last executing test programs: 9m0.294996475s ago: executing program 1 (id=227): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x19, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x7f}, 0x50) 8m59.93680723s ago: executing program 1 (id=230): bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x0, 0x0, 0x0, 0x1, 0x9b, &(0x7f0000000340)=""/155, 0x41000, 0x18, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1}) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='gid_map\x00') pread64(r4, &(0x7f0000019180)=""/102355, 0x18fd3, 0xc2a) 8m58.870002496s ago: executing program 1 (id=235): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r1}, &(0x7f00000007c0), &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r1}, 0x0, 0x0}, 0x20) io_setup(0x30, &(0x7f0000000600)=0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r2, 0x1, &(0x7f00000001c0)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x60a, r3, 0x0}]) 8m56.914053085s ago: executing program 1 (id=241): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000819}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000010000000000000000000"], 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 8m52.544970571s ago: executing program 1 (id=250): r0 = creat(0x0, 0xd931d3864d39ddd8) close(r0) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x0, 0x1, 0x401, 0x0, 0xa9, 0x8000000000000000, 0x8, 0x7, 0x8000003}, 0x0) keyctl$set_reqkey_keyring(0x6, 0xfffffffffffffffd) syz_open_procfs(0x0, 0x0) fanotify_init(0xa00, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/netlink\x00') syz_io_uring_setup(0x2016, &(0x7f0000000340)={0x0, 0x63f9, 0x20000, 0x0, 0x1ac, 0x0, r4}, &(0x7f0000000280), &(0x7f0000000400)) r5 = fsopen(&(0x7f0000000240)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x69) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) pread64(r4, &(0x7f0000000100)=""/253, 0xfd, 0xadc) 8m48.229095975s ago: executing program 1 (id=260): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000819}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000010000000000000000000"], 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 8m37.791006893s ago: executing program 3 (id=282): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000009780)={0x2020}, 0x2020) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) socket(0x22, 0x2, 0x24) setsockopt$SO_BINDTODEVICE_wg(r5, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendto$inet(r5, &(0x7f0000000040)="e5", 0xffffffe4, 0x0, 0x0, 0x0) 8m32.432378307s ago: executing program 32 (id=260): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000819}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000800000010000000000000000000"], 0x50) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) 8m32.400880982s ago: executing program 3 (id=285): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x200000000, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x10041, 0x0, 0xc, 0x0, 0x100, 0x10000, 0x2, 0x0, 0x2000, 0xfffffffc, r2, 0x0, 0x7, 0x57}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x6caff549, 0xfffffffff323ca46, 0x0, 0xfffc, 0x1, 0x80, 0x0, 0x0, 0x1, 0x10001}}, 0x50) creat(&(0x7f00000001c0)='./file0/file0\x00', 0x1) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000040)={0x10, 0xffffffffffffffda, r3}, 0x10) umount2(&(0x7f0000000000)='./file0\x00', 0x3) 8m30.606962521s ago: executing program 3 (id=290): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, 0x0, 0x0) 8m29.849244492s ago: executing program 3 (id=293): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) 8m28.678157768s ago: executing program 3 (id=296): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xf9) 8m27.897016175s ago: executing program 3 (id=299): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$unix(0x1, 0x2, 0x0) shutdown(r2, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x37, &(0x7f0000000400)={0xd, 0xd51, 0x5}) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r6 = dup3(r0, r3, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = openat(r6, &(0x7f0000000480)='./file0\x00', 0x2200, 0xa0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r9, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x878}, 0x94) 8m11.942911187s ago: executing program 33 (id=299): openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4084}, 0x4805) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$unix(0x1, 0x2, 0x0) shutdown(r2, 0xb403dc3ee651df83) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x37, &(0x7f0000000400)={0xd, 0xd51, 0x5}) bind$rds(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x2, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r5 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) r6 = dup3(r0, r3, 0x0) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x2, 0xd59f82, 0x19f5, 0xacc, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x3, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r8 = openat(r6, &(0x7f0000000480)='./file0\x00', 0x2200, 0xa0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001840)=@bpf_ext={0x1c, 0x2, &(0x7f0000000300)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000340)='GPL\x00', 0xfffffc00, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x3, 0x3, 0x9, 0xc}, 0x10, 0x2469, r9, 0x0, &(0x7f0000000480), 0x0, 0x10, 0x878}, 0x94) 5m52.232582672s ago: executing program 0 (id=512): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/5) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x10001, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x5000, 0x200}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000001880)=[{{0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x60ff}}, {{0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000001280)}], 0x1}}], 0x2, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x101900, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='timers\x00') timer_create(0x2, 0x0, &(0x7f00000000c0)) timer_create(0x3, 0x0, &(0x7f0000000040)) read$FUSE(r5, &(0x7f0000004200)={0x2020}, 0x2020) r6 = dup(0xffffffffffffffff) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0x0, 0x101, 0x100}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001140)=ANY=[], 0x1c4}, 0x1, 0x0, 0x0, 0x801}, 0x811) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 5m46.821063186s ago: executing program 0 (id=517): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000240)=""/112, 0x349b7f55) socket$nl_route(0x10, 0x3, 0x0) r4 = gettid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0}, 0x28) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x880b, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x9a4a, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000580)={0x2, @pix={0x0, 0x8000, 0x34325241, 0x7, 0x80, 0x9d, 0x1, 0xffffff0d, 0x0, 0x4, 0xa1c833a42a921319, 0x3}}) 5m45.320419372s ago: executing program 0 (id=520): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x29, 0xa, 0x3, "55ac07d401cc000000b28d002f179dd37829c92b00", 0x38414261}) 5m44.942266173s ago: executing program 0 (id=521): syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, 0x0) socket$unix(0x1, 0x2, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_io_uring_setup(0x4cf2, &(0x7f00000003c0)={0x0, 0x1, 0x1000, 0x3, 0x31b}, &(0x7f0000000440), &(0x7f0000000480)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) 5m43.407379856s ago: executing program 0 (id=525): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 5m42.945014769s ago: executing program 0 (id=527): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x328, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000240)=0xffffffed) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x5, 0x40008001, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 5m26.868990727s ago: executing program 34 (id=527): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x10583a, 0x5, 0xa, 0x4000000000, 0x6, 0x2, 0x1041, 0x4, 0x7, 0x328, 0xfffffffffffffffe, 0xffffffff, 0x1, 0x9, 0x800005, 0x6a], 0xeeee8000, 0x1000d6}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, &(0x7f0000000240)=0xffffffed) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000019007b29e00212ba0d8105040a601100fe02040b067c55a1bc001400090006990600000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5000000000000", 0xd8}], 0x1, 0x0, 0x0, 0x2663}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x5, 0x40008001, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) 1m51.932797551s ago: executing program 2 (id=815): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r4, 0x0, 0x0}) ioctl$IOMMU_DESTROY$hwpt(r3, 0x3b80, &(0x7f0000000300)={0x8}) ioctl$IOMMU_DESTROY$stdev(r3, 0x3b80, &(0x7f0000000400)={0x8, r5}) 1m47.448811983s ago: executing program 2 (id=819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) 1m46.006053052s ago: executing program 2 (id=820): unshare(0x2a020400) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000013c0), 0x300, 0x0) ppoll(&(0x7f0000000140)=[{r0, 0xc1a1}], 0x1, 0x0, 0x0, 0x0) 1m45.80891587s ago: executing program 2 (id=821): syz_init_net_socket$rose(0xb, 0x5, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 1m45.579901161s ago: executing program 2 (id=822): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/address_bits', 0x101000, 0x2662769b48e8ff0c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x5) ioctl$TCFLSH(0xffffffffffffffff, 0x8925, 0x40000020001100) 1m45.450061172s ago: executing program 2 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1m30.251570277s ago: executing program 35 (id=823): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000100000000000000900000085000000b400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r0, 0xf504, 0x0) fsopen(&(0x7f0000000000)='ceph\x00', 0x0) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000094}, 0x800) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}], 0x1, &(0x7f0000000040)}, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.632745143s ago: executing program 4 (id=933): bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, 0x0, &(0x7f00000000c0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r4, 0x0, &(0x7f00000001c0)) 2.649480242s ago: executing program 4 (id=934): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r1 = dup(r0) write$FUSE_BMAP(r1, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x100) 2.514267053s ago: executing program 4 (id=935): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000001280), 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(r4, 0x29, 0x43, &(0x7f00000000c0)=0x7, 0x4) 1.15343614s ago: executing program 4 (id=936): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8932, &(0x7f0000000900)={'syz_tun\x00', @random='\x00\x00\x00 \x00'}) 560.827054ms ago: executing program 4 (id=937): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$FUSE(r0, &(0x7f00000004c0)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) io_uring_setup(0x3a09, &(0x7f0000000080)={0x0, 0x2e36, 0x1, 0x2, 0x18b}) r1 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) pwrite64(r1, &(0x7f0000000000), 0x0, 0x4fed0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, 0x0) 0s ago: executing program 4 (id=938): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f}, 0x48) kernel console output (not intermixed with test programs): ngs: Mfr=0, Product=0, SerialNumber=0 [ 114.841651][ T5895] usb 3-1: config 0 descriptor?? [ 115.654380][ T5895] petalynx 0003:18B1:0037.0001: unknown main item tag 0x0 [ 115.654427][ T5895] petalynx 0003:18B1:0037.0001: unknown global tag 0xe [ 115.654441][ T5895] petalynx 0003:18B1:0037.0001: item 0 0 1 14 parsing failed [ 115.655466][ T5895] petalynx 0003:18B1:0037.0001: parse failed [ 115.655544][ T5895] petalynx 0003:18B1:0037.0001: probe with driver petalynx failed with error -22 [ 115.831998][ T5169] usb 3-1: USB disconnect, device number 2 [ 115.989548][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.039477][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.039652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.499472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599459][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599607][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599662][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599720][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.599799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.430816][ T5969] syz.2.10 (5969) used greatest stack depth: 18968 bytes left [ 117.699815][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 117.855802][ T5902] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.855831][ T5902] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 117.855888][ T5902] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 117.855912][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.866531][ T5902] usb 1-1: config 0 descriptor?? [ 118.091210][ T5902] Bluetooth: Can't get state to change to load ram patch err [ 118.091231][ T5902] Bluetooth: Loading patch file failed [ 118.091274][ T5902] ath3k 1-1:0.0: probe with driver ath3k failed with error -71 [ 118.132394][ T5902] usb 1-1: USB disconnect, device number 2 [ 118.303019][ T6007] syz_tun: entered allmulticast mode [ 118.509617][ T6003] syz_tun: left allmulticast mode [ 119.046798][ T6010] CIFS mount error: No usable UNC path provided in device string! [ 119.046798][ T6010] [ 119.046823][ T6010] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.095286][ T6032] netlink: 20 bytes leftover after parsing attributes in process `syz.0.27'. [ 124.326582][ T6046] netlink: 16 bytes leftover after parsing attributes in process `syz.0.30'. [ 124.593342][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.556787][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.468806][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.747889][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.978309][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.613100][ C1] vkms_vblank_simulate: vblank timer overrun [ 128.702477][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.195036][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.403474][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.376346][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.376460][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.158238][ T6141] CIFS mount error: No usable UNC path provided in device string! [ 138.158238][ T6141] [ 138.158292][ T6141] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 140.693367][ T6152] CIFS mount error: No usable UNC path provided in device string! [ 140.693367][ T6152] [ 140.693391][ T6152] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 148.203861][ T6195] netlink: 'syz.2.63': attribute type 10 has an invalid length. [ 149.151837][ T6204] CIFS mount error: No usable UNC path provided in device string! [ 149.151837][ T6204] [ 149.151915][ T6204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 150.592414][ T6195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.596209][ T6195] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 152.574037][ T59] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 152.574160][ T59] Bluetooth: hci2: Injecting HCI hardware error event [ 152.575935][ T59] Bluetooth: hci2: hardware error 0x00 [ 158.214771][ T6252] program syz.0.77 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.769847][ T6257] CIFS mount error: No usable UNC path provided in device string! [ 158.769847][ T6257] [ 158.769870][ T6257] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.437004][ T59] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 161.560896][ T6274] Zero length message leads to an empty skb [ 167.527561][ T6297] program syz.0.89 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.218623][ T6312] CIFS mount error: No usable UNC path provided in device string! [ 169.218623][ T6312] [ 169.218701][ T6312] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 169.284888][ T5992] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.452515][ T5992] usb 1-1: Using ep0 maxpacket: 8 [ 170.456218][ T5992] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 170.456236][ T5992] usb 1-1: config 0 has no interface number 0 [ 170.458124][ T5992] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 170.458147][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.458157][ T5992] usb 1-1: Product: syz [ 170.458165][ T5992] usb 1-1: Manufacturer: syz [ 170.458173][ T5992] usb 1-1: SerialNumber: syz [ 170.530923][ T5992] usb 1-1: config 0 descriptor?? [ 170.537671][ T5992] kobil_sct 1-1:0.148: required endpoints missing [ 170.916386][ T5992] usb 1-1: USB disconnect, device number 3 [ 178.127433][ T6333] program syz.1.103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 178.799722][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 178.969794][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 178.975285][ T10] usb 1-1: config 0 has an invalid interface number: 148 but max is 0 [ 178.975313][ T10] usb 1-1: config 0 has no interface number 0 [ 179.019045][ T10] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 179.019086][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.019106][ T10] usb 1-1: Product: syz [ 179.019120][ T10] usb 1-1: Manufacturer: syz [ 179.019134][ T10] usb 1-1: SerialNumber: syz [ 179.308511][ T6347] trusted_key: encrypted_key: insufficient parameters specified [ 179.919933][ T6355] infiniband syz2: set active [ 179.919955][ T6355] infiniband syz2: added syz_tun [ 180.059975][ T6355] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 180.067107][ T6355] infiniband syz2: Couldn't open port 1 [ 180.115564][ T6355] RDS/IB: syz2: added [ 180.116250][ T6355] smc: adding ib device syz2 with port count 1 [ 180.116547][ T6355] smc: ib device syz2 port 1 has pnetid [ 180.377854][ T10] usb 1-1: config 0 descriptor?? [ 182.152365][ T10] kobil_sct 1-1:0.148: required endpoints missing [ 182.188397][ T10] usb 1-1: USB disconnect, device number 4 [ 182.837280][ T6377] CIFS mount error: No usable UNC path provided in device string! [ 182.837280][ T6377] [ 182.837358][ T6377] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 183.884435][ T6382] Unsupported ieee802154 address type: 0 [ 185.368705][ T5986] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 185.531273][ T5986] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 185.531301][ T5986] usb 4-1: config 0 has no interface number 0 [ 185.533630][ T5986] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 185.533648][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.533659][ T5986] usb 4-1: Product: syz [ 185.533667][ T5986] usb 4-1: Manufacturer: syz [ 185.533674][ T5986] usb 4-1: SerialNumber: syz [ 185.548068][ T5986] usb 4-1: config 0 descriptor?? [ 185.756775][ T5986] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 185.882011][ T5986] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 185.882731][ T5986] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 185.882814][ T5986] usb 4-1: media controller created [ 185.943324][ T6402] program syz.0.119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.994361][ T6401] veth0_to_bridge: entered promiscuous mode [ 185.995275][ T6400] veth0_to_bridge: left promiscuous mode [ 186.263035][ T5986] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 187.073839][ T5986] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 187.596018][ T5986] usb 4-1: USB disconnect, device number 3 [ 188.020860][ T6417] CIFS mount error: No usable UNC path provided in device string! [ 188.020860][ T6417] [ 188.020939][ T6417] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 188.850196][ T5842] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 188.858545][ T5842] Bluetooth: hci3: Injecting HCI hardware error event [ 188.868474][ T5842] Bluetooth: hci3: hardware error 0x00 [ 189.329567][ T5986] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 189.487653][ T5986] usb 4-1: Using ep0 maxpacket: 8 [ 189.495701][ T5986] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 189.495728][ T5986] usb 4-1: config 0 has no interface number 0 [ 189.781153][ T5986] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 189.781186][ T5986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.781206][ T5986] usb 4-1: Product: syz [ 189.781220][ T5986] usb 4-1: Manufacturer: syz [ 189.781234][ T5986] usb 4-1: SerialNumber: syz [ 189.810556][ T5986] usb 4-1: config 0 descriptor?? [ 189.848683][ T5986] kobil_sct 4-1:0.148: required endpoints missing [ 190.217889][ T59] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 190.361793][ T31] usb 4-1: USB disconnect, device number 4 [ 191.125826][ T6436] program syz.4.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.449567][ T5986] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 191.591251][ T5842] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 192.466109][ T6451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.137'. [ 192.509549][ T5986] usb 1-1: Using ep0 maxpacket: 16 [ 192.900204][ T6453] Unsupported ieee802154 address type: 0 [ 193.052445][ T5986] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 193.052503][ T5986] usb 1-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 193.052527][ T5986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.083010][ T5986] usb 1-1: config 0 descriptor?? [ 193.496550][ T6460] CIFS mount error: No usable UNC path provided in device string! [ 193.496550][ T6460] [ 193.496628][ T6460] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 194.491790][ T5986] usbhid 1-1:0.0: can't add hid device: -71 [ 194.491935][ T5986] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 194.657564][ T5986] usb 1-1: USB disconnect, device number 5 [ 194.663037][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.663125][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.659652][ T5986] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 196.902017][ T5986] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 196.902050][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.902071][ T5986] usb 1-1: Product: syz [ 196.902084][ T5986] usb 1-1: Manufacturer: syz [ 196.902099][ T5986] usb 1-1: SerialNumber: syz [ 197.047254][ T6486] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 197.220130][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 197.230737][ T6486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.276280][ T6486] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.372493][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 197.375793][ T31] usb 2-1: config 0 has an invalid interface number: 148 but max is 0 [ 197.375821][ T31] usb 2-1: config 0 has no interface number 0 [ 197.380063][ T31] usb 2-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 197.380090][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.380107][ T31] usb 2-1: Product: syz [ 197.380120][ T31] usb 2-1: Manufacturer: syz [ 197.380132][ T31] usb 2-1: SerialNumber: syz [ 197.408441][ T31] usb 2-1: config 0 descriptor?? [ 197.429335][ T31] kobil_sct 2-1:0.148: required endpoints missing [ 197.806451][ T5903] usb 2-1: USB disconnect, device number 2 [ 198.015025][ T6490] program syz.2.148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 198.705984][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 199.492448][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -EPROTO [ 199.493099][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 199.493158][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 199.494713][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 199.681301][ T5986] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 199.737804][ T5986] usb 1-1: USB disconnect, device number 6 [ 200.349588][ T6512] CIFS mount error: No usable UNC path provided in device string! [ 200.349588][ T6512] [ 200.349671][ T6512] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 201.361113][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 201.361398][ T5842] Bluetooth: hci1: Injecting HCI hardware error event [ 201.364121][ T59] Bluetooth: hci1: hardware error 0x00 [ 202.148840][ T6522] netlink: 156 bytes leftover after parsing attributes in process `syz.0.155'. [ 206.101218][ T6532] program syz.2.159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.279830][ T6539] Unsupported ieee802154 address type: 0 [ 207.780438][ T59] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 208.024838][ T6556] binder: 6555:6556 ioctl 4018620d 0 returned -22 [ 208.057176][ T6556] binder: 6555:6556 ioctl c0306201 200000000540 returned -22 [ 210.444400][ T6575] program syz.3.173 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.321788][ T6596] netlink: 40 bytes leftover after parsing attributes in process `syz.2.177'. [ 218.300714][ T5902] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 218.489508][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 218.495004][ T6601] capability: warning: `syz.4.180' uses 32-bit capabilities (legacy support in use) [ 218.500978][ T5902] usb 5-1: unable to get BOS descriptor or descriptor too short [ 218.502168][ T5902] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 218.502202][ T5902] usb 5-1: can't read configurations, error -71 [ 218.621451][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.771363][ T5917] usb 4-1: Using ep0 maxpacket: 8 [ 218.778766][ T5917] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 218.778798][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.778818][ T5917] usb 4-1: Product: syz [ 218.778832][ T5917] usb 4-1: Manufacturer: syz [ 218.778846][ T5917] usb 4-1: SerialNumber: syz [ 218.892732][ T5917] usb 4-1: config 0 descriptor?? [ 218.911709][ T5917] usbtest 4-1:0.0: FX2 device [ 218.911732][ T5917] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 219.105735][ T6617] program syz.1.184 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 219.141329][ T5917] usb 4-1: USB disconnect, device number 5 [ 220.395330][ T5902] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.415590][ T6634] Unsupported ieee802154 address type: 0 [ 220.719610][ T5902] usb 5-1: Using ep0 maxpacket: 8 [ 221.561834][ T5902] usb 5-1: config 0 interface 0 has no altsetting 0 [ 221.561885][ T5902] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 221.561908][ T5902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.915167][ T5902] usb 5-1: config 0 descriptor?? [ 222.634329][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 222.634374][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 223.002218][ T5902] usbhid 5-1:0.0: can't add hid device: -71 [ 223.002362][ T5902] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 223.079134][ T5902] usb 5-1: USB disconnect, device number 4 [ 224.874212][ T6661] program syz.4.197 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.826257][ T6672] Unsupported ieee802154 address type: 0 [ 226.180790][ T6676] netlink: 'syz.1.201': attribute type 10 has an invalid length. [ 226.190357][ T6676] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 226.193406][ T6676] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 227.073456][ T6686] trusted_key: encrypted_key: insufficient parameters specified [ 227.380246][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 227.530470][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 227.532464][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.532481][ T10] usb 2-1: config 0 has no interface number 0 [ 227.535968][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 227.535985][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.535996][ T10] usb 2-1: Product: syz [ 227.536004][ T10] usb 2-1: Manufacturer: syz [ 227.536012][ T10] usb 2-1: SerialNumber: syz [ 227.595198][ T10] usb 2-1: config 0 descriptor?? [ 227.612029][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 227.612047][ T10] usb 2-1: selecting invalid altsetting 1 [ 227.612056][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 227.644562][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 227.644840][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 227.644877][ T10] usb 2-1: media controller created [ 227.817035][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 228.730057][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 228.730119][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 228.741358][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 229.050006][ T10] usb 2-1: USB disconnect, device number 3 [ 229.767636][ T6716] netlink: 'syz.1.217': attribute type 1 has an invalid length. [ 230.070925][ T6723] trusted_key: encrypted_key: insufficient parameters specified [ 230.100701][ T6724] netlink: 28 bytes leftover after parsing attributes in process `syz.1.217'. [ 230.325471][ T6718] gretap1: entered promiscuous mode [ 230.347943][ T6718] bond1: (slave gretap1): making interface the new active one [ 230.370113][ T6718] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 230.572567][ T6724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.629575][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 234.835347][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 234.851321][ T10] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 234.851354][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.851374][ T10] usb 4-1: Product: syz [ 234.851388][ T10] usb 4-1: Manufacturer: syz [ 234.851403][ T10] usb 4-1: SerialNumber: syz [ 234.918664][ T10] usb 4-1: config 0 descriptor?? [ 234.963419][ T10] usbtest 4-1:0.0: FX2 device [ 234.963441][ T10] usbtest 4-1:0.