promiscuous mode [ 259.067119][ T1134] veth1_vlan: left promiscuous mode [ 259.067207][ T1134] veth0_vlan: left promiscuous mode [ 259.107902][ T5899] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 259.280552][ T5899] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 259.280608][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.280635][ T5899] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.280665][ T5899] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.282255][ T5899] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.282281][ T5899] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.282301][ T5899] usb 1-1: Manufacturer: syz [ 259.303942][ T5899] usb 1-1: config 0 descriptor?? [ 259.771389][ T5899] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 259.824264][ T5899] appleir 0003:05AC:8243.000A: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 262.007553][ T5899] usb 1-1: USB disconnect, device number 12 [ 262.321494][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 262.321513][ T37] audit: type=1326 audit(1761168370.734:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.363936][ T37] audit: type=1326 audit(1761168370.734:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.364308][ T37] audit: type=1326 audit(1761168370.774:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.364838][ T37] audit: type=1326 audit(1761168370.774:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.365144][ T37] audit: type=1326 audit(1761168370.774:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.365684][ T37] audit: type=1326 audit(1761168370.774:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.372605][ T37] audit: type=1326 audit(1761168370.784:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.373520][ T37] audit: type=1326 audit(1761168370.784:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.373798][ T37] audit: type=1326 audit(1761168370.784:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.374687][ T37] audit: type=1326 audit(1761168370.784:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8372 comm="syz.0.946" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c5190efc9 code=0x7ffc0000 [ 262.598925][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 262.878570][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 263.368962][ T58] smc: removing ib device syz0 [ 265.398600][ T7896] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 265.458068][ T8172] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.458223][ T8172] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.458482][ T8172] bridge_slave_0: entered allmulticast mode [ 265.460147][ T8172] bridge_slave_0: entered promiscuous mode [ 265.474722][ T7896] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 265.559805][ T8172] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.559970][ T8172] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.560200][ T8172] bridge_slave_1: entered allmulticast mode [ 265.586816][ T8172] bridge_slave_1: entered promiscuous mode [ 265.729701][ T7896] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 265.957873][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 266.109967][ T7896] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 266.120699][ T31] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 266.120753][ T31] usb 3-1: config 1 interface 0 altsetting 253 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 266.120777][ T31] usb 3-1: config 1 interface 0 has no altsetting 0 [ 266.124025][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 266.124050][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.124067][ T31] usb 3-1: Product: syz [ 266.124080][ T31] usb 3-1: Manufacturer: syz [ 266.124092][ T31] usb 3-1: SerialNumber: syz [ 266.890319][ T31] usb 3-1: USB disconnect, device number 10 [ 266.955944][ T8172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.436273][ T8172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.125528][ T8424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.960'. [ 268.125557][ T8424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.960'. [ 268.492639][ T8172] team0: Port device team_slave_0 added [ 268.560193][ T8172] team0: Port device team_slave_1 added [ 268.563839][ T8228] chnl_net:caif_netlink_parms(): no params data found [ 271.478040][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.478059][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.478086][ T8172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.500660][ T8172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.500677][ T8172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 271.500700][ T8172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.461297][ T8172] hsr_slave_0: entered promiscuous mode [ 272.476348][ T8172] hsr_slave_1: entered promiscuous mode [ 272.763168][ T8480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 272.778290][ T8228] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.778451][ T8228] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.778699][ T8228] bridge_slave_0: entered allmulticast mode [ 272.822320][ T8228] bridge_slave_0: entered promiscuous mode [ 272.843396][ T8228] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.843638][ T8228] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.843890][ T8228] bridge_slave_1: entered allmulticast mode [ 272.847260][ T8228] bridge_slave_1: entered promiscuous mode [ 273.317896][ T44] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 273.467854][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 273.470692][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.470725][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 273.470745][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 273.470786][ T44] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 273.470808][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.553521][ T44] usb 3-1: config 0 descriptor?? [ 273.732116][ T8228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.813866][ T8228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.000756][ T44] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.000B/input/input16 [ 274.109518][ T44] appleir 0003:05AC:8241.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 274.275794][ T10] usb 3-1: USB disconnect, device number 11 [ 274.367193][ T8491] fido_id[8491]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 274.758385][ T8228] team0: Port device team_slave_0 added [ 275.050733][ T8228] team0: Port device team_slave_1 added [ 275.609177][ T8515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.984'. [ 276.190602][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.190613][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.190625][ T8228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.227369][ T8228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.227386][ T8228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 276.227409][ T8228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.017830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 277.167817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 277.287788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 278.292568][ T8228] hsr_slave_0: entered promiscuous mode [ 278.294216][ T8228] hsr_slave_1: entered promiscuous mode [ 278.295324][ T8228] debugfs: 'hsr0' already exists in 'hsr' [ 278.295349][ T8228] Cannot create hsr debugfs directory [ 279.738081][ T5793] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 279.918193][ T5793] usb 3-1: Using ep0 maxpacket: 16 [ 279.920704][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.920737][ T5793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.920778][ T5793] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 279.920800][ T5793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.958527][ T5793] usb 3-1: config 0 descriptor?? [ 280.360045][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.379790][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.383720][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.387331][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.399426][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.451580][ T5793] kye 0003:0458:5016.000C: control desc unexpectedly large [ 280.541433][ T5793] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000C/input/input17 [ 280.673857][ T5793] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.000C/input/input18 [ 280.798289][ T5793] kye 0003:0458:5016.000C: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 280.834164][ T5793] usb 3-1: USB disconnect, device number 12 [ 280.987620][ T8589] fido_id[8589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 281.544034][ T1134] bridge_slave_1: left allmulticast mode [ 281.544066][ T1134] bridge_slave_1: left promiscuous mode [ 281.544368][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.669844][ T1134] bridge_slave_0: left allmulticast mode [ 281.669874][ T1134] bridge_slave_0: left promiscuous mode [ 281.675691][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.511871][ T5806] Bluetooth: hci5: command tx timeout [ 284.238580][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.299609][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.343214][ T1134] bond0 (unregistering): Released all slaves [ 284.570181][ T5806] Bluetooth: hci5: command tx timeout [ 284.977952][ T1134] hsr_slave_0: left promiscuous mode [ 285.000814][ T1134] hsr_slave_1: left promiscuous mode [ 285.014068][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.038851][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.520707][ T37] kauditd_printk_skb: 9 callbacks suppressed [ 285.520727][ T37] audit: type=1326 audit(1761168393.934:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.522523][ T37] audit: type=1326 audit(1761168393.934:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.524936][ T37] audit: type=1326 audit(1761168393.934:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.525511][ T37] audit: type=1326 audit(1761168393.934:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.525871][ T37] audit: type=1326 audit(1761168393.934:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.535881][ T37] audit: type=1326 audit(1761168393.934:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.535935][ T37] audit: type=1326 audit(1761168393.934:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.535976][ T37] audit: type=1326 audit(1761168393.944:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.536016][ T37] audit: type=1326 audit(1761168393.944:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 285.536055][ T37] audit: type=1326 audit(1761168393.944:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8653 comm="syz.2.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f565a59efc9 code=0x7ffc0000 [ 286.498858][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 286.648005][ T5806] Bluetooth: hci5: command tx timeout [ 286.798842][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 288.738063][ T5806] Bluetooth: hci5: command tx timeout [ 289.114871][ T8172] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 289.242472][ T8172] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 289.400524][ T8172] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 289.436248][ T8172] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.234340][ T8682] syz.2.1021 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 290.483210][ T8580] chnl_net:caif_netlink_parms(): no params data found [ 292.952770][ T8580] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.952886][ T8580] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.953141][ T8580] bridge_slave_0: entered allmulticast mode [ 292.954728][ T8580] bridge_slave_0: entered promiscuous mode [ 292.966888][ T8580] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.967022][ T8580] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.967262][ T8580] bridge_slave_1: entered allmulticast mode [ 292.970454][ T8580] bridge_slave_1: entered promiscuous mode [ 293.039189][ T8228] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 293.223590][ T8228] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 293.703298][ T8228] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 293.728163][ T8580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.746298][ T8580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.748491][ T8228] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 294.142799][ T8580] team0: Port device team_slave_0 added [ 294.169760][ T8580] team0: Port device team_slave_1 added [ 294.540393][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.540411][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.540440][ T8580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.584874][ T8172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.599441][ T8580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.599458][ T8580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.599482][ T8580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.922226][ T8756] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 295.224616][ T8760] kvm: vcpu 0: requested 14 ns lapic timer period limited to 200000 ns [ 295.454577][ T8580] hsr_slave_0: entered promiscuous mode [ 295.456281][ T8580] hsr_slave_1: entered promiscuous mode [ 295.457402][ T8580] debugfs: 'hsr0' already exists in 'hsr' [ 295.457427][ T8580] Cannot create hsr debugfs directory [ 295.561669][ T8172] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.002949][ T1134] bridge_slave_1: left allmulticast mode [ 296.002981][ T1134] bridge_slave_1: left promiscuous mode [ 296.003342][ T1134] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.073201][ T1134] bridge_slave_0: left allmulticast mode [ 296.073241][ T1134] bridge_slave_0: left promiscuous mode [ 296.073547][ T1134] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.668622][ T1134] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.797070][ T1134] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.872119][ T1134] bond0 (unregistering): Released all slaves [ 297.982863][ T8789] batadv_slave_1: entered promiscuous mode [ 298.259229][ T8791] batadv_slave_1: left promiscuous mode [ 298.277987][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.278204][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.479543][ T1134] hsr_slave_0: left promiscuous mode [ 298.518092][ T1134] hsr_slave_1: left promiscuous mode [ 298.520939][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.584931][ T1134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.771790][ T1134] team0 (unregistering): Port device team_slave_1 removed [ 299.998783][ T1134] team0 (unregistering): Port device team_slave_0 removed [ 301.010230][ T8800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1053'. [ 301.012962][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.013246][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.023264][ T8228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.164452][ T8228] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.280948][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.281204][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.317274][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.317480][ T3524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.899490][ T8172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.132695][ T8580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 304.283647][ T8580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 304.331280][ T8580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 304.393731][ T8580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 304.508374][ T8228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.632928][ T44] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 304.768105][ T8172] veth0_vlan: entered promiscuous mode [ 304.799995][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 304.834213][ T44] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 304.834244][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.834263][ T44] usb 1-1: Product: syz [ 304.834277][ T44] usb 1-1: Manufacturer: syz [ 304.834291][ T44] usb 1-1: SerialNumber: syz [ 304.860151][ T8172] veth1_vlan: entered promiscuous mode [ 304.899821][ T44] usb 1-1: config 0 descriptor?? [ 304.925560][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 305.332681][ T8580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.462018][ T8580] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.501459][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.512386][ T3524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.601555][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.602252][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.371638][ T44] gspca_stk1135: reg_w 0xf err -71 [ 306.373324][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373351][ T44] gspca_stk1135: Sensor write failed [ 306.373381][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373391][ T44] gspca_stk1135: Sensor write failed [ 306.373422][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373433][ T44] gspca_stk1135: Sensor read failed [ 306.373464][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373474][ T44] gspca_stk1135: Sensor read failed [ 306.373482][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 306.373516][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373526][ T44] gspca_stk1135: Sensor read failed [ 306.373557][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373567][ T44] gspca_stk1135: Sensor read failed [ 306.373598][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373607][ T44] gspca_stk1135: Sensor write failed [ 306.373633][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 306.373642][ T44] gspca_stk1135: Sensor write failed [ 306.373742][ T44] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 306.465095][ T8228] veth0_vlan: entered promiscuous mode [ 306.518873][ T44] usb 1-1: USB disconnect, device number 13 [ 306.616157][ T8228] veth1_vlan: entered promiscuous mode [ 306.648975][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 306.656383][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 306.669021][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 306.694443][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 306.695450][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 306.978984][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.041051][ T8910] netlink: 'syz.2.1071': attribute type 1 has an invalid length. [ 307.183685][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.424606][ T8910] 8021q: adding VLAN 0 to HW filter on device bond2 [ 307.500986][ T8913] bond2: (slave gretap1): making interface the new active one [ 307.504766][ T8913] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 307.676784][ T8228] veth0_macvtap: entered promiscuous mode [ 307.964004][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.202987][ T8228] veth1_macvtap: entered promiscuous mode [ 308.581308][ T8580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.812432][ T5806] Bluetooth: hci3: command tx timeout [ 309.447360][ T8951] trusted_key: syz.0.1078 sent an empty control message without MSG_MORE. [ 309.810783][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 309.826914][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 309.842670][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 309.846385][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 309.868173][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 310.888414][ T5806] Bluetooth: hci3: command tx timeout [ 311.516464][ T8903] chnl_net:caif_netlink_parms(): no params data found [ 311.548934][ T151] bridge_slave_1: left allmulticast mode [ 311.548966][ T151] bridge_slave_1: left promiscuous mode [ 311.549247][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.634381][ T8990] netlink: 'syz.2.1091': attribute type 8 has an invalid length. [ 311.634407][ T8990] netlink: 'syz.2.1091': attribute type 9 has an invalid length. [ 311.634421][ T8990] netlink: 'syz.2.1091': attribute type 10 has an invalid length. [ 311.634434][ T8990] netlink: 'syz.2.1091': attribute type 11 has an invalid length. [ 311.634447][ T8990] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1091'. [ 311.710227][ T151] bridge_slave_0: left allmulticast mode [ 311.710262][ T151] bridge_slave_0: left promiscuous mode [ 311.710556][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.927941][ T5806] Bluetooth: hci0: command tx timeout [ 312.697907][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1094'. [ 312.978764][ T5806] Bluetooth: hci3: command tx timeout [ 314.019715][ T5806] Bluetooth: hci0: command tx timeout [ 314.668547][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.728613][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.771560][ T151] bond0 (unregistering): Released all slaves [ 314.796782][ T8580] veth0_vlan: entered promiscuous mode [ 314.797437][ T8992] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1092'. [ 315.058284][ T5806] Bluetooth: hci3: command tx timeout [ 315.528398][ T151] hsr_slave_0: left promiscuous mode [ 315.547983][ T151] hsr_slave_1: left promiscuous mode [ 315.548746][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.601602][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.681037][ T151] veth1_vlan: left promiscuous mode [ 315.681152][ T151] veth0_vlan: left promiscuous mode [ 316.089334][ T5806] Bluetooth: hci0: command tx timeout [ 317.052485][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.052614][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.494979][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.869558][ C0] vkms_vblank_simulate: vblank timer overrun [ 317.941896][ T151] team0 (unregistering): Port device team_slave_1 removed [ 318.018820][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.167912][ T5806] Bluetooth: hci0: command tx timeout [ 318.183177][ T151] team0 (unregistering): Port device team_slave_0 removed [ 318.971336][ C0] vkms_vblank_simulate: vblank timer overrun [ 319.802330][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.399941][ T9026] gretap0: entered promiscuous mode [ 320.400048][ T9028] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 320.400086][ T9028] gretap0: left promiscuous mode [ 320.556009][ T8580] veth1_vlan: entered promiscuous mode [ 320.669495][ T8903] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.669602][ T8903] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.674113][ T8903] bridge_slave_0: entered allmulticast mode [ 320.675751][ T8903] bridge_slave_0: entered promiscuous mode [ 320.920838][ C0] vkms_vblank_simulate: vblank timer overrun [ 320.959364][ T8903] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.959451][ T8903] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.959596][ T8903] bridge_slave_1: entered allmulticast mode [ 320.961141][ T8903] bridge_slave_1: entered promiscuous mode [ 321.168433][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.195750][ T8903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.210444][ T8952] chnl_net:caif_netlink_parms(): no params data found [ 321.224057][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.232467][ T8903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.274874][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.485856][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.614783][ T9057] evm: overlay not supported [ 321.704816][ T8903] team0: Port device team_slave_0 added [ 321.747089][ T8903] team0: Port device team_slave_1 added [ 322.294026][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.294046][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.294073][ T8903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.429151][ T8903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.429170][ T8903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.429198][ T8903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.432590][ T8952] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.432794][ T8952] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.433020][ T8952] bridge_slave_0: entered allmulticast mode [ 322.436322][ T8952] bridge_slave_0: entered promiscuous mode [ 322.497119][ T8952] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.497275][ T8952] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.497493][ T8952] bridge_slave_1: entered allmulticast mode [ 322.500922][ T8952] bridge_slave_1: entered promiscuous mode [ 322.620124][ T8580] veth0_macvtap: entered promiscuous mode [ 322.788222][ T44] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 322.937862][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 322.939920][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.939947][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.939968][ T44] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 322.940002][ T44] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 322.940016][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.947083][ T44] usb 3-1: config 0 descriptor?? [ 322.978215][ T8952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.997147][ T8903] hsr_slave_0: entered promiscuous mode [ 322.999256][ T8903] hsr_slave_1: entered promiscuous mode [ 323.301586][ T8952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.302629][ T8580] veth1_macvtap: entered promiscuous mode [ 323.418848][ T9089] random: crng reseeded on system resumption [ 323.569217][ T44] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 323.642942][ T44] shield 0003:0955:7214.000D: Registered Thunderstrike controller [ 323.643519][ T44] shield 0003:0955:7214.000D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 323.821945][ T5876] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 323.822294][ T5876] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 323.822608][ T5876] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 323.822924][ T5876] shield 0003:0955:7214.000D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 323.834487][ T5892] usb 3-1: USB disconnect, device number 13 [ 324.057244][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1127'. [ 324.177634][ T8952] team0: Port device team_slave_0 added [ 324.229685][ T9102] bridge0: entered allmulticast mode [ 324.230704][ T9105] bridge_slave_1: left allmulticast mode [ 324.230731][ T9105] bridge_slave_1: left promiscuous mode [ 324.231118][ T9105] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.346547][ T9105] bridge_slave_0: left allmulticast mode [ 324.346580][ T9105] bridge_slave_0: left promiscuous mode [ 324.346900][ T9105] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.550000][ T9105] bridge0 (unregistering): left allmulticast mode [ 324.660533][ T8952] team0: Port device team_slave_1 added [ 325.327541][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.327561][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.327588][ T8952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.353052][ T9121] sctp: [Deprecated]: syz.0.1131 (pid 9121) Use of int in max_burst socket option deprecated. [ 325.353052][ T9121] Use struct sctp_assoc_value instead [ 325.441154][ T8952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.441175][ T8952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.441206][ T8952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.587189][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.614477][ T9125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1132'. [ 326.099296][ T8580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.590844][ T8952] hsr_slave_0: entered promiscuous mode [ 326.592605][ T8952] hsr_slave_1: entered promiscuous mode [ 326.593732][ T8952] debugfs: 'hsr0' already exists in 'hsr' [ 326.593760][ T8952] Cannot create hsr debugfs directory [ 326.871689][ T3587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.897357][ T3587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.129268][ T3587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.594218][ T3587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.163729][ T151] bridge_slave_1: left allmulticast mode [ 328.163761][ T151] bridge_slave_1: left promiscuous mode [ 328.164054][ T151] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.228802][ T151] bridge_slave_0: left allmulticast mode [ 328.228822][ T151] bridge_slave_0: left promiscuous mode [ 328.229001][ T151] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.927880][ T44] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 331.090544][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 331.090574][ T44] usb 1-1: config 1 has no interface number 0 [ 331.090627][ T44] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 331.090656][ T44] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 331.090683][ T44] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 331.090720][ T44] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 331.090746][ T44] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 221, changing to 4 [ 331.090772][ T44] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 59245, setting to 1023 [ 331.094082][ T44] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.094111][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.094130][ T44] usb 1-1: Product: syz [ 331.094145][ T44] usb 1-1: Manufacturer: syz [ 331.094159][ T44] usb 1-1: SerialNumber: syz [ 331.104169][ T9172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.319818][ T9172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.348732][ T151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.428564][ T151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.462034][ T151] bond0 (unregistering): Released all slaves [ 331.521344][ T9172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.945054][ T9172] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 331.952180][ T44] cdc_ncm 1-1:1.1: bind() failure [ 332.166306][ T44] usb 1-1: USB disconnect, device number 14 [ 332.218074][ T151] hsr_slave_0: left promiscuous mode [ 332.238014][ T151] hsr_slave_1: left promiscuous mode [ 332.240476][ T151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.279274][ T151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.391579][ T151] veth1_macvtap: left promiscuous mode [ 332.393756][ T151] veth0_macvtap: left promiscuous mode [ 332.394082][ T151] veth1_vlan: left promiscuous mode [ 332.394275][ T151] veth0_vlan: left promiscuous mode [ 332.666562][ T9189] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1150'. [ 332.666578][ T9189] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1150'. [ 334.530238][ T151] team0 (unregistering): Port device team_slave_1 removed [ 334.759199][ T151] team0 (unregistering): Port device team_slave_0 removed [ 337.735876][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.735895][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.990227][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.990249][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.107788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 338.108786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 339.716924][ T9246] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 339.823035][ T9246] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 340.237178][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 340.237399][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 340.291905][ T9252] ceph: No mds server is up or the cluster is laggy [ 340.292521][ T5793] libceph: connect (1)[c::]:6789 error -101 [ 340.292719][ T5793] libceph: mon0 (1)[c::]:6789 connect error [ 340.548805][ T5877] libceph: connect (1)[c::]:6789 error -101 [ 340.549288][ T5877] libceph: mon0 (1)[c::]:6789 connect error [ 340.973665][ T9263] netlink: 'syz.3.1166': attribute type 1 has an invalid length. [ 340.973691][ T9263] netlink: 'syz.3.1166': attribute type 4 has an invalid length. [ 340.973704][ T9263] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1166'. [ 340.992303][ T8903] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.115012][ T9260] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 341.146596][ T8903] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.377890][ T8903] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.442290][ T8903] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.764424][ T9296] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1171'. [ 342.097339][ T8952] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.201541][ T8952] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.267135][ T8952] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 342.372250][ T8952] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 342.905599][ T8903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.007015][ T8903] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.054491][ T151] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.067575][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.141983][ T8459] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.151367][ T8459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.339545][ T8952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.560789][ T9332] veth2: entered promiscuous mode [ 343.560818][ T9332] veth2: entered allmulticast mode [ 343.683325][ T8952] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.758776][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.758951][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.815994][ T3587] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.816171][ T3587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.944391][ T8903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.955697][ T9362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 345.022067][ T8952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.449638][ T9375] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1186'. [ 346.255790][ T8903] veth0_vlan: entered promiscuous mode [ 346.319077][ T8903] veth1_vlan: entered promiscuous mode [ 346.348838][ T8952] veth0_vlan: entered promiscuous mode [ 346.387585][ T8952] veth1_vlan: entered promiscuous mode [ 346.546908][ T8903] veth0_macvtap: entered promiscuous mode [ 346.583732][ T8903] veth1_macvtap: entered promiscuous mode [ 346.634531][ T8952] veth0_macvtap: entered promiscuous mode [ 346.666917][ T8952] veth1_macvtap: entered promiscuous mode [ 346.685488][ T8903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.724151][ T8903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.782841][ T8459] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.790233][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.792236][ T8459] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.804349][ T8459] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.817331][ T8459] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.833460][ T8952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.904345][ T4397] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.905519][ T4397] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.907228][ T4397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.908694][ T4397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.207055][ T9419] netlink: 'syz.0.1197': attribute type 8 has an invalid length. [ 347.207080][ T9419] netlink: 'syz.0.1197': attribute type 9 has an invalid length. [ 347.207093][ T9419] netlink: 'syz.0.1197': attribute type 10 has an invalid length. [ 347.207106][ T9419] netlink: 'syz.0.1197': attribute type 11 has an invalid length. [ 347.207119][ T9419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1197'. [ 347.804131][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.804153][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.092520][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.092544][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.732098][ T1430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.732123][ T1430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.043719][ T8459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.043742][ T8459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.550597][ T9456] loop6: detected capacity change from 0 to 7 [ 351.558120][ T9456] Dev loop6: unable to read RDB block 7 [ 351.558166][ T9456] loop6: unable to read partition table [ 351.558402][ T9456] loop6: partition table beyond EOD, truncated [ 351.558420][ T9456] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 351.853040][ T991] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 352.108889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 352.736670][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.736707][ T991] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.736731][ T991] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.736777][ T991] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 352.736801][ T991] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.801368][ T991] usb 1-1: config 0 descriptor?? [ 353.284135][ T991] sony 0003:054C:0268.000E: unknown main item tag 0x7 [ 353.284175][ T991] sony 0003:054C:0268.000E: unexpected long global item [ 353.285150][ T991] sony 0003:054C:0268.000E: parse failed [ 353.285276][ T991] sony 0003:054C:0268.000E: probe with driver sony failed with error -22 [ 353.556106][ T991] usb 1-1: USB disconnect, device number 15 [ 354.669927][ T37] kauditd_printk_skb: 7 callbacks suppressed [ 354.669948][ T37] audit: type=1326 audit(1761168463.074:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9483 comm="syz.4.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a16aefc9 code=0x0 [ 356.069609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 358.683723][ T9550] binder: 9545:9550 ioctl c0306201 200000000640 returned -22 [ 359.134089][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.147102][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.151338][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.178105][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.211667][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.839284][ T1112] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.089361][ T9573] QAT: Stopping all acceleration devices. [ 360.281728][ T1112] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.687354][ T1112] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.054988][ T1112] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.158975][ T9598] syz_tun: entered allmulticast mode [ 361.182855][ T9595] syz_tun: left allmulticast mode [ 361.287934][ T5118] Bluetooth: hci4: command tx timeout [ 361.777631][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.170245][ T37] audit: type=1326 audit(1761168470.574:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a16aefc9 code=0x7ffc0000 [ 362.170306][ T37] audit: type=1326 audit(1761168470.574:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f56a16aefc9 code=0x7ffc0000 [ 362.170356][ T37] audit: type=1326 audit(1761168470.584:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9605 comm="syz.4.1267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56a16aefc9 code=0x7ffc0000 [ 362.776464][ T9558] chnl_net:caif_netlink_parms(): no params data found [ 363.407875][ T5118] Bluetooth: hci4: command tx timeout [ 363.499482][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.938339][ T9620] loop7: detected capacity change from 0 to 16384 [ 364.835880][ T9558] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.845353][ T9558] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.845605][ T9558] bridge_slave_0: entered allmulticast mode [ 364.872969][ T9558] bridge_slave_0: entered promiscuous mode [ 364.975377][ T9558] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.975538][ T9558] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.975795][ T9558] bridge_slave_1: entered allmulticast mode [ 364.996040][ T9558] bridge_slave_1: entered promiscuous mode [ 365.157946][ T31] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 365.336573][ T31] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.336605][ T31] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 365.336671][ T31] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 365.336695][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.403681][ T31] usb 6-1: config 0 descriptor?? [ 365.447602][ T31] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 365.457921][ T5118] Bluetooth: hci4: command tx timeout [ 365.464839][ T31] dvb-usb: bulk message failed: -22 (3/0) [ 365.551930][ T31] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 365.553790][ T31] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 365.553888][ T31] usb 6-1: media controller created [ 365.584620][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.633435][ T31] dvb-usb: bulk message failed: -22 (6/0) [ 365.633543][ T31] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 365.634845][ T9643] dibusb: i2c wr: len=61 is too big! [ 365.634845][ T9643] [ 365.666275][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 365.719427][ T31] dvb-usb: schedule remote query interval to 150 msecs. [ 365.719454][ T31] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 365.723278][ T31] usb 6-1: USB disconnect, device number 2 [ 365.748451][ T1112] bridge_slave_1: left allmulticast mode [ 365.748479][ T1112] bridge_slave_1: left promiscuous mode [ 365.748754][ T1112] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.970179][ T1112] bridge_slave_0: left allmulticast mode [ 365.970213][ T1112] bridge_slave_0: left promiscuous mode [ 365.970515][ T1112] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.036061][ T31] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 366.817811][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 367.037555][ T10] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.037580][ T10] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.039388][ T10] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.039415][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.039432][ T10] usb 6-1: SerialNumber: syz [ 367.365201][ T10] usb 6-1: 0:2 : does not exist [ 367.527818][ T5118] Bluetooth: hci4: command tx timeout [ 368.066051][ T10] usb 6-1: USB disconnect, device number 3 [ 368.369134][ T9254] udevd[9254]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.600089][ T1112] bond2 (unregistering): (slave gretap1): Releasing active interface [ 371.215839][ T1112] bond1 (unregistering): (slave geneve2): Releasing active interface [ 373.418833][ T1112] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 373.528851][ T1112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.577041][ T1112] bond0 (unregistering): Released all slaves [ 373.677879][ T44] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 373.838916][ T44] usb 6-1: Using ep0 maxpacket: 8 [ 373.841388][ T44] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.841451][ T44] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 373.841478][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 373.841503][ T44] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 373.841526][ T44] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 373.844743][ T44] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 373.844779][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 373.844799][ T44] usb 6-1: Product: syz [ 373.844814][ T44] usb 6-1: Manufacturer: syz [ 373.844828][ T44] usb 6-1: SerialNumber: syz [ 373.976276][ T44] usb 6-1: config 0 descriptor?? [ 374.186901][ T37] audit: type=1326 audit(1761168482.594:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9731 comm="syz.0.1309" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0c5190efc9 code=0x0 [ 374.211610][ T44] radio-si470x 6-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 374.211626][ T44] radio-si470x 6-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 374.401243][ T44] radio-si470x 6-1:0.0: software version 0, hardware version 0 [ 374.401270][ T44] radio-si470x 6-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 374.401289][ T44] radio-si470x 6-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 374.623973][ T44] radio-si470x 6-1:0.0: submitting int urb failed (-90) [ 374.792615][ T1112] bond1 (unregistering): Released all slaves [ 375.650207][ T44] radio-si470x 6-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 375.651658][ T44] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 375.722141][ T44] usb 6-1: USB disconnect, device number 4 [ 375.881478][ T1112] bond2 (unregistering): Released all slaves [ 375.923532][ T9558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.097745][ T9558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.808258][ T9764] 9pnet_fd: p9_fd_create_unix (9764): problem connecting socket: éq‰Y’3aK: -111 [ 377.940558][ T9558] team0: Port device team_slave_0 added [ 377.945311][ T9558] team0: Port device team_slave_1 added [ 378.501225][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.501309][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.657988][ T5899] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 