last executing test programs: 8m54.037310968s ago: executing program 0 (id=14): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10) connect$inet(r4, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 8m52.627216457s ago: executing program 0 (id=16): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) 8m47.94919064s ago: executing program 1 (id=28): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000c00), 0x0, 0x80) 8m47.354565387s ago: executing program 0 (id=29): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) 8m47.24721325s ago: executing program 1 (id=30): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000006a40)=[{{&(0x7f00000001c0)={0xa, 0x4e22, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[], 0x590}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="fae731c7", 0x4}], 0x1}}], 0x2, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000480)='J', 0x1}], 0x1}}], 0x1, 0x0) 8m47.168030033s ago: executing program 1 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xfffffffffffffc7d, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x10) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4112, 0x0, 0x0) 8m44.479537335s ago: executing program 1 (id=37): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000480)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0xc, 0xc2, 0x1, 0x0, 0x0, {[@generic={0x3, 0x2}, @mptcp=@synack={0x1e, 0x10, 0x1, 0x2, 0xa, 0x7, 0xe3}, @timestamp={0x8, 0xa, 0x8, 0xffffffff}]}}}}}}}, 0x0) 8m44.312509288s ago: executing program 1 (id=40): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f0000000c00), 0x0, 0x80) 8m43.031535372s ago: executing program 1 (id=43): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) 8m42.948267619s ago: executing program 0 (id=45): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 8m40.711581026s ago: executing program 0 (id=51): socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 8m38.960543827s ago: executing program 0 (id=56): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) 8m26.613479482s ago: executing program 32 (id=43): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc048aeca, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0x3) 8m23.47355015s ago: executing program 33 (id=56): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gre0\x00'}}, 0x1e) syz_open_dev$radio(0x0, 0x0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/226, 0x26, 0xe2, 0x1}, 0x28) 6m14.272712796s ago: executing program 4 (id=341): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000001780)="83d4b9a0e80202130e09a268", 0xc}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) openat$zero(0xffffffffffffff9c, 0x0, 0x402000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)}], 0x2) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="3b3e5b7565ce5fdb937333722f2902cb380737691c2b1a147d2fdfcf97bc5b", 0x1f}, {&(0x7f0000000140)="a71351aa8b7d56c8a7d6106742761aadc854f742c71932a3ff5cd75b0afc8e0010a38f6f359fc7845195865ac22413f0bb002fb7b8daf63990811761533892033aa06cd16cb7d5873e2553e87e781c2bc9ee36251f1efad49fa0daf996ceaae373f7f2dc30515fdfdb170a4c58339a47468ce5df01f6a0976ac14d0d8dc3cd845d8889cdff1def583e3c55680d29ce6971c6a08126b55b2eb4afeee310317b183c7bc19e5918afdc75d837e361c55bb041cba14f52f03303ebebdacadee6644c6f0e8f55e72ba4322410c28d74ff", 0xce}, {&(0x7f00000000c0)="b999", 0x2}, {&(0x7f0000000240)="938550e53a88b7e4a624a42581c37cc108c4cfb0bf8118c08498782f515e9d9d951d21877aaf1a6eea21f2a7859f6b0be82f9f9093d9", 0x36}, {&(0x7f0000000280)="c204c2c38f97d54c4d905b793bb29d60211dfc271bce623f94dab90784fcbcb9912a538ab18c132686aca9b3c45e5958e014a9a671e180ffb52d630287d2cef83cd2ce40c9407c60a5f53514d34420de47b4442e5855b5967a68f3022f49e47feb4c17a0b5ca38aef92e20fedf04fbe8225d0309483e4e5775412128a221567a9ab662743183baeb4b2913120789978cfb8e238e58e04168dccb84bc2aa992523a0a0d163a96c8e3af2a72bed8be0fe71bf34ea5", 0xb4}], 0x5) 6m12.310043092s ago: executing program 4 (id=344): socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) fremovexattr(r1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 6m10.844059447s ago: executing program 4 (id=346): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x7, 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) write$cgroup_pid(r1, 0x0, 0x0) 6m10.631634891s ago: executing program 4 (id=347): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000001780)="83d4b9a0e80202130e09a268", 0xc}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x11, 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f000001b700)=""/102392, 0x18ff8) openat$zero(0xffffffffffffff9c, 0x0, 0x402000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) rt_tgsigqueueinfo(0x0, 0x0, 0x22, &(0x7f00000002c0)={0x0, 0x4, 0x4a}) r4 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_IO(r4, 0x2285, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f0000000000)="aefdda9d240300005a66000000000000000000bbee07cb010052f436dd2a00"/42, 0x2a}, {&(0x7f0000000040)}], 0x2) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x40000) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="3b3e5b7565ce5fdb937333722f2902cb380737691c2b1a147d2fdfcf97bc5b", 0x1f}, {&(0x7f0000000140)="a71351aa8b7d56c8a7d6106742761aadc854f742c71932a3ff5cd75b0afc8e0010a38f6f359fc7845195865ac22413f0bb002fb7b8daf63990811761533892033aa06cd16cb7d5873e2553e87e781c2bc9ee36251f1efad49fa0daf996ceaae373f7f2dc30515fdfdb170a4c58339a47468ce5df01f6a0976ac14d0d8dc3cd845d8889cdff1def583e3c55680d29ce6971c6a08126b55b2eb4afeee310317b183c7bc19e5918afdc75d837e361c55bb041cba14f52f03303ebebdacadee6644c6f0e8f55e72ba4322410c28d74ff", 0xce}, {&(0x7f00000000c0)="b999", 0x2}, {&(0x7f0000000240)="938550e53a88b7e4a624a42581c37cc108c4cfb0bf8118c08498782f515e9d9d951d21877aaf1a6eea21f2a7859f6b0be82f9f9093d9", 0x36}, {&(0x7f0000000280)="c204c2c38f97d54c4d905b793bb29d60211dfc271bce623f94dab90784fcbcb9912a538ab18c132686aca9b3c45e5958e014a9a671e180ffb52d630287d2cef83cd2ce40c9407c60a5f53514d34420de47b4442e5855b5967a68f3022f49e47feb4c17a0b5ca38aef92e20fedf04fbe8225d0309483e4e5775412128a221567a9ab662743183baeb4b2913120789978cfb8e238e58e04168dccb84bc2aa992523a0a0d163a96c8e3af2a72bed8be0fe71bf34ea5", 0xb4}], 0x5) 6m9.607718329s ago: executing program 4 (id=351): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0xffff, 0xb7, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x303}, "2d432d74c04f228a", "d71d9a1e03558545115509e1c34caab9", "59f7766d", "5e33931677e0f2d7"}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x3e, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) rmdir(0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4007fff}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x6) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) close(r0) 6m7.875697546s ago: executing program 4 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000140003050000", @ANYRES32=r1], 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x20, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 5m52.44941666s ago: executing program 34 (id=352): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000140003050000", @ANYRES32=r1], 0x20}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x800000, 0x25dfdbff, {0x2, 0x20, 0x20, 0xfd, r5}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0xc090}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2m44.813810189s ago: executing program 2 (id=670): socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x10ff, 0x0) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) timerfd_create(0x0, 0x0) socket$pptp(0x18, 0x1, 0x2) r0 = syz_io_uring_setup(0x819, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000280)=ANY=[@ANYRES32=r0], 0x28) write$UHID_CREATE2(r3, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m43.914802962s ago: executing program 2 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone3(&(0x7f0000000000)={0x170e4000, 0x0, 0x0, 0x0, {0x22}, 0x0, 0x0, 0x0, 0x0}, 0x58) fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) 2m42.035954744s ago: executing program 2 (id=674): creat(&(0x7f0000000340)='./file0\x00', 0x28) open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000002900)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x340, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x340, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x2, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x81}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x9}, {}, {}, {}, {}, {}, {}, {0xf5}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0xa, 0x7, 0xffffffff, 0x6, 'snmp_trap\x00', 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x5, 0x22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000400)) sendmmsg$inet6(r5, &(0x7f0000000740)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @local, 0x2}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000040)="4d8e3366fc4a644abcc82e05f0a77becca744f7e1f40494f9d56b40e3a77878bf7cbdc9e294a47248bea3f534440b9107bab184df01f6c26136e20286580c461f87a94108d30c451021e17d80db8515bf9827c1bb3", 0x55}], 0x1}}], 0x1, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r5, r4, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20) 2m39.125731995s ago: executing program 2 (id=676): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) socket$inet(0xa, 0x801, 0x84) socket$inet6(0xa, 0x2, 0x0) memfd_create(&(0x7f0000000100)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{0xffffffffffffffff, 0x4013}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r3, 0x8002}}, 0x48) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 2m37.97852199s ago: executing program 2 (id=678): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2m36.845623433s ago: executing program 2 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[0x0]) 2m21.208690184s ago: executing program 35 (id=679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(0xffffffffffffffff) io_setup(0x2017, &(0x7f00000009c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000500)=[0x0]) 4.165985376s ago: executing program 3 (id=831): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xa, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000300)=0xb1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) 1.812231496s ago: executing program 3 (id=832): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) close(r2) 1.519518449s ago: executing program 3 (id=833): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170", 0x12}], 0x3, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) r7 = dup2(r1, r0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r7) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmmsg(r0, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x7, 0x200000d1) 890.540131ms ago: executing program 3 (id=834): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000480)={0x7, 'pimreg1\x00', {0x7}, 0x8}) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet6(0xa, 0x2, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000004400), 0x0, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x9200000000000000) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 527.447492ms ago: executing program 3 (id=835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) sched_setattr(0x0, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 0s ago: executing program 3 (id=836): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040), 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCINITREPORT(r1, 0x4805, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r3) getsockopt$netrom_NETROM_T2(0xffffffffffffffff, 0x103, 0x2, &(0x7f0000000300)=0xb1, 0x0) kernel console output (not intermixed with test programs): _0) entered disabled state [ 86.115296][ T5802] bridge_slave_0: entered allmulticast mode [ 86.117933][ T5802] bridge_slave_0: entered promiscuous mode [ 86.190012][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.190130][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.190296][ T5805] bridge_slave_1: entered allmulticast mode [ 86.193755][ T5805] bridge_slave_1: entered promiscuous mode [ 86.195520][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.195708][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.195856][ T5800] bridge_slave_1: entered allmulticast mode [ 86.198437][ T5800] bridge_slave_1: entered promiscuous mode [ 86.261840][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.261939][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.262047][ T5802] bridge_slave_1: entered allmulticast mode [ 86.263423][ T5802] bridge_slave_1: entered promiscuous mode [ 86.734378][ T5801] team0: Port device team_slave_0 added [ 86.863868][ T5803] team0: Port device team_slave_0 added [ 86.923717][ T5801] team0: Port device team_slave_1 added [ 