last executing test programs: 16m7.8484008s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x10) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000680)={0xc}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r7, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, 0x0, 0x0, 0x1004000, 0x1000, &(0x7f0000ffc000)}) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(0xffffffffffffffff, 0x3b8b, 0x0) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ae8ff00000000b7080000000000007b8af0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70500000800000085000000c500"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16m6.118577148s ago: executing program 3 (id=6): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) 16m3.614614365s ago: executing program 0 (id=1): shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000000000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') lseek(r3, 0x1000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) setsockopt$packet_fanout(r3, 0x107, 0x12, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000300)}, {0x0}], 0x2, 0x0, 0x0, 0x900}}], 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setreuid(0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, 0x0, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000100), &(0x7f0000000580)=0x14) socket$nl_xfrm(0x10, 0x3, 0x6) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) 16m3.179775923s ago: executing program 3 (id=7): r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 16m1.716106377s ago: executing program 0 (id=8): socket$nl_audit(0x10, 0x3, 0x9) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_int(r4, 0x0, 0x32, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0xffaa}, {&(0x7f0000000040)="a3d7f3e8a9cf9e3887a6f6eca30e90d85fcfa281378973ab916b0e1d03bd28bca55c552da8cfecb0fbccbfb18ef20fe9541e0e1e8fa214cb6bb0455c2386f5ebb4730be449beb72f481c1429d6eb835b76fd1fdcacd50b884c98caa871ec4e225b6036b6ad2638ab5b06828c10fc355b170075f37b748b8f466fe29f40ec981d1431132bca9884654780b3205ed61f49c3b3b6229593e61d13a8505de19a8a0f502d4f3148f9450ed35ef5950bb7fefcf299beed14", 0xb5}], 0x2}, 0x0) 16m1.715735813s ago: executing program 1 (id=2): epoll_create(0xff9) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x88d, &(0x7f00000005c0)={0x0, 0x1423, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x75fa, 0xe475, 0x0, 0x0, 0x0) 16m1.577954211s ago: executing program 3 (id=9): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x2100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f00000007c0)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x2, @private0}, 0x1c, &(0x7f0000000d00)=[{&(0x7f00000002c0)='\n', 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000000180)=[{&(0x7f0000000040)}], 0x1}}], 0x2, 0x40088d4) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), r0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2000000020000b47, 0x9, 0x8008, 0x20000000, 0x400003}, 0x0) getsockopt$CAN_RAW_LOOPBACK(0xffffffffffffffff, 0x65, 0x20, 0x0, &(0x7f0000001040)=0x5d) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) set_mempolicy(0x6005, &(0x7f0000000080)=0xfffffffffffffffd, 0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000}) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0xffff0018) ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 16m0.454264291s ago: executing program 0 (id=10): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(0x0, 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/194, 0xc2}], 0x2}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 15m58.796401007s ago: executing program 1 (id=12): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) sendto$inet6(r0, &(0x7f0000000040)='\x00', 0x1, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) 15m57.32806703s ago: executing program 1 (id=14): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) 15m55.502744366s ago: executing program 1 (id=16): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c38303231"], 0x20}}, 0x800) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000005c0)=@in, 0x80, 0x0, 0x0, &(0x7f0000000740)=""/23, 0x17}, 0x3}], 0x1, 0x40012100, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100"}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) setrlimit(0x9, &(0x7f00000001c0)={0x5, 0xdbc}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0xfffffffff0000000}) 15m52.291651266s ago: executing program 3 (id=17): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r3, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80800) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x30e1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r8 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="fd9682af2b032638130870270c936a8d010e"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m51.933994633s ago: executing program 0 (id=18): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 15m49.331844942s ago: executing program 1 (id=21): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 15m36.078200865s ago: executing program 32 (id=18): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/dev_mcast\x00') socket$packet(0x11, 0x3, 0x300) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x400) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) socket(0x200000100000011, 0x3, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MEDIA_IOC_DEVICE_INFO(r3, 0xc1007c00, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r4, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x41e) 15m35.900386712s ago: executing program 33 (id=17): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) quotactl_fd$Q_SYNC(r0, 0xffffffff80000100, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpeername$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @private}, &(0x7f0000000140)=0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00'/668, 0x6) fcntl$addseals(r3, 0x409, 0xc) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x80}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4cc, 0x0, 0x940c, 0x3002, 0x0, 0x2c0, 0x404, 0x3d8, 0x3d8, 0x404, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x28c, 0x2d4, 0x0, {}, [@common=@inet=@recent0={{0xf4}, {0x0, 0x2, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf4}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, [0x0, 0x0, 0xff000000, 0xff], [0xffffff00, 0xffffff00, 0xff000000, 0xffffffff], 'team_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x886215f4d37bb4bb, 0x90, 0x1, 0x69}, 0x0, 0xc8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x24}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x528) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r5, 0xc02864cf, &(0x7f00000001c0)={0x0, 0x0, {}, {0xee00}}) r6 = open_tree(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x80800) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x30e1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) r8 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) socket(0x2, 0x80805, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="fd9682af2b032638130870270c936a8d010e"], 0x0) syz_usb_control_io$cdc_ncm(r9, 0x0, &(0x7f00000003c0)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15m33.290207787s ago: executing program 34 (id=21): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0xea100, 0x0) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r6, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r7, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 25.123304177s ago: executing program 4 (id=765): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000d40)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000640)="eb5974e8be09e387ab90b1569489ca152362cb44b1952d7a95d4e348dd0a24fdb5fbd2dc1f3ddba2f36dd88226e8ab7b58818a357b167f7671a57d73594a9107053189f3589268715fdfc605ce82d5053ca0394bd3ef6ccbdf534483f3c1d4f9ff65fb1863033c0b1caa3693e04df2ec20276f06deaacfacc12fcba68de29bde9a2ea9ba457ea429c807659f0625a5eb47b1ec44b0aa784104dfb70463705ab40799c86b2eb83432002fec798f0bdef9e3129d6fd289675b3398fa9f922160f45eade8d18b595a0fc72cd89e7ce9112fdd0994337ac9fdf91c43f4551bc2e594a4ed9151fe9bdfa478ce6047b4a2f3a6e1a2c24151a1", 0xf6}, {&(0x7f00000022c0)="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", 0xd00}, {&(0x7f0000000480)="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", 0xfd}, {&(0x7f00000005c0)="fc79ea35d065b9ab3476a577889a62263064a4f9365db73c96a2400dc5e53ae73f60b7254d3278aa75b0a65755395ca9de7ecf950a347b85775287a2fae0c370b5829b030c08d2571c104a342e4d1050b0422de409d7cb8a94b330cc7d125cf20f442f12e5cfc948aa28", 0x6a}, {&(0x7f0000000900)="ea47bc5a315cb2157880ce304c1abce402167fd4bedfea9bbcc20cf6de0308c26ade72d36e2f01eb0e20a7b506b3c21e39c540cd8c10f12cd3bcd024240058198d7b5ab8b13a401e0ef540e84c344fc9ef33cc7a03b39d275822c8042bbac5b0553282a5931d458a28949a6540655dff4ccb62c28b165fe9fee71d10d88000ec0db22336ed6b6db60d2d766d0f736e", 0x8f}, {&(0x7f00000009c0)="8465f974b3e02d242b46ef902928809312de5adb9fc3efedeb11c99628cfeec4a7918887ba379f68ffaf7e88157baf179d50cd31c4faacfbaf87f7c30c6ffbed1bf304c2b3e2cf5e9351d8c861e3072379e113511a8199ffffe0c171582cbc39f2c1c2c7b4dae0d4dc7b2c27d23175e14043b0b5ab1f0441460fa161766205fc4522e3c5dd17b8f61bb2ddea83db1750", 0x90}], 0x6, 0x0, 0x0, 0x4000014}], 0x1, 0x4c885) recvmmsg(r1, &(0x7f000000c4c0)=[{{0x0, 0x0, &(0x7f0000007340)=[{&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f0000000e40)=""/165, 0xa5}], 0x2}, 0x4}], 0x1, 0x400101c3, 0x0) 24.960225145s ago: executing program 4 (id=766): socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, 0x0, 0xe0e0e0e0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001540)=@get={0x1, &(0x7f0000001480)=""/191, 0x368b8bd2}) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 11.191197621s ago: executing program 2 (id=774): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) r2 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r3 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0xffffffffffffffa3, 0x1, {0xfffffffe, 0xb, 0x2}}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001cc0)={0x24, 0x0, 0x5, 0x1, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 9.527540673s ago: executing program 4 (id=775): socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, r2, 0xe0e0e0e0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001540)=@get={0x1, &(0x7f0000001480)=""/191, 0x368b8bd2}) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 6.583108893s ago: executing program 2 (id=776): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x1a11c1, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}], 0x1, 0x8004) 5.312044035s ago: executing program 4 (id=777): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) 5.187516553s ago: executing program 2 (id=778): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, @fallback=0x2a}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000b2b75b2f001000010a0000000000000000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006d616373656300001800028005000300100000000c0004000200000100c28000"], 0x48}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) timer_create(0x2, 0x0, &(0x7f0000000280)=0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x9, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_delete(r3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f018581c0bc0065666765f36f0f33f0100a660f3a0cb9000000752066b9800000c00f3a32c632c6004000a50f01d70f0901", 0x32}], 0x1, 0x54, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000380)={[0x8000000000000000, 0x900000001, 0x800000000, 0x45b, 0x0, 0x0, 0x7, 0x5, 0x0, 0xfc, 0xfffffffdfffffffc, 0xfdfffffffffffffc, 0x0, 0x9, 0x4000000000000004, 0x767], 0xeeef0000, 0x80082}) ioctl$KVM_RUN(r5, 0xae80, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) flock(0xffffffffffffffff, 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r6, @ANYBLOB="06001500030000000c001680080001"], 0x38}}, 0x10) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3, &(0x7f0000000080)=0xb, 0x8, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) 5.035370261s ago: executing program 4 (id=779): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000001900)=0xc, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000800)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x0, 0x0, 0x0, 0x0, {[@generic={0x0, 0x2}]}}}}}}}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r4) socket$inet6(0xa, 0x800000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002140)={'wg2\x00'}) 3.889344751s ago: executing program 4 (id=780): socket(0x10, 0x803, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000300)={&(0x7f0000000040)='}i', 0x2, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000340)={0x8, 0x0, r2, 0xe0e0e0e0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000001540)=@get={0x1, &(0x7f0000001480)=""/191, 0x368b8bd2}) socket$inet_tcp(0x2, 0x1, 0x0) mknod$loop(0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f00000001c0)="ee64", 0x2}], 0x2) 1.58364964s ago: executing program 2 (id=781): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) 1.484127048s ago: executing program 2 (id=782): r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040), 0x28143, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_rr_get_interval(0x0, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000ba300000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffd000/0x2000)=nil) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000300)) close_range(r4, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=783): syz_open_dev$vim2m(&(0x7f0000000080), 0xba, 0x2) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 1] team0 (unregistering): Port device team_slave_0 removed [ 531.875329][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.222555][ C0] vkms_vblank_simulate: vblank timer overrun [ 532.742490][ C0] vkms_vblank_simulate: vblank timer overrun [ 533.982235][ T7999] PKCS7: Unknown OID: [5] (bad) [ 533.982255][ T7999] PKCS7: Only support pkcs7_signedData type [ 536.781623][ T981] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 537.922029][ T981] usb 3-1: device descriptor read/64, error -71 [ 537.938328][ T7893] chnl_net:caif_netlink_parms(): no params data found [ 539.041091][ T7897] chnl_net:caif_netlink_parms(): no params data found [ 539.249888][ T981] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 539.407550][ T981] usb 3-1: device descriptor read/64, error -71 [ 539.527901][ T981] usb usb3-port1: attempt power cycle [ 539.891658][ T981] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 539.939227][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.939408][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.939855][ T7864] bridge_slave_0: entered allmulticast mode [ 539.948621][ T7864] bridge_slave_0: entered promiscuous mode [ 540.378004][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.378150][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.378502][ T7864] bridge_slave_1: entered allmulticast mode [ 540.389034][ T7864] bridge_slave_1: entered promiscuous mode [ 541.926146][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.293878][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.298810][ T7893] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.302210][ T7893] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.302497][ T7893] bridge_slave_0: entered allmulticast mode [ 542.305617][ T7893] bridge_slave_0: entered promiscuous mode [ 543.030417][ T7893] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.041996][ T7893] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.044470][ T7893] bridge_slave_1: entered allmulticast mode [ 543.076514][ T7893] bridge_slave_1: entered