378.684189][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.684207][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.684232][ T9558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.693069][ T9558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.693085][ T9558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 378.693109][ T9558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.867821][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 378.870942][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 378.870981][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 378.871007][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 378.871029][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.871077][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 378.871101][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.034919][ T9558] hsr_slave_0: entered promiscuous mode [ 379.053267][ T9558] hsr_slave_1: entered promiscuous mode [ 379.057599][ T9558] debugfs: 'hsr0' already exists in 'hsr' [ 379.069567][ T9558] Cannot create hsr debugfs directory [ 379.160452][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.160479][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.182442][ T5899] usb 5-1: GET_CAPABILITIES returned 0 [ 379.182471][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 379.186244][ T1112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.186285][ T1112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.292284][ T1112] veth1_macvtap: left promiscuous mode [ 379.292346][ T1112] veth0_macvtap: left promiscuous mode [ 379.292435][ T1112] veth1_vlan: left allmulticast mode [ 379.292500][ T1112] veth1_vlan: left promiscuous mode [ 379.292588][ T1112] veth0_vlan: left promiscuous mode [ 379.396835][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 379.417933][ T5899] usb 5-1: USB disconnect, device number 8 [ 380.377884][ T5877] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 380.509678][ T1112] team0 (unregistering): Port device macvlan1 removed [ 380.544819][ T5877] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 380.544854][ T5877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.544875][ T5877] usb 5-1: Product: syz [ 380.544889][ T5877] usb 5-1: Manufacturer: syz [ 380.544903][ T5877] usb 5-1: SerialNumber: syz [ 381.440281][ T9816] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 381.689390][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805cfbc400: rx timeout, send abort [ 382.189452][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805cfbc400: abort rx timeout. Force session deactivation [ 382.190223][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805cfbf000: rx timeout, send abort [ 382.538626][ T5877] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 382.541559][ T5877] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 382.543430][ T5877] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 382.543487][ T5877] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 382.546037][ T5877] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 382.623818][ T5877] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 382.686416][ T5877] usb 5-1: USB disconnect, device number 9 [ 382.690299][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88805cfbf000: abort rx timeout. Force session deactivation [ 383.418323][ T1112] team0 (unregistering): Port device team_slave_1 removed [ 384.490643][ T1112] team0 (unregistering): Port device team_slave_0 removed [ 398.386387][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 398.416227][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 398.424748][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 398.436723][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 398.445416][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 398.788835][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 398.829544][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 398.832632][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 398.836192][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 398.875379][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 400.567999][ T5118] Bluetooth: hci1: command tx timeout [ 400.967866][ T5118] Bluetooth: hci6: command tx timeout [ 401.304179][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 401.349056][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 401.351240][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 401.356153][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 401.379475][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 401.658615][ T9824] syz_tun: entered allmulticast mode [ 401.665915][ T9825] pimreg: entered allmulticast mode [ 401.709648][ T9825] syz_tun: left allmulticast mode [ 401.709810][ T9825] pimreg: left allmulticast mode [ 402.657957][ T5806] Bluetooth: hci1: command tx timeout [ 403.049613][ T5806] Bluetooth: hci6: command tx timeout [ 403.453094][ T5118] Bluetooth: hci7: command tx timeout [ 404.729687][ T5118] Bluetooth: hci1: command tx timeout [ 405.133457][ T5118] Bluetooth: hci6: command tx timeout [ 405.528739][ T5118] Bluetooth: hci7: command tx timeout [ 406.808448][ T5118] Bluetooth: hci1: command tx timeout [ 407.207891][ T5118] Bluetooth: hci6: command tx timeout [ 407.607868][ T5118] Bluetooth: hci7: command tx timeout [ 409.698558][ T5118] Bluetooth: hci7: command tx timeout [ 414.523733][ T37] audit: type=1800 audit(1761168522.914:316): pid=9994 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1381" name="bus" dev="tmpfs" ino=330 res=0 errno=0 [ 416.207172][ T9930] chnl_net:caif_netlink_parms(): no params data found [ 416.296409][ T9913] chnl_net:caif_netlink_parms(): no params data found [ 416.341465][ T9910] chnl_net:caif_netlink_parms(): no params data found [ 416.420346][ T9558] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 416.926430][ T9558] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 417.690135][ T9558] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 418.638432][ T9558] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 418.873698][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 418.937166][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 418.981186][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 418.982900][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 418.983970][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 421.047904][ T5806] Bluetooth: hci0: command tx timeout [ 422.305561][ T9930] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.305731][ T9930] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.306018][ T9930] bridge_slave_0: entered allmulticast mode [ 422.339232][ T9930] bridge_slave_0: entered promiscuous mode [ 422.691357][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.691553][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.691832][ T9913] bridge_slave_0: entered allmulticast mode [ 422.736717][ T9913] bridge_slave_0: entered promiscuous mode [ 422.749748][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.749897][ T9930] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.750121][ T9930] bridge_slave_1: entered allmulticast mode [ 422.775939][ T9930] bridge_slave_1: entered promiscuous mode [ 423.127863][ T5806] Bluetooth: hci0: command tx timeout [ 423.135795][ T9910] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.135953][ T9910] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.136219][ T9910] bridge_slave_0: entered allmulticast mode [ 423.170048][ T9910] bridge_slave_0: entered promiscuous mode [ 423.190776][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.190939][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.191203][ T9913] bridge_slave_1: entered allmulticast mode [ 423.194688][ T9913] bridge_slave_1: entered promiscuous mode [ 423.493274][ T9910] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.493560][ T9910] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.493783][ T9910] bridge_slave_1: entered allmulticast mode [ 423.507813][ T9910] bridge_slave_1: entered promiscuous mode [ 425.207892][ T5806] Bluetooth: hci0: command tx timeout [ 425.626281][ T9930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.696380][ T9913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.704767][ T9930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.744973][ T9910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.782234][ T9913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 427.287811][ T5806] Bluetooth: hci0: command tx timeout [ 428.139234][ T9910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.942366][ T9930] team0: Port device team_slave_0 added [ 431.174901][ T9913] team0: Port device team_slave_0 added [ 431.189856][ T9930] team0: Port device team_slave_1 added [ 431.200102][ T9910] team0: Port device team_slave_0 added [ 431.221849][ T9913] team0: Port device team_slave_1 added [ 431.225902][ T9910] team0: Port device team_slave_1 added [ 431.780982][ T5806] Bluetooth: hci3: command 0x0406 tx timeout [ 434.443468][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.443487][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.443512][ T9930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.529749][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.529769][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.529796][ T9913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.532018][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.532035][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.532062][ T9910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.537566][ T9930] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.537581][ T9930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.537609][ T9930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.698966][ T9913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.698985][ T9913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.699013][ T9913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.707240][ T9910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.707258][ T9910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.707287][ T9910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.141694][ T9930] hsr_slave_0: entered promiscuous mode [ 438.143338][ T9930] hsr_slave_1: entered promiscuous mode [ 438.144513][ T9930] debugfs: 'hsr0' already exists in 'hsr' [ 438.144540][ T9930] Cannot create hsr debugfs directory [ 438.233355][ T9913] hsr_slave_0: entered promiscuous mode [ 438.234198][ T9913] hsr_slave_1: entered promiscuous mode [ 438.234710][ T9913] debugfs: 'hsr0' already exists in 'hsr' [ 438.234730][ T9913] Cannot create hsr debugfs directory [ 438.272163][ T9910] hsr_slave_0: entered promiscuous mode [ 438.273981][ T9910] hsr_slave_1: entered promiscuous mode [ 438.275216][ T9910] debugfs: 'hsr0' already exists in 'hsr' [ 438.275242][ T9910] Cannot create hsr debugfs directory [ 439.938152][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.938239][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.941416][T10001] chnl_net:caif_netlink_parms(): no params data found [ 452.478062][T10001] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.478221][T10001] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.478518][T10001] bridge_slave_0: entered allmulticast mode [ 452.481816][T10001] bridge_slave_0: entered promiscuous mode [ 452.485532][T10001] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.485687][T10001] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.485910][T10001] bridge_slave_1: entered allmulticast mode [ 452.569683][T10001] bridge_slave_1: entered promiscuous mode [ 453.766988][T10118] kernel read not supported for file /file2 (pid: 10118 comm: syz.4.1396) [ 453.767345][ T37] audit: type=1800 audit(1761168562.174:317): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1396" name="file2" dev="mqueue" ino=33540 res=0 errno=0 [ 453.814517][T10118] kernel read not supported for file /memory.events (pid: 10118 comm: syz.4.1396) [ 453.814843][ T37] audit: type=1800 audit(1761168562.224:318): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1396" name="memory.events" dev="mqueue" ino=33541 res=0 errno=0 [ 453.816960][T10118] kernel read not supported for file /rdma.current (pid: 10118 comm: syz.4.1396) [ 453.817255][ T37] audit: type=1800 audit(1761168562.224:319): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1396" name="rdma.current" dev="mqueue" ino=33542 res=0 errno=0 [ 453.882410][T10118] kernel read not supported for file /file0 (pid: 10118 comm: syz.4.1396) [ 453.882564][ T37] audit: type=1800 audit(1761168562.294:320): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1396" name="file0" dev="mqueue" ino=31807 res=0 errno=0 [ 453.887344][T10118] kernel read not supported for file /cpuacct.stat (pid: 10118 comm: syz.4.1396) [ 453.927348][ T37] audit: type=1800 audit(1761168562.294:321): pid=10118 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1396" name="cpuacct.stat" dev="mqueue" ino=33543 res=0 errno=0 [ 455.328502][ T9930] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 455.669135][T10001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.729818][ T9930] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 455.777842][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 455.930816][ T5876] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 455.930856][ T5876] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 455.930898][ T5876] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 455.930923][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.001453][T10120] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 456.024967][ T5876] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 456.295087][ T5876] usb 5-1: USB disconnect, device number 10 [ 456.484092][T10001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.548088][ T9930] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 458.002688][T10132] udevd[10132]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 460.117948][ T9930] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 460.246574][ T5806] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 460.291018][ T5806] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 460.301299][ T5806] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 460.338419][ T5806] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 460.343848][ T5806] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.612377][ T37] audit: type=1326 audit(1761168569.024:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10148 comm="syz.4.1399" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f56a16aefc9 code=0x0 [ 460.796373][ T5806] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 460.821509][ T5806] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 460.839427][ T5806] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 460.845989][ T5806] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 460.847111][ T5806] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 461.410701][ T9930] kthread_run failed with err -4 [ 461.422813][T10001] team0: Port