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 235.162439][ T10] usb 4-1: USB disconnect, device number 6 [ 240.570756][ T6789] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 240.571002][ T6789] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 241.319609][ T6789] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 241.319708][ T6789] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 242.640513][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 243.360276][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 244.719839][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 245.439903][ T5842] Bluetooth: hci4: command 0x0406 tx timeout [ 252.464546][ T6875] netlink: 'syz.4.270': attribute type 10 has an invalid length. [ 252.610600][ T6875] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.660051][ T6875] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 256.115132][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.115229][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.497982][ T6912] delete_channel: no stack [ 265.125378][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 265.133126][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 265.135679][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 265.138961][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 265.141294][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 267.943872][ T5842] Bluetooth: hci5: command tx timeout [ 269.481055][ T6990] CIFS mount error: No usable UNC path provided in device string! [ 269.481055][ T6990] [ 269.481079][ T6990] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 270.289420][ T5842] Bluetooth: hci5: command tx timeout [ 271.486954][ T7002] gretap1: entered promiscuous mode [ 272.421437][ T5842] Bluetooth: hci5: command tx timeout [ 273.738859][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.154518][ T5842] Bluetooth: hci5: command tx timeout [ 280.285944][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.302330][ T7055] sctp: failed to load transform for md5: -2 [ 282.886502][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.267851][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.193621][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.350300][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.470624][ C0] vkms_vblank_simulate: vblank timer overrun [ 288.660836][ T7130] trusted_key: encrypted_key: insufficient parameters specified [ 288.927527][ C0] vkms_vblank_simulate: vblank timer overrun [ 289.927882][ C0] vkms_vblank_simulate: vblank timer overrun [ 290.471191][ C0] vkms_vblank_simulate: vblank timer overrun [ 291.921392][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.837606][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 292.842878][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 292.845088][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 292.850068][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 292.852749][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 294.921219][ T12] bridge_slave_1: left allmulticast mode [ 294.921620][ T12] bridge_slave_1: left promiscuous mode [ 294.924975][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.970101][ T59] Bluetooth: hci4: command tx timeout [ 295.875222][ T7183] trusted_key: encrypted_key: insufficient parameters specified [ 296.467062][ T12] bridge_slave_0: left allmulticast mode [ 296.467100][ T12] bridge_slave_0: left promiscuous mode [ 296.471366][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.039773][ T59] Bluetooth: hci4: command tx timeout [ 299.129569][ T59] Bluetooth: hci4: command tx timeout [ 301.205175][ T59] Bluetooth: hci4: command tx timeout [ 301.260157][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 301.486175][ T7208] netlink: 'syz.0.352': attribute type 10 has an invalid length. [ 303.348318][ T7215] CIFS mount error: No usable UNC path provided in device string! [ 303.348318][ T7215] [ 303.348397][ T7215] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 304.253210][ T7217] trusted_key: encrypted_key: insufficient parameters specified [ 304.944091][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.069090][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.185291][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 305.379825][ T12] bond0 (unregistering): Released all slaves [ 305.782706][ T7225] netlink: 'syz.2.357': attribute type 1 has an invalid length. [ 305.900701][ T7227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.357'. [ 306.075660][ T12] bond1 (unregistering): Released all slaves [ 306.106305][ T7208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.108107][ T7208] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 307.008338][ T7235] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 307.950490][ T3523] smc: removing ib device syz2 [ 308.453124][ T7225] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 308.497657][ T7226] gretap1: entered promiscuous mode [ 309.003860][ T10] syz2: Port: 1 Link DOWN [ 311.918391][ T7264] rdma_rxe: rxe_newlink: failed to add syz_tun [ 312.458132][ T7273] netlink: 'syz.0.366': attribute type 10 has an invalid length. [ 313.625080][ T7278] CIFS mount error: No usable UNC path provided in device string! [ 313.625080][ T7278] [ 313.625158][ T7278] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 314.903984][ T6949] chnl_net:caif_netlink_parms(): no params data found [ 317.561318][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.561407][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.749507][ T5986] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 323.907529][ T5986] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 323.907563][ T5986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.907584][ T5986] usb 1-1: Product: syz [ 323.907598][ T5986] usb 1-1: Manufacturer: syz [ 323.907612][ T5986] usb 1-1: SerialNumber: syz [ 325.111717][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.126632][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 325.127862][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 325.130333][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 325.142222][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 325.186011][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 325.186078][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 325.188566][ T5986] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 325.354494][ T5986] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 325.712760][ T7104] chnl_net:caif_netlink_parms(): no params data found [ 326.730431][ T6461] usb 1-1: USB disconnect, device number 7 [ 327.202074][ T59] Bluetooth: hci0: command tx timeout [ 329.310239][ T59] Bluetooth: hci0: command tx timeout [ 332.300843][ T59] Bluetooth: hci0: command tx timeout [ 332.379504][ T12] hsr_slave_0: left promiscuous mode [ 332.557363][ T12] hsr_slave_1: left promiscuous mode [ 332.558735][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.558830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.656685][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.656720][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.014214][ T12] veth1_macvtap: left promiscuous mode [ 334.014518][ T12] veth0_macvtap: left promiscuous mode [ 334.014895][ T12] veth1_vlan: left promiscuous mode [ 334.015295][ T12] veth0_vlan: left promiscuous mode [ 334.482781][ T5842] Bluetooth: hci0: command tx timeout [ 335.913734][ T6461] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 336.093538][ T6461] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.093569][ T6461] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.093589][ T6461] usb 5-1: Product: syz [ 336.093604][ T6461] usb 5-1: Manufacturer: syz [ 336.093618][ T6461] usb 5-1: SerialNumber: syz [ 336.667396][ T12] team0 (unregistering): Port device team_slave_1 removed [ 336.886593][ T12] team0 (unregistering): Port device team_slave_0 removed [ 337.324582][ T6461] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 337.324648][ T6461] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 337.325737][ T6461] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.371678][ T6461] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 337.595985][ T7415] netlink: 'syz.2.393': attribute type 10 has an invalid length. [ 338.672333][ T5903] usb 5-1: USB disconnect, device number 5 [ 340.613440][ T7104] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.613667][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.613921][ T7104] bridge_slave_0: entered allmulticast mode [ 340.659617][ T7104] bridge_slave_0: entered promiscuous mode [ 340.719625][ T7104] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.719793][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.720044][ T7104] bridge_slave_1: entered allmulticast mode [ 340.723249][ T7104] bridge_slave_1: entered promiscuous mode [ 341.806802][ T7104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.837460][ T7104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.307321][ T7104] team0: Port device team_slave_0 added [ 342.542454][ T7104] team0: Port device team_slave_1 added [ 344.913699][ T7348] chnl_net:caif_netlink_parms(): no params data found [ 346.588965][ T7455] netlink: 'syz.2.403': attribute type 1 has an invalid length. [ 346.789475][ T6167] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 346.792037][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 346.823260][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 346.825064][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 346.827880][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 346.854456][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 346.997099][ T6167] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 346.997171][ T6167] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.997192][ T6167] usb 5-1: Product: syz [ 346.997206][ T6167] usb 5-1: Manufacturer: syz [ 346.997220][ T6167] usb 5-1: SerialNumber: syz [ 347.170488][ T7458] gretap1: entered promiscuous mode [ 347.195008][ T7458] bond1: (slave gretap1): making interface the new active one [ 347.196558][ T7458] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 348.728776][ T6167] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 348.728842][ T6167] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 348.731778][ T6167] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 348.879831][ T5842] Bluetooth: hci5: command tx timeout [ 349.067849][ T6167] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 349.077169][ T12] bond0 (unregistering): Released all slaves [ 350.055028][ T7487] netlink: 'syz.2.405': attribute type 10 has an invalid length. [ 350.580571][ T5903] usb 5-1: USB disconnect, device number 6 [ 350.959960][ T5842] Bluetooth: hci5: command tx timeout [ 351.385172][ T7348] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.385363][ T7348] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.385960][ T7348] bridge_slave_0: entered allmulticast mode [ 351.410898][ T7348] bridge_slave_0: entered promiscuous mode [ 353.092613][ T5842] Bluetooth: hci5: command tx timeout [ 353.561231][ T7348] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.561393][ T7348] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.561614][ T7348] bridge_slave_1: entered allmulticast mode [ 353.568927][ T7348] bridge_slave_1: entered promiscuous mode [ 353.953124][ T7348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.006537][ T7348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.119452][ T5842] Bluetooth: hci5: command tx timeout [ 355.980713][ T7348] team0: Port device team_slave_0 added [ 356.032933][ T7348] team0: Port device team_slave_1 added [ 356.341649][ T7515] netlink: 'syz.4.412': attribute type 1 has an invalid length. [ 356.683498][ T7516] gretap1: entered promiscuous mode [ 356.692725][ T7516] bond1: (slave gretap1): making interface the new active one [ 356.693957][ T7516] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 356.697792][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.697806][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.697829][ T7348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.761636][ T7348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.761654][ T7348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.761682][ T7348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.926088][ T7522] netlink: 'syz.0.413': attribute type 20 has an invalid length. [ 358.137942][ T7530] Bluetooth: MGMT ver 1.23 [ 358.154195][ T7530] netlink: 48 bytes leftover after parsing attributes in process `syz.4.414'. [ 360.389024][ T7348] hsr_slave_0: entered promiscuous mode [ 360.398802][ T7348] hsr_slave_1: entered promiscuous mode [ 360.404833][ T7348] debugfs: 'hsr0' already exists in 'hsr' [ 360.404860][ T7348] Cannot create hsr debugfs directory [ 362.536833][ T12] bridge_slave_1: left allmulticast mode [ 362.536859][ T12] bridge_slave_1: left promiscuous mode [ 362.537034][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.701487][ T12] bridge_slave_0: left allmulticast mode [ 362.701525][ T12] bridge_slave_0: left promiscuous mode [ 362.702388][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.839779][ T7564] netlink: 'syz.0.422': attribute type 1 has an invalid length. [ 362.898662][ T7565] netlink: 28 bytes leftover after parsing attributes in process `syz.0.422'. [ 363.520701][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.660456][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.324249][ T12] bond0 (unregistering): Released all slaves [ 366.110886][ T7564] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 367.708395][ T7588] netlink: 'syz.2.427': attribute type 20 has an invalid length. [ 368.395044][ T12] team0 (unregistering): Port device team_slave_1 removed [ 368.665232][ T12] team0 (unregistering): Port device team_slave_0 removed [ 369.324361][ T7596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.430'. [ 371.582361][ T7601] netlink: 'syz.0.432': attribute type 10 has an invalid length. [ 371.687097][ T7608] netlink: 'syz.4.433': attribute type 1 has an invalid length. [ 371.748452][ T7609] netlink: 28 bytes leftover after parsing attributes in process `syz.4.433'. [ 373.443525][ T7608] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 373.803455][ T37] audit: type=1804 audit(1757085762.780:2): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.435" name="/newroot/100/file0" dev="tmpfs" ino=531 res=1 errno=0 [ 373.893223][ T7619] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 373.893357][ T7619] ref_ctr increment failed for inode: 0x213 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88805adc5a00 [ 375.974375][ T7461] chnl_net:caif_netlink_parms(): no params data found [ 379.006215][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.006297][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.270028][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.270199][ T7461] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.270461][ T7461] bridge_slave_0: entered allmulticast mode [ 380.303453][ T7461] bridge_slave_0: entered promiscuous mode [ 380.382457][ T7461] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.382620][ T7461] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.382891][ T7461] bridge_slave_1: entered allmulticast mode [ 380.405160][ T7461] bridge_slave_1: entered promiscuous mode [ 382.355709][ T7461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.393768][ T7461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 383.719496][ T7348] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 385.332130][ T7461] team0: Port device team_slave_0 added [ 385.344165][ T7461] team0: Port device team_slave_1 added [ 386.079706][ T7711] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 386.079799][ T7711] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 388.159533][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 388.282569][ T7711] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 388.433870][ T7711] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 388.436905][ T7711] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 388.541038][ T7711] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 388.801054][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 388.813789][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 388.815071][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 388.825664][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 388.826493][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 389.820753][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.820772][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.820800][ T7461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.805556][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.971947][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.986159][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 390.986447][ T5842] Bluetooth: hci4: command tx timeout [ 391.154589][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.207906][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.368659][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.389610][ T7461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.389628][ T7461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.389653][ T7461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.825296][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.145649][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.878142][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.014533][ T7461] hsr_slave_0: entered promiscuous mode [ 393.016222][ T7461] hsr_slave_1: entered promiscuous mode [ 393.017341][ T7461] debugfs: 'hsr0' already exists in 'hsr' [ 393.017368][ T7461] Cannot create hsr debugfs directory [ 393.041181][ T59] Bluetooth: hci4: command tx timeout [ 393.041201][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 393.796102][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.978263][ C1] vkms_vblank_simulate: vblank timer overrun [ 394.646506][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.003275][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.121819][ T5842] Bluetooth: hci4: command