last executing test programs: 6m9.56338866s ago: executing program 4 (id=5): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) recvmsg(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) setgroups(0x0, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rmdir(&(0x7f0000000000)='.\x00') ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) 6m7.877150149s ago: executing program 2 (id=3): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6m7.262088897s ago: executing program 4 (id=14): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x1200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0xf8) brk(0x3) 6m4.950676564s ago: executing program 2 (id=15): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385aa3d4cc", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x41aba000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$can_j1939(0xffffffffffffffff, 0x0, 0xee) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6m3.554132637s ago: executing program 2 (id=17): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) recvmsg(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2208010, 0x0) setgroups(0x0, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r5, 0x4020565a, &(0x7f00000000c0)={0x3, 0x980900, 0x3}) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x3, @name="51da06bc7338e17dfebb1580e15b95473b09f0d1fb8aa1e9959ef9dc00"}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfd, 0x10000}, 0xc, &(0x7f0000000280)=[{&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="d5001e00da8ea166c2250fae0f8581b9f177254b2c703af81f06343a569a99b7115dd4c6c9f4f4fc83a539dcce4ed93eab70ebc5cd693a493e3f28c5b1a1766d43a48ce6b5126db40752d65e935f81809f488d95f42b2dfa83cc90c1164f0d5beb84b9ff9530eaa66aadb65815ac9def29794eb61d13ddd996d9b4642972c7873309de0fb015de3e0156047af6ce467369f25f2769dc62a030d3b2edc52ae7d3c21e867dc5a2eb113ea628f9ae006e811af5"], 0x1e4}], 0x1}, 0x40000) openat$vim2m(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) rmdir(&(0x7f0000000000)='.\x00') ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) 6m1.370704738s ago: executing program 2 (id=20): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001500)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0x200448c0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0x7, 0xc82) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x10}, 'port0\x00', 0xfb, 0x1b140e, 0x0, 0x0, 0x10, 0x0, 0x2000, 0x0, 0x2, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) sendmsg$sock(r0, 0x0, 0x0) 5m49.624181331s ago: executing program 32 (id=14): socket$kcm(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fanotify_init(0x1200, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000700)={0x20c, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [{{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xb}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x20c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000100000085000000ae000000850000000500000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r3, 0x0, 0x4}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x0, &(0x7f00000001c0)}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES64], 0xf8) brk(0x3) 5m45.931041597s ago: executing program 33 (id=20): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005700)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001500)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0x200448c0) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0x7, 0xc82) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x10}, 'port0\x00', 0xfb, 0x1b140e, 0x0, 0x0, 0x10, 0x0, 0x2000, 0x0, 0x2, 0x5}) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) sendmsg$sock(r0, 0x0, 0x0) 4m18.778707595s ago: executing program 1 (id=154): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x3, 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 4m17.616965779s ago: executing program 1 (id=156): signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f0000000280)={0x38, 0x3, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa0d, 0x7fff}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r3, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, "f4ffffff"}, 0x20000000, 0x1, {0x0}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000000000000002000"], 0x40) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000280)=0x2) 4m10.880443012s ago: executing program 1 (id=164): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0x200, 0x0) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x3, 0xa) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendfile(r1, r2, 0x0, 0x7fffffffffffffff) 4m4.372154407s ago: executing program 1 (id=174): socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da05000000000001090224"], 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x100000000, 0xfa11, 0xffffffff}, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071103a00000000009c05010000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x40, 0x1781, 0x898, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xfa, 0x60, 0xc0, [{{0x9, 0x4, 0x0, 0x66, 0x2, 0x3, 0x1, 0x1, 0xc, {0x9, 0x21, 0xe, 0x4, 0x1, {0x22, 0x86f}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x6, 0x5, 0x5}}}}}]}}]}}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000040)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x5) 3m57.69795499s ago: executing program 1 (id=183): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000040)={0x20000b, 0x1, 0x2, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) r2 = timerfd_create(0x7, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r2, &(0x7f0000000280)=[{&(0x7f0000000040)=""/52, 0x34}, {&(0x7f0000000300)=""/155, 0x9b}], 0x2) close(0xffffffffffffffff) socket(0x400000000010, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x41000004, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000002c0)={0x1, 0x5}, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102386, 0x18ff2) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x1c9282, 0x0) gettid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r5) mount(&(0x7f0000000740)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000004c0)='cpuset\x00', 0x229004, 0x0) 3m56.784925961s ago: executing program 1 (id=184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0) 3m40.573072373s ago: executing program 34 (id=184): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfff}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x3c}}, 0x0) 10.542039647s ago: executing program 0 (id=510): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380), &(0x7f0000000180)) listen(r0, 0x5) io_uring_enter(r1, 0x3517, 0xc2de, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) 9.530867346s ago: executing program 0 (id=512): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1, 0x0, 0x40}, 0x4004814) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) 9.138060448s ago: executing program 0 (id=513): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000340)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) 8.052394555s ago: executing program 0 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) dup3(r2, r3, 0x0) 7.164759496s ago: executing program 3 (id=518): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) dup2(r0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') r4 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r4, &(0x7f00000007c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0x7, 0x5, 0x1, {0x0, 0x181, 0x2101, 0x5, 0x87, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0xcea, 0x1}}, {0x0, 0x11}}}, 0xa0) 5.6768499s ago: executing program 3 (id=519): r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, 0x0, 0x0, 0x0) semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/keycreate\x00') read$FUSE(r5, 0x0, 0x0) 5.117980348s ago: executing program 0 (id=520): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000003640)={0x0, 'hsr0\x00', {0x1}, 0x7}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x24, 0x2a, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x8, 0xfff1}, {0xfff1, 0x2}, {0xb, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x24044801}, 0x20000000) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f00000005c0)={0x0, 0x0}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000027c0)=ANY=[], 0x0) 3.813361046s ago: executing program 3 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000340)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, 0x0, 0x0) 3.171200703s ago: executing program 0 (id=522): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000015000000181100", @ANYRES32, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x0) r4 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x2, &(0x7f0000001080)=[0xee01, 0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, r4, 0xee01, r5) keyctl$setperm(0x5, r4, 0x30925) keyctl$KEYCTL_MOVE(0x3, r4, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4024}, 0x4000010) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) syz_emit_ethernet(0x60, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb583e002a3afffe800000000000000000000000000000ff020000000000000000000000000001890090780400000020010000000000000000000000000000fc0100000000000000000000000000000400"], 0x0) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2.53458245s ago: executing program 3 (id=523): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f00000042c0)=[{{&(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@ip_retopts={{0x10}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x35}}}}], 0x30}}], 0x1, 0x0) r1 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000000000000", @ANYRES32, @ANYBLOB="0000020000000000000000007e7200000000007e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000010c0)={0x18, {"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", 0x1000}}, 0x1006) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x40f00, 0x8}, 0x94) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@private0}}, {{}, 0x0, @in6=@private2}}, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x0, 0x400) getgid() sched_setscheduler(r1, 0x2, 0x0) 38.782431ms ago: executing program 3 (id=524): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000100)=ANY=[], 0x4) 0s ago: executing program 3 (id=525): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="1201000000000008fc0d020100000000000109022d00010000c005090400008103000000092100001001220700090581030002080a11090502"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x4, {[@global=@item_012={0x1, 0x1, 0x8, "1f"}, @local=@item_012={0x1, 0x2, 0x5, "94"}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 84.160909][ T5796] cgroup: Unknown subsys name 'net' [ 84.372311][ T5796] cgroup: Unknown subsys name 'cpuset' [ 84.416987][ T5796] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.376032][ T5796] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.828696][ T10] cfg80211: failed to load regulatory.db [ 89.309608][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.311581][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.312461][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.314037][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.317066][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.319971][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.324789][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.325728][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.380601][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.381451][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.435183][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.437897][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.438739][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.440280][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.446927][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.518706][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.523117][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.525688][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.551462][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.552978][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.669603][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.671995][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.672798][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.674002][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.674832][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.442552][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 90.510656][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 90.573600][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 90.978832][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 91.287899][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 91.372521][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.373584][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.374244][ T5807] bridge_slave_0: entered allmulticast mode [ 91.377353][ T5809] Bluetooth: hci0: command tx timeout [ 91.378846][ T5807] bridge_slave_0: entered promiscuous mode [ 91.456449][ T5809] Bluetooth: hci1: command tx timeout [ 91.536453][ T5809] Bluetooth: hci2: command tx timeout [ 91.563965][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.564117][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.564256][ T5807] bridge_slave_1: entered allmulticast mode [ 91.568992][ T5807] bridge_slave_1: entered promiscuous mode [ 91.572989][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.573132][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.573338][ T5810] bridge_slave_0: entered allmulticast mode [ 91.587479][ T5810] bridge_slave_0: entered promiscuous mode [ 91.616283][ T5809] Bluetooth: hci3: command tx timeout [ 91.697046][ T5809] Bluetooth: hci4: command tx timeout [ 