device team_slave_0 added [ 461.629968][T10001] team0: Port device team_slave_1 added [ 462.412069][ T5806] Bluetooth: hci2: command tx timeout [ 462.921657][ T5806] Bluetooth: hci4: command tx timeout [ 464.488053][ T5806] Bluetooth: hci2: command tx timeout [ 464.599651][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1402'. [ 464.644746][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 464.672352][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 464.676076][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 464.697432][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 464.709795][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 464.968534][ T5118] Bluetooth: hci4: command tx timeout [ 466.404852][T10178] bridge_slave_1: left allmulticast mode [ 466.404885][T10178] bridge_slave_1: left promiscuous mode [ 466.405193][T10178] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.578008][ T5118] Bluetooth: hci2: command tx timeout [ 466.807963][ T5118] Bluetooth: hci5: command tx timeout [ 466.829570][T10178] bridge_slave_0: left allmulticast mode [ 466.829604][T10178] bridge_slave_0: left promiscuous mode [ 466.830808][T10178] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.048280][ T5118] Bluetooth: hci4: command tx timeout [ 468.648034][ T5118] Bluetooth: hci2: command tx timeout [ 468.894432][ T5118] Bluetooth: hci5: command tx timeout [ 469.128348][ T5118] Bluetooth: hci4: command tx timeout [ 470.967827][ T5118] Bluetooth: hci5: command tx timeout [ 473.047880][ T5118] Bluetooth: hci5: command tx timeout [ 479.129861][ T5806] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 479.151392][ T5806] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 479.188374][ T5806] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 479.190694][ T5806] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 479.191670][ T5806] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 479.970607][ T5806] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 480.012332][ T5806] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 480.017444][ T5806] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 480.033923][ T5806] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 480.034866][ T5806] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 481.288295][ T5118] Bluetooth: hci7: command tx timeout [ 482.168271][ T5118] Bluetooth: hci8: command tx timeout [ 483.367941][ T5118] Bluetooth: hci7: command tx timeout [ 484.248097][ T5118] Bluetooth: hci8: command tx timeout [ 485.447788][ T5118] Bluetooth: hci7: command tx timeout [ 486.338183][ T5118] Bluetooth: hci8: command tx timeout [ 487.527793][ T5118] Bluetooth: hci7: command tx timeout [ 488.408115][ T5118] Bluetooth: hci8: command tx timeout [ 501.391156][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.391243][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.752297][T10001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.752326][T10001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.752355][T10001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.250391][T10146] chnl_net:caif_netlink_parms(): no params data found [ 517.281560][T10151] chnl_net:caif_netlink_parms(): no params data found [ 518.340881][T10177] chnl_net:caif_netlink_parms(): no params data found [ 519.957092][T10221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 519.986211][T10221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 520.002709][T10221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 520.005288][T10221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 520.036115][T10221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 520.562836][ T5118] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 520.589263][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 520.591013][ T5118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 520.592434][ T5118] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 520.593350][ T5118] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 521.970640][T10221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 521.991514][T10221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 521.993406][T10221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 521.994884][T10221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 521.996947][T10221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.490253][ T5118] Bluetooth: hci0: command tx timeout [ 523.047928][T10221] Bluetooth: hci9: command tx timeout [ 524.087960][T10221] Bluetooth: hci1: command tx timeout [ 524.581630][T10221] Bluetooth: hci0: command tx timeout [ 525.127803][T10221] Bluetooth: hci9: command tx timeout [ 526.167947][T10221] Bluetooth: hci1: command tx timeout [ 526.647882][T10221] Bluetooth: hci0: command tx timeout [ 527.207943][T10221] Bluetooth: hci9: command tx timeout [ 528.248456][T10221] Bluetooth: hci1: command tx timeout [ 528.728022][T10221] Bluetooth: hci0: command tx timeout [ 529.297999][T10221] Bluetooth: hci9: command tx timeout [ 530.330763][T10221] Bluetooth: hci1: command tx timeout [ 531.133982][T10196] chnl_net:caif_netlink_parms(): no params data found [ 531.160594][T10190] chnl_net:caif_netlink_parms(): no params data found [ 537.572429][T10196] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.572674][T10196] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.572968][T10196] bridge_slave_0: entered allmulticast mode [ 537.602381][T10196] bridge_slave_0: entered promiscuous mode [ 537.640855][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.641014][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.641324][T10190] bridge_slave_0: entered allmulticast mode [ 537.644865][T10190] bridge_slave_0: entered promiscuous mode [ 537.703284][T10196] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.703484][T10196] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.703798][T10196] bridge_slave_1: entered allmulticast mode [ 537.707272][T10196] bridge_slave_1: entered promiscuous mode [ 537.762051][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.762206][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.762491][T10190] bridge_slave_1: entered allmulticast mode [ 537.766598][T10190] bridge_slave_1: entered promiscuous mode [ 539.476946][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.533450][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.554859][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.556329][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.583775][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 540.472407][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.502985][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.526361][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.535320][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.536423][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.688596][T10221] Bluetooth: hci2: command tx timeout [ 542.658120][T10221] Bluetooth: hci4: command tx timeout [ 543.770529][T10221] Bluetooth: hci2: command tx timeout [ 543.877954][T10222] chnl_net:caif_netlink_parms(): no params data found [ 543.955054][T10225] chnl_net:caif_netlink_parms(): no params data found [ 544.727960][T10221] Bluetooth: hci4: command tx timeout [ 545.038150][T10218] chnl_net:caif_netlink_parms(): no params data found [ 545.848038][T10221] Bluetooth: hci2: command tx timeout [ 546.807799][T10221] Bluetooth: hci4: command tx timeout [ 547.937747][T10221] Bluetooth: hci2: command tx timeout [ 548.889069][T10221] Bluetooth: hci4: command tx timeout [ 554.232291][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.232536][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.232895][T10222] bridge_slave_0: entered allmulticast mode [ 554.236474][T10222] bridge_slave_0: entered promiscuous mode [ 554.342359][T10225] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.342519][T10225] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.342856][T10225] bridge_slave_0: entered allmulticast mode [ 554.346641][T10225] bridge_slave_0: entered promiscuous mode [ 554.381344][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.381540][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.381837][T10222] bridge_slave_1: entered allmulticast mode [ 554.386714][T10222] bridge_slave_1: entered promiscuous mode [ 555.436397][T10225] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.436578][T10225] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.436885][T10225] bridge_slave_1: entered allmulticast mode [ 555.481298][T10225] bridge_slave_1: entered promiscuous mode [ 558.127867][T10218] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.128030][T10218] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.128387][T10218] bridge_slave_0: entered allmulticast mode [ 558.136630][T10218] bridge_slave_0: entered promiscuous mode [ 559.820139][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.820412][T10218] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.820594][T10218] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.820873][T10218] bridge_slave_1: entered allmulticast mode [ 559.825742][T10218] bridge_slave_1: entered promiscuous mode [ 559.943895][T10225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 559.967440][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.384207][T10225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.666308][T10218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.520440][T10247] chnl_net:caif_netlink_parms(): no params data found [ 562.541597][T10241] chnl_net:caif_netlink_parms(): no params data found [ 562.564843][T10222] team0: Port device team_slave_0 added [ 562.595665][T10218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.611872][T10225] team0: Port device team_slave_0 added [ 562.646783][T10222] team0: Port device team_slave_1 added [ 562.657081][T10225] team0: Port device team_slave_1 added [ 562.820052][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.820159][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.365446][T10218] team0: Port device team_slave_0 added [ 566.424688][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.424717][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.424747][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.426612][T10225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.426626][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.426652][T10225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.523739][T10218] team0: Port device team_slave_1 added [ 566.564896][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.564916][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.564945][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.566499][T10225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.566510][T10225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.566524][T10225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.337518][T10218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 568.337539][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 568.337567][T10218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 569.054165][T10218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 569.054184][T10218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 569.054214][T10218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.391763][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.392022][T10247] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.392377][T10247] bridge_slave_0: entered allmulticast mode [ 571.421859][T10247] bridge_slave_0: entered promiscuous mode [ 571.459424][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.459603][T10241] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.459970][T10241] bridge_slave_0: entered allmulticast mode [ 571.463409][T10241] bridge_slave_0: entered promiscuous mode [ 572.798499][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.798675][T10247] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.798999][T10247] bridge_slave_1: entered allmulticast mode [ 572.802470][T10247] bridge_slave_1: entered promiscuous mode [ 572.806163][T10241] bridge0: port 2(bridge_slave_1) entered blocking state [ 572.806330][T10241] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.806617][T10241] bridge_slave_1: entered allmulticast mode [ 572.865100][T10241] bridge_slave_1: entered promiscuous mode [ 572.889378][T10222] hsr_slave_0: entered promiscuous mode [ 572.891387][T10222] hsr_slave_1: entered promiscuous mode [ 572.893443][T10222] debugfs: 'hsr0' already exists in 'hsr' [ 572.893472][T10222] Cannot create hsr debugfs directory [ 572.932253][T10225] hsr_slave_0: entered promiscuous mode [ 572.934166][T10225] hsr_slave_1: entered promiscuous mode [ 572.935510][T10225] debugfs: 'hsr0' already exists in 'hsr' [ 572.935537][T10225] Cannot create hsr debugfs directory [ 577.403838][T10247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.433627][T10241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 577.837859][T10218] hsr_slave_0: entered promiscuous mode [ 577.839795][T10218] hsr_slave_1: entered promiscuous mode [ 577.841099][T10218] debugfs: 'hsr0' already exists in 'hsr' [ 577.841126][T10218] Cannot create hsr debugfs directory [ 578.728780][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 578.733064][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 578.734706][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 578.737280][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 578.777132][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 579.510418][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 579.545962][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 579.556374][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 579.570686][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 579.573643][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 579.666928][T10247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 579.683393][T10241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 580.895324][T10221] Bluetooth: hci5: command tx timeout [ 581.688534][T10221] Bluetooth: hci6: command tx timeout [ 582.260157][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 582.290196][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 582.293072][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 582.294540][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 582.295510][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 582.992749][ T5118] Bluetooth: hci5: command tx timeout [ 583.768793][ T5118] Bluetooth: hci6: command tx timeout [ 584.488329][ T5118] Bluetooth: hci0: command tx timeout [ 585.048139][ T5118] Bluetooth: hci5: command tx timeout [ 585.847991][ T5118] Bluetooth: hci6: command tx timeout [ 586.568012][ T5118] Bluetooth: hci0: command tx timeout [ 586.651065][T10247] team0: Port device team_slave_0 added [ 586.654524][T10241] team0: Port device team_slave_0 added [ 587.128422][ T5118] Bluetooth: hci5: command tx timeout [ 587.928301][ T5118] Bluetooth: hci6: command tx timeout [ 588.161556][T10241] team0: Port device team_slave_1 added [ 588.191008][T10247] team0: Port device team_slave_1 added [ 588.648345][ T5118] Bluetooth: hci0: command tx timeout [ 590.728470][ T5118] Bluetooth: hci0: command tx timeout [ 592.463869][T10241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.463888][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.463917][T10241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.532445][T10247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.532465][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.532493][T10247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 592.757512][T10241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.757533][T10241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.757563][T10241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.810588][T10247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 592.810605][T10247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 592.810632][T10247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.394961][T10241] hsr_slave_0: entered promiscuous mode [ 595.396956][T10241] hsr_slave_1: entered promiscuous mode [ 595.410395][T10241] debugfs: 'hsr0' already exists in 'hsr' [ 595.410427][T10241] Cannot create hsr debugfs directory [ 595.443563][T10247] hsr_slave_0: entered promiscuous mode [ 595.445476][T10247] hsr_slave_1: entered promiscuous mode [ 595.446779][T10247] debugfs: 'hsr0' already exists in 'hsr' [ 595.446807][T10247] Cannot create hsr debugfs directory [ 600.845366][T10221] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.873429][T10221] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.875758][T10221] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.877169][T10221] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.911812][T10221] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.529846][T10221] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 601.558074][T10221] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 601.560491][T10221] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 601.585276][T10221] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 601.596509][T10221] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 602.358942][T10281] chnl_net:caif_netlink_parms(): no params data found [ 602.792301][T10286] chnl_net:caif_netlink_parms(): no params data found [ 602.813110][T10289] chnl_net:caif_netlink_parms(): no params data found [ 603.048235][T10221] Bluetooth: hci1: command tx timeout [ 603.927949][T10221] Bluetooth: hci7: command tx timeout [ 605.128026][T10221] Bluetooth: hci1: command tx timeout [ 606.008130][T10221] Bluetooth: hci7: command tx timeout [ 607.208054][T10221] Bluetooth: hci1: command tx timeout [ 608.088046][T10221] Bluetooth: hci7: command tx timeout [ 609.288175][T10221] Bluetooth: hci1: command tx timeout [ 609.650538][T10281] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.650717][T10281] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.651091][T10281] bridge_slave_0: entered allmulticast mode [ 609.654687][T10281] bridge_slave_0: entered promiscuous mode [ 610.168090][T10221] Bluetooth: hci7: command tx timeout [ 611.483514][T10281] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.483770][T10281] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.484164][T10281] bridge_slave_1: entered allmulticast mode [ 611.508615][T10281] bridge_slave_1: entered promiscuous mode [ 612.546663][T10286] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.546835][T10286] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.547207][T10286] bridge_slave_0: entered allmulticast mode [ 612.593745][T10286] bridge_slave_0: entered promiscuous mode [ 612.613537][T10289] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.613697][T10289] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.614109][T10289] bridge_slave_0: entered allmulticast mode [ 612.653154][T10289] bridge_slave_0: entered promiscuous mode [ 613.111413][T10286] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.114347][T10286] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.114737][T10286] bridge_slave_1: entered allmulticast mode [ 613.145692][T10286] bridge_slave_1: entered promiscuous mode [ 613.154336][T10289] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.154510][T10289] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.154898][T10289] bridge_slave_1: entered allmulticast mode [ 613.179853][T10289] bridge_slave_1: entered promiscuous mode [ 613.205180][T10281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.773196][T10281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.696243][T10286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.756224][T10289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.211901][T10286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.259480][T10289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 617.451810][T10281] team0: Port device team_slave_0 added [ 617.806304][T10281] team0: Port device team_slave_1 added [ 619.010419][T10286] team0: Port device team_slave_0 added [ 619.014141][T10289] team0: Port device team_slave_0 added [ 619.100000][T10286] team0: Port device team_slave_1 added [ 619.607166][T10289] team0: Port device team_slave_1 added [ 620.395084][T10281] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.395104][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.395134][T10281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.084353][T10281] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.084372][T10281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.084401][T10281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.171661][T10286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.171681][T10286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.171709][T10286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.250075][T10289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.250094][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.250122][T10289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.253408][T10304] chnl_net:caif_netlink_parms(): no params data found [ 621.284984][T10286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.285003][T10286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.285033][T10286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 621.291650][T10289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.291666][T10289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 621.291690][T10289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.075398][T10281] hsr_slave_0: entered promiscuous mode [ 623.092533][T10281] hsr_slave_1: entered promiscuous mode [ 623.093924][T10281] debugfs: 'hsr0' already exists in 'hsr' [ 623.093951][T10281] Cannot create hsr debugfs directory [ 623.556836][T10310] chnl_net:caif_netlink_parms(): no params data found [ 624.268411][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.268602][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.666686][T10286] hsr_slave_0: entered promiscuous mode [ 626.688572][T10286] hsr_slave_1: entered promiscuous mode [ 626.690030][T10286] debugfs: 'hsr0' already exists in 'hsr' [ 626.690059][T10286] Cannot create hsr debugfs directory [ 626.722336][T10289] hsr_slave_0: entered promiscuous mode [ 626.724460][T10289] hsr_slave_1: entered promiscuous mode [ 626.725847][T10289] debugfs: 'hsr0' already exists in 'hsr' [ 626.725874][T10289] Cannot create hsr debugfs directory [ 629.264543][T10304] bridge0: port 1(bridge_slave_0) entered blocking state [ 629.264793][T10304] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.265287][T10304] bridge_slave_0: entered allmulticast mode [ 629.306102][T10304] bridge_slave_0: entered promiscuous mode [ 629.766558][T10304] bridge0: port 2(bridge_slave_1) entered blocking state [ 629.766749][T10304] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.767121][T10304] bridge_slave_1: entered allmulticast mode [ 629.801359][T10304] bridge_slave_1: entered promiscuous mode [ 632.894997][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.895239][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.895560][T10310] bridge_slave_0: entered allmulticast mode [ 632.939409][T10310] bridge_slave_0: entered promiscuous mode [ 632.954575][T10304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.020638][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.020796][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.021112][T10310] bridge_slave_1: entered allmulticast mode [ 633.024751][T10310] bridge_slave_1: entered promiscuous mode [ 633.082570][T10304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.751655][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.771090][T10304] team0: Port device team_slave_0 added [ 639.321057][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 639.357406][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 639.366806][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 639.381776][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 639.383699][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 640.473627][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.523519][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.525552][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 640.551975][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 640.556928][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 641.441063][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 641.444756][T10304] team0: Port device team_slave_1 added [ 641.461003][ T5118] Bluetooth: hci2: command tx timeout [ 642.658702][ T5118] Bluetooth: hci4: command tx timeout [ 643.225168][T10221] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 643.248909][T10221] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 643.252977][T10221] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 643.254383][T10221] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 643.255287][T10221] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 643.528142][ T5118] Bluetooth: hci2: command tx timeout [ 644.748946][ T5118] Bluetooth: hci4: command tx timeout [ 645.368378][ T5118] Bluetooth: hci5: command tx timeout [ 645.622614][ T5118] Bluetooth: hci2: command tx timeout [ 646.808543][ T5118] Bluetooth: hci4: command tx timeout [ 647.448363][ T5118] Bluetooth: hci5: command tx timeout [ 647.687967][ T5118] Bluetooth: hci2: command tx timeout [ 648.888171][ T5118] Bluetooth: hci4: command tx timeout [ 649.528631][ T5118] Bluetooth: hci5: command tx timeout [ 649.990814][T10310] team0: Port device team_slave_0 added [ 650.005344][T10304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 650.005363][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.005392][T10304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 650.082484][T10310] team0: Port device team_slave_1 added [ 650.109737][T10304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 650.109755][T10304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 650.109783][T10304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.608171][ T5118] Bluetooth: hci5: command tx timeout [ 651.851722][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.851743][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.851773][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 652.544003][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 652.544021][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 652.544051][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.004492][T10304] hsr_slave_0: entered promiscuous mode [ 653.006784][T10304] hsr_slave_1: entered promiscuous mode [ 653.022458][T10304] debugfs: 'hsr0' already exists in 'hsr' [ 653.022489][T10304] Cannot create hsr debugfs directory [ 655.619576][T10310] hsr_slave_0: entered promiscuous mode [ 655.621961][T10310] hsr_slave_1: entered promiscuous mode [ 655.623625][T10310] debugfs: 'hsr0' already exists in 'hsr' [ 655.623657][T10310] Cannot create hsr debugfs directory [ 660.921656][T10221] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 660.964649][T10221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 660.987220][T10221] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 661.001163][T10221] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 661.002454][T10221] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.554028][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 661.596398][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 661.607386][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 661.635741][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 661.636681][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 662.035964][T10339] chnl_net:caif_netlink_parms(): no params data found [ 662.074413][T10345] chnl_net:caif_netlink_parms(): no params data found [ 663.128291][T10221] Bluetooth: hci0: command tx timeout [ 663.688039][T10221] Bluetooth: hci6: command tx timeout [ 665.210724][T10221] Bluetooth: hci0: command tx timeout [ 665.768062][ T5118] Bluetooth: hci6: command tx timeout [ 666.040445][T10348] chnl_net:caif_netlink_parms(): no params data found [ 667.289610][ T5118] Bluetooth: hci0: command tx timeout [ 667.848108][ T5118] Bluetooth: hci6: command tx timeout [ 668.829671][T10339] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.829849][T10339] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.830261][T10339] bridge_slave_0: entered allmulticast mode [ 668.836689][T10339] bridge_slave_0: entered promiscuous mode [ 668.906874][T10345] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.907103][T10345] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.926613][T10345] bridge_slave_0: entered allmulticast mode [ 668.939993][T10345] bridge_slave_0: entered promiscuous mode [ 668.965050][T10339] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.965243][T10339] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.965623][T10339] bridge_slave_1: entered allmulticast mode [ 669.012096][T10339] bridge_slave_1: entered promiscuous mode [ 669.044167][T10345] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.044339][T10345] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.044721][T10345] bridge_slave_1: entered allmulticast mode [ 669.075140][T10345] bridge_slave_1: entered promiscuous mode [ 669.367935][ T5118] Bluetooth: hci0: command tx timeout [ 669.927851][ T5118] Bluetooth: hci6: command tx timeout [ 672.083153][T10339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.135821][T10345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.205466][T10339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.247293][T10345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.341137][T10348] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.341389][T10348] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.341815][T10348] bridge_slave_0: entered allmulticast mode [ 673.345635][T10348] bridge_slave_0: entered promiscuous mode [ 673.822784][T10348] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.822969][T10348] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.823316][T10348] bridge_slave_1: entered allmulticast mode [ 673.827339][T10348] bridge_slave_1: entered promiscuous mode [ 674.168201][ T38] INFO: task syz-executor:9910 blocked for more than 143 seconds. [ 674.168229][ T38] Not tainted syzkaller #0 [ 674.168240][ T38] Blocked by coredump. [ 674.168247][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.168257][ T38] task:syz-executor state:D stack:19000 pid:9910 tgid:9910 ppid:1 task_flags:0x40054c flags:0x00080003 [ 674.168315][ T38] Call Trace: [ 674.168323][ T38] [ 674.168340][ T38] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 674.168396][ T38] ? finish_task_switch+0x266/0x950 [ 674.168445][ T38] ? __pfx___schedule+0x10/0x10 [ 674.168493][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.168525][ T38] rt_mutex_schedule+0x77/0xf0 [ 674.168546][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 674.168568][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 674.168622][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 674.168647][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 674.168670][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 674.168689][ T38] ? __lock_acquire+0xab9/0xd20 [ 674.168730][ T38] ? rcu_barrier+0x4c/0x570 [ 674.168769][ T38] ? rcu_barrier+0x4c/0x570 [ 674.168789][ T38] mutex_lock_nested+0x16a/0x1d0 [ 674.168809][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 674.168833][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.168860][ T38] rcu_barrier+0x4c/0x570 [ 674.168887][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.168913][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.168939][ T38] netdev_run_todo+0x327/0xea0 [ 674.168969][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 674.169001][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 674.169025][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.169065][ T38] ? netdev_state_change+0x1ca/0x220 [ 674.169088][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.169113][ T38] tun_chr_close+0x13f/0x1c0 [ 674.169140][ T38] __fput+0x45b/0xa80 [ 674.169175][ T38] task_work_run+0x1d4/0x260 [ 674.169201][ T38] ? __pfx_task_work_run+0x10/0x10 [ 674.169221][ T38] ? do_exit+0x6b0/0x2300 [ 674.169252][ T38] ? do_exit+0x6b0/0x2300 [ 674.169288][ T38] do_exit+0x6b5/0x2300 [ 674.169318][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.169359][ T38] ? __pfx_do_exit+0x10/0x10 [ 674.169387][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 674.169418][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 674.169457][ T38] do_group_exit+0x21c/0x2d0 [ 674.169477][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.169503][ T38] get_signal+0x125d/0x1310 [ 674.169556][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 674.169585][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.169629][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 674.169663][ T38] exit_to_user_mode_loop+0x72/0x130 [ 674.169691][ T38] do_syscall_64+0x2bd/0xfa0 [ 674.169717][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.169742][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.169764][ T38] ? clear_bhb_loop+0x60/0xb0 [ 674.169791][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.169813][ T38] RIP: 0033:0x7f35bd7dda7f [ 674.169832][ T38] RSP: 002b:00007ffe55ebe0e0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 674.169854][ T38] RAX: 0000000000000003 RBX: 0000000000000005 RCX: 00007f35bd7dda7f [ 674.169869][ T38] RDX: 0000000000000003 RSI: 00007ffe55ebe130 RDI: 0000000000000005 [ 674.169883][ T38] RBP: 00007f35bd86327a R08: 0000000000000000 R09: 00007ffe55ebdf37 [ 674.169897][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 674.169910][ T38] R13: 00007ffe55ebe130 R14: 00007f35be564620 R15: 0000000000000003 [ 674.169948][ T38] [ 674.169956][ T38] INFO: task syz-executor:9913 blocked for more than 143 seconds. [ 674.169972][ T38] Not tainted syzkaller #0 [ 674.169992][ T38] Blocked by coredump. [ 674.169998][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.170008][ T38] task:syz-executor state:D stack:22280 pid:9913 tgid:9913 ppid:1 task_flags:0x40054c flags:0x00080003 [ 674.170065][ T38] Call Trace: [ 674.170073][ T38] [ 674.170086][ T38] __schedule+0x16f3/0x4c20 [ 674.170152][ T38] ? __pfx___schedule+0x10/0x10 [ 674.170199][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.170229][ T38] rt_mutex_schedule+0x77/0xf0 [ 674.170250][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 674.170271][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 674.170325][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 674.170350][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 674.170380][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 674.170399][ T38] ? __lock_acquire+0xab9/0xd20 [ 674.170449][ T38] ? rcu_barrier+0x4c/0x570 [ 674.170487][ T38] ? rcu_barrier+0x4c/0x570 [ 674.170506][ T38] mutex_lock_nested+0x16a/0x1d0 [ 674.170524][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 674.170548][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.170574][ T38] rcu_barrier+0x4c/0x570 [ 674.170601][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.170627][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.170653][ T38] netdev_run_todo+0x327/0xea0 [ 674.170682][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 674.170712][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 674.170737][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.170775][ T38] ? netdev_state_change+0x1ca/0x220 [ 674.170797][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.170822][ T38] tun_chr_close+0x13f/0x1c0 [ 674.170850][ T38] __fput+0x45b/0xa80 [ 674.170885][ T38] task_work_run+0x1d4/0x260 [ 674.170910][ T38] ? __pfx_task_work_run+0x10/0x10 [ 674.170930][ T38] ? do_exit+0x6b0/0x2300 [ 674.170960][ T38] ? do_exit+0x6b0/0x2300 [ 674.170996][ T38] do_exit+0x6b5/0x2300 [ 674.171026][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.171067][ T38] ? __pfx_do_exit+0x10/0x10 [ 674.171094][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 674.171115][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 674.171153][ T38] do_group_exit+0x21c/0x2d0 [ 674.171171][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.171196][ T38] get_signal+0x125d/0x1310 [ 674.171249][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 674.171275][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.171321][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 674.171353][ T38] exit_to_user_mode_loop+0x72/0x130 [ 674.171381][ T38] do_syscall_64+0x2bd/0xfa0 [ 674.171414][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.171440][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.171461][ T38] ? clear_bhb_loop+0x60/0xb0 [ 674.171487][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.171508][ T38] RIP: 0033:0x7f99565cda7f [ 674.171524][ T38] RSP: 002b:00007ffec4d47420 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 674.171546][ T38] RAX: 0000000000000003 RBX: 0000000000000005 RCX: 00007f99565cda7f [ 674.171559][ T38] RDX: 0000000000000003 RSI: 00007ffec4d47470 RDI: 0000000000000005 [ 674.171572][ T38] RBP: 00007f995665327a R08: 0000000000000000 R09: 00007ffec4d47277 [ 674.171586][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 674.171598][ T38] R13: 00007ffec4d47470 R14: 00007f9957354620 R15: 0000000000000003 [ 674.171636][ T38] [ 674.171644][ T38] INFO: task syz-executor:9930 blocked for more than 143 seconds. [ 674.171658][ T38] Not tainted syzkaller #0 [ 674.171668][ T38] Blocked by coredump. [ 674.171675][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.171684][ T38] task:syz-executor state:D stack:17736 pid:9930 tgid:9930 ppid:1 task_flags:0x40054c flags:0x00080003 [ 674.171745][ T38] Call Trace: [ 674.171752][ T38] [ 674.171765][ T38] __schedule+0x16f3/0x4c20 [ 674.171814][ T38] ? finish_task_switch+0x266/0x950 [ 674.171850][ T38] ? __pfx___schedule+0x10/0x10 [ 674.171897][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.171926][ T38] rt_mutex_schedule+0x77/0xf0 [ 674.171946][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 674.171967][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 674.172027][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 674.172059][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 674.172081][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 674.172100][ T38] ? __lock_acquire+0xab9/0xd20 [ 674.172141][ T38] ? rcu_barrier+0x4c/0x570 [ 674.172177][ T38] ? rcu_barrier+0x4c/0x570 [ 674.172195][ T38] mutex_lock_nested+0x16a/0x1d0 [ 674.172214][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 674.172245][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.172271][ T38] rcu_barrier+0x4c/0x570 [ 674.172297][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.172323][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.172348][ T38] netdev_run_todo+0x327/0xea0 [ 674.172377][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 674.172415][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 674.172440][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.172478][ T38] ? netdev_state_change+0x1ca/0x220 [ 674.172500][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.172525][ T38] tun_chr_close+0x13f/0x1c0 [ 674.172552][ T38] __fput+0x45b/0xa80 [ 674.172587][ T38] task_work_run+0x1d4/0x260 [ 674.172611][ T38] ? __pfx_task_work_run+0x10/0x10 [ 674.172632][ T38] ? do_exit+0x6b0/0x2300 [ 674.172662][ T38] ? do_exit+0x6b0/0x2300 [ 674.172698][ T38] do_exit+0x6b5/0x2300 [ 674.172729][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.172769][ T38] ? __pfx_do_exit+0x10/0x10 [ 674.172797][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 674.172817][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 674.172856][ T38] do_group_exit+0x21c/0x2d0 [ 674.172876][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.172901][ T38] get_signal+0x125d/0x1310 [ 674.172953][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 674.172980][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.173025][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 674.173058][ T38] exit_to_user_mode_loop+0x72/0x130 [ 674.173086][ T38] do_syscall_64+0x2bd/0xfa0 [ 674.173111][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.173137][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.173157][ T38] ? clear_bhb_loop+0x60/0xb0 [ 674.173183][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.173203][ T38] RIP: 0033:0x7f39e85d0e5c [ 674.173220][ T38] RSP: 002b:00007ffcedec11d0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 674.173241][ T38] RAX: 0000000000000170 RBX: 00007f39e9354620 RCX: 00007f39e85d0e5c [ 674.173255][ T38] RDX: 0000000000000170 RSI: 00007f39e9354670 RDI: 0000000000000005 [ 674.173269][ T38] RBP: 0000000000000000 R08: 00007ffcedec1224 R09: 000000000000000c [ 674.173282][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 674.173295][ T38] R13: 0000000000000000 R14: 00007f39e9354670 R15: 0000000000000000 [ 674.173331][ T38] [ 674.173344][ T38] INFO: task syz-executor:10001 blocked for more than 143 seconds. [ 674.173358][ T38] Not tainted syzkaller #0 [ 674.173368][ T38] Blocked by coredump. [ 674.173374][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.173384][ T38] task:syz-executor state:D stack:21928 pid:10001 tgid:10001 ppid:1 task_flags:0x40054c flags:0x00080003 [ 674.173448][ T38] Call Trace: [ 674.173455][ T38] [ 674.173469][ T38] __schedule+0x16f3/0x4c20 [ 674.173518][ T38] ? finish_task_switch+0x266/0x950 [ 674.173553][ T38] ? __pfx___schedule+0x10/0x10 [ 674.173601][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.173639][ T38] rt_mutex_schedule+0x77/0xf0 [ 674.173660][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 674.173682][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 674.173736][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 674.173760][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 674.173783][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 674.173802][ T38] ? __lock_acquire+0xab9/0xd20 [ 674.173843][ T38] ? rcu_barrier+0x4c/0x570 [ 674.173881][ T38] ? rcu_barrier+0x4c/0x570 [ 674.173901][ T38] mutex_lock_nested+0x16a/0x1d0 [ 674.173919][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 674.173942][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.173969][ T38] rcu_barrier+0x4c/0x570 [ 674.173996][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.174022][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.174046][ T38] netdev_run_todo+0x327/0xea0 [ 674.174076][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 674.174107][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 674.174131][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.174167][ T38] ? netdev_state_change+0x1ca/0x220 [ 674.174190][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.174215][ T38] tun_chr_close+0x13f/0x1c0 [ 674.174242][ T38] __fput+0x45b/0xa80 [ 674.174278][ T38] task_work_run+0x1d4/0x260 [ 674.174302][ T38] ? __pfx_task_work_run+0x10/0x10 [ 674.174323][ T38] ? do_exit+0x6b0/0x2300 [ 674.174354][ T38] ? do_exit+0x6b0/0x2300 [ 674.174390][ T38] do_exit+0x6b5/0x2300 [ 674.174428][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.174469][ T38] ? __pfx_do_exit+0x10/0x10 [ 674.174496][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 674.174516][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 674.174555][ T38] do_group_exit+0x21c/0x2d0 [ 674.174575][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.174599][ T38] get_signal+0x125d/0x1310 [ 674.174652][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 674.174673][ T38] ? fput_close_sync+0x119/0x200 [ 674.174697][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.174750][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 674.174783][ T38] exit_to_user_mode_loop+0x72/0x130 [ 674.174811][ T38] do_syscall_64+0x2bd/0xfa0 [ 674.174839][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.174858][ T38] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 674.174879][ T38] ? clear_bhb_loop+0x60/0xb0 [ 674.174906][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.174926][ T38] RIP: 0033:0x7f284aac0e5c [ 674.174942][ T38] RSP: 002b:00007ffe0596a850 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 674.174963][ T38] RAX: 0000000000000028 RBX: 00007f284b844620 RCX: 00007f284aac0e5c [ 674.174977][ T38] RDX: 0000000000000028 RSI: 00007f284b844670 RDI: 0000000000000003 [ 674.174991][ T38] RBP: 0000000000000000 R08: 00007ffe0596a8a4 R09: 000000000000000c [ 674.175004][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 674.175017][ T38] R13: 0000000000000000 R14: 00007f284b844670 R15: 0000000000000000 [ 674.175053][ T38] [ 674.175077][ T38] INFO: task syz-executor:10146 blocked for more than 143 seconds. [ 674.175097][ T38] Not tainted syzkaller #0 [ 674.175105][ T38] Blocked by coredump. [ 674.175111][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.175121][ T38] task:syz-executor state:D stack:22568 pid:10146 tgid:10146 ppid:1 task_flags:0x40054c flags:0x00080003 [ 674.175183][ T38] Call