86.926512][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.928860][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.931505][ T5803] team0: Port device team_slave_1 added [ 86.936897][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.024049][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.026023][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.114006][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.371121][ T5120] Bluetooth: hci1: command tx timeout [ 87.451183][ T5120] Bluetooth: hci3: command tx timeout [ 87.453014][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.453024][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.453038][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.531143][ T5120] Bluetooth: hci2: command tx timeout [ 87.592810][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.592827][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.592850][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.611047][ T5120] Bluetooth: hci0: command tx timeout [ 87.673011][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.673028][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.673049][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.675246][ T5800] team0: Port device team_slave_0 added [ 87.677581][ T5805] team0: Port device team_slave_0 added [ 87.678589][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.678600][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.678618][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.701045][ T5120] Bluetooth: hci4: command tx timeout [ 87.883819][ T5802] team0: Port device team_slave_0 added [ 87.893755][ T5800] team0: Port device team_slave_1 added [ 87.906804][ T5805] team0: Port device team_slave_1 added [ 87.908313][ T5802] team0: Port device team_slave_1 added [ 88.432350][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.432362][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.432375][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.433782][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.433796][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.433819][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.434913][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.434925][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.434947][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.602953][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.602969][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.602994][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.604593][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.604606][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.604619][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.605520][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.605532][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.605553][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.610773][ T5801] hsr_slave_0: entered promiscuous mode [ 88.614868][ T5801] hsr_slave_1: entered promiscuous mode [ 88.625209][ T5803] hsr_slave_0: entered promiscuous mode [ 88.626466][ T5803] hsr_slave_1: entered promiscuous mode [ 88.627447][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 88.627567][ T5803] Cannot create hsr debugfs directory [ 89.217285][ T5805] hsr_slave_0: entered promiscuous mode [ 89.218088][ T5805] hsr_slave_1: entered promiscuous mode [ 89.218635][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 89.218687][ T5805] Cannot create hsr debugfs directory [ 89.336790][ T5800] hsr_slave_0: entered promiscuous mode [ 89.337585][ T5800] hsr_slave_1: entered promiscuous mode [ 89.338164][ T5800] debugfs: 'hsr0' already exists in 'hsr' [ 89.338182][ T5800] Cannot create hsr debugfs directory [ 89.461242][ T5120] Bluetooth: hci1: command tx timeout [ 89.531277][ T5120] Bluetooth: hci3: command tx timeout [ 89.573446][ T5802] hsr_slave_0: entered promiscuous mode [ 89.574261][ T5802] hsr_slave_1: entered promiscuous mode [ 89.574829][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 89.574848][ T5802] Cannot create hsr debugfs directory [ 89.612250][ T5120] Bluetooth: hci2: command tx timeout [ 89.701083][ T5120] Bluetooth: hci0: command tx timeout [ 89.771227][ T5120] Bluetooth: hci4: command tx timeout [ 90.758416][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.798922][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.845562][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.897954][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.009900][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.047856][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.068540][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.120021][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.245047][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.279409][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.301511][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.350639][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.465472][ T5800] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.500398][ T5800] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.534419][ T5120] Bluetooth: hci1: command tx timeout [ 91.538535][ T5800] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.593072][ T5800] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.611203][ T5120] Bluetooth: hci3: command tx timeout [ 91.676498][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.691118][ T5120] Bluetooth: hci2: command tx timeout [ 91.750637][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.772321][ T5120] Bluetooth: hci0: command tx timeout [ 91.802224][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.827913][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.851185][ T5120] Bluetooth: hci4: command tx timeout [ 91.893485][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.950607][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.987410][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.988281][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.015581][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.048459][ T1399] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.048554][ T1399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.128590][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.149849][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.170526][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.170651][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.210241][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.210405][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.265309][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.295797][ T1399] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.295961][ T1399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.306199][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.354076][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.354245][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.445590][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.500595][ T1448] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.500797][ T1448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.513351][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.550349][ T1448] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.550515][ T1448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.658475][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.714722][ T2194] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.721528][ T2194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.759564][ T3577] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.773506][ T3577] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.832233][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.035809][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.109632][ T5801] veth0_vlan: entered promiscuous mode [ 93.174992][ T5801] veth1_vlan: entered promiscuous mode [ 93.218082][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.333270][ T5801] veth0_macvtap: entered promiscuous mode [ 93.383737][ T5801] veth1_macvtap: entered promiscuous mode [ 93.402262][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.480608][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.548287][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.549923][ T5805] veth0_vlan: entered promiscuous mode [ 93.588863][ T3577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.600447][ T3577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.610017][ T3577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.621502][ T3577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.622630][ T5805] veth1_vlan: entered promiscuous mode [ 93.659358][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.814106][ T5800] veth0_vlan: entered promiscuous mode [ 93.928828][ T5803] veth0_vlan: entered promiscuous mode [ 93.929757][ T5800] veth1_vlan: entered promiscuous mode [ 94.002906][ T5805] veth0_macvtap: entered promiscuous mode [ 94.009472][ T5803] veth1_vlan: entered promiscuous mode [ 94.010541][ T1448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.010559][ T1448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.048967][ T5805] veth1_macvtap: entered promiscuous mode [ 94.124213][ T1448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.124233][ T1448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.157223][ T5802] veth0_vlan: entered promiscuous mode [ 94.183934][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.206380][ T5800] veth0_macvtap: entered promiscuous mode [ 94.215963][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.217309][ T5802] veth1_vlan: entered promiscuous mode [ 94.245258][ T5800] veth1_macvtap: entered promiscuous mode [ 94.265943][ T1143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270094][ T1143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.271699][ T5803] veth0_macvtap: entered promiscuous mode [ 94.294392][ T1143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.311383][ T1143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.316855][ T5803] veth1_macvtap: entered promiscuous mode [ 94.384719][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.451316][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.577492][ T5802] veth0_macvtap: entered promiscuous mode [ 94.579416][ T1448] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.645306][ T5917] netlink: 'syz.0.1': attribute type 1 has an invalid length. [ 94.940691][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.951098][ T1448] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.991391][ T1448] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.064939][ T1448] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.200462][ T5802] veth1_macvtap: entered promiscuous mode [ 95.219983][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.238942][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.238961][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.908778][ T165] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.922317][ T165] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.041765][ T165] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.080445][ T165] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.126889][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.280484][ T5924] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.306783][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.306802][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.340340][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.466622][ T3577] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.466643][ T3577] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.506763][ T165] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.522043][ T165] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.529155][ T165] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.530561][ T165] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.664545][ T2194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.664565][ T2194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.804921][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.804942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.042420][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.042439][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.213134][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.213148][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.544308][ T1399] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.544329][ T1399] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.480960][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.541514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.072768][ T5902] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.392007][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.392039][ T5902] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.392061][ T5902] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.392102][ T5902] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.392124][ T5902] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.405094][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.405131][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.405305][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.20'. [ 103.634611][ T5902] usb 1-1: config 0 descriptor?? [ 104.427795][ T5902] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 104.686422][ T5902] usb 1-1: USB disconnect, device number 2 [ 106.210943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.370977][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.373177][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.710954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.711051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.711084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.711116][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.711147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 118.501147][ T1175] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.782695][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.782715][ T1175] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.782726][ T1175] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 118.782755][ T1175] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.782772][ T1175] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.831877][ T1175] usb 3-1: config 0 descriptor?? [ 120.897768][ T1175] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 121.174463][ T1175] usb 3-1: USB disconnect, device number 2 [ 127.661943][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 127.665309][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 127.670744][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 127.675888][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 127.686477][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 128.771187][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.924975][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.925001][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.928426][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 128.928455][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 128.928474][ T10] usb 5-1: SerialNumber: syz [ 129.325682][ T10] usb 5-1: 0:2 : does not exist [ 129.326208][ T10] usb 5-1: unit 255 not found! [ 130.541374][ T61] Bluetooth: hci5: command tx timeout [ 131.571159][ T10] usb 5-1: USB disconnect, device number 2 [ 132.943167][ T61] Bluetooth: hci5: command tx timeout [ 132.960476][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.960581][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.088787][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 134.263796][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 134.288243][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 134.333219][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 134.338821][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 134.339670][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.281804][ T5120] Bluetooth: hci5: command tx timeout [ 137.109935][ T6250] ptrace attach of "./syz-executor exec"[6256] was attempted by "./syz-executor exec"[6250] [ 137.706956][ T61] Bluetooth: hci5: command tx timeout [ 137.707016][ T61] Bluetooth: hci6: command tx timeout [ 139.566528][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 139.833581][ T5808] Bluetooth: hci6: command tx timeout [ 139.857536][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.857561][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 139.861261][ T10] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 139.861291][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 139.861312][ T10] usb 4-1: SerialNumber: syz [ 140.757439][ T6187] chnl_net:caif_netlink_parms(): no params data found [ 140.944953][ T10] usb 4-1: 0:2 : does not exist [ 140.945059][ T10] usb 4-1: unit 255 not found! [ 140.997383][ T10] usb 4-1: USB disconnect, device number 2 [ 142.178853][ T5808] Bluetooth: hci6: command tx timeout [ 143.269812][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.318711][ T5808] Bluetooth: hci6: command tx timeout [ 144.643244][ T6306] netlink: 'syz.2.105': attribute type 1 has an invalid length. [ 149.141052][ T6056] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 149.294406][ T6056] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 149.294431][ T6056] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.298785][ T6056] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 149.298812][ T6056] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 149.298829][ T6056] usb 4-1: SerialNumber: syz [ 149.320840][ T1417] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.140221][ T6056] usb 4-1: 0:2 : does not exist [ 150.140316][ T6056] usb 4-1: unit 255 not found! [ 150.180442][ T6056] usb 4-1: USB disconnect, device number 3 [ 150.290676][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 151.929174][ T1417] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.460759][ T6363] netlink: 'syz.3.117': attribute type 1 has an invalid length. [ 152.733915][ T1417] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.772271][ T6187] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.772467][ T6187] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.772745][ T6187] bridge_slave_0: entered allmulticast mode [ 152.776466][ T6187] bridge_slave_0: entered promiscuous mode [ 152.919637][ T6187] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.922866][ T6187] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.923127][ T6187] bridge_slave_1: entered allmulticast mode [ 152.947860][ T6187] bridge_slave_1: entered promiscuous mode [ 155.636380][ T1417] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.721108][ T5929] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 155.875711][ T5929] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 155.875738][ T5929] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 155.881467][ T5929] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 155.881484][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 155.881494][ T5929] usb 3-1: SerialNumber: syz [ 156.739789][ T6187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.952252][ T5929] usb 3-1: 0:2 : does not exist [ 156.952348][ T5929] usb 3-1: unit 255 not found! [ 156.953146][ T6187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.041661][ T5929] usb 3-1: USB disconnect, device number 3 [ 158.096393][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 160.483675][ T6187] team0: Port device team_slave_0 added [ 161.198487][ T6237] chnl_net:caif_netlink_parms(): no params data found [ 161.254575][ T6187] team0: Port device team_slave_1 added [ 164.079631][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.079643][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.079657][ T6187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.342051][ T6187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.342068][ T6187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.342094][ T6187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.924060][ T1417] bridge_slave_1: left allmulticast mode [ 164.929033][ T1417] bridge_slave_1: left promiscuous mode [ 165.085800][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.990261][ T1417] bridge_slave_0: left allmulticast mode [ 165.990283][ T1417] bridge_slave_0: left promiscuous mode [ 165.990619][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.816832][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.732283][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.166'. [ 177.753889][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.884721][ T1417] bond0 (unregistering): Released all slaves [ 179.119219][ T6237] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.119344][ T6237] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.119538][ T6237] bridge_slave_0: entered allmulticast mode [ 179.162438][ T6237] bridge_slave_0: entered promiscuous mode [ 179.548490][ T6187] hsr_slave_0: entered promiscuous mode [ 179.549846][ T6187] hsr_slave_1: entered promiscuous mode [ 179.550717][ T6187] debugfs: 'hsr0' already exists in 'hsr' [ 179.550739][ T6187] Cannot create hsr debugfs directory [ 179.580518][ T6237] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.580699][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.598510][ T6237] bridge_slave_1: entered allmulticast mode [ 179.607033][ T6237] bridge_slave_1: entered promiscuous mode [ 180.801048][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 180.884243][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 180.957715][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.957742][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.959123][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 180.959149][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 180.959167][ T5879] usb 3-1: SerialNumber: syz [ 181.348873][ T5879] usb 3-1: 0:2 : does not exist [ 181.348969][ T5879] usb 3-1: unit 255 not found! [ 182.167884][ T5879] usb 3-1: USB disconnect, device number 4 [ 182.464952][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 183.458400][ T6237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.522001][ T6237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.288815][ T6603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 187.690055][ T6237] team0: Port device team_slave_0 added [ 187.753331][ T6237] team0: Port device team_slave_1 added [ 188.044296][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.048208][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.237407][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.323039][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.323770][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 188.597336][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.597353][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.597375][ T6237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.781689][ T6237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.781702][ T6237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.781716][ T6237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.245801][ T1417] hsr_slave_0: left promiscuous mode [ 189.267349][ T1417] hsr_slave_1: left promiscuous mode [ 189.268499][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.268643][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.310106][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.310134][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.287419][ T1417] veth1_macvtap: left promiscuous mode [ 190.287727][ T1417] veth0_macvtap: left promiscuous mode [ 190.293170][ T1417] veth1_vlan: left promiscuous mode [ 190.293751][ T1417] veth0_vlan: left promiscuous mode [ 190.411922][ T5808] Bluetooth: hci1: command tx timeout [ 192.740926][ T5808] Bluetooth: hci1: command tx timeout [ 192.904548][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 192.907063][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.062359][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.066421][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.069796][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.180461][ T6684] netlink: 'syz.3.201': attribute type 1 has an invalid length. [ 194.337487][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.337558][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.819960][ T5808] Bluetooth: hci1: command tx timeout [ 195.292495][ T5808] Bluetooth: hci4: command tx timeout [ 196.706611][ T6716] netlink: 'syz.2.210': attribute type 1 has an invalid length. [ 196.893856][ T5808] Bluetooth: hci1: command tx timeout [ 197.396772][ T5808] Bluetooth: hci4: command tx timeout [ 199.451411][ T5808] Bluetooth: hci4: command tx timeout [ 199.594747][ T6735] fuse: Invalid rootmode [ 200.813323][ T6748] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 201.530995][ T5808] Bluetooth: hci4: command tx timeout [ 204.688433][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 205.054683][ T6780] netlink: 'syz.3.229': attribute type 1 has an invalid length. [ 205.708532][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 206.655820][ T5807] Bluetooth: hci2: command 0x0406 tx timeout [ 206.655830][ T5804] Bluetooth: hci3: command 0x0406 tx timeout [ 206.663182][ T5807] Bluetooth: hci0: command 0x0406 tx timeout [ 208.325756][ T6808] fuse: Bad value for 'rootmode' [ 212.253564][ T6838] fuse: Bad value for 'rootmode' [ 212.461088][ T5987] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 213.497352][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.497380][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.497399][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.497432][ T5987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.497452][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.562286][ T5987] usb 4-1: config 0 descriptor?? [ 215.092086][ T5987] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 216.322091][ C1] plantronics 0003:047F:FFFF.0003: usb_submit_urb(ctrl) failed: -1 [ 218.526076][ T10] usb 4-1: USB disconnect, device number 4 [ 220.174625][ T6906] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 220.658503][ T1417] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.714857][ T6631] chnl_net:caif_netlink_parms(): no params data found [ 223.391001][ T6930] ptrace attach of ""[6933] was attempted by "./syz-executor exec"[6930] [ 224.097894][ T1417] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.455403][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 224.455422][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 224.455469][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.267'. [ 224.491400][ T5987] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 224.656257][ T1417] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.698672][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 224.698704][ T5987] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 224.698725][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 224.698765][ T5987] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 224.698797][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.819526][ T5987] usb 4-1: config 0 descriptor?? [ 225.460037][ T6679] chnl_net:caif_netlink_parms(): no params data found [ 225.481102][ T5987] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 225.969667][ T1417] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.102699][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.103828][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.104714][ T6631] bridge_slave_0: entered allmulticast mode [ 226.145329][ T6631] bridge_slave_0: entered promiscuous mode [ 226.205975][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.206048][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.210183][ T6631] bridge_slave_1: entered allmulticast mode [ 226.254237][ T6631] bridge_slave_1: entered promiscuous mode [ 226.653102][ C1] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 226.995703][ T6631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.044085][ T6631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.494411][ T5974] usb 4-1: USB disconnect, device number 5 [ 228.837446][ T6631] team0: Port device team_slave_0 added [ 228.881974][ T6631] team0: Port device team_slave_1 added [ 228.882108][ T6679] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.882235][ T6679] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.882339][ T6679] bridge_slave_0: entered allmulticast mode [ 228.885632][ T6679] bridge_slave_0: entered promiscuous mode [ 229.045756][ T6679] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.045878][ T6679] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.046050][ T6679] bridge_slave_1: entered allmulticast mode [ 229.048396][ T6679] bridge_slave_1: entered promiscuous mode [ 229.562803][ T6988] netlink: 'syz.4.277': attribute type 1 has an invalid length. [ 229.639459][ T6989] overlayfs: failed to resolve './bus': -2 [ 230.774416][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.774432][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.774456][ T6631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.963039][ T6631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.963051][ T6631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 230.963064][ T6631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.059315][ T6679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.092364][ T6679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.283474][ T1417] bridge_slave_1: left allmulticast mode [ 231.283501][ T1417] bridge_slave_1: left promiscuous mode [ 231.284242][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.291133][ T5974] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 231.523813][ T1417] bridge_slave_0: left allmulticast mode [ 231.523832][ T1417] bridge_slave_0: left promiscuous mode [ 231.524000][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.613649][ T1417] bridge_slave_1: left allmulticast mode [ 232.613671][ T1417] bridge_slave_1: left promiscuous mode [ 232.613839][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.824415][ T5974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.824470][ T5974] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 232.824493][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.887287][ T5974] usb 3-1: config 0 descriptor?? [ 232.929902][ T5974] pwc: Askey VC010 type 2 USB webcam detected. [ 233.171500][ T1417] bridge_slave_0: left allmulticast mode [ 233.171529][ T1417] bridge_slave_0: left promiscuous mode [ 233.171773][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.249313][ T1417] bridge_slave_1: left allmulticast mode [ 233.249342][ T1417] bridge_slave_1: left promiscuous mode [ 233.249601][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.354761][ T5974] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.357576][ T5974] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.358490][ T5974] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.359377][ T5974] pwc: recv_control_msg error -32 req 04 val 1000 [ 233.360258][ T5974] pwc: recv_control_msg error -32 req 04 val 1300 [ 233.361099][ T5974] pwc: recv_control_msg error -32 req 04 val 1400 [ 233.407199][ T5974] pwc: recv_control_msg error -32 req 02 val 2000 [ 233.407750][ T5974] pwc: recv_control_msg error -32 req 02 val 2100 [ 233.409043][ T5974] pwc: recv_control_msg error -32 req 04 val 1500 [ 233.436470][ T1417] bridge_slave_0: left allmulticast mode [ 233.436499][ T1417] bridge_slave_0: left promiscuous mode [ 233.436763][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.658262][ T5974] pwc: recv_control_msg error -71 req 02 val 2400 [ 233.658744][ T5974] pwc: recv_control_msg error -71 req 02 val 2600 [ 233.661713][ T5974] pwc: recv_control_msg error -71 req 02 val 2900 [ 233.662229][ T5974] pwc: recv_control_msg error -71 req 02 val 2800 [ 233.662892][ T5974] pwc: recv_control_msg error -71 req 04 val 1100 [ 233.663333][ T5974] pwc: recv_control_msg error -71 req 04 val 1200 [ 233.688330][ T5974] pwc: Registered as video103. [ 233.705513][ T5974] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 233.761593][ T5974] usb 3-1: USB disconnect, device number 5 [ 234.622026][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.946744][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.257590][ T1417] bond0 (unregistering): Released all slaves [ 236.059228][ T7027] ptrace attach of ""[7030] was attempted by "./syz-executor exec"[7027] [ 236.783652][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.904146][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.135219][ T7035] ptrace attach of "./syz-executor exec"[7036] was attempted by "./syz-executor exec"[7035] [ 237.425662][ T1417] bond0 (unregistering): Released all slaves [ 239.551242][ T7050] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.111147][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 240.333454][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.333487][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.333508][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.333548][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.333570][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.339326][ T10] usb 5-1: config 0 descriptor?? [ 240.662801][ T7061] netlink: 140 bytes leftover after parsing attributes in process `syz.2.299'. [ 240.837823][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 240.871963][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.933269][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.974891][ T1417] bond0 (unregistering): Released all slaves [ 241.790363][ T6679] team0: Port device team_slave_0 added [ 241.993371][ T6679] team0: Port device team_slave_1 added [ 242.035456][ C0] plantronics 0003:047F:FFFF.0005: usb_submit_urb(ctrl) failed: -1 [ 242.377465][ T7077] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 243.796807][ T10] usb 5-1: USB disconnect, device number 3 [ 244.020506][ T7083] ptrace attach of ""[7085] was attempted by "./syz-executor exec"[7083] [ 244.846561][ T6631] hsr_slave_0: entered promiscuous mode [ 244.847898][ T6631] hsr_slave_1: entered promiscuous mode [ 244.848902][ T6631] debugfs: 'hsr0' already exists in 'hsr' [ 244.848926][ T6631] Cannot create hsr debugfs directory [ 246.765938][ T7112] netlink: 'syz.4.314': attribute type 1 has an invalid length. [ 246.806007][ T7112] overlayfs: failed to resolve './bus': -2 [ 247.458286][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.458304][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.458329][ T6679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.638513][ T6679] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.638530][ T6679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.638555][ T6679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.886361][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.990512][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 248.033703][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 248.055122][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 248.056379][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 248.057215][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.284941][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.391334][ T1417] hsr_slave_0: left promiscuous mode [ 249.452389][ T1417] hsr_slave_1: left promiscuous mode [ 249.453444][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.501993][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.091134][ T61] Bluetooth: hci5: command tx timeout [ 250.104261][ T1417] hsr_slave_0: left promiscuous mode [ 250.142918][ T1417] hsr_slave_1: left promiscuous mode [ 250.144653][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.144680][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.182164][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.182191][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.693711][ T1417] veth1_macvtap: left promiscuous mode [ 250.693836][ T1417] veth0_macvtap: left promiscuous mode [ 250.696456][ T1417] veth1_vlan: left promiscuous mode [ 250.696654][ T1417] veth0_vlan: left promiscuous mode [ 250.781701][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 250.781795][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 250.783590][ T7146] netlink: 4 bytes leftover after parsing attributes in process `syz.2.322'. [ 251.880244][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 251.880342][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 251.882295][ T7150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 252.171343][ T61] Bluetooth: hci5: command tx timeout [ 253.759462][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 253.788184][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 253.790306][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 253.807761][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 253.808639][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 254.392251][ T61] Bluetooth: hci5: command tx timeout [ 255.021714][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 255.244220][ T7174] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 255.992021][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.992090][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.011570][ T61] Bluetooth: hci1: command tx timeout [ 256.215312][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 256.410975][ T61] Bluetooth: hci5: command tx timeout [ 258.095583][ T61] Bluetooth: hci1: command tx timeout [ 260.171020][ T61] Bluetooth: hci1: command tx timeout [ 261.435934][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 261.523403][ T7218] netlink: 'syz.3.342': attribute type 1 has an invalid length. [ 261.951556][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 262.261054][ T61] Bluetooth: hci1: command tx timeout [ 264.998831][ T7246] overlayfs: failed to resolve './bus': -2 [ 266.615348][ T7259] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 269.504670][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 269.504769][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 269.505309][ T7278] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 270.457344][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 270.457369][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 270.457466][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 270.725313][ T56] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 271.149785][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.149819][ T56] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.149840][ T56] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.149889][ T56] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.149910][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.214973][ T56] usb 4-1: config 0 descriptor?? [ 271.583926][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 271.635962][ T56] usbhid 4-1:0.0: can't add hid device: -71 [ 271.640005][ T56] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 271.687609][ T56] usb 4-1: USB disconnect, device number 6 [ 271.901792][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 272.395286][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 272.395313][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 272.395387][ T7292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.364'. [ 272.482609][ T7290] netlink: 'syz.3.363': attribute type 1 has an invalid length. [ 277.607450][ T7325] netlink: 'syz.3.373': attribute type 1 has an invalid length. [ 280.431058][ T5973] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 280.606613][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.606656][ T5973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.606677][ T5973] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 280.606717][ T5973] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 280.606739][ T5973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.687464][ T5973] usb 4-1: config 0 descriptor?? [ 281.801606][ T5973] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 281.824753][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 281.844855][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 281.872256][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 281.879141][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 281.879956][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 282.150299][ T5973] usb 4-1: USB disconnect, device number 7 [ 282.291050][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 282.470414][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.470440][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 282.472274][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 282.472301][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 282.472319][ T5879] usb 3-1: SerialNumber: syz [ 282.767161][ T5879] usb 3-1: 0:2 : does not exist [ 282.767251][ T5879] usb 3-1: unit 255 not found! [ 282.851647][ T5879] usb 3-1: USB disconnect, device number 6 [ 282.956332][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.008580][ T5808] Bluetooth: hci6: command tx timeout [ 284.199899][ T7364] netlink: 'syz.2.382': attribute type 1 has an invalid length. [ 284.699837][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 284.699929][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 284.700494][ T7374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.383'. [ 287.291086][ T5808] Bluetooth: hci6: command tx timeout [ 288.666976][ T7396] ptrace attach of ""[7403] was attempted by "./syz-executor exec"[7396] [ 289.230996][ T5879] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 289.373160][ T5808] Bluetooth: hci6: command tx timeout [ 289.374791][ T7343] chnl_net:caif_netlink_parms(): no params data found [ 289.384236][ T5879] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.384261][ T5879] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.385515][ T5879] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.385539][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.385561][ T5879] usb 3-1: SerialNumber: syz [ 289.396289][ T7123] chnl_net:caif_netlink_parms(): no params data found [ 289.658644][ T5879] usb 3-1: 0:2 : does not exist [ 289.658736][ T5879] usb 3-1: unit 255 not found! [ 289.754858][ T5879] usb 3-1: USB disconnect, device number 7 [ 290.045337][ T5852] udevd[5852]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.099451][ T7161] chnl_net:caif_netlink_parms(): no params data found [ 290.115429][ T7432] netlink: 'syz.3.391': attribute type 1 has an invalid length. [ 291.044065][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 291.044158][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 291.044782][ T7448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 291.711348][ T5808] Bluetooth: hci6: command tx timeout [ 295.625667][ T7343] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.626074][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.626286][ T7343] bridge_slave_0: entered allmulticast mode [ 295.628925][ T7343] bridge_slave_0: entered promiscuous mode [ 295.865715][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.865834][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.866066][ T7123] bridge_slave_0: entered allmulticast mode [ 295.868484][ T7123] bridge_slave_0: entered promiscuous mode [ 295.922577][ T7343] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.928097][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.928330][ T7343] bridge_slave_1: entered allmulticast mode [ 295.931539][ T7343] bridge_slave_1: entered promiscuous mode [ 295.939312][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.939430][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.939652][ T7123] bridge_slave_1: entered allmulticast mode [ 296.535293][ T7123] bridge_slave_1: entered promiscuous mode [ 297.561424][ T7490] netlink: 'syz.2.400': attribute type 1 has an invalid length. [ 297.569502][ T7489] Device name cannot be null; rc = [-22] [ 301.157759][ T7343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.200086][ T7123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.300222][ T7161] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.300448][ T7161] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.300687][ T7161] bridge_slave_0: entered allmulticast mode [ 301.327821][ T7161] bridge_slave_0: entered promiscuous mode [ 301.339020][ T7343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.359787][ T7123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.381648][ T7161] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.384685][ T7161] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.385221][ T7161] bridge_slave_1: entered allmulticast mode [ 301.386609][ T7161] bridge_slave_1: entered promiscuous mode [ 303.818645][ T7526] netlink: 'syz.3.410': attribute type 1 has an invalid length. [ 306.907708][ T7343] team0: Port device team_slave_0 added [ 306.912778][ T7123] team0: Port device team_slave_0 added [ 306.929944][ T7161] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.942322][ T7343] team0: Port device team_slave_1 added [ 306.946298][ T7123] team0: Port device team_slave_1 added [ 306.948423][ T7161] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.614635][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 308.647238][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 308.652103][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 308.653302][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 308.654114][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 309.432570][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.432581][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.432595][ T7343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.435989][ T7161] team0: Port device team_slave_0 added [ 309.452344][ T7343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.452360][ T7343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.452385][ T7343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.555019][ T7161] team0: Port device team_slave_1 added [ 309.840243][ T7571] netlink: 'syz.2.420': attribute type 1 has an invalid length. [ 309.845371][ T7570] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 309.845628][ T7570] block device autoloading is deprecated and will be removed. [ 310.813416][ T61] Bluetooth: hci3: command tx timeout [ 311.502106][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.502122][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.502147][ T7161] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.775563][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 311.775655][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 311.776195][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.428'. [ 312.511236][ T5940] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 312.562118][ T7161] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 312.562134][ T7161] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 312.562157][ T7161] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.660955][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 312.663404][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 312.663451][ T5940] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 312.663474][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.710961][ T5940] usb 4-1: config 0 descriptor?? [ 312.901461][ T61] Bluetooth: hci3: command tx timeout [ 312.935947][ T7343] hsr_slave_0: entered promiscuous mode [ 312.963579][ T7343] hsr_slave_1: entered promiscuous mode [ 313.017891][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.035086][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.038643][ T5940] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 313.040702][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.043815][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.044569][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 313.152603][ T5987] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 313.301007][ T5987] usb 3-1: Using ep0 maxpacket: 8 [ 313.307769][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 313.307870][ T5987] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 313.307893][ T5987] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.365537][ T5987] usb 3-1: config 0 descriptor?? [ 313.400187][ T1417] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.636372][ T5987] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 314.129562][ T1417] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.508624][ T1417] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.699654][ T10] usb 3-1: USB disconnect, device number 8 [ 314.741167][ T5940] usb 4-1: USB disconnect, device number 8 [ 314.971573][ T61] Bluetooth: hci3: command tx timeout [ 314.988724][ T1417] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.564932][ T61] Bluetooth: hci4: command tx timeout [ 316.226973][ T7631] Device name cannot be null; rc = [-22] [ 317.051216][ T61] Bluetooth: hci3: command tx timeout [ 317.195763][ T7558] chnl_net:caif_netlink_parms(): no params data found [ 317.222015][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.222083][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.333774][ T7644] netlink: 8 bytes leftover after parsing attributes in process `syz.2.439'. [ 317.453325][ T7343] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.861757][ T61] Bluetooth: hci4: command tx timeout [ 319.974555][ T61] Bluetooth: hci4: command tx timeout [ 320.012481][ T7343] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 320.196606][ T7343] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 320.322594][ T7605] chnl_net:caif_netlink_parms(): no params data found [ 320.327017][ T1417] bridge_slave_1: left allmulticast mode [ 320.327043][ T1417] bridge_slave_1: left promiscuous mode [ 320.327285][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.405414][ T1417] bridge_slave_0: left allmulticast mode [ 320.405434][ T1417] bridge_slave_0: left promiscuous mode [ 320.405595][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.463936][ T1417] bridge_slave_1: left allmulticast mode [ 321.463956][ T1417] bridge_slave_1: left promiscuous mode [ 321.464099][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.572482][ T1417] bridge_slave_0: left allmulticast mode [ 321.572510][ T1417] bridge_slave_0: left promiscuous mode [ 321.572819][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.650973][ T5987] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 