91.800557][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.800762][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.800953][ T5810] bridge_slave_1: entered allmulticast mode [ 91.803190][ T5810] bridge_slave_1: entered promiscuous mode [ 91.877906][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.878046][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.878290][ T5814] bridge_slave_0: entered allmulticast mode [ 91.881158][ T5814] bridge_slave_0: entered promiscuous mode [ 92.044634][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.044759][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.057574][ T5814] bridge_slave_1: entered allmulticast mode [ 92.060912][ T5814] bridge_slave_1: entered promiscuous mode [ 92.136468][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.352212][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.357436][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.437522][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.437752][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.438338][ T5816] bridge_slave_0: entered allmulticast mode [ 92.440315][ T5816] bridge_slave_0: entered promiscuous mode [ 92.539821][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.610917][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.611174][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.611373][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.611556][ T5816] bridge_slave_1: entered allmulticast mode [ 92.613675][ T5816] bridge_slave_1: entered promiscuous mode [ 92.989827][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.079937][ T5807] team0: Port device team_slave_0 added [ 93.157464][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.157686][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.157883][ T5818] bridge_slave_0: entered allmulticast mode [ 93.159973][ T5818] bridge_slave_0: entered promiscuous mode [ 93.321847][ T5807] team0: Port device team_slave_1 added [ 93.325961][ T5810] team0: Port device team_slave_0 added [ 93.328761][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.328907][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.329121][ T5818] bridge_slave_1: entered allmulticast mode [ 93.332269][ T5818] bridge_slave_1: entered promiscuous mode [ 93.451748][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.456514][ T5809] Bluetooth: hci0: command tx timeout [ 93.536361][ T5809] Bluetooth: hci1: command tx timeout [ 93.559878][ T5810] team0: Port device team_slave_1 added [ 93.626650][ T5809] Bluetooth: hci2: command tx timeout [ 93.644995][ T5814] team0: Port device team_slave_0 added [ 93.650625][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.696588][ T5809] Bluetooth: hci3: command tx timeout [ 93.776517][ T5809] Bluetooth: hci4: command tx timeout [ 94.098332][ T5814] team0: Port device team_slave_1 added [ 94.212745][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.212760][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.212779][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.324107][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.488007][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.488026][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.488054][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.489228][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.489240][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.489258][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.492554][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.595238][ T5816] team0: Port device team_slave_0 added [ 94.623349][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.623362][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.623390][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.738016][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.738029][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.738048][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.740511][ T5816] team0: Port device team_slave_1 added [ 94.858892][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.858910][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.858936][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.061502][ T5818] team0: Port device team_slave_0 added [ 95.210563][ T5818] team0: Port device team_slave_1 added [ 95.213016][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.213032][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.213059][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.434620][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.434635][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.434654][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.457034][ T5807] hsr_slave_0: entered promiscuous mode [ 95.459636][ T5807] hsr_slave_1: entered promiscuous mode [ 95.536336][ T5809] Bluetooth: hci0: command tx timeout [ 95.616409][ T5809] Bluetooth: hci1: command tx timeout [ 95.696595][ T5809] Bluetooth: hci2: command tx timeout [ 95.730717][ T5810] hsr_slave_0: entered promiscuous mode [ 95.732096][ T5810] hsr_slave_1: entered promiscuous mode [ 95.733141][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 95.733277][ T5810] Cannot create hsr debugfs directory [ 95.734614][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.734624][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.734643][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.776322][ T5809] Bluetooth: hci3: command tx timeout [ 95.822804][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.822820][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.822839][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.833147][ T5814] hsr_slave_0: entered promiscuous mode [ 95.834681][ T5814] hsr_slave_1: entered promiscuous mode [ 95.835704][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 95.835731][ T5814] Cannot create hsr debugfs directory [ 95.856829][ T5809] Bluetooth: hci4: command tx timeout [ 96.477502][ T5816] hsr_slave_0: entered promiscuous mode [ 96.478458][ T5816] hsr_slave_1: entered promiscuous mode [ 96.479113][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 96.479136][ T5816] Cannot create hsr debugfs directory [ 96.842921][ T5818] hsr_slave_0: entered promiscuous mode [ 96.843953][ T5818] hsr_slave_1: entered promiscuous mode [ 96.844597][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 96.844618][ T5818] Cannot create hsr debugfs directory [ 97.616347][ T5809] Bluetooth: hci0: command tx timeout [ 97.696531][ T5809] Bluetooth: hci1: command tx timeout [ 97.776567][ T5809] Bluetooth: hci2: command tx timeout [ 97.856514][ T5809] Bluetooth: hci3: command tx timeout [ 97.936549][ T5809] Bluetooth: hci4: command tx timeout [ 98.140499][ T5807] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.188962][ T5807] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.221796][ T5807] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.280170][ T5807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.426836][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.467181][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.522544][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.544148][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.677383][ T5814] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.709746][ T5814] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.752464][ T5814] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.810348][ T5814] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.970572][ T5816] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.034461][ T5816] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.102779][ T5816] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.145742][ T5816] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.313293][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.320730][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.360237][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.398681][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.442954][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.527424][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.574633][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.575720][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.631248][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.635882][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.636000][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.756308][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.779349][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.811371][ T3578] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.811505][ T3578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.863681][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.863857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.911911][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.953155][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.953303][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.979951][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.041018][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.041167][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.175774][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.213050][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.254247][ T3559] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.254467][ T3559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.321523][ T3555] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.321676][ T3555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.402167][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.472069][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.472296][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.553784][ T3559] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.554030][ T3559] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.661631][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.845199][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.035469][ T5807] veth0_vlan: entered promiscuous mode [ 101.051231][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.147790][ T5807] veth1_vlan: entered promiscuous mode [ 101.189148][ T5810] veth0_vlan: entered promiscuous mode [ 101.267037][ T5810] veth1_vlan: entered promiscuous mode [ 101.419637][ T5807] veth0_macvtap: entered promiscuous mode [ 101.445651][ T5807] veth1_macvtap: entered promiscuous mode [ 101.525247][ T5810] veth0_macvtap: entered promiscuous mode [ 101.593018][ T5810] veth1_macvtap: entered promiscuous mode [ 101.601682][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.670454][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.685849][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.708297][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.731962][ T4580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.744123][ T4580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.762245][ T4580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.774250][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.782962][ T4580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.868079][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.964953][ T4580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.975799][ T4580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.019923][ T4580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.050339][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.228696][ T5814] veth0_vlan: entered promiscuous mode [ 102.246883][ T3578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.246915][ T3578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.281720][ T5816] veth0_vlan: entered promiscuous mode [ 102.354353][ T5818] veth0_vlan: entered promiscuous mode [ 102.367701][ T5814] veth1_vlan: entered promiscuous mode [ 102.401374][ T5816] veth1_vlan: entered promiscuous mode [ 102.454051][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.454073][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.491260][ T5818] veth1_vlan: entered promiscuous mode [ 102.540024][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.540046][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.675649][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.675671][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.724285][ T5816] veth0_macvtap: entered promiscuous mode [ 102.757330][ T5814] veth0_macvtap: entered promiscuous mode [ 102.797050][ T5816] veth1_macvtap: entered promiscuous mode [ 102.800170][ T5818] veth0_macvtap: entered promiscuous mode [ 102.808655][ T5814] veth1_macvtap: entered promiscuous mode [ 102.873393][ T5818] veth1_macvtap: entered promiscuous mode [ 103.016171][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.063946][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.128481][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.150553][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.215174][ T4580] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.217580][ T4580] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.220573][ T4580] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.225232][ T4580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.235573][ T4580] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.250492][ T4580] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.260792][ T4580] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.264630][ T4580] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.912276][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.299352][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.416205][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.448410][ T3578] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.451943][ T3578] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.451995][ T3578] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.452033][ T3578] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.572698][ T3559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.572720][ T3559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.056182][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.519141][ T4580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.519164][ T4580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.959275][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.959300][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.014992][ T4580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.015008][ T4580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.662177][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.662194][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.871588][ T3559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.871610][ T3559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.266721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.306224][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.996177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.636172][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.636275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.636458][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.637451][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.637489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.403963][ T5992] netlink: 192 bytes leftover after parsing attributes in process `syz.1.18'. [ 126.300338][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 132.039749][ T5127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 132.042847][ T5127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 132.045107][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 132.072796][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 132.091145][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.186287][ T5127] Bluetooth: hci5: command tx timeout [ 136.683411][ T5127] Bluetooth: hci5: command tx timeout [ 136.913238][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 136.915065][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 136.915971][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 136.948058][ T6109] netlink: 192 bytes leftover after parsing attributes in process `syz.0.45'. [ 136.950212][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 136.956904][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.463596][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.463697][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.748038][ T5127] Bluetooth: hci5: command tx timeout [ 139.194535][ T5127] Bluetooth: hci2: command tx timeout [ 140.894460][ T5127] Bluetooth: hci5: command tx timeout [ 141.217497][ T5127] Bluetooth: hci2: command tx timeout [ 141.922398][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 142.309513][ T5878] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 142.309549][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.309568][ T5878] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.309583][ T5878] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 142.310644][ T5878] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 142.310664][ T5878] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 142.310678][ T5878] usb 4-1: Manufacturer: syz [ 142.330560][ T5878] usb 4-1: config 0 descriptor?? [ 143.276459][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 143.296538][ T5127] Bluetooth: hci2: command tx timeout [ 143.299141][ T5846] hid-generic 0000:0003:0001.0001: item fetching failed at offset 0/2 [ 143.304346][ T5846] hid-generic 0000:0003:0001.0001: probe with driver hid-generic failed with error -22 [ 143.487529][ T5878] usbhid 4-1:0.0: can't add hid device: -71 [ 143.487679][ T5878] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 143.809951][ T5878] usb 4-1: USB disconnect, device number 2 [ 144.768661][ T6150] netlink: 192 bytes leftover after parsing attributes in process `syz.3.55'. [ 145.402134][ T5127] Bluetooth: hci2: command tx timeout [ 147.234939][ T6166] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 147.240153][ T3570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.646017][ T5924] hid-generic 0000:0003:0001.0002: item fetching failed at offset 0/2 [ 149.655400][ T5924] hid-generic 0000:0003:0001.0002: probe with driver hid-generic failed with error -22 [ 150.254784][ T3570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.285567][ T6185] netlink: 192 bytes leftover after parsing attributes in process `syz.1.66'. [ 152.192393][ T3570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.481562][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.481888][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.590023][ T6083] bridge_slave_0: entered allmulticast mode [ 152.611922][ T6083] bridge_slave_0: entered promiscuous mode [ 154.085482][ T3570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.200806][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.200973][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.201227][ T6083] bridge_slave_1: entered allmulticast mode [ 154.204595][ T6083] bridge_slave_1: entered promiscuous mode [ 154.791521][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.70'. [ 156.835356][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.879186][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.248262][ T6083] team0: Port device team_slave_0 added [ 157.754353][ T45] hid-generic 0000:0003:0001.0003: item fetching failed at offset 0/2 [ 157.791266][ T45] hid-generic 0000:0003:0001.0003: probe with driver hid-generic failed with error -22 [ 157.832072][ T6083] team0: Port device team_slave_1 added [ 158.542798][ T6226] netlink: 192 bytes leftover after parsing attributes in process `syz.1.76'. [ 158.695952][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz.1.78'. [ 162.086415][ T5846] hid-generic 0000:0003:0001.0004: item fetching failed at offset 0/2 [ 162.087292][ T5846] hid-generic 0000:0003:0001.0004: probe with driver hid-generic failed with error -22 [ 162.134527][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.134541][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.134560][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.737401][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.737420][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.737449][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.964969][ T6272] netlink: 184 bytes leftover after parsing attributes in process `syz.3.86'. [ 164.405073][ T3570] bridge_slave_1: left allmulticast mode [ 164.405207][ T3570] bridge_slave_1: left promiscuous mode [ 164.407957][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.740344][ T3570] bridge_slave_0: left allmulticast mode [ 165.740369][ T3570] bridge_slave_0: left promiscuous mode [ 165.740600][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.310963][ T6295] Zero length message leads to an empty skb [ 168.957113][ T5878] hid-generic 0000:0003:0001.0005: item fetching failed at offset 0/2 [ 168.960054][ T5878] hid-generic 0000:0003:0001.0005: probe with driver hid-generic failed with error -22 [ 170.760480][ T6308] netlink: 184 bytes leftover after parsing attributes in process `syz.3.95'. [ 171.366271][ T5878] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.556360][ T5878] usb 4-1: Using ep0 maxpacket: 8 [ 171.559936][ T5878] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 171.559966][ T5878] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.750472][ T5878] pvrusb2: Hardware description: Terratec Grabster AV400 [ 171.750496][ T5878] pvrusb2: ********** [ 171.750504][ T5878] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 171.750516][ T5878] pvrusb2: Important functionality might not be entirely working. [ 171.750534][ T5878] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 171.750545][ T5878] pvrusb2: ********** [ 171.890107][ T2360] pvrusb2: Invalid write control endpoint [ 172.837455][ T2360] pvrusb2: Invalid write control endpoint [ 172.837472][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 172.837483][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 172.837491][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 172.837506][ T2360] pvrusb2: Device being rendered inoperable [ 172.845293][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 172.845360][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 172.925084][ T2360] pvrusb2: Attached sub-driver cx25840 [ 172.925103][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 172.925114][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 173.103519][ T5878] usb 4-1: USB disconnect, device number 3 [ 177.228435][ T6340] netlink: 184 bytes leftover after parsing attributes in process `syz.1.104'. [ 177.372227][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.626989][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.656618][ T3570] bond0 (unregistering): Released all slaves [ 183.021005][ T6083] hsr_slave_0: entered promiscuous mode [ 183.050366][ T6083] hsr_slave_1: entered promiscuous mode [ 183.051318][ T6083] debugfs: 'hsr0' already exists in 'hsr' [ 183.051343][ T6083] Cannot create hsr debugfs directory [ 183.052388][ T6108] chnl_net:caif_netlink_parms(): no params data found [ 183.577366][ T45] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 183.908848][ T45] usb 1-1: device descriptor read/64, error -71 [ 184.268837][ T45] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 184.573642][ T45] usb 1-1: device descriptor read/64, error -71 [ 184.686001][ T45] usb usb1-port1: attempt power cycle [ 185.742009][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 185.990639][ T45] usb 1-1: device descriptor read/8, error -71 [ 190.488561][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.490972][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.495321][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.499593][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.500525][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 192.157342][ T6108] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 192.576409][ T5809] Bluetooth: hci3: command tx timeout [ 193.971035][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 194.122075][ T45] usb 2-1: device descriptor read/64, error -71 [ 194.366331][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.882170][ T5809] Bluetooth: hci3: command tx timeout [ 194.955991][ T45] usb 2-1: device descriptor read/64, error -71 [ 195.070699][ T45] usb usb2-port1: attempt power cycle [ 195.469327][ T3570] hsr_slave_0: left promiscuous mode [ 195.849747][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 196.169464][ T45] usb 2-1: device descriptor read/8, error -71 [ 196.644441][ T5127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 196.654071][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 196.655625][ T5127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 196.678176][ T5127] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 196.680247][ T5127] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 197.498996][ T5809] Bluetooth: hci3: command tx timeout [ 197.550206][ T3570] hsr_slave_1: left promiscuous mode [ 197.673046][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.673126][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.276738][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.276769][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.817616][ T5127] Bluetooth: hci6: command tx timeout [ 200.074792][ T3570] veth1_macvtap: left promiscuous mode [ 200.074966][ T3570] veth0_macvtap: left promiscuous mode [ 200.076334][ T3570] veth1_vlan: left promiscuous mode [ 200.076603][ T3570] veth0_vlan: left promiscuous mode [ 200.222223][ T5127] Bluetooth: hci3: command tx timeout [ 200.314413][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.315738][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.896364][ T5127] Bluetooth: hci6: command tx timeout [ 202.722121][ T6503] netlink: 4 bytes leftover after parsing attributes in process `syz.3.136'. [ 202.993711][ T5127] Bluetooth: hci6: command tx timeout [ 204.137213][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 204.369848][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 205.056263][ T5127] Bluetooth: hci6: command tx timeout [ 207.716263][ T5139] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 207.846398][ T5139] usb 2-1: device descriptor read/64, error -71 [ 208.966221][ T5139] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 209.096434][ T5139] usb 2-1: device descriptor read/64, error -71 [ 209.206674][ T5139] usb usb2-port1: attempt power cycle [ 212.218094][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 212.218137][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 214.433473][ T6422] chnl_net:caif_netlink_parms(): no params data found [ 217.706582][ T5127] Bluetooth: hci4: command 0x0406 tx timeout [ 220.394509][ C1] vkms_vblank_simulate: vblank timer overrun [ 220.645840][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.499545][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.862939][ T6422] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.863061][ T6422] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.863447][ T6422] bridge_slave_0: entered allmulticast mode [ 221.904799][ T6422] bridge_slave_0: entered promiscuous mode [ 222.138943][ T6422] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.139088][ T6422] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.139353][ T6422] bridge_slave_1: entered allmulticast mode [ 222.151214][ T6422] bridge_slave_1: entered promiscuous mode [ 222.402908][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.965531][ T6614] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.331973][ T6422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.364596][ T6453] chnl_net:caif_netlink_parms(): no params data found [ 223.578396][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.804499][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.556801][ T6422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.063409][ T6624] overlayfs: failed to resolve './file1': -2 [ 226.802667][ T6630] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 228.935648][ T6422] team0: Port device team_slave_0 added [ 229.189156][ T6651] netlink: 'syz.0.167': attribute type 10 has an invalid length. [ 229.189180][ T6651] netlink: 40 bytes leftover after parsing attributes in process `syz.0.167'. [ 229.431356][ T6422] team0: Port device team_slave_1 added [ 229.453629][ T6651] team0: entered promiscuous mode [ 229.453657][ T6651] team_slave_0: entered promiscuous mode [ 229.453855][ T6651] team_slave_1: entered promiscuous mode [ 229.454012][ T6651] team0: entered allmulticast mode [ 229.454021][ T6651] team_slave_0: entered allmulticast mode [ 229.454033][ T6651] team_slave_1: entered allmulticast mode [ 229.454876][ T6651] bridge0: port 3(team0) entered blocking state [ 229.455155][ T6651] bridge0: port 3(team0) entered disabled state [ 229.508198][ T6651] bridge0: port 3(team0) entered blocking state [ 229.508304][ T6651] bridge0: port 3(team0) entered forwarding state [ 230.148526][ T6668] process 'syz.0.169' launched './file0' with NULL argv: empty string added [ 230.256942][ T6668] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 230.257032][ T6668] CIFS mount error: No usable UNC path provided in device string! [ 230.257032][ T6668] [ 230.257282][ T6668] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 231.383744][ T3570] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.783255][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.783275][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.783304][ T6422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.325917][ T6678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.168'. [ 232.332353][ T3570] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.673134][ T6422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.673155][ T6422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.673185][ T6422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.291293][ T6453] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.291522][ T6453] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.291780][ T6453] bridge_slave_0: entered allmulticast mode [ 233.321519][ T6453] bridge_slave_0: entered promiscuous mode [ 233.572315][ T3570] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.662854][ T6453] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.662989][ T6453] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.663160][ T6453] bridge_slave_1: entered allmulticast mode [ 233.692249][ T6453] bridge_slave_1: entered promiscuous mode [ 233.856291][ T5846] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 234.006627][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 234.016287][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.016314][ T5846] usb 2-1: config 0 has no interfaces? [ 234.016345][ T5846] usb 2-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 234.016368][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.077592][ T5846] usb 2-1: config 0 descriptor?? [ 234.411803][ T6691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.413075][ T6691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.531787][ T3570] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.643449][ T6422] hsr_slave_0: entered promiscuous mode [ 234.652568][ T6422] hsr_slave_1: entered promiscuous mode [ 234.662782][ T6422] debugfs: 'hsr0' already exists in 'hsr' [ 234.662864][ T6422] Cannot create hsr debugfs directory [ 234.684473][ T6453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.879784][ T6453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.276266][ T6708] random: crng reseeded on system resumption [ 238.405812][ T6453] team0: Port device team_slave_0 added [ 239.940574][ T5798] usb 2-1: USB disconnect, device number 9 [ 240.038142][ T6453] team0: Port device team_slave_1 added [ 240.047437][ T5139] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 240.197840][ T5139] usb 1-1: too many configurations: 67, using maximum allowed: 8 [ 240.228638][ T5139] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 240.228669][ T5139] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.228686][ T5139] usb 1-1: Product: syz [ 240.228696][ T5139] usb 1-1: Manufacturer: syz [ 240.228706][ T5139] usb 1-1: SerialNumber: syz [ 240.796431][ T5139] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 240.893980][ T6727] misc userio: The device must be registered before sending interrupts [ 241.031150][ T5924] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 242.754694][ T5924] usb 1-1: Service connection timeout for: 256 [ 242.754713][ T5924] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services [ 244.894320][ T5924] ath9k_htc: Failed to initialize the device [ 244.916374][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 244.984786][ T990] usb 1-1: USB disconnect, device number 6 [ 245.054752][ T990] usb 1-1: ath9k_htc: USB layer deinitialized [ 248.466366][ T5139] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 248.619404][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 248.622256][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.622317][ T5139] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.00 [ 248.622340][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.666768][ T5139] usb 1-1: config 0 descriptor?? [ 251.949846][ T31] usb 1-1: USB disconnect, device number 7 [ 252.117450][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 252.138183][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 252.140272][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 252.154519][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 252.159796][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 252.783382][ T6730] syz.1.184: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x404dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_RETRY_MAYFAIL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 252.783705][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.1.184 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 252.783723][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.783736][ T6730] Call Trace: [ 252.783746][ T6730] [ 252.783753][ T6730] dump_stack_lvl+0x189/0x250 [ 252.783779][ T6730] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.783795][ T6730] ? __pfx__printk+0x10/0x10 [ 252.783816][ T6730] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 252.783838][ T6730] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 252.783861][ T6730] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 252.783884][ T6730] warn_alloc+0x22e/0x3b0 [ 252.783933][ T6730] ? __pfx_warn_alloc+0x10/0x10 [ 252.783965][ T6730] ? __get_vm_area_node+0x2bc/0x350 [ 252.783988][ T6730] ? veth_dev_init+0x363/0x570 [ 252.784014][ T6730] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 252.784063][ T6730] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 252.784087][ T6730] ? __kasan_kmalloc_large+0x1c/0xa0 [ 252.784110][ T6730] ? rcu_is_watching+0x15/0xb0 [ 252.784136][ T6730] __kvmalloc_node_noprof+0x2ff/0x500 [ 252.784160][ T6730] ? veth_dev_init+0x363/0x570 [ 252.784180][ T6730] ? veth_dev_init+0x363/0x570 [ 252.784206][ T6730] veth_dev_init+0x363/0x570 [ 252.784234][ T6730] register_netdevice+0x6f3/0x1b10 [ 252.784263][ T6730] ? snprintf+0xda/0x120 [ 252.784289][ T6730] ? __pfx_register_netdevice+0x10/0x10 [ 252.784309][ T6730] ? __pfx_snprintf+0x10/0x10 [ 252.784333][ T6730] ? __asan_memset+0x22/0x50 [ 252.784349][ T6730] ? dev_addr_mod+0x2ce/0x3d0 [ 252.784372][ T6730] veth_newlink+0x5cc/0xa50 [ 252.784396][ T6730] ? __pfx_veth_newlink+0x10/0x10 [ 252.784415][ T6730] ? css_rstat_updated+0x23a/0x4f0 [ 252.784438][ T6730] ? __pfx_css_rstat_updated+0x10/0x10 [ 252.784501][ T6730] ? validate_linkmsg+0x765/0x950 [ 252.784531][ T6730] ? __pfx_veth_newlink+0x10/0x10 [ 252.784554][ T6730] rtnl_newlink_create+0x310/0xb00 [ 252.784571][ T6730] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 252.784596][ T6730] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 252.784618][ T6730] ? __lock_acquire+0xab9/0xd20 [ 252.784649][ T6730] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 252.784671][ T6730] ? safesetid_security_capable+0xa9/0x1a0 [ 252.784691][ T6730] ? bpf_lsm_capable+0x9/0x20 [ 252.784710][ T6730] ? security_capable+0x7e/0x2e0 [ 252.784735][ T6730] ? rtnl_newlink+0x8db/0x1c70 [ 252.784763][ T6730] rtnl_newlink+0x16d6/0x1c70 [ 252.784790][ T6730] ? netlink_sendmsg+0x805/0xb30 [ 252.784815][ T6730] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.784851][ T6730] ? __local_bh_enable+0x27b/0x410 [ 252.784928][ T6730] ? __lock_acquire+0xab9/0xd20 [ 252.784974][ T6730] ? __pfx_rtnl_newlink+0x10/0x10 [ 252.784999][ T6730] rtnetlink_rcv_msg+0x7cf/0xb70 [ 252.785028][ T6730] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 252.785053][ T6730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.785078][ T6730] ? ref_tracker_free+0x61e/0x7c0 [ 252.785104][ T6730] ? __asan_memcpy+0x40/0x70 [ 252.785119][ T6730] ? __pfx_ref_tracker_free+0x10/0x10 [ 252.785143][ T6730] ? __skb_clone+0x63/0x7a0 [ 252.785169][ T6730] netlink_rcv_skb+0x205/0x470 [ 252.785197][ T6730] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 252.785224][ T6730] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 252.785260][ T6730] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.785282][ T6730] netlink_unicast+0x843/0xa10 [ 252.785312][ T6730] ? __pfx_netlink_unicast+0x10/0x10 [ 252.785338][ T6730] ? netlink_sendmsg+0x642/0xb30 [ 252.785351][ T6730] ? skb_put+0x11b/0x210 [ 252.785371][ T6730] netlink_sendmsg+0x805/0xb30 [ 252.785394][ T6730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.785416][ T6730] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 252.785441][ T6730] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.785457][ T6730] __sock_sendmsg+0x219/0x270 [ 252.785484][ T6730] ____sys_sendmsg+0x508/0x820 [ 252.785507][ T6730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.785534][ T6730] ? import_iovec+0x74/0xa0 [ 252.785558][ T6730] ___sys_sendmsg+0x21f/0x2a0 [ 252.785579][ T6730] ? __pfx____sys_sendmsg+0x10/0x10 [ 252.785627][ T6730] ? __fget_files+0x2a/0x420 [ 252.785649][ T6730] ? __fget_files+0x3a6/0x420 [ 252.785680][ T6730] __x64_sys_sendmsg+0x1a1/0x260 [ 252.785701][ T6730] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 252.785729][ T6730] ? rcu_is_watching+0x15/0xb0 [ 252.785750][ T6730] ? do_syscall_64+0xbe/0x3b0 [ 252.785772][ T6730] do_syscall_64+0xfa/0x3b0 [ 252.785790][ T6730] ? lockdep_hardirqs_on+0x9c/0x150 [ 252.785806][ T6730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.785822][ T6730] ? clear_bhb_loop+0x60/0xb0 [ 252.785842][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.785857][ T6730] RIP: 0033:0x7f4cacb3eec9 [ 252.785879][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.785898][ T6730] RSP: 002b:00007f4caad7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.785914][ T6730] RAX: ffffffffffffffda RBX: 00007f4cacd96090 RCX: 00007f4cacb3eec9 [ 252.785925][ T6730] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000006 [ 252.785935][ T6730] RBP: 00007f4cacbc1f91 R08: 0000000000000000 R09: 0000000000000000 [ 252.785945][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.785954][ T6730] R13: 00007f4cacd96128 R14: 00007f4cacd96090 R15: 00007ffecf2deb88 [ 252.785979][ T6730] [ 252.785988][ T6730] Mem-Info: [ 252.785996][ T6730] active_anon:259 inactive_anon:6091 isolated_anon:0 [ 252.785996][ T6730] active_file:5510 inactive_file:37395 isolated_file:0 [ 252.785996][ T6730] unevictable:768 dirty:83 writeback:0 [ 252.785996][ T6730] slab_reclaimable:11398 slab_unreclaimable:104702 [ 252.785996][ T6730] mapped:34671 shmem:1362 pagetables:1145 [ 252.785996][ T6730] sec_pagetables:0 bounce:0 [ 252.785996][ T6730] kernel_misc_reclaimable:0 [ 252.785996][ T6730] free:1320163 free_pcp:4306 free_cma:0 [ 252.796499][ T6730] Node 0 active_anon:1036kB inactive_anon:24364kB active_file:21844kB inactive_file:149580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:138684kB dirty:328kB writeback:0kB shmem:3912kB kernel_stack:12888kB pagetables:4456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.796566][ T6730] Node 1 active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB kernel_stack:48kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 252.796620][ T6730] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 252.796772][ T6730] lowmem_reserve[]: 0 2516 2518 2518 2518 [ 252.796819][ T6730] Node 0 DMA32 free:1362680kB boost:0kB min:3944kB low:6492kB high:9040kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1032kB inactive_anon:24324kB active_file:20064kB inactive_file:149512kB unevictable:1536kB writepending:324kB present:3129332kB managed:2576596kB mlocked:0kB bounce:0kB free_pcp:16840kB local_pcp:13324kB free_cma:0kB [ 252.796892][ T6730] lowmem_reserve[]: 0 0 1 1 1 [ 252.796933][ T6730] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1780kB inactive_file:68kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 252.797002][ T6730] lowmem_reserve[]: 0 0 0 0 0 [ 252.797043][ T6730] Node 1 Normal free:3902612kB boost:0kB min:6360kB low:10468kB high:14576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:196kB inactive_file:0kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 252.797154][ T6730] lowmem_reserve[]: 0 0 0 0 0 [ 252.797197][ T6730] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 252.797355][ T6730] Node 0 DMA32: 1*4kB (E) 0*8kB 15*16kB (UME) 6*32kB (UE) 61*64kB (UME) 56*128kB (UME) 34*256kB (UM) 16*512kB (UME) 9*1024kB (M) 3*2048kB (ME) 322*4096kB (M) = 1362676kB [ 252.797552][ T6730] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 252.797678][ T6730] Node 1 Normal: 191*4kB (UME) 55*8kB (UME) 30*16kB (UME) 226*32kB (UME) 95*64kB (UME) 32*128kB (UME) 16*256kB (UME) 5*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 945*4096kB (M) = 3902612kB [ 252.797886][ T6730] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.797911][ T6730] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.797931][ T6730] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 252.797951][ T6730] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 252.797970][ T6730] 44263 total pagecache pages [ 252.797984][ T6730] 0 pages in swap cache [ 252.797993][ T6730] Free swap = 124996kB [ 252.798002][ T6730] Total swap = 124996kB [ 252.798011][ T6730] 2097051 pages RAM [ 252.798020][ T6730] 0 pages HighMem/MovableOnly [ 252.798029][ T6730] 420812 pages reserved [ 252.798038][ T6730] 0 pages cma reserved [ 254.256773][ T5127] Bluetooth: hci2: command tx timeout [ 254.680351][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.683969][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.685121][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.687580][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.688894][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.509645][ T6787] IPVS: length: 139 != 8 [ 256.853608][ T5127] Bluetooth: hci2: command tx timeout [ 256.854509][ T5127] Bluetooth: hci5: command tx timeout [ 257.586350][ T5139] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 257.736371][ T5139] usb 1-1: Using ep0 maxpacket: 8 [ 257.738882][ T5139] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.738941][ T5139] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.00 [ 257.738965][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.790516][ T5139] usb 1-1: config 0 descriptor?? [ 257.988657][ T5809] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 258.015012][ T5809] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 258.025076][ T5809] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 258.030155][ T5809] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 258.044622][ T5809] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 258.904935][ T5127] Bluetooth: hci2: command tx timeout [ 258.917303][ T5809] Bluetooth: hci5: command tx timeout [ 260.098292][ T5809] Bluetooth: hci7: command tx timeout [ 260.363189][ T5924] usb 1-1: USB disconnect, device number 8 [ 260.907717][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.907795][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.976600][ T5809] Bluetooth: hci5: command tx timeout [ 260.976636][ T5809] Bluetooth: hci2: command tx timeout [ 261.136463][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.282584][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.658478][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.152385][ C1] vkms_vblank_simulate: vblank timer overrun [ 262.178795][ T5127] Bluetooth: hci7: command tx timeout [ 262.653631][ T6453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.653714][ T6453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.653810][ T6453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.058230][ T5127] Bluetooth: hci5: command tx timeout [ 263.629409][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.238469][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.256209][ T5127] Bluetooth: hci7: command tx timeout [ 264.415949][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.973121][ T6833] syz.3.212 uses obsolete (PF_INET,SOCK_PACKET) [ 265.088829][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.214020][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.257740][ T3570] bridge_slave_1: left allmulticast mode [ 265.257793][ T3570] bridge_slave_1: left promiscuous mode [ 265.258064][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.266379][ T990] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 265.454333][ C1] vkms_vblank_simulate: vblank timer overrun [ 265.536186][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 265.548934][ T3570] bridge_slave_0: left allmulticast mode [ 265.548969][ T3570] bridge_slave_0: left promiscuous mode [ 265.549292][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.549864][ T990] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 265.549892][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.612216][ T990] pvrusb2: Hardware description: Terratec Grabster AV400 [ 265.612238][ T990] pvrusb2: ********** [ 265.612245][ T990] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 265.612257][ T990] pvrusb2: Important functionality might not be entirely working. [ 265.612266][ T990] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 265.612277][ T990] pvrusb2: ********** [ 265.761195][ T3570] bridge_slave_1: left allmulticast mode [ 265.761228][ T3570] bridge_slave_1: left promiscuous mode [ 265.761904][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.800686][ T2360] pvrusb2: Invalid write control endpoint [ 265.866183][ T990] usb 1-1: USB disconnect, device number 9 [ 265.960123][ T3570] bridge_slave_0: left allmulticast mode [ 265.960155][ T3570] bridge_slave_0: left promiscuous mode [ 265.960448][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.099757][ T2360] pvrusb2: Invalid write control endpoint [ 266.099774][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 266.099795][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 266.099803][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 266.099813][ T2360] pvrusb2: Device being rendered inoperable [ 266.099852][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 266.099901][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 266.117048][ T2360] pvrusb2: Attached sub-driver cx25840 [ 266.117068][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 266.117079][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 266.336678][ T5127] Bluetooth: hci7: command tx timeout [ 267.229315][ T6846] netlink: 'syz.3.218': attribute type 10 has an invalid length. [ 267.250911][ T3570] bond0 (unregistering): Released all slaves [ 267.281748][ T6847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.218'. [ 267.557131][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.662116][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.721428][ T3570] bond0 (unregistering): Released all slaves [ 268.865815][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.098498][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.597569][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.149426][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.296349][ T6868] overlayfs: failed to resolve './file1': -2 [ 271.297814][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.628716][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.888997][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.210860][ C1] vkms_vblank_simulate: vblank timer overrun [ 272.469090][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.608918][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.706517][ T3570] bond0 (unregistering): Released all slaves [ 273.689171][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.690869][ T6846] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.706809][ T6846] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.707017][ T6846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.709516][ T6846] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.709729][ T6846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.752424][ T6846] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.755208][ T6847] bridge_slave_1: left allmulticast mode [ 273.755238][ T6847] bridge_slave_1: left promiscuous mode [ 273.755494][ T6847] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.817964][ T6847] bridge_slave_0: left allmulticast mode [ 273.817997][ T6847] bridge_slave_0: left promiscuous mode [ 273.818276][ T6847] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.993061][ T6847] bond0: (slave bridge0): Releasing backup interface [ 274.825330][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.038418][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.107262][ C1] vkms_vblank_simulate: vblank timer overrun [ 277.733585][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.067061][ C1] vkms_vblank_simulate: vblank timer overrun [ 278.827633][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.964521][ C1] vkms_vblank_simulate: vblank timer overrun [ 280.990846][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.507270][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.778212][ C1] vkms_vblank_simulate: vblank timer overrun [ 282.607548][ C1] vkms_vblank_simulate: vblank timer overrun [ 283.520126][ T3570] hsr_slave_0: left promiscuous mode [ 283.557053][ T3570] hsr_slave_1: left promiscuous mode [ 283.558245][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.053297][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.168361][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.393149][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.753366][ C1] vkms_vblank_simulate: vblank timer overrun [ 285.933276][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.373951][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.946968][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.006297][ T3570] hsr_slave_0: left promiscuous mode [ 287.171321][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.694055][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.898195][ T3570] hsr_slave_1: left promiscuous mode [ 287.899176][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.899202][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.946652][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.946682][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.120702][ C1] vkms_vblank_simulate: vblank timer overrun [ 288.216143][ T3570] veth1_macvtap: left promiscuous mode [ 288.216258][ T3570] veth0_macvtap: left promiscuous mode [ 288.216541][ T3570] veth1_vlan: left promiscuous mode [ 288.216730][ T3570] veth0_vlan: left promiscuous mode [ 288.253770][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.053231][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.223810][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.324849][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.401604][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.483802][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.612340][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.707016][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 289.732152][ C1] vkms_vblank_simulate: vblank timer overrun [ 289.818468][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 290.016473][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.116121][ C1] vkms_vblank_simulate: vblank timer overrun [ 290.305222][ C1] vkms_vblank_simulate: vblank timer overrun [ 292.118809][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 292.329770][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 301.087750][ T6781] chnl_net:caif_netlink_parms(): no params data found [ 301.132739][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.284529][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.573663][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 302.693443][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.448742][ C0] vkms_vblank_simulate: vblank timer overrun [ 303.718509][ T6802] chnl_net:caif_netlink_parms(): no params data found [ 304.445276][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.873441][ C0] vkms_vblank_simulate: vblank timer overrun [ 308.973674][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.790053][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.830299][ T6765] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 310.028972][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.087989][ T6781] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.092594][ T6781] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.227871][ T6781] bridge_slave_0: entered allmulticast mode [ 310.452923][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.492260][ T6781] bridge_slave_0: entered promiscuous mode [ 310.631912][ T6781] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.632067][ T6781] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.632304][ T6781] bridge_slave_1: entered allmulticast mode [ 310.635241][ T6781] bridge_slave_1: entered promiscuous mode [ 310.937905][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.970740][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 310.973068][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 310.986564][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 310.996513][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.216235][ T5139] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 311.353195][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.390596][ T5139] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 311.390625][ T5139] usb 1-1: config 0 has no interface number 0 [ 311.390673][ T5139] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 311.390696][ T5139] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 311.390723][ T5139] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 311.390748][ T5139] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 311.390774][ T5139] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 311.390800][ T5139] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 311.390844][ T5139] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 311.390868][ T5139] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.401203][ T5139] usb 1-1: config 0 descriptor?? [ 311.403099][ T7070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.403669][ T7070] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 