Trace: [ 674.175190][ T38] [ 674.175204][ T38] __schedule+0x16f3/0x4c20 [ 674.175304][ T38] ? finish_task_switch+0x266/0x950 [ 674.175341][ T38] ? __pfx___schedule+0x10/0x10 [ 674.175376][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.175399][ T38] rt_mutex_schedule+0x77/0xf0 [ 674.175416][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 674.175432][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 674.175474][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 674.175492][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 674.175508][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 674.175523][ T38] ? __lock_acquire+0xab9/0xd20 [ 674.175553][ T38] ? rcu_barrier+0x4c/0x570 [ 674.175583][ T38] ? rcu_barrier+0x4c/0x570 [ 674.175598][ T38] mutex_lock_nested+0x16a/0x1d0 [ 674.175613][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 674.175631][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.175652][ T38] rcu_barrier+0x4c/0x570 [ 674.175673][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.175696][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.175723][ T38] netdev_run_todo+0x327/0xea0 [ 674.175754][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 674.175785][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 674.175810][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.175849][ T38] ? netdev_state_change+0x1ca/0x220 [ 674.175871][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.175897][ T38] tun_chr_close+0x13f/0x1c0 [ 674.175924][ T38] __fput+0x45b/0xa80 [ 674.175961][ T38] task_work_run+0x1d4/0x260 [ 674.175988][ T38] ? __pfx_task_work_run+0x10/0x10 [ 674.176008][ T38] ? do_exit+0x6b0/0x2300 [ 674.176038][ T38] ? do_exit+0x6b0/0x2300 [ 674.176075][ T38] do_exit+0x6b5/0x2300 [ 674.176104][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.176146][ T38] ? __pfx_do_exit+0x10/0x10 [ 674.176173][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 674.176194][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 674.176243][ T38] do_group_exit+0x21c/0x2d0 [ 674.176264][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.176289][ T38] get_signal+0x125d/0x1310 [ 674.176343][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 674.176373][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.176418][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 674.176449][ T38] exit_to_user_mode_loop+0x72/0x130 [ 674.176484][ T38] do_syscall_64+0x2bd/0xfa0 [ 674.176509][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.176536][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.176558][ T38] ? clear_bhb_loop+0x60/0xb0 [ 674.176585][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.176607][ T38] RIP: 0033:0x7f5ae1cf0e5c [ 674.176627][ T38] RSP: 002b:00007ffce5e7a950 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 674.176652][ T38] RAX: 000000000000003c RBX: 00007f5ae2a74620 RCX: 00007f5ae1cf0e5c [ 674.176667][ T38] RDX: 000000000000003c RSI: 00007f5ae2a74670 RDI: 0000000000000003 [ 674.176680][ T38] RBP: 0000000000000000 R08: 00007ffce5e7a9a4 R09: 000000000000000c [ 674.176691][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 674.176702][ T38] R13: 0000000000000000 R14: 00007f5ae2a74670 R15: 0000000000000000 [ 674.176738][ T38] [ 674.176750][ T38] INFO: task syz-executor:10151 blocked for more than 143 seconds. [ 674.176766][ T38] Not tainted syzkaller #0 [ 674.176776][ T38] Blocked by coredump. [ 674.176783][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 674.176792][ T38] task:syz-executor state:D stack:22568 pid:10151 tgid:10151 ppid:1 task_flags:0x40054c flags:0x00080003 [ 674.176852][ T38] Call Trace: [ 674.176860][ T38] [ 674.176874][ T38] __schedule+0x16f3/0x4c20 [ 674.176926][ T38] ? finish_task_switch+0x266/0x950 [ 674.176961][ T38] ? __pfx___schedule+0x10/0x10 [ 674.177010][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 674.177041][ T38] rt_mutex_schedule+0x77/0xf0 [ 674.177062][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 674.177083][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 674.177135][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 674.177161][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 674.177183][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 674.177202][ T38] ? __lock_acquire+0xab9/0xd20 [ 674.177256][ T38] ? rcu_barrier+0x4c/0x570 [ 674.177294][ T38] ? rcu_barrier+0x4c/0x570 [ 674.177313][ T38] mutex_lock_nested+0x16a/0x1d0 [ 674.177333][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 674.177357][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.177383][ T38] rcu_barrier+0x4c/0x570 [ 674.177410][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.177436][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.177462][ T38] netdev_run_todo+0x327/0xea0 [ 674.177503][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 674.177539][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 674.199018][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.199064][ T38] ? netdev_state_change+0x1ca/0x220 [ 674.199085][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 674.199108][ T38] tun_chr_close+0x13f/0x1c0 [ 674.199132][ T38] __fput+0x45b/0xa80 [ 674.199164][ T38] task_work_run+0x1d4/0x260 [ 674.199187][ T38] ? __pfx_task_work_run+0x10/0x10 [ 674.199205][ T38] ? do_exit+0x6b0/0x2300 [ 674.199239][ T38] ? do_exit+0x6b0/0x2300 [ 674.199270][ T38] do_exit+0x6b5/0x2300 [ 674.199295][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 674.199330][ T38] ? __pfx_do_exit+0x10/0x10 [ 674.199353][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 674.199371][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 674.199404][ T38] do_group_exit+0x21c/0x2d0 [ 674.199421][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.199442][ T38] get_signal+0x125d/0x1310 [ 674.199487][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 674.199511][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 674.199549][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 674.199577][ T38] exit_to_user_mode_loop+0x72/0x130 [ 674.199601][ T38] do_syscall_64+0x2bd/0xfa0 [ 674.199622][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 674.199644][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.199662][ T38] ? clear_bhb_loop+0x60/0xb0 [ 674.199685][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.199702][ T38] RIP: 0033:0x7f7bb2a90e5c [ 674.199719][ T38] RSP: 002b:00007ffdc7155020 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 674.199739][ T38] RAX: 000000000000003c RBX: 00007f7bb3814620 RCX: 00007f7bb2a90e5c [ 674.199753][ T38] RDX: 000000000000003c RSI: 00007f7bb3814670 RDI: 0000000000000003 [ 674.199764][ T38] RBP: 0000000000000000 R08: 00007ffdc7155074 R09: 000000000000000c [ 674.199776][ T38] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 674.199788][ T38] R13: 0000000000000000 R14: 00007f7bb3814670 R15: 0000000000000000 [ 674.199820][ T38] [ 674.199876][ T38] [ 674.199876][ T38] Showing all locks held in the system: [ 674.199885][ T38] 4 locks held by pr/legacy/17: [ 674.199897][ T38] 7 locks held by rcuc/0/20: [ 674.199909][ T38] 1 lock held by khungtaskd/38: [ 674.199918][ T38] #0: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 674.199965][ T38] 3 locks held by kworker/1:1/44: [ 674.199975][ T38] #0: ffff88813ff59138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 674.200020][ T38] #1: ffffc90000b57ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 674.200065][ T38] #2: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 674.200123][ T38] 3 locks held by kworker/u8:6/1112: [ 674.200133][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 674.200179][ T38] #1: ffffc90004c77ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 674.200231][ T38] #2: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200292][ T38] 2 locks held by getty/5565: [ 674.200302][ T38] #0: ffff88823bf4e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 674.200347][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 674.200399][ T38] 3 locks held by kworker/1:6/5899: [ 674.200409][ T38] #0: ffff88813ff59138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 674.200454][ T38] #1: ffffc900052e7ba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 674.200499][ T38] #2: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200542][ T38] 2 locks held by kworker/u8:13/8459: [ 674.200559][ T38] 1 lock held by syz-executor/9910: [ 674.200570][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200612][ T38] 1 lock held by syz-executor/9913: [ 674.200622][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200665][ T38] 1 lock held by syz-executor/9930: [ 674.200686][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200727][ T38] 1 lock held by syz-executor/10001: [ 674.200737][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200781][ T38] 1 lock held by syz-executor/10146: [ 674.200791][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200831][ T38] 1 lock held by syz-executor/10151: [ 674.200841][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200882][ T38] 1 lock held by syz.4.1402/10178: [ 674.200891][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200933][ T38] 1 lock held by syz-executor/10177: [ 674.200944][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.200985][ T38] 1 lock held by syz-executor/10190: [ 674.200995][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201035][ T38] 1 lock held by syz-executor/10196: [ 674.201045][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201087][ T38] 1 lock held by syz-executor/10218: [ 674.201097][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201138][ T38] 1 lock held by syz-executor/10222: [ 674.201148][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201189][ T38] 1 lock held by syz-executor/10225: [ 674.201198][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201246][ T38] 1 lock held by syz-executor/10241: [ 674.201256][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201298][ T38] 1 lock held by syz-executor/10247: [ 674.201307][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201351][ T38] 1 lock held by syz-executor/10281: [ 674.201360][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201401][ T38] 1 lock held by syz-executor/10286: [ 674.201411][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201452][ T38] 1 lock held by syz-executor/10289: [ 674.201462][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201502][ T38] 7 locks held by syz-executor/10304: [ 674.201512][ T38] #0: ffff888033c12480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 674.201561][ T38] #1: ffff888080b13478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 674.201607][ T38] #2: ffff88814535c008 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 674.201657][ T38] #3: ffffffff8e0f3c58 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 674.201707][ T38] #4: ffff8880270330d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 674.201754][ T38] #5: ffff888056c24300 (&devlink->lock_key#13){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 674.201800][ T38] #6: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201843][ T38] 1 lock held by syz-executor/10310: [ 674.201852][ T38] #0: ffffffff8d5afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 674.201896][ T38] 2 locks held by syz-executor/10339: [ 674.201906][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 674.201952][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 674.202000][ T38] 2 locks held by syz-executor/10345: [ 674.202010][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 674.202054][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 674.202103][ T38] 2 locks held by syz-executor/10348: [ 674.202113][ T38] #0: ffffffff8dfecfa0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 674.202156][ T38] #1: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 674.202204][ T38] 1 lock held by syz-executor/10364: [ 674.202214][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 674.202265][ T38] 1 lock held by syz-executor/10369: [ 674.202275][ T38] #0: ffffffff8e862eb8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 674.202321][ T38] [ 674.202326][ T38] ============================================= [ 674.202326][ T38] [ 674.202334][ T38] NMI backtrace for cpu 1 [ 674.202348][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 674.202368][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 674.202378][ T38] Call Trace: [ 674.202385][ T38] [ 674.202392][ T38] dump_stack_lvl+0x189/0x250 [ 674.202422][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 674.202447][ T38] ? __pfx__printk+0x10/0x10 [ 674.202479][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 674.202500][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 674.202520][ T38] ? __pfx__printk+0x10/0x10 [ 674.202545][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 674.202568][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 674.202594][ T38] watchdog+0xf60/0xfa0 [ 674.202623][ T38] ? watchdog+0x1e2/0xfa0 [ 674.202652][ T38] kthread+0x711/0x8a0 [ 674.202680][ T38] ? __pfx_watchdog+0x10/0x10 [ 674.202702][ T38] ? __pfx_kthread+0x10/0x10 [ 674.202724][ T38] ? rt_spin_unlock+0x150/0x200 [ 674.202745][ T38] ? rt_spin_unlock+0x161/0x200 [ 674.202760][ T38] ? __pfx_kthread+0x10/0x10 [ 674.202786][ T38] ret_from_fork+0x4bc/0x870 [ 674.202810][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 674.202837][ T38] ? __switch_to_asm+0x39/0x70 [ 674.202854][ T38] ? __switch_to_asm+0x33/0x70 [ 674.202870][ T38] ? __pfx_kthread+0x10/0x10 [ 674.202895][ T38] ret_from_fork_asm+0x1a/0x30 [ 674.202929][ T38] [ 674.202936][ T38] Sending NMI from CPU 1 to CPUs 0: [ 674.202964][ C0] NMI backtrace for cpu 0 [ 674.202986][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 674.203004][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 674.203013][ C0] RIP: 0010:preempt_count_add+0xba/0x1a0 [ 674.203032][ C0] Code: 00 85 c0 74 09 31 db 31 ff e8 22 c4 0c 00 65 4c 8b 34 25 08 40 a2 91 49 81 c6 30 15 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 8c bd 90 00 49 89 1e 5b 41 5e 41 5f e9 bf 36 34 [ 674.203046][ C0] RSP: 0018:ffffc90000167850 EFLAGS: 00000246 [ 674.203070][ C0] RAX: 1ffff110036d62a6 RBX: ffffffff8abee697 RCX: ffffffff98ad7300 [ 674.203082][ C0] RDX: 0000000000000898 RSI: 0000000000000810 RDI: ffffffff8abee697 [ 674.203093][ C0] RBP: ffffffff98e8c0d0 R08: 0000000000000000 R09: 0000000000000000 [ 674.203104][ C0] R10: dffffc0000000000 R11: ffffffff8abee680 R12: 1ffffffff31d181a [ 674.203115][ C0] R13: 00000000ffffffff R14: ffff88801b6b1530 R15: dffffc0000000000 [ 674.203127][ C0] FS: 0000000000000000(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 674.203140][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 674.203152][ C0] CR2: 0000561843d88168 CR3: 000000005d662000 CR4: 00000000003526f0 [ 674.203168][ C0] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 674.203179][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 674.203189][ C0] Call Trace: [ 674.203196][ C0] [ 674.203203][ C0] delay_tsc+0x17/0xc0