321.678094][ T1417] bridge_slave_1: left allmulticast mode [ 321.678123][ T1417] bridge_slave_1: left promiscuous mode [ 321.695571][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.773957][ T1417] bridge_slave_0: left allmulticast mode [ 321.773985][ T1417] bridge_slave_0: left promiscuous mode [ 321.774229][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.830913][ T5987] usb 4-1: Using ep0 maxpacket: 16 [ 321.836556][ T5987] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.836584][ T5987] usb 4-1: config 0 interface 0 has no altsetting 0 [ 321.836616][ T5987] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 321.836638][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.883741][ T5987] usb 4-1: config 0 descriptor?? [ 321.913131][ T5987] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 322.100890][ T61] Bluetooth: hci4: command tx timeout [ 322.154122][ T7681] Device name cannot be null; rc = [-22] [ 323.981751][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.061575][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.264806][ T1417] bond0 (unregistering): Released all slaves [ 324.891393][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 324.891418][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 324.891491][ T7697] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 325.701028][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.702054][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.845436][ T1417] bond0 (unregistering): Released all slaves [ 327.741692][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.801704][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.883671][ T1417] bond0 (unregistering): Released all slaves [ 327.991238][ T7343] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 328.350021][ T5949] usb 4-1: USB disconnect, device number 9 [ 330.811355][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 330.811382][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 330.811455][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 331.246388][ T7742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.459'. [ 331.246836][ T7742] netlink: 16 bytes leftover after parsing attributes in process `syz.3.459'. [ 332.377759][ T7748] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 332.666258][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 332.666350][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 332.666880][ T7752] netlink: 4 bytes leftover after parsing attributes in process `syz.2.461'. [ 333.731730][ T7558] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.734263][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.734512][ T7558] bridge_slave_0: entered allmulticast mode [ 333.737575][ T7558] bridge_slave_0: entered promiscuous mode [ 333.813128][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 333.813154][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.465'. [ 335.188888][ T7558] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.189016][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.189249][ T7558] bridge_slave_1: entered allmulticast mode [ 335.232768][ T7558] bridge_slave_1: entered promiscuous mode [ 335.821076][ T5974] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 335.974994][ T5974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.975020][ T5974] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.975053][ T5974] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 335.975074][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.020290][ T5974] usb 3-1: config 0 descriptor?? [ 336.477539][ T7558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.621900][ T7558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.622878][ T7605] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.623065][ T7605] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.623243][ T7605] bridge_slave_0: entered allmulticast mode [ 336.626462][ T7605] bridge_slave_0: entered promiscuous mode [ 336.873393][ T7605] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.873526][ T7605] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.873728][ T7605] bridge_slave_1: entered allmulticast mode [ 336.876391][ T7605] bridge_slave_1: entered promiscuous mode [ 337.048962][ T7558] team0: Port device team_slave_0 added [ 337.155771][ T7558] team0: Port device team_slave_1 added [ 337.160583][ T7605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.372637][ T5940] usb 3-1: USB disconnect, device number 9 [ 338.412834][ T1417] hsr_slave_0: left promiscuous mode [ 339.388786][ T1417] hsr_slave_1: left promiscuous mode [ 339.389999][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.390024][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.531641][ T1417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.531660][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.162642][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.301760][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.411151][ T6272] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 340.502746][ T7800] __nla_validate_parse: 1 callbacks suppressed [ 340.502765][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 340.502783][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 340.502858][ T7800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.473'. [ 340.574485][ T1417] hsr_slave_0: left promiscuous mode [ 340.577589][ T6272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.577614][ T6272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.577625][ T6272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 340.577649][ T6272] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 340.577660][ T6272] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.580768][ T6272] usb 4-1: config 0 descriptor?? [ 340.661163][ T1417] hsr_slave_1: left promiscuous mode [ 340.665344][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.711783][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.864336][ T1417] veth1_macvtap: left promiscuous mode [ 340.864448][ T1417] veth0_macvtap: left promiscuous mode [ 340.865973][ T1417] veth1_vlan: left promiscuous mode [ 340.867357][ T1417] veth0_vlan: left promiscuous mode [ 341.078729][ T6272] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 341.451234][ T5987] usb 4-1: USB disconnect, device number 10 [ 341.729201][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.744683][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.745889][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.747197][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.750270][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 342.677996][ T7813] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 344.131069][ T5808] Bluetooth: hci1: command tx timeout [ 344.759190][ T7819] comedi comedi0: dac02: I/O port conflict (0x3,8) [ 346.171274][ T5808] Bluetooth: hci1: command tx timeout [ 346.541678][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 346.781716][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 348.264757][ T5808] Bluetooth: hci1: command tx timeout [ 349.141734][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 349.271751][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 350.121675][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 350.252551][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 350.331662][ T5808] Bluetooth: hci1: command tx timeout [ 350.789791][ T7605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.059978][ T7831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 351.106180][ T7831] bond0: (slave rose0): Enslaving as an active interface with an up link [ 351.301790][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.301804][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 351.301823][ T7558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.309436][ T5987] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 352.351418][ T7558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.351440][ T7558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 352.351466][ T7558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.390729][ T5987] usb 4-1: Using ep0 maxpacket: 32 [ 353.392830][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 353.394859][ T5987] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 353.394884][ T5987] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 353.394902][ T5987] usb 4-1: Manufacturer: syz [ 353.394915][ T5987] usb 4-1: SerialNumber: syz [ 353.460019][ T5987] usb 4-1: config 0 descriptor?? [ 353.709362][ T7853] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 354.487405][ T7854] overlayfs: failed to resolve './bus': -2 [ 354.677493][ T7605] team0: Port device team_slave_0 added [ 354.767122][ T7605] team0: Port device team_slave_1 added [ 355.025361][ T5974] usb 4-1: USB disconnect, device number 11 [ 357.852039][ T7870] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 357.885810][ T7558] hsr_slave_0: entered promiscuous mode [ 357.887142][ T7558] hsr_slave_1: entered promiscuous mode [ 357.888055][ T7558] debugfs: 'hsr0' already exists in 'hsr' [ 357.888077][ T7558] Cannot create hsr debugfs directory [ 357.902909][ T7878] batman_adv: batadv0: adding TT local entry ba:e1:05:00:07:00 to non-existent VLAN 1280 [ 357.920739][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.920754][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.920777][ T7605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.953129][ T7605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.953145][ T7605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.953169][ T7605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.375184][ T7605] hsr_slave_0: entered promiscuous mode [ 360.379577][ T7605] hsr_slave_1: entered promiscuous mode [ 360.394002][ T7605] debugfs: 'hsr0' already exists in 'hsr' [ 360.394029][ T7605] Cannot create hsr debugfs directory [ 361.800908][ T5974] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 361.968434][ T5974] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.968486][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 361.968521][ T5974] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.968539][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.980514][ T5974] usb 4-1: config 0 descriptor?? [ 361.995393][ T5974] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 362.388824][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 362.388915][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 362.389496][ T7926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 363.422396][ T7558] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.270440][ T7558] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.368896][ T7808] chnl_net:caif_netlink_parms(): no params data found [ 364.405251][ T7558] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.599174][ T5940] usb 4-1: USB disconnect, device number 12 [ 364.625093][ T7944] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 364.630009][ T7558] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 366.915306][ T7605] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 368.460991][ T5949] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 368.611076][ T5949] usb 4-1: Using ep0 maxpacket: 32 [ 368.613697][ T5949] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.615984][ T5949] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 368.616010][ T5949] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 368.616029][ T5949] usb 4-1: Manufacturer: syz [ 368.616043][ T5949] usb 4-1: SerialNumber: syz [ 368.649403][ T6272] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 368.681575][ T5949] usb 4-1: config 0 descriptor?? [ 368.830964][ T6272] usb 3-1: Using ep0 maxpacket: 32 [ 368.833456][ T6272] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 368.835711][ T6272] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=30.48 [ 368.835737][ T6272] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 368.835756][ T6272] usb 3-1: Manufacturer: syz [ 368.835769][ T6272] usb 3-1: SerialNumber: syz [ 368.902875][ T6272] usb 3-1: config 0 descriptor?? [ 369.258412][ T8001] overlayfs: failed to resolve './bus': -2 [ 369.297587][ T7808] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.297920][ T7808] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.298477][ T7808] bridge_slave_0: entered allmulticast mode [ 369.303221][ T7808] bridge_slave_0: entered promiscuous mode [ 369.320601][ T7605] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.352709][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 369.411227][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 