tx timeout [ 395.121833][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 395.439653][ T5903] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 395.589582][ T5903] usb 5-1: Using ep0 maxpacket: 8 [ 395.595156][ T5903] usb 5-1: config 0 has an invalid interface number: 148 but max is 0 [ 395.595186][ T5903] usb 5-1: config 0 has no interface number 0 [ 395.619469][ T5903] usb 5-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 395.619500][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.619518][ T5903] usb 5-1: Product: syz [ 395.619531][ T5903] usb 5-1: Manufacturer: syz [ 395.619543][ T5903] usb 5-1: SerialNumber: syz [ 395.636991][ T5903] usb 5-1: config 0 descriptor?? [ 395.653396][ T5903] kobil_sct 5-1:0.148: required endpoints missing [ 395.889732][ T5903] usb 5-1: USB disconnect, device number 7 [ 396.831500][ T7789] caif0: entered allmulticast mode [ 397.312806][ T5842] Bluetooth: hci4: command tx timeout [ 399.050739][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.216455][ C1] vkms_vblank_simulate: vblank timer overrun [ 399.694613][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.110723][ C1] vkms_vblank_simulate: vblank timer overrun [ 400.449502][ T12] bridge_slave_1: left allmulticast mode [ 400.449541][ T12] bridge_slave_1: left promiscuous mode [ 400.449864][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.764916][ C1] vkms_vblank_simulate: vblank timer overrun [ 401.221314][ T12] bridge_slave_0: left allmulticast mode [ 401.221360][ T12] bridge_slave_0: left promiscuous mode [ 401.221689][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.709729][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 401.859562][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 401.862202][ T9] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 401.862230][ T9] usb 3-1: config 0 has no interface number 0 [ 401.868547][ T9] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 401.868579][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.868608][ T9] usb 3-1: Product: syz [ 401.868621][ T9] usb 3-1: Manufacturer: syz [ 401.868633][ T9] usb 3-1: SerialNumber: syz [ 401.943871][ T9] usb 3-1: config 0 descriptor?? [ 401.984877][ T9] kobil_sct 3-1:0.148: required endpoints missing [ 402.210196][ T5986] usb 3-1: USB disconnect, device number 3 [ 402.468166][ C1] vkms_vblank_simulate: vblank timer overrun [ 403.833921][ T7839] 9pnet_fd: Insufficient options for proto=fd [ 405.520878][ C0] vkms_vblank_simulate: vblank timer overrun [ 405.561639][ C0] vkms_vblank_simulate: vblank timer overrun [ 406.041566][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 406.075705][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 406.088295][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 406.108252][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 406.117076][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 406.678665][ C0] vkms_vblank_simulate: vblank timer overrun [ 408.239632][ T5842] Bluetooth: hci0: command tx timeout [ 408.561505][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.196984][ C0] vkms_vblank_simulate: vblank timer overrun [ 410.319602][ T5842] Bluetooth: hci0: command tx timeout [ 411.171898][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.611878][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.871854][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 412.399530][ T5842] Bluetooth: hci0: command tx timeout [ 412.680830][ T12] bond0 (unregistering): Released all slaves [ 414.479810][ T5842] Bluetooth: hci0: command tx timeout [ 415.111316][ T7728] chnl_net:caif_netlink_parms(): no params data found [ 415.957646][ C1] vkms_vblank_simulate: vblank timer overrun [ 420.259434][ T12] hsr_slave_0: left promiscuous mode [ 420.466994][ T12] hsr_slave_1: left promiscuous mode [ 420.468078][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.468109][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 420.620723][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.620757][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.537154][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.008282][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.247156][ T12] veth1_macvtap: left promiscuous mode [ 422.247301][ T12] veth0_macvtap: left promiscuous mode [ 422.300036][ T12] veth1_vlan: left promiscuous mode [ 422.300302][ T12] veth0_vlan: left promiscuous mode [ 422.927805][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.092324][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.791062][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.094808][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.522574][ C0] vkms_vblank_simulate: vblank timer overrun [ 428.260472][ T7993] trusted_key: encrypted_key: insufficient parameters specified [ 431.041210][ T8010] 9pnet_fd: Insufficient options for proto=fd [ 431.905647][ T8023] netlink: 'syz.0.527': attribute type 20 has an invalid length. [ 433.080464][ T8028] trusted_key: encrypted_key: insufficient parameters specified [ 438.310645][ T8051] 9pnet_fd: Insufficient options for proto=fd [ 439.961421][ T8063] trusted_key: encrypted_key: insufficient parameters specified [ 441.268143][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.285253][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.361945][ T12] team0 (unregistering): Port device team_slave_1 removed [ 442.553750][ T12] team0 (unregistering): Port device team_slave_0 removed [ 444.783853][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.806523][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.807921][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.823937][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 444.825651][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.782610][ T7728] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 447.140508][ T59] Bluetooth: hci5: command tx timeout [ 447.210269][ T8090] 9pnet_fd: Insufficient options for proto=fd [ 447.546618][ T8023] dvmrp1: entered allmulticast mode [ 447.799863][ T8096] netlink: 'syz.4.547': attribute type 1 has an invalid length. [ 448.530540][ T8104] CIFS mount error: No usable UNC path provided in device string! [ 448.530540][ T8104] [ 448.530572][ T8104] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 448.777755][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 448.797339][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 448.800034][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 448.806341][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 448.813883][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 449.199498][ T59] Bluetooth: hci5: command tx timeout [ 451.034368][ T59] Bluetooth: hci4: command tx timeout [ 452.436655][ T59] Bluetooth: hci5: command tx timeout [ 453.039516][ T59] Bluetooth: hci4: command tx timeout [ 454.560778][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 454.718867][ T59] Bluetooth: hci5: command tx timeout [ 455.491137][ T5842] Bluetooth: hci4: command tx timeout [ 457.563754][ T5842] Bluetooth: hci4: command tx timeout [ 459.099518][ T5925] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 459.399404][ T5925] usb 3-1: Using ep0 maxpacket: 8 [ 459.408978][ T5925] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 459.409007][ T5925] usb 3-1: config 0 has no interface number 0 [ 459.420949][ T5925] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 459.420980][ T5925] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.421000][ T5925] usb 3-1: Product: syz [ 459.421014][ T5925] usb 3-1: Manufacturer: syz [ 459.421028][ T5925] usb 3-1: SerialNumber: syz [ 459.427282][ T5925] usb 3-1: config 0 descriptor?? [ 459.433617][ T5925] kobil_sct 3-1:0.148: required endpoints missing [ 459.612757][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.613015][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.613272][ T7853] bridge_slave_0: entered allmulticast mode [ 459.616945][ T7853] bridge_slave_0: entered promiscuous mode [ 459.688057][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.688510][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.688748][ T7853] bridge_slave_1: entered allmulticast mode [ 459.712868][ T7853] bridge_slave_1: entered promiscuous mode [ 459.809585][ T5986] usb 3-1: USB disconnect, device number 4 [ 460.970745][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.006963][ T8077] chnl_net:caif_netlink_parms(): no params data found [ 461.023789][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.079441][ T5925] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 461.469401][ T5925] usb 5-1: Using ep0 maxpacket: 8 [ 461.472273][ T5925] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 461.475708][ T5925] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 461.475736][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.475755][ T5925] usb 5-1: Product: syz [ 461.475769][ T5925] usb 5-1: Manufacturer: syz [ 461.475783][ T5925] usb 5-1: SerialNumber: syz [ 461.482050][ T5925] usb 5-1: config 0 descriptor?? [ 462.470073][ T5925] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 462.470137][ T5925] usb 5-1: setting power ON [ 462.470653][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 462.513691][ T5925] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 462.514728][ T5925] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 462.514793][ T5925] usb 5-1: media controller created [ 462.694237][ T8204] dvb-usb: bulk message failed: -22 (3/0) [ 462.694267][ T8204] dvb-usb: bulk message failed: -22 (4/0) [ 462.694282][ T8204] cxusb: i2c read failed [ 462.878370][ T5925] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 462.938165][ T5925] usb 5-1: selecting invalid altsetting 6 [ 462.938189][ T5925] usb 5-1: digital interface selection failed (-22) [ 462.938204][ T5925] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 462.941952][ T5925] usb 5-1: setting power OFF [ 462.942083][ T5925] dvb-usb: bulk message failed: -22 (2/0) [ 462.942100][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 462.942111][ T5925] (NULL device *): no alternate interface [ 463.071687][ T5925] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 463.101746][ T5925] usb 5-1: USB disconnect, device number 8 [ 466.436452][ T7853] team0: Port device team_slave_0 added [ 466.590304][ T8107] chnl_net:caif_netlink_parms(): no params data found [ 466.638138][ T8229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 466.638283][ T8229] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 466.747449][ T8229] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 466.802363][ T8229] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 466.827223][ T8229] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 466.931670][ T8229] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 467.023737][ T8229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 467.023800][ T8229] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 467.091374][ T8229] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 467.218987][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 467.234909][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 467.258177][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 467.279915][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 467.283363][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 467.453141][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.529635][ T5917] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 468.549471][ T5917] usb 3-1: Using ep0 maxpacket: 8 [ 468.552131][ T5917] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 468.552158][ T5917] usb 3-1: config 0 has no interface number 0 [ 468.555481][ T5917] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 468.555521][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.555542][ T5917] usb 3-1: Product: syz [ 468.555556][ T5917] usb 3-1: Manufacturer: syz [ 468.555569][ T5917] usb 3-1: SerialNumber: syz [ 468.612930][ T5917] usb 3-1: config 0 descriptor?? [ 468.635668][ T5917] kobil_sct 3-1:0.148: required endpoints missing [ 468.879513][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 469.629574][ T5842] Bluetooth: hci3: command tx timeout [ 469.635094][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 469.855480][ T5917] usb 3-1: USB disconnect, device number 5 [ 469.939693][ T8077] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.939874][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.940142][ T8077] bridge_slave_0: entered allmulticast mode [ 469.975714][ T8077] bridge_slave_0: entered promiscuous mode [ 470.111882][ T8247] infiniband syz2: set active [ 470.111904][ T8247] infiniband syz2: added syz_tun [ 470.113911][ T8247] syz2: rxe_create_cq: returned err = -12 [ 470.113990][ T8247] infiniband syz2: Couldn't create ib_mad CQ [ 470.114167][ T8247] infiniband syz2: Couldn't open port 1 [ 470.174868][ T8247] RDS/IB: syz2: added [ 470.174958][ T8247] smc: adding ib device syz2 with port count 1 [ 470.174979][ T8247] smc: ib device syz2 port 1 has pnetid [ 470.328265][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.409779][ T8077] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.409952][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.410209][ T8077] bridge_slave_1: entered allmulticast mode [ 470.447472][ T8077] bridge_slave_1: entered promiscuous mode [ 470.959541][ T59] Bluetooth: hci5: command 0x0c1a tx timeout [ 471.679807][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 471.679847][ T59] Bluetooth: hci3: command tx timeout [ 473.050004][ T5842] Bluetooth: hci5: command 0x0c1a tx timeout [ 473.830628][ T5842] Bluetooth: hci3: command tx timeout [ 473.830664][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 473.935708][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.991696][ T8077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.021826][ T8107] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.022007][ T8107] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.022268][ T8107] bridge_slave_0: entered allmulticast mode [ 474.067068][ T8107] bridge_slave_0: entered promiscuous mode [ 474.104077][ T8077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.107522][ T8107] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.107686][ T8107] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.107932][ T8107] bridge_slave_1: entered allmulticast mode [ 474.169665][ T8107] bridge_slave_1: entered promiscuous mode [ 475.935072][ T59] Bluetooth: hci3: command tx timeout [ 477.754972][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.826300][ T8077] team0: Port device team_slave_0 added [ 477.891645][ T8107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.917044][ T8077] team0: Port device team_slave_1 added [ 478.181953][ T8107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.279676][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 480.449527][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 480.454671][ T31] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 480.454701][ T31] usb 3-1: config 0 has no interface number 0 [ 480.471292][ T31] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 480.471319][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.471337][ T31] usb 3-1: Product: syz [ 480.471349][ T31] usb 3-1: Manufacturer: syz [ 480.471362][ T31] usb 3-1: SerialNumber: syz [ 480.486180][ T31] usb 3-1: config 0 descriptor?? [ 480.506593][ T31] kobil_sct 3-1:0.148: required endpoints missing [ 480.764545][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.764564][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.764591][ T8077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.835550][ T8107] team0: Port device team_slave_0 added [ 480.842527][ T31] usb 3-1: USB disconnect, device number 6 [ 480.883470][ T8077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.883491][ T8077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.883520][ T8077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.936599][ T8107] team0: Port device team_slave_1 added [ 481.502246][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.502266][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.502294][ T8107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.000597][ T8107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.000613][ T8107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 482.000636][ T8107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.187338][ T8077] hsr_slave_0: entered promiscuous mode [ 482.189093][ T8077] hsr_slave_1: entered promiscuous mode [ 485.475078][ T8107] hsr_slave_0: entered promiscuous mode [ 485.489953][ T8107] hsr_slave_1: entered promiscuous mode [ 485.491148][ T8107] debugfs: 'hsr0' already exists in 'hsr' [ 485.491173][ T8107] Cannot create hsr debugfs directory [ 485.539527][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 485.689406][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 485.692064][ T31] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 485.692091][ T31] usb 3-1: config 0 has no interface number 0 [ 485.696182][ T31] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 485.696200][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.696211][ T31] usb 3-1: Product: syz [ 485.696220][ T31] usb 3-1: Manufacturer: syz [ 485.696232][ T31] usb 3-1: SerialNumber: syz [ 485.705705][ T31] usb 3-1: config 0 descriptor?? [ 485.730499][ T31] kobil_sct 3-1:0.148: required endpoints missing [ 486.317755][ T31] usb 3-1: USB disconnect, device number 7 [ 487.451318][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 491.869474][ T5986] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 491.909694][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.909864][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.910144][ T8233] bridge_slave_0: entered allmulticast mode [ 491.913553][ T8233] bridge_slave_0: entered promiscuous mode [ 492.019540][ T5986] usb 3-1: Using ep0 maxpacket: 8 [ 492.040204][ T5986] usb 3-1: config 0 has an invalid interface number: 148 but max is 0 [ 492.040233][ T5986] usb 3-1: config 0 has no interface number 0 [ 492.051017][ T5986] usb 3-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 492.051060][ T5986] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.051078][ T5986] usb 3-1: Product: syz [ 492.051091][ T5986] usb 3-1: Manufacturer: syz [ 492.051105][ T5986] usb 3-1: SerialNumber: syz [ 492.099126][ T5986] usb 3-1: config 0 descriptor?? [ 492.135464][ T5986] kobil_sct 3-1:0.148: required endpoints missing [ 492.152715][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.152880][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.153147][ T8233] bridge_slave_1: entered allmulticast mode [ 492.182382][ T8233] bridge_slave_1: entered promiscuous mode [ 492.756971][ T5986] usb 3-1: USB disconnect, device number 8 [ 492.806595][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.621882][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.510632][ T8233] team0: Port device team_slave_0 added [ 496.526764][ T8233] team0: Port device team_slave_1 added [ 496.787263][ T12] bridge_slave_1: left allmulticast mode [ 496.787299][ T12] bridge_slave_1: left promiscuous mode [ 496.787597][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.093954][ T12] bridge_slave_0: left allmulticast mode [ 497.093992][ T12] bridge_slave_0: left promiscuous mode [ 497.094329][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.168011][ T12] bridge_slave_1: left allmulticast mode [ 497.168047][ T12] bridge_slave_1: left promiscuous mode [ 497.168334][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.081376][ T12] bridge_slave_0: left allmulticast mode [ 498.081414][ T12] bridge_slave_0: left promiscuous mode [ 498.081724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.154784][ T12] bridge_slave_1: left allmulticast mode [ 498.154822][ T12] bridge_slave_1: left promiscuous mode [ 498.155127][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.971402][ T12] bridge_slave_0: left allmulticast mode [ 498.971439][ T12] bridge_slave_0: left promiscuous mode [ 498.971754][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.890202][ T12] dvmrp1 (unregistering): left allmulticast mode [ 500.770687][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.811190][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.855115][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 500.872479][ T12] bond0 (unregistering): Released all slaves [ 501.079357][ T12] bond0 (unregistering): Released all slaves [ 501.330229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.420560][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.484247][ T12] bond0 (unregistering): Released all slaves [ 501.751348][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.850107][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.850716][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.850798][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.933833][ T12] bond0 (unregistering): Released all slaves [ 502.732626][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.732645][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.732673][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.744315][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.744333][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 503.744361][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.631780][ T8233] hsr_slave_0: entered promiscuous mode [ 505.633510][ T8233] hsr_slave_1: entered promiscuous mode [ 505.634632][ T8233] debugfs: 'hsr0' already exists in 'hsr' [ 505.634657][ T8233] Cannot create hsr debugfs directory [ 506.691521][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 506.697118][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 506.707693][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 506.721421][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 506.730746][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 506.813437][ T8107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 507.298541][ T8107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 507.661842][ T8107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 508.799629][ T5842] Bluetooth: hci0: command tx timeout [ 511.275669][ T5842] Bluetooth: hci0: command tx timeout [ 511.435017][ T8107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 512.141818][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 512.161808][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 512.163630][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 512.165003][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 512.204017][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.360008][ T5842] Bluetooth: hci0: command tx timeout [ 514.323222][ T5842] Bluetooth: hci6: command tx timeout [ 515.439612][ T5842] Bluetooth: hci0: command tx timeout [ 516.400075][ T5842] Bluetooth: hci6: command tx timeout [ 517.974630][ T8526] CIFS mount error: No usable UNC path provided in device string! [ 517.974630][ T8526] [ 517.974681][ T8526] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 518.479908][ T5842] Bluetooth: hci6: command tx timeout [ 519.413072][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.4.635'. [ 520.559590][ T5842] Bluetooth: hci6: command tx timeout [ 522.679528][ T12] hsr_slave_0: left promiscuous mode [ 522.739549][ T12] hsr_slave_1: left promiscuous mode [ 522.740648][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 522.740678][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.810802][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 522.810837][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.080704][ T12] hsr_slave_0: left promiscuous mode [ 523.119545][ T12] hsr_slave_1: left promiscuous mode [ 523.120917][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.157244][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.339510][ T12] hsr_slave_0: left promiscuous mode [ 523.379493][ T12] hsr_slave_1: left promiscuous mode [ 523.380643][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.436270][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.592234][ T12] veth1_macvtap: left promiscuous mode [ 523.592371][ T12] veth0_macvtap: left promiscuous mode [ 523.592731][ T12] veth1_vlan: left promiscuous mode [ 523.592968][ T12] veth0_vlan: left promiscuous mode [ 525.277115][ T8583] netlink: 'syz.4.646': attribute type 1 has an invalid length. [ 525.996437][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 526.044583][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 526.046457][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 526.048548][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 526.072672][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 527.580524][ T12] team0 (unregistering): Port device team_slave_1 removed [ 527.790329][ T12] team0 (unregistering): Port device team_slave_0 removed [ 528.159500][ T59] Bluetooth: hci4: command tx timeout [ 530.265165][ T59] Bluetooth: hci4: command tx timeout [ 530.826891][ T12] team0 (unregistering): Port device team_slave_1 removed [ 530.950435][ T12] team0 (unregistering): Port device team_slave_0 removed [ 532.170243][ T12] team0 (unregistering): Port device team_slave_1 removed [ 532.281702][ T12] team0 (unregistering): Port device team_slave_0 removed [ 532.322740][ T59] Bluetooth: hci4: command tx timeout [ 534.399484][ T59] Bluetooth: hci4: command tx timeout [ 535.022301][ T8428] chnl_net:caif_netlink_parms(): no params data found [ 537.595019][ T8468] chnl_net:caif_netlink_parms(): no params data found [ 537.650167][ T8641] netlink: 'syz.2.655': attribute type 1 has an invalid length. [ 537.757415][ T8643] netlink: 28 bytes leftover after parsing attributes in process `syz.2.655'. [ 538.076720][ T8647] syz2: rxe_newlink: already configured on syz_tun [ 540.164897][ T8428] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.165156][ T8428] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.165415][ T8428] bridge_slave_0: entered allmulticast mode [ 540.208953][ T8428] bridge_slave_0: entered promiscuous mode [ 540.475581][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.478526][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.478801][ T8428] bridge_slave_1: entered allmulticast mode [ 540.511863][ T8428] bridge_slave_1: entered promiscuous mode [ 542.805866][ T8428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.806169][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.806327][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.806537][ T8468] bridge_slave_0: entered allmulticast mode [ 542.811674][ T8468] bridge_slave_0: entered promiscuous mode [ 543.167482][ T8428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.168013][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.168200][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.168426][ T8468] bridge_slave_1: entered allmulticast mode [ 543.172985][ T8468] bridge_slave_1: entered promiscuous mode [ 544.309687][ T8686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.665'. [ 546.066774][ T8428] team0: Port device team_slave_0 added [ 546.080126][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.170879][ T8428] team0: Port device team_slave_1 added [ 546.175484][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.733586][ T8468] team0: Port device team_slave_0 added [ 546.737094][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.737111][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.737138][ T8428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.942955][ T8468] team0: Port device team_slave_1 added [ 546.946833][ T8428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.946849][ T8428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.946876][ T8428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.951042][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.951060][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.951089][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.111093][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.111112][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.111140][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.345553][ T8591] chnl_net:caif_netlink_parms(): no params data found [ 548.757829][ T8428] hsr_slave_0: entered promiscuous mode [ 548.769940][ T8428] hsr_slave_1: entered promiscuous mode [ 548.771024][ T8428] debugfs: 'hsr0' already exists in 'hsr' [ 548.771047][ T8428] Cannot create hsr debugfs directory [ 551.061749][ T8468] hsr_slave_0: entered promiscuous mode [ 551.068956][ T8468] hsr_slave_1: entered promiscuous mode [ 551.072092][ T8468] debugfs: 'hsr0' already exists in 'hsr' [ 551.072120][ T8468] Cannot create hsr debugfs directory [ 553.733310][ T8591] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.733551][ T8591] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.733792][ T8591] bridge_slave_0: entered allmulticast mode [ 553.737059][ T8591] bridge_slave_0: entered promiscuous mode [ 553.807749][ T8591] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.807954][ T8591] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.808176][ T8591] bridge_slave_1: entered allmulticast mode [ 553.822834][ T8591] bridge_slave_1: entered promiscuous mode [ 556.873902][ T8591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.172411][ T8591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 559.408991][ T8591] team0: Port device team_slave_0 added [ 559.651322][ T8591] team0: Port device team_slave_1 added [ 563.870059][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.870146][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.543600][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.543621][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.543647][ T8591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.612629][ T8591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.612647][ T8591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.612675][ T8591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.989673][ T8591] hsr_slave_0: entered promiscuous mode [ 564.991392][ T8591] hsr_slave_1: entered promiscuous mode [ 564.992523][ T8591] debugfs: 'hsr0' already exists in 'hsr' [ 564.992550][ T8591] Cannot create hsr debugfs directory [ 569.008679][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 569.023212][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 569.024702][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 569.034594][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 569.037088][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 570.482171][ T8887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.493215][ T8887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.517359][ T8887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.521875][ T8887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 571.621822][ T8887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 571.908540][ T8887] Bluetooth: hci3: command tx timeout [ 573.685284][ T8887] Bluetooth: hci5: command tx timeout [ 573.991217][ T8887] Bluetooth: hci3: command tx timeout [ 576.125668][ T8887] Bluetooth: hci5: command tx timeout [ 576.125708][ T8887] Bluetooth: hci3: command tx timeout [ 578.159593][ T59] Bluetooth: hci3: command tx timeout [ 578.159632][ T59] Bluetooth: hci5: command tx timeout [ 580.074174][ T12] bridge_slave_1: left allmulticast mode [ 580.074211][ T12] bridge_slave_1: left promiscuous mode [ 580.074624][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.279521][ T8887] Bluetooth: hci5: command tx timeout [ 580.503221][ T12] bridge_slave_0: left allmulticast mode [ 580.503258][ T12] bridge_slave_0: left promiscuous mode [ 580.505456][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.623381][ T12] bridge_slave_1: left allmulticast mode [ 580.623419][ T12] bridge_slave_1: left promiscuous mode [ 580.623738][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.742756][ T12] bridge_slave_0: left allmulticast mode [ 580.742793][ T12] bridge_slave_0: left promiscuous mode [ 580.743091][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.826091][ T12] bridge_slave_1: left allmulticast mode [ 580.826132][ T12] bridge_slave_1: left promiscuous mode [ 580.826483][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.921343][ T12] bridge_slave_0: left allmulticast mode [ 580.921378][ T12] bridge_slave_0: left promiscuous mode [ 580.921687][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.028244][ T12] bridge_slave_1: left allmulticast mode [ 581.028282][ T12] bridge_slave_1: left promiscuous mode [ 581.028568][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.111320][ T12] bridge_slave_0: left allmulticast mode [ 581.111357][ T12] bridge_slave_0: left promiscuous mode [ 581.111647][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.168634][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.532134][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.616757][ T12] bond0 (unregistering): Released all slaves [ 586.520440][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.501581][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.719972][ T12] bond0 (unregistering): Released all slaves [ 588.228307][ T59] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.242335][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.245382][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.247256][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.248262][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 588.384271][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.490277][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 588.734200][ T12] bond0 (unregistering): Released all slaves [ 589.082761][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.183686][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.279867][ T12] bond0 (unregistering): Released all slaves [ 590.394028][ T59] Bluetooth: hci0: command tx timeout [ 592.409643][ T59] Bluetooth: hci0: command tx timeout [ 594.538972][ T59] Bluetooth: hci0: command tx timeout [ 594.747079][ T8885] chnl_net:caif_netlink_parms(): no params data found [ 596.574467][ T59] Bluetooth: hci0: command tx timeout [ 598.407351][ T8885] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.407629][ T8885] bridge0: port 1(bridge_slave_0) entered disabled state [ 598.407869][ T8885] bridge_slave_0: entered allmulticast mode [ 598.481634][ T8885] bridge_slave_0: entered promiscuous mode [ 598.557863][ T8895] chnl_net:caif_netlink_parms(): no params data found [ 598.791769][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.791827][ T9060] mkiss: ax0: crc mode is auto. [ 598.794747][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 598.795042][ T8885] bridge_slave_1: entered allmulticast mode [ 598.866507][ T8885] bridge_slave_1: entered promiscuous mode [ 599.730146][ T8885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.229698][ T12] hsr_slave_0: left promiscuous mode [ 601.276553][ T12] hsr_slave_1: left promiscuous mode [ 601.277687][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.602814][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.759530][ T12] hsr_slave_0: left promiscuous mode [ 601.799753][ T12] hsr_slave_1: left promiscuous mode [ 601.800853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 601.832951][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 601.994150][ T12] hsr_slave_0: left promiscuous mode [ 602.079572][ T12] hsr_slave_1: left promiscuous mode [ 602.081924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 602.108889][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.988847][ T9107] trusted_key: syz.2.748 sent an empty control message without MSG_MORE. [ 607.179185][ T9110] random: crng reseeded on system resumption [ 607.241753][ T12] team0 (unregistering): Port device team_slave_1 removed [ 608.712385][ T12] team0 (unregistering): Port device team_slave_0 removed [ 611.746293][ T12] team0 (unregistering): Port device team_slave_1 removed [ 611.910622][ T12] team0 (unregistering): Port device team_slave_0 removed [ 613.913486][ T37] audit: type=1800 audit(1757086002.900:3): pid=9135 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.756" name="/" dev="9p" ino=393218 res=0 errno=0 [ 614.680832][ T12] team0 (unregistering): Port device team_slave_1 removed [ 614.842125][ T12] team0 (unregistering): Port device team_slave_0 removed [ 615.630298][ T12] team0 (unregistering): Port device team_slave_0 removed [ 616.140727][ T8885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.412502][ T8885] team0: Port device team_slave_0 added [ 619.877172][ T8885] team0: Port device team_slave_1 added [ 620.277222][ T8895] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.277396][ T8895] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.277674][ T8895] bridge_slave_0: entered allmulticast mode [ 620.379506][ T8895] bridge_slave_0: entered promiscuous mode [ 620.617173][ T8895] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.617473][ T8895] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.617737][ T8895] bridge_slave_1: entered allmulticast mode [ 620.638322][ T8895] bridge_slave_1: entered promiscuous mode [ 622.776235][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.776253][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.776280][ T8885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.973616][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.973637][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 622.973665][ T8885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.044533][ T8895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.275198][ T8895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.371769][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.371854][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.893736][ T8895] team0: Port device team_slave_0 added [ 626.434516][ T8885] hsr_slave_0: entered promiscuous mode [ 626.458551][ T8885] hsr_slave_1: entered promiscuous mode [ 626.876656][ T8895] team0: Port device team_slave_1 added [ 629.339586][ T8998] chnl_net:caif_netlink_parms(): no params data found [ 630.159617][ T8895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.159635][ T8895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 630.159663][ T8895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.666851][ T9241] netlink: 'syz.4.780': attribute type 10 has an invalid length. [ 631.204458][ T8887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 631.224318][ T8887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 631.225629][ T8887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 631.227472][ T8887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 631.228761][ T8887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 631.811220][ T9250] trusted_key: encrypted_key: insufficient parameters specified [ 632.610196][ T59] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 632.635229][ T59] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 632.659474][ T59] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 632.660884][ T59] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 632.661865][ T59] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 633.343272][ T9259] syz2: rxe_newlink: already configured on syz_tun [ 634.365213][ T8887] Bluetooth: hci4: command tx timeout [ 634.792431][ T8887] Bluetooth: hci6: command tx timeout [ 635.391717][ T8998] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.422390][ T8998] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.423255][ T8998] bridge_slave_0: entered allmulticast mode [ 635.505922][ T8998] bridge_slave_0: entered promiscuous mode [ 636.437486][ T8887] Bluetooth: hci4: command tx timeout [ 636.823302][ T8887] Bluetooth: hci6: command tx timeout [ 638.479744][ T8887] Bluetooth: hci4: command tx timeout [ 638.500527][ T8998] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.500737][ T8998] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.501026][ T8998] bridge_slave_1: entered allmulticast mode [ 638.505715][ T8998] bridge_slave_1: entered promiscuous mode [ 639.049521][ T8887] Bluetooth: hci6: command tx timeout [ 639.393213][ T8998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.617551][ T8998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 640.560034][ T8887] Bluetooth: hci4: command tx timeout [ 640.913545][ T8998] team0: Port device team_slave_0 added [ 641.071882][ T8998] team0: Port device team_slave_1 added [ 641.122294][ T8887] Bluetooth: hci6: command tx timeout [ 642.599493][ T9293] syz.2.793 uses obsolete (PF_INET,SOCK_PACKET) [ 642.739411][ T9297] trusted_key: encrypted_key: insufficient parameters specified [ 642.955388][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 642.955405][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 642.955433][ T8998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 643.035302][ T8998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 643.035320][ T8998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 643.035349][ T8998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.200215][ T8998] hsr_slave_0: entered promiscuous mode [ 644.203270][ T8998] hsr_slave_1: entered promiscuous mode [ 644.204446][ T8998] debugfs: 'hsr0' already exists in 'hsr' [ 644.204474][ T8998] Cannot create hsr debugfs directory [ 644.745632][ T9311] ptrace attach of "./syz-executor exec"[5845] was attempted by "./syz-executor exec"[9311] [ 646.229791][ T12] bridge_slave_1: left allmulticast mode [ 646.229827][ T12] bridge_slave_1: left promiscuous mode [ 646.230198][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.603353][ T12] bridge_slave_0: left allmulticast mode [ 646.603390][ T12] bridge_slave_0: left promiscuous mode [ 646.603745][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.702462][ T12] bridge_slave_1: left allmulticast mode [ 646.702501][ T12] bridge_slave_1: left promiscuous mode [ 646.702834][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.753519][ T12] bridge_slave_0: left allmulticast mode [ 646.753556][ T12] bridge_slave_0: left promiscuous mode [ 646.753916][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.857617][ T12] bridge_slave_1: left allmulticast mode [ 646.857660][ T12] bridge_slave_1: left promiscuous mode [ 646.857955][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.914996][ T12] bridge_slave_0: left allmulticast mode [ 646.915036][ T12] bridge_slave_0: left promiscuous mode [ 646.915331][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.984807][ T12] bridge_slave_1: left allmulticast mode [ 646.984845][ T12] bridge_slave_1: left promiscuous mode [ 646.985181][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.032966][ T12] bridge_slave_0: left allmulticast mode [ 647.033002][ T12] bridge_slave_0: left promiscuous mode [ 647.053900][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.104992][ T12] bridge_slave_1: left allmulticast mode [ 647.105030][ T12] bridge_slave_1: left promiscuous mode [ 647.105323][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.177559][ T12] bridge_slave_0: left allmulticast mode [ 647.177597][ T12] bridge_slave_0: left promiscuous mode [ 647.177902][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 647.700063][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.794540][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.853811][ T12] bond0 (unregistering): Released all slaves [ 648.975534][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.650168][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.681317][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 649.685714][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 649.690328][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 649.714560][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 649.723055][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 649.810919][ T12] bond0 (unregistering): Released all slaves [ 651.876743][ T8887] Bluetooth: hci3: command tx timeout [ 652.930289][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.018180][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 653.053804][ T12] bond0 (unregistering): Released all slaves [ 653.471166][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 653.858450][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.015531][ T8887] Bluetooth: hci3: command tx timeout [ 654.182755][ T12] bond0 (unregistering): Released all slaves [ 654.767116][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.950959][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.024969][ T12] bond0 (unregistering): Released all slaves [ 656.022789][ T9251] chnl_net:caif_netlink_parms(): no params data found [ 656.089422][ T8887] Bluetooth: hci3: command tx timeout [ 657.610801][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 658.209339][ T59] Bluetooth: hci3: command tx timeout [ 659.218025][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.218192][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.218413][ T9251] bridge_slave_0: entered allmulticast mode [ 659.263496][ T9251] bridge_slave_0: entered promiscuous mode [ 659.309690][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.309863][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.310118][ T9251] bridge_slave_1: entered allmulticast mode [ 659.352277][ T9251] bridge_slave_1: entered promiscuous mode [ 659.865541][ T9380] syz2: rxe_newlink: already configured on syz_tun [ 662.168407][ T9387] netlink: 'syz.4.812': attribute type 10 has an invalid length. [ 664.001076][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 664.078330][ T9400] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 664.109849][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.110033][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.110302][ T9243] bridge_slave_0: entered allmulticast mode [ 664.113897][ T9243] bridge_slave_0: entered promiscuous mode [ 664.262078][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 664.281908][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.282073][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.282346][ T9243] bridge_slave_1: entered allmulticast mode [ 664.377350][ T9243] bridge_slave_1: entered promiscuous mode [ 666.836231][ T9251] team0: Port device team_slave_0 added [ 666.875138][ T9251] team0: Port device team_slave_1 added [ 666.898348][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.420954][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.030547][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.030567][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.030594][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.867631][ T9428] netlink: 'syz.2.823': attribute type 10 has an invalid length. [ 669.893700][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.893718][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 669.893746][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.894735][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.009493][ T12] hsr_slave_0: left promiscuous mode [ 670.184467][ T12] hsr_slave_1: left promiscuous mode [ 670.185199][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.251129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.272211][ T9430] netlink: 32 bytes leftover after parsing attributes in process `syz.4.825'. [ 670.441765][ T12] hsr_slave_0: left promiscuous mode [ 670.479519][ T12] hsr_slave_1: left promiscuous mode [ 670.480661][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.510845][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.689518][ T12] hsr_slave_0: left