promiscuous mode [ 543.093962][ T7897] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.094114][ T7897] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.094390][ T7897] bridge_slave_0: entered allmulticast mode [ 543.098597][ T7897] bridge_slave_0: entered promiscuous mode [ 543.628834][ T7897] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.628985][ T7897] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.629257][ T7897] bridge_slave_1: entered allmulticast mode [ 543.679868][ T7897] bridge_slave_1: entered promiscuous mode [ 543.710965][ T7864] team0: Port device team_slave_0 added [ 544.288742][ T7864] team0: Port device team_slave_1 added [ 544.726609][ T7893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.955281][ T981] usb 3-1: device descriptor read/8, error -110 [ 547.562405][ T7893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.639993][ T7897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 549.715940][ T8083] PKCS7: Unknown OID: [5] (bad) [ 549.715954][ T8083] PKCS7: Only support pkcs7_signedData type [ 549.775179][ T7897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.776549][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.776560][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.776582][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.506300][ T2221] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.610990][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.611010][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.611042][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 550.939636][ T7893] team0: Port device team_slave_0 added [ 551.286078][ T7893] team0: Port device team_slave_1 added [ 551.648082][ T2221] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.729643][ T7897] team0: Port device team_slave_0 added [ 551.860705][ T7897] team0: Port device team_slave_1 added [ 552.492655][ T2221] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.943034][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.943049][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.943071][ T7893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.402721][ T7893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.402837][ T7893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.402861][ T7893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.410090][ T7864] hsr_slave_0: entered promiscuous mode [ 553.411117][ T7864] hsr_slave_1: entered promiscuous mode [ 553.412202][ T7864] debugfs: 'hsr0' already exists in 'hsr' [ 553.412222][ T7864] Cannot create hsr debugfs directory [ 553.882840][ T2221] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.136591][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.136611][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.136643][ T7897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.119371][ T7897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.119391][ T7897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.119423][ T7897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.175404][ T8098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 555.176024][ T8098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 555.179166][ T8098] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 555.179299][ T8098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 555.272530][ T8098] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 555.351601][ T7451] Bluetooth: hci3: command 0x0405 tx timeout [ 555.387959][ T8098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 555.388111][ T8098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 555.425092][ T8108] fuse: Bad value for 'fd' [ 555.657985][ T8098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 555.774346][ T8098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 555.774440][ T8098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 555.959028][ T8098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 556.675940][ T7893] hsr_slave_0: entered promiscuous mode [ 556.678499][ T7893] hsr_slave_1: entered promiscuous mode [ 556.680705][ T7893] debugfs: 'hsr0' already exists in 'hsr' [ 556.700927][ T7893] Cannot create hsr debugfs directory [ 557.181369][ T7897] hsr_slave_0: entered promiscuous mode [ 557.191704][ T7451] Bluetooth: hci4: command 0x0c1a tx timeout [ 557.191749][ T7451] Bluetooth: hci2: command 0x0c1a tx timeout [ 557.191817][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 557.226057][ T7897] hsr_slave_1: entered promiscuous mode [ 557.244950][ T7897] debugfs: 'hsr0' already exists in 'hsr' [ 557.244987][ T7897] Cannot create hsr debugfs directory [ 557.431709][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 557.502425][ T8113] cgroup: fork rejected by pids controller in /syz4 [ 557.841615][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 559.271931][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 559.522125][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 559.911624][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 561.361941][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 561.593470][ T5839] Bluetooth: hci1: command 0x0c1a tx timeout [ 561.999216][ T8331] block nbd2: shutting down sockets [ 562.002120][ T5839] Bluetooth: hci3: command 0x0405 tx timeout [ 563.994739][ T8337] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 563.994973][ T8337] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 563.995369][ T8337] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 564.687759][ C0] vkms_vblank_simulate: vblank timer overrun [ 564.936959][ T8340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 565.932358][ C0] vkms_vblank_simulate: vblank timer overrun [ 567.030985][ T2221] bridge_slave_1: left allmulticast mode [ 567.031021][ T2221] bridge_slave_1: left promiscuous mode [ 567.031330][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.260018][ T8361] PKCS7: Unknown OID: [5] (bad) [ 567.260031][ T8361] PKCS7: Only support pkcs7_signedData type [ 567.332501][ T2221] bridge_slave_0: left allmulticast mode [ 567.332538][ T2221] bridge_slave_0: left promiscuous mode [ 567.332840][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.425859][ T2221] bridge_slave_1: left allmulticast mode [ 567.425898][ T2221] bridge_slave_1: left promiscuous mode [ 567.426161][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.535457][ T2221] bridge_slave_0: left allmulticast mode [ 567.535483][ T2221] bridge_slave_0: left promiscuous mode [ 567.535675][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.400227][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.400285][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.390494][ T8379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.369'. [ 572.533861][ T8382] PKCS7: Unknown OID: [5] (bad) [ 572.533912][ T8382] PKCS7: Only support pkcs7_signedData type [ 573.079877][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 573.102430][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 573.105088][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 573.106381][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 573.107473][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 573.234695][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.486806][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.531042][ T2221] bond0 (unregistering): Released all slaves [ 575.209159][ C0] vkms_vblank_simulate: vblank timer overrun [ 575.227418][ T59] Bluetooth: hci5: command tx timeout [ 575.268052][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 575.295200][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 575.296532][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 575.297918][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 575.298933][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 575.799490][ T59] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 575.820285][ T59] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 575.822321][ T59] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 575.826062][ T59] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 575.835526][ T59] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 576.672552][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.752570][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.779208][ T2221] bond0 (unregistering): Released all slaves [ 577.271895][ T5839] Bluetooth: hci5: command tx timeout [ 577.451693][ T5839] Bluetooth: hci6: command tx timeout [ 577.526479][ T8411] PKCS7: Unknown OID: [5] (bad) [ 577.526498][ T8411] PKCS7: Only support pkcs7_signedData type [ 577.962496][ T5839] Bluetooth: hci7: command tx timeout [ 579.351695][ T5839] Bluetooth: hci5: command tx timeout [ 579.511850][ T5839] Bluetooth: hci6: command tx timeout [ 580.001949][ T5839] Bluetooth: hci7: command tx timeout [ 580.645860][ T2221] hsr_slave_0: left promiscuous mode [ 580.683926][ T2221] hsr_slave_1: left promiscuous mode [ 580.684928][ T2221] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 580.684952][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 580.742596][ T2221] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 580.742621][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 581.212208][ T2221] hsr_slave_0: left promiscuous mode [ 582.205429][ T2221] hsr_slave_1: left promiscuous mode [ 582.211881][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.539700][ T5839] Bluetooth: hci5: command tx timeout [ 582.539837][ T5839] Bluetooth: hci6: command tx timeout [ 582.539865][ T5839] Bluetooth: hci7: command tx timeout [ 582.705321][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 583.087926][ T2221] veth1_macvtap: left promiscuous mode [ 583.088059][ T2221] veth0_macvtap: left promiscuous mode [ 583.090684][ T2221] veth1_vlan: left promiscuous mode [ 583.090912][ T2221] veth0_vlan: left promiscuous mode [ 584.552074][ T59] Bluetooth: hci7: command tx timeout [ 584.552283][ T59] Bluetooth: hci6: command tx timeout [ 588.190388][ T8448] netlink: 'syz.4.379': attribute type 1 has an invalid length. [ 588.536158][ T8454] PKCS7: Unknown OID: [5] (bad) [ 588.536207][ T8454] PKCS7: Only support pkcs7_signedData type [ 591.493547][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 592.098277][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 602.652481][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 603.152814][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 603.876557][ T8511] fuse: Bad value for 'fd' [ 605.386362][ T8489] tipc: Started in network mode [ 605.386391][ T8489] tipc: Node identity ac14140f, cluster identity 4711 [ 605.390713][ T8489] tipc: New replicast peer: 255.255.255.255 [ 605.392440][ T8489] tipc: Enabled bearer , priority 10 [ 606.312286][ T5908] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 606.394404][ T31] tipc: Node number set to 2886997007 [ 606.461880][ T5908] usb 5-1: Using ep0 maxpacket: 32 [ 606.469234][ T5908] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 606.469267][ T5908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.698287][ T5908] usb 5-1: config 0 descriptor?? [ 606.940468][ T5908] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 607.169627][ T5908] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 607.169690][ T5908] dib0700: firmware download failed at 7 with -22 [ 607.218166][ T5908] usb 5-1: USB disconnect, device number 12 [ 610.509654][ T8394] chnl_net:caif_netlink_parms(): no params data found [ 611.342048][ T8384] chnl_net:caif_netlink_parms(): no params data found [ 611.693325][ T8396] chnl_net:caif_netlink_parms(): no params data found [ 618.807182][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.807450][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.807723][ T8394] bridge_slave_0: entered allmulticast mode [ 618.898042][ T8394] bridge_slave_0: entered promiscuous mode [ 618.997849][ T8608] netlink: 16 bytes leftover after parsing attributes in process `syz.4.408'. [ 619.108835][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.108965][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.109173][ T8394] bridge_slave_1: entered allmulticast mode [ 619.134937][ T8394] bridge_slave_1: entered promiscuous mode [ 620.139255][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.594347][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.231939][ T8384] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.232097][ T8384] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.232608][ T8384] bridge_slave_0: entered allmulticast mode [ 621.241277][ T8384] bridge_slave_0: entered promiscuous mode [ 622.250444][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.250541][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.250833][ T8396] bridge_slave_0: entered allmulticast mode [ 622.261249][ T8396] bridge_slave_0: entered promiscuous mode [ 622.409792][ T8384] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.410035][ T8384] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.410271][ T8384] bridge_slave_1: entered allmulticast mode [ 622.444536][ T8384] bridge_slave_1: entered promiscuous mode [ 622.514913][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.515062][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.515337][ T8396] bridge_slave_1: entered allmulticast mode [ 622.568070][ T8396] bridge_slave_1: entered promiscuous mode [ 623.652813][ T8394] team0: Port device team_slave_0 added [ 623.729246][ T8640] netlink: 4 bytes leftover after parsing attributes in process `syz.4.411'. [ 624.124097][ T8394] team0: Port device team_slave_1 added [ 624.154343][ T8384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.190473][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.469250][ T8384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 624.488915][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.830480][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.830495][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.830518][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.224143][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.224157][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.224180][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.226523][ T8384] team0: Port device team_slave_0 added [ 626.296675][ T8396] team0: Port device team_slave_0 added [ 626.376777][ T8384] team0: Port device team_slave_1 added [ 626.441025][ T8396] team0: Port device team_slave_1 added [ 627.686912][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.686932][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.686963][ T8384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.693198][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.693218][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.693254][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.063182][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.063201][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.063234][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.456951][ T8384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.456966][ T8384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.457000][ T8384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.547322][ T8394] hsr_slave_0: entered promiscuous mode [ 628.574206][ T8394] hsr_slave_1: entered promiscuous mode [ 629.842354][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.842412][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.357108][ T8384] hsr_slave_0: entered promiscuous mode [ 630.360159][ T8384] hsr_slave_1: entered promiscuous mode [ 630.364951][ T8384] debugfs: 'hsr0' already exists in 'hsr' [ 630.364984][ T8384] Cannot create hsr debugfs directory [ 630.439708][ T8396] hsr_slave_0: entered promiscuous mode [ 630.455046][ T8396] hsr_slave_1: entered promiscuous mode [ 630.456620][ T8396] debugfs: 'hsr0' already exists in 'hsr' [ 630.456647][ T8396] Cannot create hsr debugfs directory [ 631.985235][ T8712] PKCS7: Unknown OID: [5] (bad) [ 631.985255][ T8712] PKCS7: Only support pkcs7_signedData type [ 636.250480][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 636.267630][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 636.270004][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 636.280070][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 636.284040][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 636.869583][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 636.890574][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 636.906136][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 636.915217][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 636.918920][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.975502][ T2221] bridge_slave_1: left allmulticast mode [ 636.975539][ T2221] bridge_slave_1: left promiscuous mode [ 636.975945][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.250762][ T2221] bridge_slave_0: left allmulticast mode [ 637.250801][ T2221] bridge_slave_0: left promiscuous mode [ 637.251135][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.436592][ T2221] bridge_slave_1: left allmulticast mode [ 637.436619][ T2221] bridge_slave_1: left promiscuous mode [ 637.436892][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.878293][ T2221] bridge_slave_0: left allmulticast mode [ 637.878320][ T2221] bridge_slave_0: left promiscuous mode [ 637.878508][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.096624][ T2221] bridge_slave_1: left allmulticast mode [ 638.096652][ T2221] bridge_slave_1: left promiscuous mode [ 638.096880][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.265515][ T2221] bridge_slave_0: left allmulticast mode [ 638.265552][ T2221] bridge_slave_0: left promiscuous mode [ 638.265819][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.311574][ T59] Bluetooth: hci0: command tx timeout [ 638.481136][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 638.499048][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 638.500345][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 638.515877][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 638.564892][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 639.031636][ T59] Bluetooth: hci1: command tx timeout [ 639.512014][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 639.592382][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 639.680174][ T2221] bond0 (unregistering): Released all slaves [ 640.391706][ T59] Bluetooth: hci0: command tx timeout [ 640.680434][ T59] Bluetooth: hci3: command tx timeout [ 641.465738][ T59] Bluetooth: hci1: command tx timeout [ 641.565824][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 641.838034][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.208245][ T2221] bond0 (unregistering): Released all slaves [ 642.483710][ T59] Bluetooth: hci0: command tx timeout [ 642.711617][ T59] Bluetooth: hci3: command tx timeout [ 643.900548][ T59] Bluetooth: hci1: command tx timeout [ 644.472790][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.552595][ T59] Bluetooth: hci0: command tx timeout [ 644.598012][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.657117][ T2221] bond0 (unregistering): Released all slaves [ 644.741741][ T5916] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 644.791958][ T59] Bluetooth: hci3: command tx timeout [ 644.891571][ T5916] usb 3-1: Using ep0 maxpacket: 32 [ 644.896757][ T5916] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 644.896797][ T5916] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.929819][ T5916] usb 3-1: config 0 descriptor?? [ 645.209718][ T5916] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 645.214813][ T5916] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 645.214863][ T5916] dib0700: firmware download failed at 7 with -22 [ 645.248815][ T5916] usb 3-1: USB disconnect, device number 22 [ 645.914252][ T59] Bluetooth: hci1: command tx timeout [ 647.164768][ T59] Bluetooth: hci3: command tx timeout [ 648.092747][ T2221] hsr_slave_0: left promiscuous mode [ 648.241771][ T2221] hsr_slave_1: left promiscuous mode [ 648.242504][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.314262][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.679875][ T2221] hsr_slave_0: left promiscuous mode [ 648.712400][ T2221] hsr_slave_1: left promiscuous mode [ 648.713260][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 648.752950][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 648.981691][ T2221] hsr_slave_0: left promiscuous mode [ 649.011664][ T2221] hsr_slave_1: left promiscuous mode [ 649.032865][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.052523][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.145440][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 652.295853][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 654.922594][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 655.022537][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 656.706496][ T8844] PKCS7: Unknown OID: [5] (bad) [ 656.706706][ T8844] PKCS7: Only support pkcs7_signedData type [ 657.083126][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 657.192315][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 660.359290][ T8753] chnl_net:caif_netlink_parms(): no params data found [ 660.877350][ T8738] chnl_net:caif_netlink_parms(): no params data found [ 661.596528][ T8763] chnl_net:caif_netlink_parms(): no params data found [ 663.273042][ T8753] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.273147][ T8753] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.273351][ T8753] bridge_slave_0: entered allmulticast mode [ 663.280886][ T8753] bridge_slave_0: entered promiscuous mode [ 663.768803][ T8753] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.769039][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.769292][ T8753] bridge_slave_1: entered allmulticast mode [ 663.794561][ T8753] bridge_slave_1: entered promiscuous mode [ 665.313400][ T8738] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.313584][ T8738] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.314023][ T8738] bridge_slave_0: entered allmulticast mode [ 665.344282][ T8738] bridge_slave_0: entered promiscuous mode [ 666.078142][ T8738] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.078293][ T8738] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.078504][ T8738] bridge_slave_1: entered allmulticast mode [ 666.108988][ T8738] bridge_slave_1: entered promiscuous mode [ 666.138286][ T8753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 666.499086][ T8753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 666.522278][ T8763] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.526611][ T8763] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.532691][ T8763] bridge_slave_0: entered allmulticast mode [ 666.579168][ T8763] bridge_slave_0: entered promiscuous mode [ 666.913949][ T8763] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.914105][ T8763] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.914357][ T8763] bridge_slave_1: entered allmulticast mode [ 666.958164][ T8763] bridge_slave_1: entered promiscuous mode [ 667.038866][ T8738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.348672][ T8738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 667.368518][ T8753] team0: Port device team_slave_0 added [ 667.663085][ T8753] team0: Port device team_slave_1 added [ 667.706570][ T8763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.878125][ T8763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.880213][ T8738] team0: Port device team_slave_0 added [ 674.256554][ T8738] team0: Port device team_slave_1 added [ 674.271346][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.271359][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.271381][ T8753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.512917][ T8922] block nbd2: shutting down sockets [ 674.596092][ T8753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.596112][ T8753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.596142][ T8753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.659623][ T8763] team0: Port device team_slave_0 added [ 675.018645][ T8763] team0: Port device team_slave_1 added [ 675.213466][ C1] vkms_vblank_simulate: vblank timer overrun [ 675.227100][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.227119][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.227149][ T8738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.105773][ C1] vkms_vblank_simulate: vblank timer overrun [ 676.321656][ T8738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 676.321774][ T8738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.321815][ T8738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.531861][ T5908] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 676.628129][ T8932] block nbd4: shutting down sockets [ 676.681642][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 676.687201][ T5908] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 676.687233][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.706275][ T5908] usb 3-1: config 0 descriptor?? [ 676.834203][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.834224][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 676.834255][ T8763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 676.969265][ T5908] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 676.986127][ T5908] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 676.986181][ T5908] dib0700: firmware download failed at 7 with -22 [ 677.332549][ C1] vkms_vblank_simulate: vblank timer overrun [ 677.369159][ T5908] usb 3-1: USB disconnect, device number 23 [ 678.476510][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.525830][ C1] vkms_vblank_simulate: vblank timer overrun [ 678.714412][ T8763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.714431][ T8763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 678.714463][ T8763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.737827][ T8753] hsr_slave_0: entered promiscuous mode [ 678.739641][ T8753] hsr_slave_1: entered promiscuous mode [ 678.740711][ T8753] debugfs: 'hsr0' already exists in 'hsr' [ 678.740738][ T8753] Cannot create hsr debugfs directory [ 678.990176][ T2221] bridge_slave_1: left allmulticast mode [ 678.990214][ T2221] bridge_slave_1: left promiscuous mode [ 678.990507][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.073571][ T2221] bridge_slave_0: left allmulticast mode [ 679.073597][ T2221] bridge_slave_0: left promiscuous mode [ 679.074401][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.136647][ T2221] bridge_slave_1: left allmulticast mode [ 679.136676][ T2221] bridge_slave_1: left promiscuous mode [ 679.136918][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.202977][ T2221] bridge_slave_0: left allmulticast mode [ 679.203005][ T2221] bridge_slave_0: left promiscuous mode [ 679.203202][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.290676][ T2221] bridge_slave_1: left allmulticast mode [ 679.290728][ T2221] bridge_slave_1: left promiscuous mode [ 679.290964][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.318466][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 679.372914][ T2221] bridge_slave_0: left allmulticast mode [ 679.372952][ T2221] bridge_slave_0: left promiscuous mode [ 679.373183][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 679.491611][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 679.494423][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 679.529425][ T10] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 679.529459][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.529482][ T10] usb 3-1: Product: syz [ 679.529497][ T10] usb 3-1: Manufacturer: syz [ 679.529513][ T10] usb 3-1: SerialNumber: syz [ 679.574579][ T10] usb 3-1: config 0 descriptor?? [ 679.629771][ T10] usb 3-1: no audio or video endpoints found [ 680.168682][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.282545][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.355524][ T2221] bond0 (unregistering): Released all slaves [ 680.796467][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 680.872882][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 680.938455][ T2221] bond0 (unregistering): Released all slaves [ 681.047514][ C1] vkms_vblank_simulate: vblank timer overrun [ 681.233201][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 681.322599][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.397777][ T2221] bond0 (unregistering): Released all slaves [ 681.454927][ T8942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.450'. [ 681.801219][ T8738] hsr_slave_0: entered promiscuous mode [ 681.809451][ T8738] hsr_slave_1: entered promiscuous mode [ 681.834248][ T8738] debugfs: 'hsr0' already exists in 'hsr' [ 681.834277][ T8738] Cannot create hsr debugfs directory [ 682.088119][ T5908] usb 3-1: USB disconnect, device number 24 [ 682.289529][ T8763] hsr_slave_0: entered promiscuous mode [ 682.304890][ T8763] hsr_slave_1: entered promiscuous mode [ 682.307323][ T8763] debugfs: 'hsr0' already exists in 'hsr' [ 682.307352][ T8763] Cannot create hsr debugfs directory [ 682.757857][ T8956] PKCS7: Unknown OID: [5] (bad) [ 682.757883][ T8956] PKCS7: Only support pkcs7_signedData type [ 686.242811][ T2221] hsr_slave_0: left promiscuous mode [ 686.261841][ T2221] hsr_slave_1: left promiscuous mode [ 686.262561][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.304050][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.472780][ T2221] hsr_slave_0: left promiscuous mode [ 686.524235][ T2221] hsr_slave_1: left promiscuous mode [ 686.525383][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.568458][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 686.663158][ T2221] hsr_slave_0: left promiscuous mode [ 686.702669][ T2221] hsr_slave_1: left promiscuous mode [ 686.703428][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 686.743869][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 690.485645][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 690.858479][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 690.961628][ T5908] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 691.111615][ T5908] usb 3-1: Using ep0 maxpacket: 32 [ 691.114272][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 691.117106][ T5908] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 691.117127][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.117141][ T5908] usb 3-1: Product: syz [ 691.117151][ T5908] usb 3-1: Manufacturer: syz [ 691.117162][ T5908] usb 3-1: SerialNumber: syz [ 691.125383][ T5908] usb 3-1: config 0 descriptor?? [ 691.188912][ T5908] usb 3-1: no audio or video endpoints found [ 691.279493][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.279564][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.791721][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 693.926957][ T9] usb 3-1: USB disconnect, device number 25 [ 694.162730][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 694.304110][ T9001] PKCS7: Unknown OID: [5] (bad) [ 694.304129][ T9001] PKCS7: Only support