311.648801][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.224990][ T5139] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 312.292618][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.547717][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.091050][ T5127] Bluetooth: hci3: command tx timeout [ 313.119359][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.213818][ T5902] usb 1-1: USB disconnect, device number 10 [ 314.325688][ T5902] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 315.428318][ T5127] Bluetooth: hci3: command tx timeout [ 315.871890][ T6802] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.872025][ T6802] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.872283][ T6802] bridge_slave_0: entered allmulticast mode [ 315.877835][ T6802] bridge_slave_0: entered promiscuous mode [ 315.940868][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 315.943298][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 315.945170][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 315.971891][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 315.972922][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 316.133588][ T6802] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.133730][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.165385][ T6802] bridge_slave_1: entered allmulticast mode [ 316.178632][ T6802] bridge_slave_1: entered promiscuous mode [ 317.621567][ T5812] Bluetooth: hci3: command tx timeout [ 318.264598][ T5812] Bluetooth: hci2: command tx timeout [ 318.792321][ T6802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.997886][ T7118] netlink: 'syz.3.281': attribute type 10 has an invalid length. [ 318.997913][ T7118] netlink: 40 bytes leftover after parsing attributes in process `syz.3.281'. [ 319.055088][ T7118] team0: entered promiscuous mode [ 319.055106][ T7118] team_slave_0: entered promiscuous mode [ 319.055260][ T7118] team_slave_1: entered promiscuous mode [ 319.055435][ T7118] team0: entered allmulticast mode [ 319.055445][ T7118] team_slave_0: entered allmulticast mode [ 319.055458][ T7118] team_slave_1: entered allmulticast mode [ 319.079089][ T7118] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 319.706147][ T5812] Bluetooth: hci3: command tx timeout [ 320.351294][ T5127] Bluetooth: hci2: command tx timeout [ 320.399596][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 320.435134][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 320.445289][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 320.460115][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 320.461804][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 322.416259][ T5812] Bluetooth: hci2: command tx timeout [ 322.576181][ T5812] Bluetooth: hci4: command tx timeout [ 322.803014][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.803101][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.501128][ T5812] Bluetooth: hci2: command tx timeout [ 325.325105][ T5812] Bluetooth: hci4: command tx timeout [ 326.697919][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.376198][ T5812] Bluetooth: hci4: command tx timeout [ 328.413643][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.585031][ T3570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.661568][ T7089] chnl_net:caif_netlink_parms(): no params data found [ 328.692700][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 328.806139][ T5846] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 328.959894][ T5846] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 328.959952][ T5846] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 328.959998][ T5846] usb 1-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 328.960022][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.149758][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.208596][ T3570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.225506][ T5846] usb 1-1: config 0 descriptor?? [ 329.507762][ C1] vkms_vblank_simulate: vblank timer overrun [ 329.508517][ T5812] Bluetooth: hci4: command tx timeout [ 329.951177][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.039602][ T5846] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 330.571221][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.668342][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.168742][ C1] vkms_vblank_simulate: vblank timer overrun [ 331.591859][ T5139] usb 1-1: USB disconnect, device number 11 [ 331.869042][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.288155][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.344877][ T3570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.746251][ T31] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 332.896651][ T31] usb 4-1: Using ep0 maxpacket: 8 [ 332.917970][ T31] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 332.918001][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.035220][ T31] pvrusb2: Hardware description: Terratec Grabster AV400 [ 333.035275][ T31] pvrusb2: ********** [ 333.035283][ T31] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 333.035296][ T31] pvrusb2: Important functionality might not be entirely working. [ 333.035360][ T31] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 333.035372][ T31] pvrusb2: ********** [ 333.332946][ T2360] pvrusb2: Invalid write control endpoint [ 333.563538][ T31] usb 4-1: USB disconnect, device number 4 [ 334.946538][ T2360] pvrusb2: Invalid write control endpoint [ 334.946557][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 334.946568][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 334.946577][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 334.946587][ T2360] pvrusb2: Device being rendered inoperable [ 334.946626][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 334.946682][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 334.948133][ T2360] pvrusb2: Attached sub-driver cx25840 [ 334.948160][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 334.948171][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 336.499290][ T7226] netlink: 168 bytes leftover after parsing attributes in process `syz.0.302'. [ 337.809822][ T3570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.252501][ T7236] misc userio: The device must be registered before sending interrupts [ 338.266523][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.266686][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.266934][ T7089] bridge_slave_0: entered allmulticast mode [ 338.269535][ T7089] bridge_slave_0: entered promiscuous mode [ 338.334487][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.334639][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.334899][ T7065] bridge_slave_0: entered allmulticast mode [ 338.350502][ T7065] bridge_slave_0: entered promiscuous mode [ 338.392561][ T7226] warning: `syz.0.302' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 338.497106][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.497251][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.497504][ T7089] bridge_slave_1: entered allmulticast mode [ 338.502425][ T7089] bridge_slave_1: entered promiscuous mode [ 338.509812][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.509960][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.510236][ T7065] bridge_slave_1: entered allmulticast mode [ 338.588069][ T7065] bridge_slave_1: entered promiscuous mode [ 339.892945][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.023870][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 340.050053][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.204362][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.245526][ T7260] capability: warning: `syz.0.307' uses 32-bit capabilities (legacy support in use) [ 342.259374][ T7089] team0: Port device team_slave_0 added [ 342.392793][ T7065] team0: Port device team_slave_0 added [ 342.393921][ T7126] chnl_net:caif_netlink_parms(): no params data found [ 342.498089][ T7089] team0: Port device team_slave_1 added [ 342.623819][ T7065] team0: Port device team_slave_1 added [ 344.753021][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.753036][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.753056][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.816728][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.816749][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.816777][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.899281][ T3570] bridge_slave_1: left allmulticast mode [ 344.899316][ T3570] bridge_slave_1: left promiscuous mode [ 344.899595][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.994469][ T3570] bridge_slave_0: left allmulticast mode [ 344.994491][ T3570] bridge_slave_0: left promiscuous mode [ 344.994692][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.075089][ T3570] bridge_slave_1: left allmulticast mode [ 345.075113][ T3570] bridge_slave_1: left promiscuous mode [ 345.075284][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.171127][ T3570] bridge_slave_0: left allmulticast mode [ 345.171160][ T3570] bridge_slave_0: left promiscuous mode [ 345.171481][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.269031][ T3570] bridge_slave_1: left allmulticast mode [ 345.269056][ T3570] bridge_slave_1: left promiscuous mode [ 345.269246][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.363044][ T3570] bridge_slave_0: left allmulticast mode [ 345.363077][ T3570] bridge_slave_0: left promiscuous mode [ 345.364594][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.552354][ T3570] bridge_slave_1: left allmulticast mode [ 345.552386][ T3570] bridge_slave_1: left promiscuous mode [ 345.552643][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.774754][ T3570] bridge_slave_0: left allmulticast mode [ 345.774787][ T3570] bridge_slave_0: left promiscuous mode [ 345.775051][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.890958][ T3570] bridge_slave_1: left allmulticast mode [ 345.890983][ T3570] bridge_slave_1: left promiscuous mode [ 345.891159][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.964049][ T3570] bridge_slave_0: left allmulticast mode [ 345.964082][ T3570] bridge_slave_0: left promiscuous mode [ 345.964350][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.207305][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.390925][ T3570] bond0 (unregistering): Released all slaves [ 350.965913][ T3570] bond0 (unregistering): Released all slaves [ 351.247330][ T3570] bond0 (unregistering): Released all slaves [ 351.487027][ T7316] input: syz1 as /devices/virtual/input/input6 [ 354.967977][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.029914][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.050114][ T3570] bond0 (unregistering): Released all slaves [ 355.299409][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.389511][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.449612][ T3570] bond0 (unregistering): Released all slaves [ 355.977290][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.227199][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.453732][ T3570] bond0 (unregistering): Released all slaves [ 358.540623][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.540641][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.540678][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.543533][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.543550][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.543577][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.888992][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.889140][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.889309][ T7126] bridge_slave_0: entered allmulticast mode [ 360.891440][ T7126] bridge_slave_0: entered promiscuous mode [ 361.124536][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.124758][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.125035][ T7126] bridge_slave_1: entered allmulticast mode [ 361.270948][ T7126] bridge_slave_1: entered promiscuous mode [ 361.294942][ T7065] hsr_slave_0: entered promiscuous mode [ 361.316694][ T7065] hsr_slave_1: entered promiscuous mode [ 361.317736][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 361.317762][ T7065] Cannot create hsr debugfs directory [ 361.353921][ T7089] hsr_slave_0: entered promiscuous mode [ 361.381972][ T7089] hsr_slave_1: entered promiscuous mode [ 361.396501][ T7089] debugfs: 'hsr0' already exists in 'hsr' [ 361.396525][ T7089] Cannot create hsr debugfs directory [ 364.603625][ T7372] misc userio: The device must be registered before sending interrupts [ 366.851023][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.039080][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.564893][ T7390] fuse: Bad value for 'group_id' [ 367.564915][ T7390] fuse: Bad value for 'group_id' [ 367.591569][ T7390] Device name not specified. [ 367.591569][ T7390] [ 371.146288][ T5902] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 371.290909][ T7126] team0: Port device team_slave_0 added [ 371.318340][ T5902] usb 1-1: Using ep0 maxpacket: 8 [ 371.321094][ T5902] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 371.321124][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.377020][ T5902] pvrusb2: Hardware description: Terratec Grabster AV400 [ 371.377038][ T5902] pvrusb2: ********** [ 371.377045][ T5902] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 371.377057][ T5902] pvrusb2: Important functionality might not be entirely working. [ 371.377065][ T5902] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 371.377077][ T5902] pvrusb2: ********** [ 371.381463][ T7126] team0: Port device team_slave_1 added [ 371.574061][ T2360] pvrusb2: Invalid write control endpoint [ 371.594122][ T5902] usb 1-1: USB disconnect, device number 12 [ 371.601620][ T5127] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 371.617056][ T5127] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 371.622650][ T5127] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 371.643470][ T5127] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 371.645928][ T5127] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.843051][ T2360] pvrusb2: Invalid write control endpoint [ 371.843068][ T2360] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 371.843078][ T2360] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 371.843087][ T2360] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 371.843098][ T2360] pvrusb2: Device being rendered inoperable [ 371.843172][ T2360] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 371.843227][ T2360] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 371.905570][ T2360] pvrusb2: Attached sub-driver cx25840 [ 371.905589][ T2360] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 371.905599][ T2360] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 372.054488][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.054506][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.054532][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.071057][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.071076][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.071103][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.696217][ T5812] Bluetooth: hci5: command tx timeout [ 374.177421][ T3570] hsr_slave_0: left promiscuous mode [ 374.216322][ T3570] hsr_slave_1: left promiscuous mode [ 374.217107][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.217128][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.270018][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.271589][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.407005][ T3570] hsr_slave_0: left promiscuous mode [ 374.446210][ T3570] hsr_slave_1: left promiscuous mode [ 374.450332][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.477404][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.689267][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.744570][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 374.775555][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 374.784818][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 374.794977][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 374.823447][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 374.890796][ T7431] fuse: Bad value for 'group_id' [ 374.890811][ T7431] fuse: Bad value for 'group_id' [ 374.891857][ T7431] Device name not specified. [ 374.891857][ T7431] [ 374.968757][ T3570] veth1_macvtap: left promiscuous mode [ 374.968872][ T3570] veth0_macvtap: left promiscuous mode [ 374.969275][ T3570] veth1_vlan: left promiscuous mode [ 374.969471][ T3570] veth0_vlan: left promiscuous mode [ 376.382611][ T5127] Bluetooth: hci5: command tx timeout [ 377.323807][ T5127] Bluetooth: hci3: command tx timeout [ 378.416254][ T5127] Bluetooth: hci5: command tx timeout [ 379.021825][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 379.192726][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 379.208912][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 379.211426][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 379.212689][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 379.213455][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 379.245295][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 379.400108][ T5127] Bluetooth: hci3: command tx timeout [ 380.326177][ T5798] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 380.513891][ T5127] Bluetooth: hci5: command tx timeout [ 380.524505][ T5798] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.524555][ T5798] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 380.524579][ T5798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.593310][ T5798] usb 4-1: config 0 descriptor?? [ 380.612201][ T5798] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 381.308617][ T5127] Bluetooth: hci2: command tx timeout [ 381.462179][ T5127] Bluetooth: hci3: command tx timeout [ 381.808475][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 381.927186][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 382.600562][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 382.737608][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 383.120794][ T5846] usb 4-1: USB disconnect, device number 5 [ 383.376169][ T5127] Bluetooth: hci2: command tx timeout [ 383.536296][ T5127] Bluetooth: hci3: command tx timeout [ 383.553107][ T7460] fuse: Bad value for 'group_id' [ 383.553129][ T7460] fuse: Bad value for 'group_id' [ 383.561062][ T7460] Device name not specified. [ 383.561062][ T7460] [ 384.154339][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.154417][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.490769][ T5127] Bluetooth: hci2: command tx timeout [ 387.172939][ T7480] misc userio: The device must be registered before sending interrupts [ 387.536186][ T5127] Bluetooth: hci2: command tx timeout [ 388.417507][ C0] vkms_vblank_simulate: vblank timer overrun [ 388.789689][ C0] vkms_vblank_simulate: vblank timer overrun [ 389.911105][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.686199][ C0] vkms_vblank_simulate: vblank timer overrun [ 391.747485][ C0] vkms_vblank_simulate: vblank timer overrun [ 392.007275][ C0] vkms_vblank_simulate: vblank timer overrun [ 393.293545][ T7411] chnl_net:caif_netlink_parms(): no params data found [ 394.406676][ T7428] chnl_net:caif_netlink_parms(): no params data found [ 394.472874][ T7448] chnl_net:caif_netlink_parms(): no params data found [ 397.835018][ T7411] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.835172][ T7411] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.835389][ T7411] bridge_slave_0: entered allmulticast mode [ 397.841400][ T7411] bridge_slave_0: entered promiscuous mode [ 397.902949][ T7411] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.903168][ T7411] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.903399][ T7411] bridge_slave_1: entered allmulticast mode [ 397.916505][ T7411] bridge_slave_1: entered promiscuous mode [ 401.348207][ T7411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.562509][ T7411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.562820][ T7428] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.563084][ T7428] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.563284][ T7428] bridge_slave_0: entered allmulticast mode [ 401.597055][ T7428] bridge_slave_0: entered promiscuous mode [ 401.614352][ T7448] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.614504][ T7448] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.614686][ T7448] bridge_slave_0: entered allmulticast mode [ 401.647099][ T7448] bridge_slave_0: entered promiscuous mode [ 401.759274][ T7428] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.759433][ T7428] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.759646][ T7428] bridge_slave_1: entered allmulticast mode [ 401.762628][ T7428] bridge_slave_1: entered promiscuous mode [ 401.764605][ T7448] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.764741][ T7448] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.765016][ T7448] bridge_slave_1: entered allmulticast mode [ 401.774615][ T7448] bridge_slave_1: entered promiscuous mode [ 404.810481][ T7411] team0: Port device team_slave_0 added [ 405.044742][ T7411] team0: Port device team_slave_1 added [ 405.070149][ T7428] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.074049][ T7448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.391990][ T7448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.408345][ T7428] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.199816][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.199834][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.199861][ T7411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.591786][ T7411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.591805][ T7411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.591833][ T7411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.819688][ T7448] team0: Port device team_slave_0 added [ 411.908010][ T7448] team0: Port device team_slave_1 added [ 411.910523][ T7428] team0: Port device team_slave_0 added [ 413.099789][ T7428] team0: Port device team_slave_1 added [ 413.640836][ T7681] overlayfs: failed to clone upperpath [ 414.058386][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.058404][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.058431][ T7448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.191849][ T7694] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 414.207546][ T7694] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 414.384963][ T7448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.384981][ T7448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.385008][ T7448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.434866][ T7411] hsr_slave_0: entered promiscuous mode [ 414.444155][ T7411] hsr_slave_1: entered promiscuous mode [ 414.445259][ T7411] debugfs: 'hsr0' already exists in 'hsr' [ 414.445287][ T7411] Cannot create hsr debugfs directory [ 414.647474][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 414.647510][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.647538][ T7428] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 414.738505][ T7428] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 414.738522][ T7428] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.738550][ T7428] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.695466][ T7717] overlayfs: failed to clone upperpath [ 416.859176][ T7448] hsr_slave_0: entered promiscuous mode [ 416.860657][ T7448] hsr_slave_1: entered promiscuous mode [ 416.861596][ T7448] debugfs: 'hsr0' already exists in 'hsr' [ 416.861621][ T7448] Cannot create hsr debugfs directory [ 417.348224][ T7428] hsr_slave_0: entered promiscuous mode [ 417.350930][ T7428] hsr_slave_1: entered promiscuous mode [ 417.353155][ T7428] debugfs: 'hsr0' already exists in 'hsr' [ 417.353181][ T7428] Cannot create hsr debugfs directory [ 418.401210][ T7741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 419.955448][ T7751] overlayfs: failed to clone upperpath [ 422.270985][ T7769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.655355][ T7777] overlayfs: failed to clone upperpath [ 423.868525][ T3570] bridge_slave_1: left allmulticast mode [ 423.868556][ T3570] bridge_slave_1: left promiscuous mode [ 423.868815][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.968005][ T3570] bridge_slave_0: left allmulticast mode [ 423.968035][ T3570] bridge_slave_0: left promiscuous mode [ 423.968305][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.228788][ T3570] bridge_slave_1: left allmulticast mode [ 425.228819][ T3570] bridge_slave_1: left promiscuous mode [ 425.229852][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.301681][ T3570] bridge_slave_0: left allmulticast mode [ 425.301712][ T3570] bridge_slave_0: left promiscuous mode [ 425.301962][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.401001][ T3570] bridge_slave_1: left allmulticast mode [ 425.401035][ T3570] bridge_slave_1: left promiscuous mode [ 425.401289][ T3570] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.480500][ T3570] bridge_slave_0: left allmulticast mode [ 425.480533][ T3570] bridge_slave_0: left promiscuous mode [ 425.480792][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.898545][ T7799] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 426.211937][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.337253][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.423866][ T3570] bond0 (unregistering): Released all slaves [ 426.808376][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 426.898297][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 426.965329][ T3570] bond0 (unregistering): Released all slaves [ 428.513561][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.858311][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.937874][ T3570] bond0 (unregistering): Released all slaves [ 430.521969][ T7411] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 430.700270][ T7411] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 430.851733][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.915425][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.082817][ T3570] hsr_slave_0: left promiscuous mode [ 431.140652][ T3570] hsr_slave_1: left promiscuous mode [ 431.141371][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.171901][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.276835][ T3570] hsr_slave_0: left promiscuous mode [ 431.296869][ T3570] hsr_slave_1: left promiscuous mode [ 431.297823][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 431.339910][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.680789][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 431.827052][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 432.971128][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.975232][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.990928][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.992154][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.993619][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 434.136997][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 434.276956][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 435.056132][ T5127] Bluetooth: hci4: command tx timeout [ 435.393984][ T5812] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 435.405234][ T5812] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 435.420055][ T5812] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 435.442790][ T5812] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 435.443600][ T5812] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 