promiscuous mode [ 670.729601][ T12] hsr_slave_1: left promiscuous mode [ 670.730660][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.792264][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.140611][ T12] hsr_slave_0: left promiscuous mode [ 673.180505][ T12] hsr_slave_1: left promiscuous mode [ 673.181589][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 673.230612][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 673.918406][ T9446] syz2: rxe_newlink: already configured on syz_tun [ 675.170568][ T12] team0 (unregistering): Port device team_slave_1 removed [ 676.660327][ T12] team0 (unregistering): Port device team_slave_0 removed [ 677.630911][ T12] team0 (unregistering): Port device team_slave_1 removed [ 677.810427][ T12] team0 (unregistering): Port device team_slave_0 removed [ 680.125707][ T9469] syz2: rxe_newlink: already configured on syz_tun [ 683.510456][ T12] team0 (unregistering): Port device team_slave_1 removed [ 683.841324][ T12] team0 (unregistering): Port device team_slave_0 removed [ 685.152347][ T8887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 685.174878][ T8887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 685.176274][ T8887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 685.178497][ T8887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 685.202847][ T8887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 685.363320][ T9494] syz2: rxe_newlink: already configured on syz_tun [ 686.228861][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.228946][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.732797][ T59] Bluetooth: hci0: command tx timeout [ 688.480523][ T12] team0 (unregistering): Port device team_slave_1 removed [ 688.822263][ T12] team0 (unregistering): Port device team_slave_0 removed [ 689.759415][ T59] Bluetooth: hci0: command tx timeout [ 689.948401][ T8887] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.962929][ T8887] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.965784][ T8887] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.984182][ T8887] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.987271][ T8887] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.470747][ T8887] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 691.483076][ T8887] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 691.492966][ T8887] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 691.494163][ T8887] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 691.494967][ T8887] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 691.523922][ T12] team0 (unregistering): Port device team_slave_1 removed [ 691.700406][ T12] team0 (unregistering): Port device team_slave_0 removed [ 691.842184][ T59] Bluetooth: hci0: command tx timeout [ 692.155776][ T59] Bluetooth: hci5: command tx timeout [ 693.287944][ T9243] team0: Port device team_slave_0 added [ 693.599504][ T59] Bluetooth: hci7: command tx timeout [ 693.919639][ T59] Bluetooth: hci0: command tx timeout [ 694.176106][ T59] Bluetooth: hci5: command tx timeout [ 694.242126][ T9331] chnl_net:caif_netlink_parms(): no params data found [ 695.679381][ T59] Bluetooth: hci7: command tx timeout [ 696.239517][ T59] Bluetooth: hci5: command tx timeout [ 697.769862][ T59] Bluetooth: hci7: command tx timeout [ 697.935899][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.936087][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.936309][ T9331] bridge_slave_0: entered allmulticast mode [ 697.981241][ T9331] bridge_slave_0: entered promiscuous mode [ 698.037551][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.037791][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.038005][ T9331] bridge_slave_1: entered allmulticast mode [ 698.069565][ T9331] bridge_slave_1: entered promiscuous mode [ 698.319327][ T59] Bluetooth: hci5: command tx timeout [ 698.604916][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 698.740015][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.559677][ T9331] team0: Port device team_slave_0 added [ 699.602339][ T9331] team0: Port device team_slave_1 added [ 699.881819][ T59] Bluetooth: hci7: command tx timeout [ 700.061670][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.061690][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.061720][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.176265][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.176284][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 700.176314][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.915551][ T9522] chnl_net:caif_netlink_parms(): no params data found [ 701.281590][ T9331] hsr_slave_0: entered promiscuous mode [ 701.296536][ T9331] hsr_slave_1: entered promiscuous mode [ 701.434455][ T9509] chnl_net:caif_netlink_parms(): no params data found [ 702.269854][ T9489] chnl_net:caif_netlink_parms(): no params data found [ 703.179702][ T9522] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.179872][ T9522] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.180177][ T9522] bridge_slave_0: entered allmulticast mode [ 703.183634][ T9522] bridge_slave_0: entered promiscuous mode [ 703.464330][ T9522] bridge0: port 2(bridge_slave_1) entered blocking state [ 703.464506][ T9522] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.464779][ T9522] bridge_slave_1: entered allmulticast mode [ 703.479522][ T9522] bridge_slave_1: entered promiscuous mode [ 703.852016][ T9509] bridge0: port 1(bridge_slave_0) entered blocking state [ 703.852281][ T9509] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.852518][ T9509] bridge_slave_0: entered allmulticast mode [ 703.861427][ T9509] bridge_slave_0: entered promiscuous mode [ 704.078436][ T9509] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.078608][ T9509] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.078883][ T9509] bridge_slave_1: entered allmulticast mode [ 704.082723][ T9509] bridge_slave_1: entered promiscuous mode [ 704.534355][ T9522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.966422][ T9522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.122088][ T9489] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.122263][ T9489] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.122526][ T9489] bridge_slave_0: entered allmulticast mode [ 705.125888][ T9489] bridge_slave_0: entered promiscuous mode [ 705.227466][ T9509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.260693][ T9489] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.260862][ T9489] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.261531][ T9489] bridge_slave_1: entered allmulticast mode [ 705.264981][ T9489] bridge_slave_1: entered promiscuous mode [ 705.436637][ T9509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.623323][ T9522] team0: Port device team_slave_0 added [ 705.963175][ T9522] team0: Port device team_slave_1 added [ 706.085034][ T9489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.215129][ T9509] team0: Port device team_slave_0 added [ 706.225961][ T9489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.338111][ T9509] team0: Port device team_slave_1 added [ 706.549066][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.549083][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.549111][ T9522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.670520][ T9631] sctp: [Deprecated]: syz.4.872 (pid 9631) Use of struct sctp_assoc_value in delayed_ack socket option. [ 706.670520][ T9631] Use struct sctp_sack_info instead [ 708.703036][ T9636] syz.4.873 (9636) used greatest stack depth: 18712 bytes left [ 709.234353][ T9522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.234371][ T9522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.234399][ T9522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 709.387594][ T9489] team0: Port device team_slave_0 added [ 709.429903][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 709.429922][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.429948][ T9509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 709.433065][ T9489] team0: Port device team_slave_1 added [ 709.437122][ T9509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 709.437139][ T9509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 709.437168][ T9509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 710.420504][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.420523][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.420552][ T9489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.870850][ T8887] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 710.887302][ T8887] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 710.888621][ T8887] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 711.870090][ T8887] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 711.942059][ T8887] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 712.731730][ T9489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 712.731749][ T9489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 712.731777][ T9489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.552332][ T9522] hsr_slave_0: entered promiscuous mode [ 713.559932][ T9522] hsr_slave_1: entered promiscuous mode [ 713.563985][ T9522] debugfs: 'hsr0' already exists in 'hsr' [ 713.564012][ T9522] Cannot create hsr debugfs directory [ 713.620809][ T9509] hsr_slave_0: entered promiscuous mode [ 713.622380][ T9509] hsr_slave_1: entered promiscuous mode [ 713.623405][ T9509] debugfs: 'hsr0' already exists in 'hsr' [ 713.623431][ T9509] Cannot create hsr debugfs directory [ 713.999836][ T59] Bluetooth: hci1: command tx timeout [ 714.063739][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.242196][ T9681] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 716.187620][ T59] Bluetooth: hci1: command tx timeout [ 716.686089][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.058491][ T9489] hsr_slave_0: entered promiscuous mode [ 717.060837][ T9489] hsr_slave_1: entered promiscuous mode [ 717.062001][ T9489] debugfs: 'hsr0' already exists in 'hsr' [ 717.062028][ T9489] Cannot create hsr debugfs directory [ 718.935841][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 718.973807][ T59] Bluetooth: hci1: command tx timeout [ 720.264616][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.039625][ T8887] Bluetooth: hci1: command tx timeout [ 722.365969][ T12] bridge_slave_1: left allmulticast mode [ 722.366007][ T12] bridge_slave_1: left promiscuous mode [ 722.366309][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.451335][ T12] bridge_slave_0: left allmulticast mode [ 722.451373][ T12] bridge_slave_0: left promiscuous mode [ 722.451719][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.725915][ T12] bridge_slave_1: left allmulticast mode [ 722.725953][ T12] bridge_slave_1: left promiscuous mode [ 722.726247][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.823291][ T9734] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 723.891721][ T12] bridge_slave_0: left allmulticast mode [ 723.891760][ T12] bridge_slave_0: left promiscuous mode [ 723.892242][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.056745][ T12] bridge_slave_1: left allmulticast mode [ 724.056782][ T12] bridge_slave_1: left promiscuous mode [ 724.057081][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.121719][ T12] bridge_slave_0: left allmulticast mode [ 724.121757][ T12] bridge_slave_0: left promiscuous mode [ 724.122078][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.194518][ T12] bridge_slave_1: left allmulticast mode [ 724.194555][ T12] bridge_slave_1: left promiscuous mode [ 724.194855][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.262916][ T12] bridge_slave_0: left allmulticast mode [ 724.262953][ T12] bridge_slave_0: left promiscuous mode [ 724.263255][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.440706][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 725.544865][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 725.607888][ T12] bond0 (unregistering): Released all slaves [ 725.841364][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 726.065913][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 726.154238][ T12] bond0 (unregistering): Released all slaves [ 728.470295][ T12] bond1 (unregistering): (slave gretap1): Releasing active interface [ 730.308944][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.310397][ T9757] nfs: Unknown parameter './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 730.390380][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 730.454579][ T12] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 730.471421][ T12] bond0 (unregistering): Released all slaves [ 730.501020][ T12] bond1 (unregistering): Released all slaves [ 730.811389][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 730.923711][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.014404][ T12] bond0 (unregistering): Released all slaves [ 731.563978][ T9522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 731.697933][ T9522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 731.873477][ T9522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 732.077547][ T9522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 732.429884][ T9648] chnl_net:caif_netlink_parms(): no params data found [ 735.289938][ T9509] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 735.715863][ T9509] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 736.008366][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 736.010106][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.010405][ T9648] bridge_slave_0: entered allmulticast mode [ 736.025006][ T9648] bridge_slave_0: entered promiscuous mode [ 736.035041][ T9509] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.259494][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 736.259658][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.259942][ T9648] bridge_slave_1: entered allmulticast mode [ 736.270597][ T9648] bridge_slave_1: entered promiscuous mode [ 736.358469][ T9509] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 736.918283][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.061350][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.053716][ T9648] team0: Port device team_slave_0 added [ 738.066989][ T9489] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 738.193829][ T9648] team0: Port device team_slave_1 added [ 738.198682][ T9489] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 738.530907][ T9489] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 738.781132][ T9489] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 738.923448][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 738.923467][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.923497][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.032663][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.032683][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.032713][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.566967][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.690307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 741.889650][ T12] hsr_slave_0: left promiscuous mode [ 741.936084][ T12] hsr_slave_1: left promiscuous mode [ 741.937114][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 741.937146][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 741.998400][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 741.998437][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 743.189844][ T12] hsr_slave_0: left promiscuous mode [ 743.519516][ T12] hsr_slave_1: left promiscuous mode [ 743.520676][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 743.550497][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 744.472906][ T12] veth1_macvtap: left promiscuous mode [ 744.472988][ T12] veth0_macvtap: left promiscuous mode [ 744.473184][ T12] veth1_vlan: left promiscuous mode [ 