pkcs7_signedData type [ 696.574764][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 696.822161][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 696.958255][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 696.988497][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 696.990921][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 697.012220][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 697.014835][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 697.484318][ T9008] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 697.854351][ T9012] PKCS7: Unknown OID: [5] (bad) [ 697.854404][ T9012] PKCS7: Only support pkcs7_signedData type [ 699.113935][ T59] Bluetooth: hci5: command tx timeout [ 699.404252][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.422796][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.493660][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.583246][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.584846][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 701.194307][ T5839] Bluetooth: hci5: command tx timeout [ 701.203545][ T7451] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 701.221971][ T7451] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 701.225210][ T7451] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 701.229118][ T7451] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 701.233163][ T7451] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 701.766077][ T59] Bluetooth: hci6: command tx timeout [ 703.279812][ T59] Bluetooth: hci5: command tx timeout [ 703.351636][ T59] Bluetooth: hci7: command tx timeout [ 703.841587][ T59] Bluetooth: hci6: command tx timeout [ 704.082074][ T44] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 704.235786][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 704.237957][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 704.259049][ T44] usb 3-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 704.259073][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 704.259088][ T44] usb 3-1: Product: syz [ 704.259099][ T44] usb 3-1: Manufacturer: syz [ 704.259109][ T44] usb 3-1: SerialNumber: syz [ 704.434855][ T44] usb 3-1: config 0 descriptor?? [ 704.494930][ T44] usb 3-1: no audio or video endpoints found [ 705.053014][ T9019] chnl_net:caif_netlink_parms(): no params data found [ 705.352362][ T59] Bluetooth: hci5: command tx timeout [ 705.431535][ T59] Bluetooth: hci7: command tx timeout [ 705.664146][ T9003] chnl_net:caif_netlink_parms(): no params data found [ 705.911613][ T59] Bluetooth: hci6: command tx timeout [ 706.170018][ T9019] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.170186][ T9019] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.170409][ T9019] bridge_slave_0: entered allmulticast mode [ 706.196134][ T9019] bridge_slave_0: entered promiscuous mode [ 706.251309][ T9019] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.252800][ T9019] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.253250][ T9019] bridge_slave_1: entered allmulticast mode [ 706.262481][ T9019] bridge_slave_1: entered promiscuous mode [ 706.438550][ T9026] chnl_net:caif_netlink_parms(): no params data found [ 706.753574][ T9061] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 706.855948][ T5908] usb 3-1: USB disconnect, device number 26 [ 706.888390][ T9019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.114937][ T9019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.283308][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.283467][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.283817][ T9003] bridge_slave_0: entered allmulticast mode [ 707.287085][ T9003] bridge_slave_0: entered promiscuous mode [ 707.513313][ T59] Bluetooth: hci7: command tx timeout [ 707.544811][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.544953][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.545118][ T9003] bridge_slave_1: entered allmulticast mode [ 707.550840][ T9003] bridge_slave_1: entered promiscuous mode [ 707.571826][ T981] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 707.721910][ T981] usb 3-1: Using ep0 maxpacket: 32 [ 707.724030][ T981] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 707.724051][ T981] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.748851][ T981] usb 3-1: config 0 descriptor?? [ 707.968251][ T981] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 707.987870][ T981] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 707.987923][ T981] dib0700: firmware download failed at 7 with -22 [ 707.992476][ T59] Bluetooth: hci6: command tx timeout [ 708.004605][ T981] usb 3-1: USB disconnect, device number 27 [ 708.033593][ T9019] team0: Port device team_slave_0 added [ 708.291812][ T9019] team0: Port device team_slave_1 added [ 708.409454][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.744977][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.208111][ T9026] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.208301][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.209042][ T9026] bridge_slave_0: entered allmulticast mode [ 709.224119][ T9026] bridge_slave_0: entered promiscuous mode [ 709.591709][ T59] Bluetooth: hci7: command tx timeout [ 710.477901][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.477922][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.477953][ T9019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.692225][ T9026] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.692369][ T9026] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.692640][ T9026] bridge_slave_1: entered allmulticast mode [ 710.696046][ T9026] bridge_slave_1: entered promiscuous mode [ 710.812754][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 710.896208][ T9019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.896222][ T9019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 710.896244][ T9019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.081723][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 711.084312][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 711.084343][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.135033][ T9] usb 5-1: config 0 descriptor?? [ 711.185005][ T2221] bridge_slave_1: left allmulticast mode [ 711.185032][ T2221] bridge_slave_1: left promiscuous mode [ 711.185349][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.264322][ T2221] bridge_slave_0: left allmulticast mode [ 711.264360][ T2221] bridge_slave_0: left promiscuous mode [ 711.264855][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.339101][ T2221] bridge_slave_1: left allmulticast mode [ 711.339139][ T2221] bridge_slave_1: left promiscuous mode [ 711.339598][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.368830][ T9] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 711.383363][ T9] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 711.383418][ T9] dib0700: firmware download failed at 7 with -22 [ 711.417076][ T2221] bridge_slave_0: left allmulticast mode [ 711.417113][ T2221] bridge_slave_0: left promiscuous mode [ 711.417388][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.588731][ T2221] bridge_slave_1: left allmulticast mode [ 711.591787][ T2221] bridge_slave_1: left promiscuous mode [ 711.592074][ T2221] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.774136][ T5923] usb 5-1: USB disconnect, device number 13 [ 711.808804][ T2221] bridge_slave_0: left allmulticast mode [ 711.808830][ T2221] bridge_slave_0: left promiscuous mode [ 711.809022][ T2221] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.345885][ T9093] PKCS7: Unknown OID: [5] (bad) [ 713.345904][ T9093] PKCS7: Only support pkcs7_signedData type [ 713.402297][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.512603][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.565472][ T2221] bond0 (unregistering): Released all slaves [ 714.270184][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.301617][ T5923] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 714.383815][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.452686][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 714.454478][ T2221] bond0 (unregistering): Released all slaves [ 714.458122][ T5923] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 714.492676][ T5923] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 714.492711][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.492734][ T5923] usb 5-1: Product: syz [ 714.492751][ T5923] usb 5-1: Manufacturer: syz [ 714.492768][ T5923] usb 5-1: SerialNumber: syz [ 714.589218][ T5923] usb 5-1: config 0 descriptor?? [ 714.651253][ T5923] usb 5-1: no audio or video endpoints found [ 716.938676][ T2221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.956963][ T981] usb 5-1: USB disconnect, device number 14 [ 718.249875][ T2221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 718.625380][ T2221] bond0 (unregistering): Released all slaves [ 718.720322][ T9003] team0: Port device team_slave_0 added [ 719.190723][ T9003] team0: Port device team_slave_1 added [ 720.374822][ T9026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.864144][ T9026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 722.659656][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 722.659682][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.659720][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 722.772916][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 722.772931][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 722.772953][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.148436][ T9019] hsr_slave_0: entered promiscuous mode [ 723.159129][ T9019] hsr_slave_1: entered promiscuous mode [ 723.180519][ T9026] team0: Port device team_slave_0 added [ 723.269776][ T9026] team0: Port device team_slave_1 added [ 723.661861][ T2221] hsr_slave_0: left promiscuous mode [ 723.911126][ C0] vkms_vblank_simulate: vblank timer overrun [ 723.950730][ T2221] hsr_slave_1: left promiscuous mode [ 723.952777][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 723.982494][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 724.055999][ T9132] netlink: 36 bytes leftover after parsing attributes in process `syz.4.490'. [ 724.736255][ C0] vkms_vblank_simulate: vblank timer overrun [ 724.942561][ T2221] hsr_slave_0: left promiscuous mode [ 724.991521][ T2221] hsr_slave_1: left promiscuous mode [ 724.992503][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 725.046419][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 725.279125][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.501122][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.563061][ C0] vkms_vblank_simulate: vblank timer overrun [ 725.966784][ C0] vkms_vblank_simulate: vblank timer overrun [ 726.254841][ T2221] hsr_slave_0: left promiscuous mode [ 726.347217][ T2221] hsr_slave_1: left promiscuous mode [ 726.348280][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 726.392716][ T2221] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 731.125911][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 731.366005][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 732.031684][ T5923] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 732.171650][ T5923] usb 3-1: device descriptor read/64, error -71 [ 732.421552][ T5923] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 732.601890][ T5923] usb 3-1: device descriptor read/64, error -71 [ 732.732566][ T5923] usb usb3-port1: attempt power cycle [ 733.081551][ T5923] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 733.102724][ T5923] usb 3-1: device descriptor read/8, error -71 [ 733.312426][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 733.401340][ T5923] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 733.428070][ T5923] usb 3-1: device descriptor read/8, error -71 [ 733.541994][ T5923] usb usb3-port1: unable to enumerate USB device [ 733.543569][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 735.475810][ T2221] team0 (unregistering): Port device team_slave_1 removed [ 735.654616][ T2221] team0 (unregistering): Port device team_slave_0 removed [ 736.892935][ T9174] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 736.985855][ T9153] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 737.187031][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.187051][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 737.187083][ T9026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 738.700926][ T9026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 738.700945][ T9026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 738.700977][ T9026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.769740][ T9003] hsr_slave_0: entered promiscuous mode [ 738.777617][ T9003] hsr_slave_1: entered promiscuous mode [ 738.778620][ T9003] debugfs: 'hsr0' already exists in 'hsr' [ 738.778647][ T9003] Cannot create hsr debugfs directory [ 740.481691][ T5923] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 741.621593][ T5923] usb 5-1: Using ep0 maxpacket: 32 [ 741.626274][ T5923] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 741.626307][ T5923] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.706404][ T5923] usb 5-1: config 0 descriptor?? [ 741.953715][ T5923] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware [ 741.972068][ T5923] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 741.972121][ T5923] dib0700: firmware download failed at 7 with -22 [ 742.015207][ T9026] hsr_slave_0: entered promiscuous mode [ 742.016853][ T9026] hsr_slave_1: entered promiscuous mode [ 742.017923][ T9026] debugfs: 'hsr0' already exists in 'hsr' [ 742.017951][ T9026] Cannot create hsr debugfs directory [ 742.183635][ T981] usb 5-1: USB disconnect, device number 15 [ 745.904619][ T9207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.511'. [ 746.288200][ T9227] PKCS7: Unknown OID: [5] (bad) [ 746.288234][ T9227] PKCS7: Only support pkcs7_signedData type [ 747.802240][ T9019] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 747.867744][ T9019] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 748.301511][ T9019] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 748.395009][ T9019] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.656654][ T9019] 8021q: adding VLAN 0 to HW filter on device bond0 [ 751.798288][ T9019] 8021q: adding VLAN 0 to HW filter on device team0 [ 751.808168][ T9026] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 752.008532][ T9026] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 752.169071][ T9026] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 753.165445][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 753.165533][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.596140][ T9026] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 754.720210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.720476][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 756.085855][ T6055] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.086049][ T6055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.085028][ T9026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.267025][ T9026] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.315880][ T6055] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.316123][ T6055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.369786][ T7985] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.369949][ T7985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.383350][ T7451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.402636][ T7451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.404026][ T7451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.405584][ T7451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.408239][ T7451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 762.649977][ T59] Bluetooth: hci0: command tx timeout [ 763.929120][ T7451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 763.949979][ T7451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 763.953820][ T7451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 763.975321][ T7451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 763.977238][ T7451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 764.363206][ T9310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.525'. [ 764.619083][ T7451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 764.647174][ T7451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 764.659236][ T7451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 764.684540][ T7451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 764.687032][ T7451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.712054][ T59] Bluetooth: hci0: command tx timeout [ 765.565752][ T9320] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 765.643328][ T9320] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 765.644794][ T9320] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 765.644946][ T9320] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 765.770971][ T9320] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 765.919330][ T9320] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 765.919491][ T9320] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 766.050263][ T9320] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 766.111181][ T9320] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 766.111247][ T9320] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 766.187535][ T9320] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 767.333210][ T7985] bridge_slave_1: left allmulticast mode [ 767.333248][ T7985] bridge_slave_1: left promiscuous mode [ 767.333514][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.601576][ T7451] Bluetooth: hci2: command 0x0c1a tx timeout [ 767.601735][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 767.718454][ T59] Bluetooth: hci0: command 0x0419 tx timeout [ 767.995394][ T59] Bluetooth: hci1: command 0x041b tx timeout [ 768.160032][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 768.491099][ T7985] bridge_slave_0: left allmulticast mode [ 768.491138][ T7985] bridge_slave_0: left promiscuous mode [ 768.491571][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.724803][ T9336] mmap: syz.2.528 (9336) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 769.365440][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.663217][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.709847][ T7985] bond0 (unregistering): Released all slaves [ 769.751834][ T59] Bluetooth: hci0: command 0x0419 tx timeout [ 769.801507][ T5923] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 769.971700][ T5923] usb 5-1: device descriptor read/64, error -71 [ 770.071590][ T59] Bluetooth: hci1: command 0x041b tx timeout [ 770.211565][ T5923] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 770.234095][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 770.341547][ T5923] usb 5-1: device descriptor read/64, error -71 [ 770.481664][ T5923] usb usb5-port1: attempt power cycle [ 770.851506][ T5923] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 770.886705][ T5923] usb 5-1: device descriptor read/8, error -71 [ 770.943831][ T7985] hsr_slave_0: left promiscuous mode [ 770.982294][ T7985] hsr_slave_1: left promiscuous mode [ 770.983055][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 771.032865][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 771.151581][ T5923] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 771.218702][ T5923] usb 5-1: device descriptor read/8, error -71 [ 771.321811][ T5923] usb usb5-port1: unable to enumerate USB device [ 771.831703][ T59] Bluetooth: hci0: command 0x0419 tx timeout [ 772.154577][ T59] Bluetooth: hci1: command 0x041b tx timeout [ 772.311466][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 773.482429][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 773.895220][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 773.911551][ T59] Bluetooth: hci0: command 0x0419 tx timeout [ 774.232023][ T59] Bluetooth: hci1: command 0x041b tx timeout [ 774.401610][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 776.363413][ T59] Bluetooth: hci1: command 0x041b tx timeout [ 776.471643][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 777.887139][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 778.410209][ T59] Bluetooth: hci1: command 0x041b tx timeout [ 778.611003][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 780.596439][ T9309] chnl_net:caif_netlink_parms(): no params data found [ 780.615504][ T9322] chnl_net:caif_netlink_parms(): no params data found [ 780.631528][ T59] Bluetooth: hci3: command 0x041b tx timeout [ 783.795931][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.796192][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.796463][ T9279] bridge_slave_0: entered allmulticast mode [ 783.800974][ T9279] bridge_slave_0: entered promiscuous mode [ 783.926401][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.926503][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.926770][ T9279] bridge_slave_1: entered allmulticast mode [ 783.928918][ T9279] bridge_slave_1: entered promiscuous mode [ 786.944440][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.274820][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.277827][ T9309] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.277996][ T9309] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.278153][ T9309] bridge_slave_0: entered allmulticast mode [ 787.291964][ T9309] bridge_slave_0: entered promiscuous mode [ 787.320227][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.320378][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.320582][ T9322] bridge_slave_0: entered allmulticast mode [ 787.327173][ T9322] bridge_slave_0: entered promiscuous mode [ 787.496912][ T9309] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.497028][ T9309] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.497208][ T9309] bridge_slave_1: entered allmulticast mode [ 787.528844][ T9309] bridge_slave_1: entered promiscuous mode [ 787.541270][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.565907][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.566197][ T9322] bridge_slave_1: entered allmulticast mode [ 787.594279][ T9322] bridge_slave_1: entered promiscuous mode [ 789.648175][ T9279] team0: Port device team_slave_0 added [ 791.074566][ T9279] team0: Port device team_slave_1 added [ 791.104899][ T9309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.107051][ T9440] tipc: Enabling of bearer rejected, already enabled [ 791.145854][ T9322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.297566][ T9309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 792.318152][ T9322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.644379][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.644394][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 795.644414][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.003359][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.003373][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.003395][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.133282][ T9309] team0: Port device team_slave_0 added [ 796.147506][ T9322] team0: Port device team_slave_0 added [ 796.764348][ T9309] team0: Port device team_slave_1 added [ 796.768049][ T9322] team0: Port device team_slave_1 added [ 799.147205][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.147225][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 799.147255][ T9322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.380781][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.380801][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.380841][ T9309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.771067][ T9322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.771087][ T9322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.771119][ T9322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.795991][ T9468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.555'. [ 800.977865][ T9309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.977887][ T9309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 800.977924][ T9309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 801.039066][ T9279] hsr_slave_0: entered promiscuous mode [ 801.072151][ T9279] hsr_slave_1: entered promiscuous mode [ 801.087814][ T9279] debugfs: 'hsr0' already exists in 'hsr' [ 801.087846][ T9279] Cannot create hsr debugfs directory [ 803.106090][ T9309] hsr_slave_0: entered promiscuous mode [ 803.112599][ T9309] hsr_slave_1: entered promiscuous mode [ 803.113616][ T9309] debugfs: 'hsr0' already exists in 'hsr' [ 803.113653][ T9309] Cannot create hsr debugfs directory [ 803.146390][ T9322] hsr_slave_0: entered promiscuous mode [ 803.147839][ T9322] hsr_slave_1: entered promiscuous mode [ 803.148914][ T9322] debugfs: 'hsr0' already exists in 'hsr' [ 803.148940][ T9322] Cannot create hsr debugfs directory [ 810.910029][ T9556] tipc: Started in network mode [ 810.910066][ T9556] tipc: Node identity 7f000001, cluster identity 4711 [ 810.928123][ T9556] tipc: Enabled bearer , priority 10 [ 811.789537][ T9574] block nbd4: shutting down sockets [ 812.041556][ T981] tipc: Node number set to 2130706433 [ 813.349903][ T9588] tipc: Enabling of bearer rejected, already enabled [ 814.060285][ C0] vkms_vblank_simulate: vblank timer overrun [ 814.313278][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.316207][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.470084][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.810020][ C0] vkms_vblank_simulate: vblank timer overrun [ 815.989489][ T9608] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 815.990782][ T9608] tipc: Enabled bearer , priority 10 [ 816.811437][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.429381][ C0] vkms_vblank_simulate: vblank timer overrun [ 817.953956][ T9624] netlink: 16 bytes leftover after parsing attributes in process `syz.4.574'. [ 820.070514][ T7985] bridge_slave_1: left allmulticast mode [ 820.070570][ T7985] bridge_slave_1: left promiscuous mode [ 820.070887][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.268331][ T7985] bridge_slave_0: left allmulticast mode [ 820.268365][ T7985] bridge_slave_0: left promiscuous mode [ 820.268602][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.537879][ T7985] bridge_slave_1: left allmulticast mode [ 820.537916][ T7985] bridge_slave_1: left promiscuous mode [ 820.538181][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.779569][ T7451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 820.806010][ T7451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 820.825990][ T7451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 820.841021][ T7451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 820.854722][ T7985] bridge_slave_0: left allmulticast mode [ 820.854760][ T7985] bridge_slave_0: left promiscuous mode [ 820.854883][ T7451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 820.918321][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.397557][ T7451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 822.437912][ T7451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 822.447785][ T7451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 822.449353][ T7451] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 822.450447][ T7451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 822.951670][ T59] Bluetooth: hci0: command tx timeout [ 824.471542][ T7451] Bluetooth: hci5: command tx timeout [ 825.032252][ T7451] Bluetooth: hci0: command tx timeout [ 825.528513][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 825.635255][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 825.670046][ T7985] bond0 (unregistering): Released all slaves [ 826.552748][ T9665] Bluetooth: hci5: command 0x041b tx timeout [ 827.111937][ T59] Bluetooth: hci0: command tx timeout [ 828.373519][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 828.443948][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 828.486748][ T7985] bond0 (unregistering): Released all slaves [ 828.631467][ T59] Bluetooth: hci5: command 0x041b tx timeout [ 828.949110][ T9661] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 828.949368][ T9661] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 828.949570][ T9661] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 828.949896][ T9661] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 828.950113][ T9661] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 828.950210][ T9661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 829.032878][ T9661] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 829.105697][ T9661] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 829.105836][ T9661] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 829.151710][ T7985] hsr_slave_0: left promiscuous mode [ 829.174867][ T9661] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 829.191987][ T7985] hsr_slave_1: left promiscuous mode [ 829.193031][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.243917][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.401295][ T9665] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 829.406833][ T9665] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 829.410618][ T9665] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 829.413796][ T9665] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 829.414659][ T9665] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 829.523763][ T7985] hsr_slave_0: left promiscuous mode [ 829.565603][ T7985] hsr_slave_1: left promiscuous mode [ 829.566660][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.592811][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 830.957689][ T9665] Bluetooth: hci3: command 0x041b tx timeout [ 830.959522][ T9665] Bluetooth: hci1: command 0x041b tx timeout [ 830.960325][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 830.960366][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 830.960466][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 831.111462][ T7451] Bluetooth: hci5: command 0x041b tx timeout [ 831.512275][ T7451] Bluetooth: hci6: command tx timeout [ 832.009391][ T9688] netlink: 'syz.4.584': attribute type 1 has an invalid length. [ 833.032013][ T7451] Bluetooth: hci0: command 0x0c1a tx timeout [ 833.196936][ T7451] Bluetooth: hci5: command 0x041b tx timeout [ 833.594621][ T7451] Bluetooth: hci6: command tx timeout [ 834.394328][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 835.531620][ T7451] Bluetooth: hci0: command 0x0c1a tx timeout [ 835.531662][ T7451] Bluetooth: hci5: command 0x041b tx timeout [ 835.739414][ T59] Bluetooth: hci6: command tx timeout [ 836.802382][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 837.695876][ T59] Bluetooth: hci5: command 0x041b tx timeout [ 837.751485][ T59] Bluetooth: hci6: command tx timeout [ 838.161070][ T9716] netlink: 'syz.4.591': attribute type 1 has an invalid length. [ 843.900587][ C0] vkms_vblank_simulate: vblank timer overrun [ 844.080387][ C0] vkms_vblank_simulate: vblank timer overrun [ 844.414771][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 844.791074][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.196085][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.902400][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 849.888503][ T9750] netlink: 'syz.2.599': attribute type 1 has an invalid length. [ 851.371835][ T9757] PKCS7: Unknown OID: [5] (bad) [ 851.371897][ T9757] PKCS7: Only support pkcs7_signedData type [ 860.256034][ T9803] netlink: 'syz.2.611': attribute type 1 has an invalid length. [ 861.169013][ T9646] chnl_net:caif_netlink_parms(): no params data found [ 862.532859][ T7985] bridge_slave_1: left allmulticast mode [ 862.532897][ T7985] bridge_slave_1: left promiscuous mode [ 862.533162][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.603032][ T7985] bridge_slave_0: left allmulticast mode [ 862.603058][ T7985] bridge_slave_0: left promiscuous mode [ 862.603277][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.656856][ T7985] bridge_slave_1: left allmulticast mode [ 862.656891][ T7985] bridge_slave_1: left promiscuous mode [ 862.657147][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.742799][ T7985] bridge_slave_0: left allmulticast mode [ 862.742826][ T7985] bridge_slave_0: left promiscuous mode [ 862.743038][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.861082][ T9822] netlink: 52 bytes leftover after parsing attributes in process `syz.2.615'. [ 865.020938][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.122269][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.191734][ T7985] bond0 (unregistering): Released all slaves [ 865.735889][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 865.872337][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 865.973384][ T7985] bond0 (unregistering): Released all slaves [ 866.042415][ T9631] chnl_net:caif_netlink_parms(): no params data found [ 866.137256][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 866.204877][ T9823] netlink: 16 bytes leftover after parsing attributes in process `syz.4.614'. [ 867.485828][ T9646] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.485992][ T9646] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.486226][ T9646] bridge_slave_0: entered allmulticast mode [ 867.488439][ T9646] bridge_slave_0: entered promiscuous mode [ 867.574437][ T9646] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.576918][ T9646] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.577185][ T9646] bridge_slave_1: entered allmulticast mode [ 867.617897][ T9646] bridge_slave_1: entered promiscuous mode [ 867.771512][ T7985] hsr_slave_0: left promiscuous mode [ 868.009053][ T7985] hsr_slave_1: left promiscuous mode [ 868.009885][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.042231][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.131527][ T7985] hsr_slave_0: left promiscuous mode [ 869.174655][ T7985] hsr_slave_1: left promiscuous mode [ 869.179369][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 869.413960][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.712857][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 874.904154][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 875.615578][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.615662][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.402354][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 877.603393][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 880.376082][ T9881] tipc: Enabling of bearer rejected, already enabled [ 880.533050][ T9631] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.533197][ T9631] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.533406][ T9631] bridge_slave_0: entered allmulticast mode [ 880.539964][ T9631] bridge_slave_0: entered promiscuous mode [ 880.597437][ T9646] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.600823][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 880.600947][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.601143][ T9664] bridge_slave_0: entered allmulticast mode [ 880.659777][ T9664] bridge_slave_0: entered promiscuous mode [ 880.684531][ T9646] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.686832][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 880.686996][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.687138][ T9664] bridge_slave_1: entered allmulticast mode [ 880.699133][ T9664] bridge_slave_1: entered promiscuous mode [ 881.706487][ T9646] team0: Port device team_slave_0 added [ 881.733134][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.751994][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.077307][ T9664] team0: Port device team_slave_0 added [ 882.099903][ T9664] team0: Port device team_slave_1 added [ 882.108415][ T7451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 882.133961][ T7451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 882.149558][ T7451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 882.182850][ T7451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 882.185060][ T7451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 884.258693][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 884.285977][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 884.292224][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 884.307920][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 884.312005][ T59] Bluetooth: hci0: command tx timeout [ 884.323777][ T9665] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 884.397781][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 884.397797][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.397820][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 886.701542][ T7451] Bluetooth: hci0: command tx timeout [ 886.701623][ T7451] Bluetooth: hci1: command tx timeout [ 887.915416][ T7451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 887.934556][ T7451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 887.935766][ T7451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 887.937042][ T7451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 887.938284][ T7451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 888.531707][ T7985] bridge_slave_1: left allmulticast mode [ 888.531746][ T7985] bridge_slave_1: left promiscuous mode [ 888.532094][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.593384][ T7985] bridge_slave_0: left allmulticast mode [ 888.593420][ T7985] bridge_slave_0: left promiscuous mode [ 888.593812][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.666776][ T7985] bridge_slave_0: left allmulticast mode [ 888.666810][ T7985] bridge_slave_0: left promiscuous mode [ 888.667052][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.711853][ T7451] Bluetooth: hci1: command tx timeout [ 888.711887][ T7451] Bluetooth: hci0: command tx timeout [ 888.749262][ T7985] bridge_slave_1: left allmulticast mode [ 888.749301][ T7985] bridge_slave_1: left promiscuous mode [ 888.751569][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.827241][ T7985] bridge_slave_0: left allmulticast mode [ 888.827276][ T7985] bridge_slave_0: left promiscuous mode [ 888.827547][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.282519][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 889.406035][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 889.508917][ T7985] bond0 (unregistering): Released all slaves [ 889.690228][ T9923] netlink: 'syz.4.632': attribute type 1 has an invalid length. [ 889.952923][ T7985] bond0 (unregistering): Released all slaves [ 890.074852][ T9665] Bluetooth: hci3: command tx timeout [ 890.594002][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 890.791538][ T9665] Bluetooth: hci0: command tx timeout [ 890.791574][ T9665] Bluetooth: hci1: command tx timeout [ 890.827545][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 890.916015][ T7985] bond0 (unregistering): Released all slaves [ 892.151684][ T7451] Bluetooth: hci3: command tx timeout [ 892.745696][ T7985] hsr_slave_0: left promiscuous mode [ 892.806148][ T7985] hsr_slave_1: left promiscuous mode [ 892.807309][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.848748][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.871681][ T7451] Bluetooth: hci1: command tx timeout [ 894.254906][ T7451] Bluetooth: hci3: command tx timeout [ 894.658467][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 895.835473][ T9967] netlink: 52 bytes leftover after parsing attributes in process `syz.2.638'. [ 896.311475][ T7451] Bluetooth: hci3: command tx timeout [ 898.502303][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 898.716402][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 899.838930][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.4.637'. [ 899.893074][ T9891] chnl_net:caif_netlink_parms(): no params data found [ 899.941857][ T9902] chnl_net:caif_netlink_parms(): no params data found [ 903.501173][T10034] netlink: 'syz.2.640': attribute type 1 has an invalid length. [ 904.018742][ T9902] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.018906][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.019137][ T9902] bridge_slave_0: entered allmulticast mode [ 904.070757][ T9902] bridge_slave_0: entered promiscuous mode [ 904.222350][ T9891] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.222472][ T9891] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.222703][ T9891] bridge_slave_0: entered allmulticast mode [ 904.225100][ T9891] bridge_slave_0: entered promiscuous mode [ 904.228180][ T9902] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.228277][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.228428][ T9902] bridge_slave_1: entered allmulticast mode [ 904.232391][ T9902] bridge_slave_1: entered promiscuous mode [ 904.329755][ T9891] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.329860][ T9891] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.330000][ T9891] bridge_slave_1: entered allmulticast mode [ 904.373570][ T9891] bridge_slave_1: entered promiscuous mode [ 904.764501][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.284826][ C0] vkms_vblank_simulate: vblank timer overrun [ 905.495444][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.227686][ C0] vkms_vblank_simulate: vblank timer overrun [ 906.503596][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.398565][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.739721][ T9902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.814894][ T9891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.837673][ T9902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 907.865907][ T9891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.841556][ T9902] team0: Port device team_slave_0 added [ 909.154569][ T9891] team0: Port device team_slave_0 added [ 909.156438][ T9911] chnl_net:caif_netlink_parms(): no params data found [ 909.189741][ T9902] team0: Port device team_slave_1 added [ 909.198900][ T9891] team0: Port device team_slave_1 added [ 910.793168][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.793182][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.793203][ T9902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 910.794499][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 910.794511][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 910.794530][ T9891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.016982][ T9902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.016997][ T9902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.017018][ T9902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.018229][ T9891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.018241][ T9891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.018261][ T9891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.711461][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 912.841492][ T10] usb 5-1: device descriptor read/64, error -71 [ 913.091427][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 913.153450][ T9911] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.153549][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.153756][ T9911] bridge_slave_0: entered allmulticast mode [ 913.156022][ T9911] bridge_slave_0: entered promiscuous mode [ 913.217742][ T9902] hsr_slave_0: entered promiscuous mode [ 913.221104][ T9902] hsr_slave_1: entered promiscuous mode [ 913.221520][ T10] usb 5-1: device descriptor read/64, error -71 [ 913.403070][ T9891] hsr_slave_0: entered promiscuous mode [ 913.404037][ T9891] hsr_slave_1: entered promiscuous mode [ 913.404662][ T9891] debugfs: 'hsr0' already exists in 'hsr' [ 913.404679][ T9891] Cannot create hsr debugfs directory [ 913.460642][ T10] usb usb5-port1: attempt power cycle [ 913.489389][ T9911] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.489548][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.489817][ T9911] bridge_slave_1: entered allmulticast mode [ 913.531896][ T9911] bridge_slave_1: entered promiscuous mode [ 913.831575][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 913.852666][ T10] usb 5-1: device descriptor read/8, error -71 [ 914.091501][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 914.130524][ T10] usb 5-1: device descriptor read/8, error -71 [ 914.278816][ T10] usb usb5-port1: unable to enumerate USB device [ 914.412768][ T9911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.705528][ T9911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.159009][T10105] tipc: Enabling of bearer rejected, already enabled [ 924.366104][ T9911] team0: Port device team_slave_0 added [ 924.510355][T10109] tipc: Enabled bearer , priority 0 [ 924.511166][T10112] syzkaller0: entered promiscuous mode [ 924.511194][T10112] syzkaller0: entered allmulticast mode [ 924.539820][ T9911] team0: Port device team_slave_1 added [ 924.566344][ T7985] bridge_slave_1: left allmulticast mode [ 924.566380][ T7985] bridge_slave_1: left promiscuous mode [ 924.566677][ T7985] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.654914][ T7985] bridge_slave_0: left allmulticast mode [ 924.654951][ T7985] bridge_slave_0: left promiscuous mode [ 924.655246][ T7985] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.354231][ T7985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 925.432670][ T7985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 925.521714][ T7985] bond0 (unregistering): Released all slaves [ 925.760891][T10109] tipc: Resetting bearer [ 925.812445][T10108] tipc: Resetting bearer [ 925.958532][T10108] tipc: Disabling bearer [ 926.424481][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.424500][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.424531][ T9911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.453242][T10122] PKCS7: Unknown OID: [5] (bad) [ 926.453261][T10122] PKCS7: Only support pkcs7_signedData type [ 926.719138][ T9911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.719153][ T9911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.719174][ T9911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.719973][ T7985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 927.237009][ T7985] team0 (unregistering): Port device team_slave_1 removed [ 927.892345][ T7985] team0 (unregistering): Port device team_slave_0 removed [ 933.686663][ T9911] hsr_slave_0: entered promiscuous mode [ 933.688024][ T9911] hsr_slave_1: entered promiscuous mode [ 933.689024][ T9911] debugfs: 'hsr0' already exists in 'hsr' [ 933.689051][ T9911] Cannot create hsr debugfs directory [ 934.930299][ T9902] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 935.025975][ T9902] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 935.270782][ T9902] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 935.408316][ T9902] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 936.852905][ T9891] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 936.919702][ T9891] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 936.981727][ T9891] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 937.037054][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.037164][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.166033][ T9891] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 938.186562][ T9911] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 938.258079][ T9911] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 938.316165][ T9911] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 938.416656][ T9911] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 939.989155][ T9902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 942.516101][ T9902] 8021q: adding VLAN 0 to HW filter on device team0 [ 942.566999][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.567159][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 942.610385][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.610699][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.009307][ T9911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.116397][ T9911] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.154274][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.155034][ T6106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.197896][ T6108] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.198176][ T6108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 944.218671][ T9665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 944.243056][ T9665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 944.252153][ T9665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 944.260926][ T9665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 944.264137][ T9665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 946.311742][ T9665] Bluetooth: hci0: command tx timeout [ 946.581901][ T7451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 946.590073][ T7451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 946.591224][ T7451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 946.620186][ T7451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 946.621032][ T7451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.449522][ T9665] Bluetooth: hci0: command tx timeout [ 948.713791][ T9665] Bluetooth: hci1: command tx timeout [ 949.704348][ T7451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 949.721838][ T7451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 949.724891][ T7451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 949.728632][ T7451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 949.730857][ T7451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 950.211198][T10204] chnl_net:caif_netlink_parms(): no params data found [ 950.250291][ T6108] bridge_slave_1: left allmulticast mode [ 950.250327][ T6108] bridge_slave_1: left promiscuous mode [ 950.251169][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.337663][ T6108] bridge_slave_0: left allmulticast mode [ 950.337700][ T6108] bridge_slave_0: left promiscuous mode [ 950.337986][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 950.497505][ T7451] Bluetooth: hci0: command tx timeout [ 950.791756][ T7451] Bluetooth: hci1: command tx timeout [ 951.831755][ T7451] Bluetooth: hci3: command tx timeout [ 951.954485][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 952.156391][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 953.238951][ T7451] Bluetooth: hci0: command tx timeout [ 953.238989][ T7451] Bluetooth: hci1: command tx timeout [ 953.423741][ T6108] bond0 (unregistering): Released all slaves [ 953.911533][ T9665] Bluetooth: hci3: command tx timeout [ 954.202695][T10260] tipc: Enabling of bearer rejected, already enabled [ 954.821661][ T6108] hsr_slave_0: left promiscuous mode [ 954.915781][ T6108] hsr_slave_1: left promiscuous mode [ 954.917144][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 954.978738][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 955.271513][ T9665] Bluetooth: hci1: command tx timeout [ 956.023862][ T9665] Bluetooth: hci3: command tx timeout [ 957.373827][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 957.773230][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 958.094490][ T9665] Bluetooth: hci3: command tx timeout [ 962.051046][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.051201][T10204] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.071703][T10204] bridge_slave_0: entered allmulticast mode [ 962.087857][T10204] bridge_slave_0: entered promiscuous mode [ 962.129755][T10204] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.129903][T10204] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.130138][T10204] bridge_slave_1: entered allmulticast mode [ 962.179071][T10204] bridge_slave_1: entered promiscuous mode [ 963.992009][T10204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 963.995198][T10302] netlink: 8 bytes leftover after parsing attributes in process `syz.4.682'. [ 964.006251][T10204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.374137][T10204] team0: Port device team_slave_0 added [ 964.643867][T10204] team0: Port device team_slave_1 added [ 965.923248][T10204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.923291][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.923323][T10204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.182197][T10204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.182217][T10204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 966.182248][T10204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.065430][T10227] chnl_net:caif_netlink_parms(): no params data found [ 968.266469][T10239] chnl_net:caif_netlink_parms(): no params data found [ 968.453077][T10204] hsr_slave_0: entered promiscuous mode [ 968.456167][T10204] hsr_slave_1: entered promiscuous mode [ 968.458459][T10204] debugfs: 'hsr0' already exists in 'hsr' [ 968.458479][T10204] Cannot create hsr debugfs directory [ 969.044107][T10333] block nbd4: shutting down sockets [ 970.698809][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.688'. [ 972.109799][T10227] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.110821][T10227] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.110996][T10227] bridge_slave_0: entered allmulticast mode [ 972.140720][T10227] bridge_slave_0: entered promiscuous mode [ 972.558377][T10227] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.558668][T10227] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.558879][T10227] bridge_slave_1: entered allmulticast mode [ 972.601444][T10227] bridge_slave_1: entered promiscuous mode [ 973.409111][ C0] vkms_vblank_simulate: vblank timer overrun [ 973.729569][T10239] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.729767][T10239] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.730012][T10239] bridge_slave_0: entered allmulticast mode [ 973.903528][T10239] bridge_slave_0: entered promiscuous mode [ 974.018092][ C0] vkms_vblank_simulate: vblank timer overrun [ 974.968350][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.045904][T10239] bridge0: port 2(bridge_slave_1) entered blocking state [ 975.046062][T10239] bridge0: port 2(bridge_slave_1) entered disabled state [ 975.046321][T10239] bridge_slave_1: entered allmulticast mode [ 975.078206][T10239] bridge_slave_1: entered promiscuous mode [ 975.114172][T10227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.268843][T10227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.727034][T10239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 977.888164][T10239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 977.897977][T10227] team0: Port device team_slave_0 added [ 978.438343][T10227] team0: Port device team_slave_1 added [ 979.687550][T10239] team0: Port device team_slave_0 added [ 979.688148][T10397] tipc: Enabling of bearer rejected, already enabled [ 979.835462][T10239] team0: Port device team_slave_1 added [ 979.836829][T10227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.836844][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 979.836875][T10227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.953976][T10227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.953989][T10227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 981.954011][T10227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.248437][T10409] tipc: Enabled bearer , priority 0 [ 983.870907][T10410] syzkaller0: entered promiscuous mode [ 983.870941][T10410] syzkaller0: entered allmulticast mode [ 983.892536][T10239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.892555][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.892586][T10239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 984.873658][T10406] tipc: Resetting bearer [ 985.027573][T10406] tipc: Disabling bearer [ 985.182354][T10239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 985.182369][T10239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 985.182391][T10239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.427036][T10227] hsr_slave_0: entered promiscuous mode [ 987.428677][T10227] hsr_slave_1: entered promiscuous mode [ 987.429726][T10227] debugfs: 'hsr0' already exists in 'hsr' [ 987.429769][T10227] Cannot create hsr debugfs directory [ 989.458468][T10239] hsr_slave_0: entered promiscuous mode [ 989.472310][T10239] hsr_slave_1: entered promiscuous mode [ 989.473381][T10239] debugfs: 'hsr0' already exists in 'hsr' [ 989.473404][T10239] Cannot create hsr debugfs directory [ 991.253968][T10448] netlink: 'syz.4.709': attribute type 1 has an invalid length. [ 993.889313][T10204] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 995.001815][T10204] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 995.152232][ T6108] bridge_slave_1: left allmulticast mode [ 995.152267][ T6108] bridge_slave_1: left promiscuous mode [ 995.152611][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.343029][ T6108] bridge_slave_0: left allmulticast mode [ 995.343056][ T6108] bridge_slave_0: left promiscuous mode [ 995.343273][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 995.838905][ T6108] bridge_slave_1: left allmulticast mode [ 995.838933][ T6108] bridge_slave_1: left promiscuous mode [ 995.839114][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.253084][ T6108] bridge_slave_0: left allmulticast mode [ 996.253123][ T6108] bridge_slave_0: left promiscuous mode [ 996.253444][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 998.501706][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.501779][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.305046][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1000.354666][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1000.392862][ T6108] bond0 (unregistering): Released all slaves [ 1006.306762][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.382598][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1006.406736][ T6108] bond0 (unregistering): Released all slaves [ 1006.464176][T10204] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1006.602250][ T7451] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1006.635319][ T7451] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1006.638203][ T7451] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1006.659979][ T7451] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1006.668240][ T7451] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1006.723851][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.722'. [ 1007.440747][ T6108] hsr_slave_0: left promiscuous mode [ 1007.471783][ T6108] hsr_slave_1: left promiscuous mode [ 1007.472964][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1007.534936][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.088650][ T6108] hsr_slave_0: left promiscuous mode [ 1008.121478][ T6108] hsr_slave_1: left promiscuous mode [ 1008.122670][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1008.180512][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1008.590071][ T7451] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1008.604934][ T7451] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1008.607347][ T7451] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1008.609940][ T7451] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1008.610921][ T7451] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1008.791461][ T9665] Bluetooth: hci5: command tx timeout [ 1009.630013][T10528] block nbd2: shutting down sockets [ 1010.614421][ T7451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1010.632139][ T7451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1010.633207][ T7451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1010.634798][ T7451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1010.636013][ T7451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1010.731622][ T7451] Bluetooth: hci0: command tx timeout [ 1010.881608][ T7451] Bluetooth: hci5: command tx timeout [ 1011.210383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1011.293281][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1011.676462][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1012.565479][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.609674][ C0] vkms_vblank_simulate: vblank timer overrun [ 1013.621904][ T9665] Bluetooth: hci0: command tx timeout [ 1013.621945][ T9665] Bluetooth: hci5: command tx timeout [ 1013.622199][ T7451] Bluetooth: hci1: command tx timeout [ 1014.170013][ C0] vkms_vblank_simulate: vblank timer overrun [ 1014.264986][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.307301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.468146][ C0] vkms_vblank_simulate: vblank timer overrun [ 1015.671517][ T59] Bluetooth: hci5: command tx timeout [ 1015.671552][ T59] Bluetooth: hci0: command tx timeout [ 1015.671661][ T7451] Bluetooth: hci1: command tx timeout [ 1017.913298][ T7451] Bluetooth: hci1: command tx timeout [ 1017.916974][ T7451] Bluetooth: hci0: command tx timeout [ 1020.001697][ T9665] Bluetooth: hci1: command tx timeout [ 1022.652694][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1022.873126][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1025.572739][T10557] tipc: Enabled bearer , priority 0 [ 1025.598645][T10567] tipc: Resetting bearer [ 1025.600193][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.736'. [ 1025.823933][T10554] tipc: Disabling bearer [ 1028.208971][T10598] netlink: 'syz.4.738': attribute type 1 has an invalid length. [ 1031.596988][T10509] chnl_net:caif_netlink_parms(): no params data found [ 1031.897723][T10521] chnl_net:caif_netlink_parms(): no params data found [ 1032.481038][T10529] chnl_net:caif_netlink_parms(): no params data found [ 1036.313356][T10509] bridge0: port 1(bridge_slave_0) entered blocking state [ 1036.345783][T10509] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.346049][T10509] bridge_slave_0: entered allmulticast mode [ 1036.367880][T10509] bridge_slave_0: entered promiscuous mode [ 1036.909527][T10509] bridge0: port 2(bridge_slave_1) entered blocking state [ 1036.910616][T10509] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.910893][T10509] bridge_slave_1: entered allmulticast mode [ 1036.944388][T10509] bridge_slave_1: entered