435.842923][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 435.976944][ T3570] team0 (unregistering): Port device team_slave_0 removed [ 436.525621][ T7411] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.141123][ T5127] Bluetooth: hci4: command tx timeout [ 438.097670][ T5127] Bluetooth: hci6: command tx timeout [ 439.474451][ T5127] Bluetooth: hci4: command tx timeout [ 440.176252][ T5127] Bluetooth: hci6: command tx timeout [ 440.305845][ T5812] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 440.318484][ T5812] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 440.319694][ T5812] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 440.321272][ T5812] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 440.322080][ T5812] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 442.019281][ T5812] Bluetooth: hci4: command tx timeout [ 442.256114][ T5812] Bluetooth: hci6: command tx timeout [ 442.416182][ T5812] Bluetooth: hci5: command tx timeout [ 444.555434][ T5812] Bluetooth: hci6: command tx timeout [ 444.555471][ T5812] Bluetooth: hci5: command tx timeout [ 445.603263][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.603332][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.164530][ T7866] chnl_net:caif_netlink_parms(): no params data found [ 446.357568][ T7855] chnl_net:caif_netlink_parms(): no params data found [ 446.786169][ T5812] Bluetooth: hci5: command tx timeout [ 448.538613][ T7949] overlayfs: failed to clone upperpath [ 448.967993][ T5812] Bluetooth: hci5: command tx timeout [ 449.639433][ T7866] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.639663][ T7866] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.639880][ T7866] bridge_slave_0: entered allmulticast mode [ 449.648292][ T7866] bridge_slave_0: entered promiscuous mode [ 450.003320][ T7866] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.003505][ T7866] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.003759][ T7866] bridge_slave_1: entered allmulticast mode [ 450.008142][ T7866] bridge_slave_1: entered promiscuous mode [ 450.841461][ T5880] IPVS: starting estimator thread 0... [ 450.843581][ T7855] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.843723][ T7855] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.843929][ T7855] bridge_slave_0: entered allmulticast mode [ 450.850571][ T7855] bridge_slave_0: entered promiscuous mode [ 450.973712][ T7988] IPVS: using max 7 ests per chain, 16800 per kthread [ 452.677487][ T38] audit: type=1800 audit(1759436822.084:2): pid=8000 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.479" name="nullb0" dev="tmpfs" ino=1188 res=0 errno=0 [ 452.939000][ T7855] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.939143][ T7855] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.939404][ T7855] bridge_slave_1: entered allmulticast mode [ 452.941378][ T7855] bridge_slave_1: entered promiscuous mode [ 453.009236][ T7866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.480850][ T7866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.753949][ T8018] fuse: Unknown parameter 'group_i00000000000000000000' [ 453.765448][ T8018] Device name not specified. [ 453.765448][ T8018] [ 453.840785][ T7855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.062042][ T7855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.065861][ T7866] team0: Port device team_slave_0 added [ 454.085292][ T7899] chnl_net:caif_netlink_parms(): no params data found [ 454.310022][ T7866] team0: Port device team_slave_1 added [ 457.211199][ T8043] tipc: Started in network mode [ 457.211367][ T8043] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 457.269286][ T8043] tipc: Enabled bearer , priority 10 [ 457.355689][ T7855] team0: Port device team_slave_0 added [ 457.808898][ T8048] fuse: Unknown parameter 'group_id00000000000000000000' [ 457.811741][ T8048] Device name not specified. [ 457.811741][ T8048] [ 458.789555][ T5887] tipc: Node number set to 4269801488 [ 459.429828][ T7855] team0: Port device team_slave_1 added [ 459.447455][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.447473][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.447501][ T7866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.743576][ T8070] overlayfs: failed to clone upperpath [ 460.209647][ T7866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.209665][ T7866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.209693][ T7866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.652057][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.652075][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.652102][ T7855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.800495][ T7855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 460.800514][ T7855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.800542][ T7855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.090728][ T7899] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.090880][ T7899] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.091065][ T7899] bridge_slave_0: entered allmulticast mode [ 461.093916][ T7899] bridge_slave_0: entered promiscuous mode [ 461.318226][ T7899] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.318370][ T7899] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.318616][ T7899] bridge_slave_1: entered allmulticast mode [ 461.321977][ T7899] bridge_slave_1: entered promiscuous mode [ 461.342082][ T7866] hsr_slave_0: entered promiscuous mode [ 461.343667][ T7866] hsr_slave_1: entered promiscuous mode [ 461.344755][ T7866] debugfs: 'hsr0' already exists in 'hsr' [ 461.344783][ T7866] Cannot create hsr debugfs directory [ 461.693409][ T8087] fuse: Unknown parameter 'group_id00000000000000000000' [ 461.695208][ T8087] Device name not specified. [ 461.695208][ T8087] [ 465.373812][ T7899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.753748][ T7855] hsr_slave_0: entered promiscuous mode [ 465.755208][ T7855] hsr_slave_1: entered promiscuous mode [ 465.757025][ T7855] debugfs: 'hsr0' already exists in 'hsr' [ 465.757055][ T7855] Cannot create hsr debugfs directory [ 466.112484][ T7899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 467.289765][ T8127] overlayfs: failed to clone upperpath [ 468.613700][ T7899] team0: Port device team_slave_0 added [ 468.670944][ T7899] team0: Port device team_slave_1 added [ 470.444245][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 470.444264][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.444292][ T7899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.605179][ T7899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.605197][ T7899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.605226][ T7899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.120443][ T8165] overlayfs: failed to clone upperpath [ 473.953567][ T7899] hsr_slave_0: entered promiscuous mode [ 473.956677][ T7899] hsr_slave_1: entered promiscuous mode [ 473.965625][ T7899] debugfs: 'hsr0' already exists in 'hsr' [ 473.965658][ T7899] Cannot create hsr debugfs directory [ 477.801880][ C0] ------------[ cut here ]------------ [ 477.801897][ C0] refcount_t: addition on 0; use-after-free. [ 477.802627][ C0] WARNING: CPU: 0 PID: 16 at lib/refcount.c:25 refcount_warn_saturate+0xfa/0x1d0 [ 477.802682][ C0] Modules linked in: [ 477.802720][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 477.802772][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.802801][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 477.802833][ C0] Code: 00 00 e8 d9 96 48 fd 5b 41 5e e9 01 11 45 06 cc e8 cb 96 48 fd c6 05 72 50 2b 0a 01 90 48 c7 c7 a0 e7 1c 8b e8 d7 30 0d fd 90 <0f> 0b 90 90 eb d7 e8 ab 96 48 fd c6 05 53 50 2b 0a 01 90 48 c7 c7 [ 477.802854][ C0] RSP: 0000:ffffc90000157850 EFLAGS: 00010246 [ 477.802875][ C0] RAX: d627acbf0cd58200 RBX: 0000000000000002 RCX: ffff88801be95a00 [ 477.802893][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 477.802908][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 477.802922][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af1c [ 477.802941][ C0] R13: ffff888038798458 R14: ffff888038798080 R15: dffffc0000000000 [ 477.802959][ C0] FS: 0000000000000000(0000) GS:ffff888127022000(0000) knlGS:0000000000000000 [ 477.802979][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.802995][ C0] CR2: 0000200000000280 CR3: 0000000048b54000 CR4: 00000000003526f0 [ 477.803016][ C0] Call Trace: [ 477.803029][ C0] [ 477.803043][ C0] mptcp_schedule_work+0x164/0x1a0 [ 477.803086][ C0] mptcp_tout_timer+0x21/0xa0 [ 477.803115][ C0] call_timer_fn+0x17e/0x5f0 [ 477.803138][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 477.803164][ C0] ? call_timer_fn+0xbe/0x5f0 [ 477.803186][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 477.803221][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.803248][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.803272][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 477.803301][ C0] __run_timer_base+0x648/0x970 [ 477.803364][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 477.803422][ C0] run_timer_softirq+0xb7/0x180 [ 477.803460][ C0] handle_softirqs+0x22f/0x710 [ 477.803508][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 477.803558][ C0] run_ktimerd+0xcf/0x190 [ 477.803580][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 477.803600][ C0] ? schedule+0x91/0x360 [ 477.803633][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 477.803669][ C0] smpboot_thread_fn+0x542/0xa60 [ 477.803708][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 477.803756][ C0] kthread+0x711/0x8a0 [ 477.803786][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 477.803822][ C0] ? __pfx_kthread+0x10/0x10 [ 477.803844][ C0] ? rt_spin_unlock+0x150/0x200 [ 477.803886][ C0] ? rt_spin_unlock+0x161/0x200 [ 477.803918][ C0] ? __pfx_kthread+0x10/0x10 [ 477.803945][ C0] ret_from_fork+0x439/0x7d0 [ 477.803992][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 477.804036][ C0] ? __switch_to_asm+0x39/0x70 [ 477.804063][ C0] ? __switch_to_asm+0x33/0x70 [ 477.804087][ C0] ? __pfx_kthread+0x10/0x10 [ 477.804114][ C0] ret_from_fork_asm+0x1a/0x30 [ 477.804161][ C0] [ 477.804180][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 477.804198][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 477.804225][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 477.804239][ C0] Call Trace: [ 477.804248][ C0] [ 477.804258][ C0] dump_stack_lvl+0x99/0x250 [ 477.804282][ C0] ? __asan_memcpy+0x40/0x70 [ 477.804309][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.804332][ C0] ? __pfx__printk+0x10/0x10 [ 477.804388][ C0] vpanic+0x281/0x750 [ 477.804413][ C0] ? __pfx__printk+0x10/0x10 [ 477.804444][ C0] ? __pfx_vpanic+0x10/0x10 [ 477.804469][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 477.804510][ C0] panic+0xb9/0xc0 [ 477.804534][ C0] ? __pfx_panic+0x10/0x10 [ 477.804585][ C0] __warn+0x31b/0x4b0 [ 477.804608][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 477.804641][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 477.804671][ C0] report_bug+0x2be/0x4f0 [ 477.804695][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 477.804726][ C0] ? refcount_warn_saturate+0xfa/0x1d0 [ 477.804755][ C0] ? refcount_warn_saturate+0xfc/0x1d0 [ 477.804785][ C0] handle_bug+0x84/0x160 [ 477.804817][ C0] exc_invalid_op+0x1a/0x50 [ 477.804848][ C0] asm_exc_invalid_op+0x1a/0x20 [ 477.804871][ C0] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 477.804901][ C0] Code: 00 00 e8 d9 96 48 fd 5b 41 5e e9 01 11 45 06 cc e8 cb 96 48 fd c6 05 72 50 2b 0a 01 90 48 c7 c7 a0 e7 1c 8b e8 d7 30 0d fd 90 <0f> 0b 90 90 eb d7 e8 ab 96 48 fd c6 05 53 50 2b 0a 01 90 48 c7 c7 [ 477.804921][ C0] RSP: 0000:ffffc90000157850 EFLAGS: 00010246 [ 477.804941][ C0] RAX: d627acbf0cd58200 RBX: 0000000000000002 RCX: ffff88801be95a00 [ 477.804958][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 477.804973][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 477.804987][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff9200002af1c [ 477.805006][ C0] R13: ffff888038798458 R14: ffff888038798080 R15: dffffc0000000000 [ 477.805048][ C0] mptcp_schedule_work+0x164/0x1a0 [ 477.805087][ C0] mptcp_tout_timer+0x21/0xa0 [ 477.805116][ C0] call_timer_fn+0x17e/0x5f0 [ 477.805138][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 477.805164][ C0] ? call_timer_fn+0xbe/0x5f0 [ 477.805186][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 477.805221][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.805247][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.805270][ C0] ? __pfx_mptcp_tout_timer+0x10/0x10 [ 477.805299][ C0] __run_timer_base+0x648/0x970 [ 477.805367][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 477.805425][ C0] run_timer_softirq+0xb7/0x180 [ 477.805462][ C0] handle_softirqs+0x22f/0x710 [ 477.805510][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 477.805560][ C0] run_ktimerd+0xcf/0x190 [ 477.805583][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 477.805603][ C0] ? schedule+0x91/0x360 [ 477.805636][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 477.805671][ C0] smpboot_thread_fn+0x542/0xa60 [ 477.805709][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 477.805757][ C0] kthread+0x711/0x8a0 [ 477.805787][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 477.805823][ C0] ? __pfx_kthread+0x10/0x10 [ 477.805845][ C0] ? rt_spin_unlock+0x150/0x200 [ 477.805887][ C0] ? rt_spin_unlock+0x161/0x200 [ 477.805920][ C0] ? __pfx_kthread+0x10/0x10 [ 477.805950][ C0] ret_from_fork+0x439/0x7d0 [ 477.805985][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 477.806029][ C0] ? __switch_to_asm+0x39/0x70 [ 477.806054][ C0] ? __switch_to_asm+0x33/0x70 [ 477.806079][ C0] ? __pfx_kthread+0x10/0x10 [ 477.806106][ C0] ret_from_fork_asm+0x1a/0x30 [ 477.806154][ C0] [ 477.806312][ C0] Kernel Offset: disabled