744.473320][ T12] veth0_vlan: left promiscuous mode [ 745.015080][ T12] team0 (unregistering): Port device team_slave_1 removed [ 745.140621][ T12] team0 (unregistering): Port device team_slave_0 removed [ 745.590848][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 745.647287][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 745.665183][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 745.667258][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 745.668464][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 745.790031][ T12] team0 (unregistering): Port device team_slave_0 removed [ 747.607771][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.607861][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.765291][ T59] Bluetooth: hci3: command tx timeout [ 748.240889][ T12] team0 (unregistering): Port device team_slave_1 removed [ 748.458965][ T12] team0 (unregistering): Port device team_slave_0 removed [ 749.859748][ T59] Bluetooth: hci3: command tx timeout [ 750.875085][ T8887] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.905576][ T8887] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.912760][ T8887] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.916351][ T8887] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.917208][ T8887] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 751.490175][ T12] team0 (unregistering): Port device team_slave_1 removed [ 751.580488][ T12] team0 (unregistering): Port device team_slave_0 removed [ 751.919423][ T59] Bluetooth: hci3: command tx timeout [ 752.437992][ T8887] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 752.457934][ T8887] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 752.499323][ T8887] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 752.522736][ T8887] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 752.526148][ T8887] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 752.742007][ T9648] hsr_slave_0: entered promiscuous mode [ 752.749768][ T9648] hsr_slave_1: entered promiscuous mode [ 752.750754][ T9648] debugfs: 'hsr0' already exists in 'hsr' [ 752.750779][ T9648] Cannot create hsr debugfs directory [ 753.352521][ T59] Bluetooth: hci4: command tx timeout [ 754.138780][ T59] Bluetooth: hci3: command tx timeout [ 754.559692][ T59] Bluetooth: hci6: command tx timeout [ 755.365228][ T59] Bluetooth: hci4: command tx timeout [ 757.024349][ T59] Bluetooth: hci6: command tx timeout [ 757.449675][ T59] Bluetooth: hci4: command tx timeout [ 759.039549][ T59] Bluetooth: hci6: command tx timeout [ 759.529656][ T59] Bluetooth: hci4: command tx timeout [ 761.129543][ T59] Bluetooth: hci6: command tx timeout [ 762.556944][ T9885] chnl_net:caif_netlink_parms(): no params data found [ 765.794329][ T9885] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.794497][ T9885] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.794753][ T9885] bridge_slave_0: entered allmulticast mode [ 765.798006][ T9885] bridge_slave_0: entered promiscuous mode [ 765.819403][ T9889] chnl_net:caif_netlink_parms(): no params data found [ 766.202848][ T9885] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.203018][ T9885] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.203315][ T9885] bridge_slave_1: entered allmulticast mode [ 766.238743][ T9885] bridge_slave_1: entered promiscuous mode [ 766.914287][ T9648] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 767.298888][ T9983] warning: `syz.4.924' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 767.301318][ T9648] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 767.402368][ T9885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.513315][ T9648] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 767.633464][ T9885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.658848][ T9648] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 769.723217][ T9893] chnl_net:caif_netlink_parms(): no params data found [ 769.760211][ T9885] team0: Port device team_slave_0 added [ 770.957465][ T9648] kthread_run failed with err -4 [ 770.992136][ T9885] team0: Port device team_slave_1 added [ 771.269356][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.269540][ T9889] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.269804][ T9889] bridge_slave_0: entered allmulticast mode [ 771.311247][ T9889] bridge_slave_0: entered promiscuous mode [ 771.461368][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.461581][ T9889] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.461810][ T9889] bridge_slave_1: entered allmulticast mode [ 771.464945][ T9889] bridge_slave_1: entered promiscuous mode [ 772.260873][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.260891][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 772.260922][ T9885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.017122][ T8887] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 773.026411][ T8887] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 773.027790][ T8887] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 773.030268][ T8887] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 773.031731][ T8887] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 773.691158][ T9885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.691179][ T9885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.691207][ T9885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.733014][ T9889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 773.803295][ T9889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 774.297818][ T9893] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.297984][ T9893] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.298268][ T9893] bridge_slave_0: entered allmulticast mode [ 774.302204][ T9893] bridge_slave_0: entered promiscuous mode [ 774.334752][ T9889] team0: Port device team_slave_0 added [ 774.447196][ T9893] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.447361][ T9893] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.447599][ T9893] bridge_slave_1: entered allmulticast mode [ 774.455926][ T9893] bridge_sl[ 774.455926][ T9893] bridge_slave_1: entered promiscuous mode [ 774.463949][ T9889] team0: Port device team_slave_1 added [ 774.468316][T10045] ------------[ cut here ]------------ [ 774.468329][T10045] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x2, 0x0] s64=[0x2, 0x0] u32=[0x2, 0x0] s32=[0x2, 0x0] var_off=(0x0, 0x0)(1) [ 774.468473][T10045] WARNING: CPU: 0 PID: 10045 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x6e6/0xc20 [ 774.468513][T10045] Modules linked in: [ 774.468532][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.4.938 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 774.468554][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.468564][T10045] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 774.468592][T10045] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 9f 5a ab ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 774.468609][T10045] RSP: 0018:ffffc90004beef08 EFLAGS: 00010282 [ 774.468625][T10045] RAX: 60880cdd4d60e300 RBX: 0000000000000000 RCX: 0000000000080000 [ 774.468638][T10045] RDX: ffffc9000e714000 RSI: 00000000000025ca RDI: 00000000000025cb [ 774.468651][T10045] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 774.468661][T10045] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff88805add4348 [ 774.468675][T10045] R13: ffff88805add4368 R14: ffff88805add4380 R15: 0000000000000000 [ 774.468688][T10045] FS: 00007f4551d166c0(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 774.468704][T10045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 774.468717][T10045] CR2: 0000200000001d80 CR3: 000000004127c000 CR4: 00000000003526f0 [ 774.468736][T10045] Call Trace: [ 774.468743][T10045] [ 774.468782][T10045] reg_set_min_max+0x264/0x300 [ 774.468815][T10045] check_cond_jmp_op+0x159b/0x2910 [ 774.468858][T10045] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 774.468888][T10045] ? push_jmp_history+0x1dd/0x6f0 [ 774.468919][T10045] do_check+0x6751/0xe520 [ 774.468959][T10045] ? __kasan_kmalloc+0x93/0xb0 [ 774.468981][T10045] ? do_check_common+0x209/0x24f0 [ 774.469050][T10045] ? __pfx_do_check+0x10/0x10 [ 774.469071][T10045] ? init_func_state+0x1ddf/0x2d20 [ 774.469104][T10045] do_check_common+0x1949/0x24f0 [ 774.469242][T10045] bpf_check+0x17473/0x1d2e0 [ 774.469263][T10045] ? is_bpf_text_address+0x26/0x2b0 [ 774.469320][T10045] ? rtlock_slowlock_locked+0xd8/0x4010 [ 774.469343][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.469371][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.469398][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.469429][T10045] ? do_raw_spin_lock+0x121/0x290 [ 774.469467][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.469497][T10045] ? __pfx_bpf_check+0x10/0x10 [ 774.469515][T10045] ? ktime_get_with_offset+0x8c/0x2a0 [ 774.469543][T10045] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 774.469563][T10045] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.469586][T10045] ? ktime_get_with_offset+0x8c/0x2a0 [ 774.469604][T10045] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 774.469624][T10045] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 774.469654][T10045] ? __asan_memset+0x22/0x50 [ 774.469674][T10045] ? bpf_obj_name_cpy+0x194/0x1e0 [ 774.469698][T10045] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 774.469719][T10045] ? security_bpf_prog_load+0x7f/0x310 [ 774.469747][T10045] bpf_prog_load+0x1318/0x1930 [ 774.469791][T10045] ? __pfx_bpf_prog_load+0x10/0x10 [ 774.469836][T10045] ? bpf_lsm_bpf+0x9/0x20 [ 774.469856][T10045] ? security_bpf+0x7e/0x300 [ 774.469881][T10045] __sys_bpf+0x528/0x870 [ 774.469904][T10045] ? __pfx___sys_bpf+0x10/0x10 [ 774.469945][T10045] ? rcu_is_watching+0x15/0xb0 [ 774.469980][T10045] __x64_sys_bpf+0x7c/0x90 [ 774.470002][T10045] do_syscall_64+0xfa/0x3b0 [ 774.470026][T10045] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.470057][T10045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.470075][T10045] ? clear_bhb_loop+0x60/0xb0 [ 774.470097][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.470122][T10045] RIP: 0033:0x7f4553aaebe9 [ 774.470139][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.470155][T10045] RSP: 002b:00007f4551d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.470176][T10045] RAX: ffffffffffffffda RBX: 00007f4553ce5fa0 RCX: 00007f4553aaebe9 [ 774.470189][T10045] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 774.470203][T10045] RBP: 00007f4553b31e19 R08: 0000000000000000 R09: 0000000000000000 [ 774.470217][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.470230][T10045] R13: 00007f4553ce6038 R14: 00007f4553ce5fa0 R15: 00007ffcc091d058 [ 774.470260][T10045] [ 774.470271][T10045] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 774.470285][T10045] CPU: 0 UID: 0 PID: 10045 Comm: syz.4.938 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 774.470306][T10045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 774.470316][T10045] Call Trace: [ 774.470324][T10045] [ 774.470332][T10045] dump_stack_lvl+0x99/0x250 [ 774.470360][T10045] ? __asan_memcpy+0x40/0x70 [ 774.470379][T10045] ? __pfx_dump_stack_lvl+0x10/0x10 [ 774.470405][T10045] ? __pfx__printk+0x10/0x10 [ 774.470438][T10045] vpanic+0x281/0x750 [ 774.470464][T10045] ? __pfx__printk+0x10/0x10 [ 774.470484][T10045] ? __pfx_vpanic+0x10/0x10 [ 774.470510][T10045] ? is_bpf_text_address+0x26/0x2b0 [ 774.470546][T10045] panic+0xb9/0xc0 [ 774.470571][T10045] ? __pfx_panic+0x10/0x10 [ 774.470611][T10045] __warn+0x31b/0x4b0 [ 774.470635][T10045] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 774.470662][T10045] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 774.470688][T10045] report_bug+0x2be/0x4f0 [ 774.470711][T10045] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 774.470737][T10045] ? reg_bounds_sanity_check+0x6e6/0xc20 [ 774.470762][T10045] ? reg_bounds_sanity_check+0x6e8/0xc20 [ 774.470788][T10045] handle_bug+0x84/0x160 [ 774.470805][T10045] exc_invalid_op+0x1a/0x50 [ 774.470832][T10045] asm_exc_invalid_op+0x1a/0x20 [ 774.470848][T10045] RIP: 0010:reg_bounds_sanity_check+0x6e6/0xc20 [ 774.470874][T10045] Code: 24 20 4c 8b 44 24 60 4c 8b 4c 24 58 41 ff 75 00 53 41 57 55 ff 74 24 38 ff 74 24 70 ff 74 24 40 e8 9f 5a ab ff 48 83 c4 38 90 <0f> 0b 90 90 48 bb 00 00 00 00 00 fc ff df 4d 89 f7 4c 8b 74 24 08 [ 774.470889][T10045] RSP: 0018:ffffc90004beef08 EFLAGS: 00010282 [ 774.470905][T10045] RAX: 60880cdd4d60e300 RBX: 0000000000000000 RCX: 0000000000080000 [ 774.470918][T10045] RDX: ffffc9000e714000 RSI: 00000000000025ca RDI: 00000000000025cb [ 774.470931][T10045] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 774.470942][T10045] R10: dffffc0000000000 R11: ffffed1017104863 R12: ffff88805add4348 [ 774.470955][T10045] R13: ffff88805add4368 R14: ffff88805add4380 R15: 0000000000000000 [ 774.471007][T10045] reg_set_min_max+0x264/0x300 [ 774.471039][T10045] check_cond_jmp_op+0x159b/0x2910 [ 774.471080][T10045] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 774.471108][T10045] ? push_jmp_history+0x1dd/0x6f0 [ 774.471145][T10045] do_check+0x6751/0xe520 [ 774.471184][T10045] ? __kasan_kmalloc+0x93/0xb0 [ 774.471206][T10045] ? do_check_common+0x209/0x24f0 [ 774.471272][T10045] ? __pfx_do_check+0x10/0x10 [ 774.471292][T10045] ? init_func_state+0x1ddf/0x2d20 [ 774.471325][T10045] do_check_common+0x1949/0x24f0 [ 774.471364][T10045] bpf_check+0x17473/0x1d2e0 [ 774.471382][T10045] ? is_bpf_text_address+0x26/0x2b0 [ 774.471437][T10045] ? rtlock_slowlock_locked+0xd8/0x4010 [ 774.471459][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.471487][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.471515][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.471546][T10045] ? do_raw_spin_lock+0x121/0x290 [ 774.471584][T10045] ? __lock_acquire+0xab9/0xd20 [ 774.471614][T10045] ? __pfx_bpf_check+0x10/0x10 [ 774.471632][T10045] ? ktime_get_with_offset+0x8c/0x2a0 [ 774.471660][T10045] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 774.471680][T10045] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.471703][T10045] ? ktime_get_with_offset+0x8c/0x2a0 [ 774.471722][T10045] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 774.471742][T10045] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 774.471772][T10045] ? __asan_memset+0x22/0x50 [ 774.471790][T10045] ? bpf_obj_name_cpy+0x194/0x1e0 [ 774.471814][T10045] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 774.471834][T10045] ? security_bpf_prog_load+0x7f/0x310 [ 774.471861][T10045] bpf_prog_load+0x1318/0x1930 [ 774.471896][T10045] ? __pfx_bpf_prog_load+0x10/0x10 [ 774.471941][T10045] ? bpf_lsm_bpf+0x9/0x20 [ 774.471960][T10045] ? security_bpf+0x7e/0x300 [ 774.471985][T10045] __sys_bpf+0x528/0x870 [ 774.472010][T10045] ? __pfx___sys_bpf+0x10/0x10 [ 774.472050][T10045] ? rcu_is_watching+0x15/0xb0 [ 774.472084][T10045] __x64_sys_bpf+0x7c/0x90 [ 774.472105][T10045] do_syscall_64+0xfa/0x3b0 [ 774.472139][T10045] ? lockdep_hardirqs_on+0x9c/0x150 [ 774.472162][T10045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.472181][T10045] ? clear_bhb_loop+0x60/0xb0 [ 774.472203][T10045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.472221][T10045] RIP: 0033:0x7f4553aaebe9 [ 774.472236][T10045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 774.472252][T10045] RSP: 002b:00007f4551d16038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 774.472271][T10045] RAX: ffffffffffffffda RBX: 00007f4553ce5fa0 RCX: 00007f4553aaebe9 [ 774.472284][T10045] RDX: 0000000000000048 RSI: 0000200000000100 RDI: 0000000000000005 [ 774.472297][T10045] RBP: 00007f4553b31e19 R08: 0000000000000000 R09: 0000000000000000 [ 774.472309][T10045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.472320][T10045] R13: 00007f4553ce6038 R14: 00007f4553ce5fa0 R15: 00007ffcc091d058 [ 774.472349][T10045] [ 774.472668][T10045] Kernel Offset: disabled