promiscuous mode [ 1038.051661][T10521] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.051812][T10521] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.052059][T10521] bridge_slave_0: entered allmulticast mode [ 1038.054985][T10521] bridge_slave_0: entered promiscuous mode [ 1038.704438][T10529] bridge0: port 1(bridge_slave_0) entered blocking state [ 1038.704733][T10529] bridge0: port 1(bridge_slave_0) entered disabled state [ 1038.704944][T10529] bridge_slave_0: entered allmulticast mode [ 1038.708280][T10529] bridge_slave_0: entered promiscuous mode [ 1038.884714][T10521] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.884852][T10521] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.885450][T10521] bridge_slave_1: entered allmulticast mode [ 1038.889178][T10521] bridge_slave_1: entered promiscuous mode [ 1038.968042][T10509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.968351][T10529] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.968440][T10529] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.968590][T10529] bridge_slave_1: entered allmulticast mode [ 1038.970584][T10529] bridge_slave_1: entered promiscuous mode [ 1040.129388][T10509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1040.565718][T10521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1040.877924][T10529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1041.161946][T10521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.215762][T10529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1041.304013][T10680] block nbd2: shutting down sockets [ 1041.420155][T10509] team0: Port device team_slave_0 added [ 1042.428352][T10509] team0: Port device team_slave_1 added [ 1042.928666][T10521] team0: Port device team_slave_0 added [ 1042.930955][T10529] team0: Port device team_slave_0 added [ 1042.966856][T10529] team0: Port device team_slave_1 added [ 1042.986027][T10521] team0: Port device team_slave_1 added [ 1043.389769][T10509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.389788][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.389819][T10509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.796963][T10509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.796981][T10509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.797012][T10509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.848477][T10529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.848496][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.848527][T10529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.882369][T10693] syzkaller0: entered promiscuous mode [ 1044.882402][T10693] syzkaller0: entered allmulticast mode [ 1044.915822][T10521] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.915840][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.915870][T10521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1045.000781][T10529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.000800][T10529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.000833][T10529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.009850][T10521] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1045.009870][T10521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1045.009905][T10521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1045.683936][T10713] block nbd2: shutting down sockets [ 1046.898203][T10509] hsr_slave_0: entered promiscuous mode [ 1046.899614][T10509] hsr_slave_1: entered promiscuous mode [ 1048.440491][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.577476][ C0] vkms_vblank_simulate: vblank timer overrun [ 1048.733597][T10529] hsr_slave_0: entered promiscuous mode [ 1048.749078][T10529] hsr_slave_1: entered promiscuous mode [ 1048.750108][T10529] debugfs: 'hsr0' already exists in 'hsr' [ 1048.750127][T10529] Cannot create hsr debugfs directory [ 1048.815772][T10521] hsr_slave_0: entered promiscuous mode [ 1048.830571][T10521] hsr_slave_1: entered promiscuous mode [ 1048.840767][T10521] debugfs: 'hsr0' already exists in 'hsr' [ 1048.840799][T10521] Cannot create hsr debugfs directory [ 1049.284216][ T6108] bridge_slave_1: left allmulticast mode [ 1049.284244][ T6108] bridge_slave_1: left promiscuous mode [ 1049.284444][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.387861][ T6108] bridge_slave_0: left allmulticast mode [ 1049.387887][ T6108] bridge_slave_0: left promiscuous mode [ 1049.388136][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.475269][ T6108] bridge_slave_1: left allmulticast mode [ 1049.475294][ T6108] bridge_slave_1: left promiscuous mode [ 1049.475477][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.590028][ T6108] bridge_slave_0: left allmulticast mode [ 1049.590065][ T6108] bridge_slave_0: left promiscuous mode [ 1049.590335][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.744875][ T6108] bridge_slave_1: left allmulticast mode [ 1049.744910][ T6108] bridge_slave_1: left promiscuous mode [ 1049.745220][ T6108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.806278][ T6108] bridge_slave_0: left allmulticast mode [ 1049.807592][ T6108] bridge_slave_0: left promiscuous mode [ 1049.807799][ T6108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.585650][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1050.695222][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1050.775128][ T6108] bond0 (unregistering): Released all slaves [ 1050.806793][T10735] netlink: 'syz.4.759': attribute type 1 has an invalid length. [ 1051.492006][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.609234][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.664788][ T6108] bond0 (unregistering): Released all slaves [ 1053.403443][ T6108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.522171][ T6108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.601704][ T6108] bond0 (unregistering): Released all slaves [ 1056.243637][ T6108] hsr_slave_0: left promiscuous mode [ 1056.281634][ T6108] hsr_slave_1: left promiscuous mode [ 1056.285904][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.306249][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.493809][ T6108] hsr_slave_0: left promiscuous mode [ 1056.531940][ T6108] hsr_slave_1: left promiscuous mode [ 1056.532857][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.583446][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1056.740768][ T6108] hsr_slave_0: left promiscuous mode [ 1056.773665][ T6108] hsr_slave_1: left promiscuous mode [ 1056.774359][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.112682][ T6108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1058.869666][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.963412][ C0] vkms_vblank_simulate: vblank timer overrun [ 1059.964742][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.964822][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.432207][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1060.650150][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1060.700917][T10775] netlink: 'syz.2.770': attribute type 1 has an invalid length. [ 1065.072477][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1066.632570][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1068.034666][ T6108] team0 (unregistering): Port device team_slave_1 removed [ 1068.212797][ T6108] team0 (unregistering): Port device team_slave_0 removed [ 1068.353410][ T7451] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1068.369805][ T7451] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1068.371889][ T7451] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1068.374795][ T7451] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1068.376778][ T7451] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1070.061806][T10798] netlink: 16 bytes leftover after parsing attributes in process `syz.2.774'. [ 1070.530148][ T7451] Bluetooth: hci3: command tx timeout [ 1070.857791][ T9665] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1070.885882][ T9665] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1070.890574][ T9665] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1070.893777][ T9665] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1070.896257][ T9665] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1072.551592][ T9665] Bluetooth: hci3: command tx timeout [ 1072.951471][ T9665] Bluetooth: hci0: command tx timeout [ 1073.103786][ T7451] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1073.136785][ T7451] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1073.139773][ T7451] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1073.160751][ T7451] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1073.162086][ T7451] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1073.667826][T10789] chnl_net:caif_netlink_parms(): no params data found [ 1074.636313][ T9665] Bluetooth: hci3: command tx timeout [ 1075.031441][ T9665] Bluetooth: hci0: command tx timeout [ 1075.271787][ T9665] Bluetooth: hci1: command tx timeout [ 1075.871940][T10830] netlink: 'syz.2.778': attribute type 1 has an invalid length. [ 1076.755075][ T9665] Bluetooth: hci3: command tx timeout [ 1077.111455][ T9665] Bluetooth: hci0: command tx timeout [ 1077.238750][T10789] bridge0: port 1(bridge_slave_0) entered blocking state [ 1077.238862][T10789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1077.239051][T10789] bridge_slave_0: entered allmulticast mode [ 1077.274486][T10789] bridge_slave_0: entered promiscuous mode [ 1077.360883][ T9665] Bluetooth: hci1: command tx timeout [ 1077.434987][T10789] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.435145][T10789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.435330][T10789] bridge_slave_1: entered allmulticast mode [ 1077.437625][T10789] bridge_slave_1: entered promiscuous mode [ 1078.097906][T10789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1078.204627][T10789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1078.983169][T10789] team0: Port device team_slave_0 added [ 1079.055455][T10789] team0: Port device team_slave_1 added [ 1079.060879][T10800] chnl_net:caif_netlink_parms(): no params data found [ 1079.201385][ T9665] Bluetooth: hci0: command tx timeout [ 1079.431362][ T9665] Bluetooth: hci1: command tx timeout [ 1082.092991][ T7451] Bluetooth: hci1: command tx timeout [ 1082.177722][ T9665] Oops: general protection fault, probably for non-canonical address 0xdffffc000000006a: 0000 [#1] SMP KASAN PTI [ 1082.177772][ T9665] KASAN: null-ptr-deref in range [0x0000000000000350-0x0000000000000357] [ 1082.177813][ T9665] CPU: 1 UID: 0 PID: 9665 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1082.177857][ T9665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1082.177872][ T9665] Workqueue: hci2 hci_rx_work [ 1082.177908][ T9665] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1082.177944][ T9665] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 ec dc 08 cc 66 66 66 66 66 66 2e [ 1082.177965][ T9665] RSP: 0018:ffffc90004ae7308 EFLAGS: 00010206 [ 1082.177984][ T9665] RAX: dffffc0000000000 RBX: ffffffff88d7711e RCX: ba15bcb2396ade00 [ 1082.178002][ T9665] RDX: 0000000000000000 RSI: ffffffff88d7711e RDI: 000000000000006a [ 1082.178028][ T9665] RBP: ffffffff8a00aa15 R08: 0000000000000001 R09: 0000000000000000 [ 1082.178042][ T9665] R10: dffffc0000000000 R11: ffffffff8a00a9d0 R12: 0000000000000000 [ 1082.178059][ T9665] R13: 0000000000000350 R14: 0000000000000350 R15: 0000000000000001 [ 1082.178073][ T9665] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 1082.178092][ T9665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1082.178105][ T9665] CR2: 00002000003fc000 CR3: 0000000038068000 CR4: 00000000003526f0 [ 1082.178121][ T9665] Call Trace: [ 1082.178128][ T9665] [ 1082.178135][ T9665] __kasan_check_byte+0x12/0x40 [ 1082.178172][ T9665] lock_acquire+0x8d/0x360 [ 1082.178197][ T9665] ? __cancel_work+0x25e/0x2e0 [ 1082.178228][ T9665] lock_sock_nested+0x3e/0x130 [ 1082.178250][ T9665] ? l2cap_sock_ready_cb+0x45/0x140 [ 1082.178270][ T9665] l2cap_sock_ready_cb+0x45/0x140 [ 1082.178288][ T9665] l2cap_le_start+0xb0d/0x13b0 [ 1082.178317][ T9665] ? __pfx_l2cap_le_start+0x10/0x10 [ 1082.178341][ T9665] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1082.178368][ T9665] ? l2cap_global_fixed_chan+0x2ee/0x380 [ 1082.178399][ T9665] ? mutex_lock_nested+0x16a/0x1d0 [ 1082.178418][ T9665] ? l2cap_connect_cfm+0x5f9/0x1040 [ 1082.178445][ T9665] l2cap_connect_cfm+0x6be/0x1040 [ 1082.178475][ T9665] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1082.178503][ T9665] ? mutex_lock_nested+0x154/0x1d0 [ 1082.178544][ T9665] ? hci_connect_cfm+0x2c/0x140 [ 1082.178567][ T9665] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 1082.178595][ T9665] hci_connect_cfm+0x92/0x140 [ 1082.178619][ T9665] le_conn_complete_evt+0xcd3/0x1220 [ 1082.178650][ T9665] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1082.178676][ T9665] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1082.178704][ T9665] ? lockdep_hardirqs_on+0x9c/0x150 [ 1082.178731][ T9665] ? skb_pull_data+0xfb/0x200 [ 1082.178752][ T9665] hci_le_conn_complete_evt+0x187/0x450 [ 1082.178781][ T9665] hci_event_packet+0x78f/0x1200 [ 1082.178802][ T9665] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1082.178827][ T9665] ? __pfx_hci_event_packet+0x10/0x10 [ 1082.178846][ T9665] ? __pfx_migrate_enable+0x10/0x10 [ 1082.178871][ T9665] ? hci_send_to_monitor+0xe2/0x570 [ 1082.178899][ T9665] hci_rx_work+0x46a/0xe80 [ 1082.178922][ T9665] ? process_scheduled_works+0x9ef/0x17b0 [ 1082.178945][ T9665] process_scheduled_works+0xade/0x17b0 [ 1082.178988][ T9665] ? __pfx_process_scheduled_works+0x10/0x10 [ 1082.179022][ T9665] worker_thread+0x8a0/0xda0 [ 1082.179045][ T9665] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1082.179074][ T9665] ? __kthread_parkme+0x7b/0x200 [ 1082.179102][ T9665] kthread+0x70e/0x8a0 [ 1082.179130][ T9665] ? __pfx_worker_thread+0x10/0x10 [ 1082.179151][ T9665] ? __pfx_kthread+0x10/0x10 [ 1082.179179][ T9665] ? __pfx_kthread+0x10/0x10 [ 1082.179205][ T9665] ret_from_fork+0x3f9/0x770 [ 1082.179229][ T9665] ? __pfx_ret_from_fork+0x10/0x10 [ 1082.179253][ T9665] ? __switch_to_asm+0x39/0x70 [ 1082.179270][ T9665] ? __switch_to_asm+0x33/0x70 [ 1082.179285][ T9665] ? __pfx_kthread+0x10/0x10 [ 1082.179311][ T9665] ret_from_fork_asm+0x1a/0x30 [ 1082.179333][ T9665] [ 1082.179344][ T9665] Modules linked in: [ 1082.179382][ T9665] ---[ end trace 0000000000000000 ]--- [ 1082.179447][ T9665] RIP: 0010:kasan_byte_accessible+0x12/0x30 [ 1082.179482][ T9665] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 48 c1 ef 03 48 b8 00 00 00 00 00 fc ff df <0f> b6 04 07 3c 08 0f 92 c0 e9 90 ec dc 08 cc 66 66 66 66 66 66 2e [ 1082.179557][ T9665] RSP: 0018:ffffc90004ae7308 EFLAGS: 00010206 [ 1082.179577][ T9665] RAX: dffffc0000000000 RBX: ffffffff88d7711e RCX: ba15bcb2396ade00 [ 1082.179595][ T9665] RDX: 0000000000000000 RSI: ffffffff88d7711e RDI: 000000000000006a [ 1082.179610][ T9665] RBP: ffffffff8a00aa15 R08: 0000000000000001 R09: 0000000000000000 [ 1082.179625][ T9665] R10: dffffc0000000000 R11: ffffffff8a00a9d0 R12: 0000000000000000 [ 1082.179641][ T9665] R13: 0000000000000350 R14: 0000000000000350 R15: 0000000000000001 [ 1082.179656][ T9665] FS: 0000000000000000(0000) GS:ffff8881269bf000(0000) knlGS:0000000000000000 [ 1082.179676][ T9665] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1082.179693][ T9665] CR2: 00002000003fc000 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 1082.179715][ T9665] Kernel panic - not syncing: Fatal exception [ 1082.180114][ T9665] Kernel Offset: disabled