369.416225][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 369.417615][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 369.418717][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 370.041099][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.041220][ T7808] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.041458][ T7808] bridge_slave_1: entered allmulticast mode [ 370.043793][ T7808] bridge_slave_1: entered promiscuous mode [ 370.084955][ T6272] usb 4-1: USB disconnect, device number 13 [ 370.089293][ T7605] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 370.511744][ T5974] usb 3-1: USB disconnect, device number 10 [ 370.583939][ T7605] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 371.538615][ T61] Bluetooth: hci5: command tx timeout [ 371.662588][ T7808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.953404][ T5940] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 372.111343][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 372.115477][ T5940] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 372.115500][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.115510][ T5940] usb 3-1: Product: syz [ 372.115517][ T5940] usb 3-1: Manufacturer: syz [ 372.115524][ T5940] usb 3-1: SerialNumber: syz [ 372.159380][ T5940] usb 3-1: config 0 descriptor?? [ 372.172580][ T7808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.591514][ T5940] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 373.555368][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 373.578325][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 373.579542][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 373.588793][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 373.589585][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 373.612921][ T5808] Bluetooth: hci5: command tx timeout [ 373.688422][ T7808] team0: Port device team_slave_0 added [ 374.021669][ T5940] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 374.045459][ T5940] usb 3-1: USB disconnect, device number 11 [ 374.264437][ T7808] team0: Port device team_slave_1 added [ 375.245072][ T8061] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 375.325653][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.325670][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.325693][ T7808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.126938][ T61] Bluetooth: hci3: command tx timeout [ 376.127274][ T61] Bluetooth: hci5: command tx timeout [ 376.518894][ T7808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.518910][ T7808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.518932][ T7808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.640941][ T61] Bluetooth: hci3: command tx timeout [ 378.642355][ T5808] Bluetooth: hci5: command tx timeout [ 378.667017][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.667086][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.597453][ T7808] hsr_slave_0: entered promiscuous mode [ 379.598997][ T7808] hsr_slave_1: entered promiscuous mode [ 379.599929][ T7808] debugfs: 'hsr0' already exists in 'hsr' [ 379.599950][ T7808] Cannot create hsr debugfs directory [ 380.661185][ T5808] Bluetooth: hci3: command tx timeout [ 380.679071][ T8119] netlink: 68 bytes leftover after parsing attributes in process `syz.2.541'. [ 381.316830][ T8002] chnl_net:caif_netlink_parms(): no params data found [ 381.500581][ T1417] bridge_slave_1: left allmulticast mode [ 381.500609][ T1417] bridge_slave_1: left promiscuous mode [ 381.510405][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.672514][ T1417] bridge_slave_0: left allmulticast mode [ 381.672544][ T1417] bridge_slave_0: left promiscuous mode [ 381.672807][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.027790][ T1417] bridge_slave_1: left allmulticast mode [ 382.027820][ T1417] bridge_slave_1: left promiscuous mode [ 382.028071][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.136254][ T1417] bridge_slave_0: left allmulticast mode [ 382.136282][ T1417] bridge_slave_0: left promiscuous mode [ 382.136517][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.331235][ T1417] bridge_slave_1: left allmulticast mode [ 382.331254][ T1417] bridge_slave_1: left promiscuous mode [ 382.331411][ T1417] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.412535][ T1417] bridge_slave_0: left allmulticast mode [ 382.412554][ T1417] bridge_slave_0: left promiscuous mode [ 382.412751][ T1417] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.741774][ T5808] Bluetooth: hci3: command tx timeout [ 383.379777][ T8162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 384.120925][ T5974] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 384.370325][ T5974] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 384.370371][ T5974] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 384.370384][ T5974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.376827][ T5974] usb 4-1: config 0 descriptor?? [ 384.390406][ T5974] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 384.467176][ T8166] netlink: 'syz.2.557': attribute type 1 has an invalid length. [ 384.509020][ T8166] overlayfs: missing 'workdir' [ 385.372714][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.433326][ T5974] usb 4-1: USB disconnect, device number 14 [ 385.491796][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.576835][ T1417] bond0 (unregistering): Released all slaves [ 385.812290][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.838709][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.223808][ T1417] bond0 (unregistering): Released all slaves [ 389.664242][ T1417] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.903318][ T1417] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.966045][ T1417] bond0 (unregistering): Released all slaves [ 390.601619][ T8203] ptrace attach of ""[8205] was attempted by "./syz-executor exec"[8203] [ 392.208627][ T8045] chnl_net:caif_netlink_parms(): no params data found [ 392.271881][ T5887] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 392.423164][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.423216][ T5887] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 392.423236][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.471621][ T5887] usb 4-1: config 0 descriptor?? [ 392.479705][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 392.841964][ T8223] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 392.842260][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.842537][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.843033][ T8002] bridge_slave_0: entered allmulticast mode [ 392.847545][ T8002] bridge_slave_0: entered promiscuous mode [ 392.881085][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 392.886091][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 392.886847][ T5887] pwc: recv_control_msg error -32 req 02 val 2c00 [ 392.887503][ T5887] pwc: recv_control_msg error -32 req 04 val 1000 [ 392.887770][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.888002][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.888152][ T5887] pwc: recv_control_msg error -32 req 04 val 1300 [ 392.888800][ T5887] pwc: recv_control_msg error -32 req 04 val 1400 [ 392.889037][ T8002] bridge_slave_1: entered allmulticast mode [ 392.889447][ T5887] pwc: recv_control_msg error -32 req 02 val 2000 [ 392.890114][ T5887] pwc: recv_control_msg error -32 req 02 val 2100 [ 392.890880][ T5887] pwc: recv_control_msg error -32 req 04 val 1500 [ 392.891525][ T5887] pwc: recv_control_msg error -32 req 02 val 2500 [ 392.894930][ T8002] bridge_slave_1: entered promiscuous mode [ 393.090919][ T1417] hsr_slave_0: left promiscuous mode [ 393.092958][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 393.096337][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 393.096751][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 393.097435][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 393.097881][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 393.116516][ T5887] pwc: Registered as video103. [ 393.125883][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 393.161525][ T5887] usb 4-1: USB disconnect, device number 15 [ 393.161657][ T1417] hsr_slave_1: left promiscuous mode [ 393.167027][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.225539][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.292374][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.316487][ T1417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.571038][ T5940] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 393.732871][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.732904][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 393.732924][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 393.732965][ T5940] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 393.732983][ T5940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.741958][ T5940] usb 3-1: config 0 descriptor?? [ 394.267409][ T5887] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 394.288576][ T5940] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 394.410937][ T5887] usb 4-1: Using ep0 maxpacket: 8 [ 394.413413][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 394.413459][ T5887] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 394.413481][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.426932][ T5887] usb 4-1: config 0 descriptor?? [ 394.662730][ T5940] usb 3-1: USB disconnect, device number 12 [ 394.704531][ T5887] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 394.884196][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 395.314931][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 397.014393][ T5940] usb 4-1: USB disconnect, device number 16 [ 400.450915][ T6272] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 401.517162][ T6272] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.517218][ T6272] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 401.517239][ T6272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.531074][ T6272] usb 3-1: config 0 descriptor?? [ 401.536719][ T6272] pwc: Askey VC010 type 2 USB webcam detected. [ 402.105274][ T6272] pwc: recv_control_msg error -32 req 02 val 2b00 [ 402.162274][ T6272] pwc: recv_control_msg error -32 req 02 val 2700 [ 402.167987][ T6272] pwc: recv_control_msg error -32 req 02 val 2c00 [ 402.168564][ T6272] pwc: recv_control_msg error -32 req 04 val 1000 [ 402.169190][ T6272] pwc: recv_control_msg error -32 req 04 val 1300 [ 402.172699][ T6272] pwc: recv_control_msg error -32 req 04 val 1400 [ 402.173551][ T6272] pwc: recv_control_msg error -32 req 02 val 2000 [ 402.319949][ T6272] pwc: recv_control_msg error -32 req 02 val 2100 [ 402.490580][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.535847][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.550713][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.564826][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.567840][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 402.657772][ T6272] pwc: recv_control_msg error -32 req 04 val 1500 [ 402.658540][ T6272] pwc: recv_control_msg error -32 req 02 val 2500 [ 402.901626][ T6272] pwc: recv_control_msg error -71 req 02 val 2600 [ 402.927149][ T6272] pwc: recv_control_msg error -71 req 02 val 2900 [ 402.949539][ T6272] pwc: recv_control_msg error -71 req 02 val 2800 [ 403.007033][ T6272] pwc: recv_control_msg error -71 req 04 val 1100 [ 403.099997][ T6272] pwc: recv_control_msg error -71 req 04 val 1200 [ 403.140092][ T6272] pwc: Registered as video103. [ 403.377260][ T6272] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 403.451276][ T6272] usb 3-1: USB disconnect, device number 13 [ 404.760434][ T61] Bluetooth: hci4: command tx timeout [ 405.981996][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 407.507084][ T61] Bluetooth: hci4: command tx timeout [ 407.593373][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 409.573016][ T61] Bluetooth: hci4: command tx timeout [ 411.610890][ T61] Bluetooth: hci4: command tx timeout [ 411.684725][ T1417] team0 (unregistering): Port device team_slave_1 removed [ 411.861227][ T1417] team0 (unregistering): Port device team_slave_0 removed [ 417.235499][ T8353] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 420.224712][ T8002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.374509][ T8002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.374739][ T8045] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.375175][ T8045] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.375667][ T8045] bridge_slave_0: entered allmulticast mode [ 423.378321][ T8045] bridge_slave_0: entered promiscuous mode [ 425.483608][ T8045] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.759911][ T8045] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.760950][ T8045] bridge_slave_1: entered allmulticast mode [ 425.951157][ T8045] bridge_slave_1: entered promiscuous mode [ 427.733691][ T8002] team0: Port device team_slave_0 added [ 428.696105][ T8002] team0: Port device team_slave_1 added [ 428.709636][ T8045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.191219][ T8045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.332595][ T5940] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 431.520886][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 431.523766][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 431.523814][ T5940] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 431.523845][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.788801][ T5940] usb 4-1: config 0 descriptor?? [ 434.476447][ T5808] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 434.479471][ T5808] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 434.531196][ T5940] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 434.539448][ T5808] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 434.591394][ T5940] usb 4-1: USB disconnect, device number 17 [ 434.592076][ T5808] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 434.597960][ T5808] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 437.191011][ T5808] Bluetooth: hci6: command tx timeout [ 439.304744][ T8477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.641'. [ 439.311079][ T5808] Bluetooth: hci6: command tx timeout [ 439.353362][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 439.364852][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.367199][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 439.369755][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 439.370605][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 439.805534][ T8283] chnl_net:caif_netlink_parms(): no params data found [ 440.173940][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.174012][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.371156][ T61] Bluetooth: hci6: command tx timeout [ 441.535936][ T61] Bluetooth: hci7: command tx timeout [ 443.360914][ T806] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 443.490915][ T61] Bluetooth: hci6: command tx timeout [ 443.763692][ T61] Bluetooth: hci7: command tx timeout [ 444.236273][ T806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 444.236330][ T806] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 444.236353][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.242700][ T806] usb 3-1: config 0 descriptor?? [ 444.248231][ T806] pwc: Askey VC010 type 2 USB webcam detected. [ 444.933751][ T806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 444.935664][ T806] pwc: recv_control_msg error -32 req 02 val 2700 [ 444.990600][ T806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 445.015020][ T806] pwc: recv_control_msg error -32 req 04 val 1000 [ 445.020515][ T806] pwc: recv_control_msg error -32 req 04 val 1300 [ 445.036848][ T806] pwc: recv_control_msg error -32 req 04 val 1400 [ 445.050903][ T806] pwc: recv_control_msg error -32 req 02 val 2000 [ 445.188601][ T806] pwc: recv_control_msg error -32 req 02 val 2100 [ 445.411008][ T806] pwc: recv_control_msg error -32 req 04 val 1500 [ 445.854748][ T61] Bluetooth: hci7: command tx timeout [ 446.152492][ T806] pwc: recv_control_msg error -32 req 02 val 2500 [ 446.354991][ T806] pwc: recv_control_msg error -71 req 02 val 2400 [ 446.355485][ T806] pwc: recv_control_msg error -71 req 02 val 2600 [ 446.355935][ T806] pwc: recv_control_msg error -71 req 02 val 2900 [ 446.356412][ T806] pwc: recv_control_msg error -71 req 02 val 2800 [ 446.357093][ T806] pwc: recv_control_msg error -71 req 04 val 1100 [ 446.357549][ T806] pwc: recv_control_msg error -71 req 04 val 1200 [ 446.362663][ T806] pwc: Registered as video103. [ 446.365887][ T806] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8 [ 446.400961][ T806] usb 3-1: USB disconnect, device number 14 [ 448.091037][ T61] Bluetooth: hci7: command tx timeout [ 448.834332][ T806] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 449.130976][ T806] usb 3-1: Using ep0 maxpacket: 8 [ 449.138771][ T806] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 449.138818][ T806] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 449.138840][ T806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.242469][ T806] usb 3-1: config 0 descriptor?? [ 451.850502][ T806] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 451.931959][ T806] usb 3-1: USB disconnect, device number 15 [ 452.537181][ T8519] netlink: 20 bytes leftover after parsing attributes in process `syz.3.650'. [ 459.458560][ T8283] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.491675][ T8283] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.491929][ T8283] bridge_slave_0: entered allmulticast mode [ 459.670966][ T8283] bridge_slave_0: entered promiscuous mode [ 460.158029][ T8283] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.158220][ T8283] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.158443][ T8283] bridge_slave_1: entered allmulticast mode [ 460.164605][ T8283] bridge_slave_1: entered promiscuous mode [ 460.870988][ T806] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 461.151162][ T8559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.659'. [ 461.170838][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 461.173487][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 461.173531][ T806] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 461.173553][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.219837][ T806] usb 4-1: config 0 descriptor?? [ 461.568777][ T806] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 461.936667][ T8562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.158162][ T8283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.158535][ T8442] chnl_net:caif_netlink_parms(): no params data found [ 462.396831][ T8283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.821164][ T6272] usb 4-1: USB disconnect, device number 18 [ 464.542152][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 464.561665][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 464.571221][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 464.582961][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 464.583811][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 464.890892][ T806] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 465.082409][ T806] usb 4-1: Using ep0 maxpacket: 8 [ 465.085011][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.085056][ T806] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 465.085078][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.102519][ T806] usb 4-1: config 0 descriptor?? [ 466.099313][ T806] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 466.670996][ T5808] Bluetooth: hci3: command tx timeout [ 467.176845][ T5973] usb 4-1: USB disconnect, device number 19 [ 467.800975][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 467.810037][ T8595] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 468.734947][ T5808] Bluetooth: hci3: command tx timeout [ 470.812911][ T61] Bluetooth: hci3: command tx timeout [ 474.511609][ T61] Bluetooth: hci3: command tx timeout [ 476.799684][ T5987] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 476.862489][ T8649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 477.410967][ T5987] usb 4-1: Using ep0 maxpacket: 8 [ 477.421324][ T5987] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.421379][ T5987] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 477.421417][ T5987] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 477.421442][ T5987] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.443109][ T5987] usb 4-1: config 0 descriptor?? [ 477.662543][ T8442] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.662745][ T8442] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.662996][ T8442] bridge_slave_0: entered allmulticast mode [ 477.718494][ T8442] bridge_slave_0: entered promiscuous mode [ 477.870709][ T5987] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 478.085355][ T8442] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.085509][ T8442] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.085742][ T8442] bridge_slave_1: entered allmulticast mode [ 478.088299][ T8442] bridge_slave_1: entered promiscuous mode [ 478.166086][ T806] usb 4-1: USB disconnect, device number 20 [ 481.260830][ T806] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 481.582577][ T806] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.582634][ T806] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 481.582656][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.589260][ T806] usb 4-1: config 0 descriptor?? [ 481.636019][ T806] pwc: Askey VC010 type 2 USB webcam detected. [ 482.786297][ T8442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.882915][ T806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 483.101459][ T8467] chnl_net:caif_netlink_parms(): no params data found [ 483.201124][ T806] pwc: recv_control_msg error -32 req 02 val 2700 [ 483.205613][ T806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 483.206265][ T806] pwc: recv_control_msg error -32 req 04 val 1000 [ 483.206977][ T806] pwc: recv_control_msg error -32 req 04 val 1300 [ 483.207628][ T806] pwc: recv_control_msg error -32 req 04 val 1400 [ 483.208343][ T806] pwc: recv_control_msg error -32 req 02 val 2000 [ 483.209150][ T806] pwc: recv_control_msg error -32 req 02 val 2100 [ 483.209840][ T806] pwc: recv_control_msg error -32 req 04 val 1500 [ 483.210499][ T806] pwc: recv_control_msg error -32 req 02 val 2500 [ 483.211196][ T806] pwc: recv_control_msg error -32 req 02 val 2400 [ 483.211554][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 483.211750][ T806] pwc: recv_control_msg error -32 req 02 val 2600 [ 483.212105][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 483.212283][ T806] pwc: recv_control_msg error -32 req 02 val 2900 [ 483.212611][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 483.212796][ T806] pwc: recv_control_msg error -32 req 02 val 2800 [ 483.213512][ T806] pwc: recv_control_msg error -71 req 04 val 1100 [ 483.214034][ T806] pwc: recv_control_msg error -71 req 04 val 1200 [ 483.225408][ T806] pwc: Registered as video103. [ 483.228641][ T806] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 483.243150][ T8442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.260461][ T806] usb 4-1: USB disconnect, device number 21 [ 486.857224][ T8442] team0: Port device team_slave_0 added [ 486.973486][ T8442] team0: Port device team_slave_1 added [ 491.452660][ T8442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 491.452677][ T8442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 491.452701][ T8442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.793982][ T8467] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.794196][ T8467] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.794447][ T8467] bridge_slave_0: entered allmulticast mode [ 492.799367][ T8467] bridge_slave_0: entered promiscuous mode [ 493.730790][ T8467] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.907978][ T8467] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.987436][ T8467] bridge_slave_1: entered allmulticast mode [ 494.006870][ T8467] bridge_slave_1: entered promiscuous mode [ 494.010052][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 494.038953][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 494.040175][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 494.438393][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 494.441622][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 496.038020][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 496.056987][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 496.060432][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 496.081600][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 496.082405][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 496.510929][ T61] Bluetooth: hci4: command tx timeout [ 498.570841][ T5808] Bluetooth: hci4: command tx timeout [ 498.660892][ T5808] Bluetooth: hci5: command tx timeout [ 499.539273][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 499.587894][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 499.589242][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 499.608777][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 499.609707][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 500.650877][ T5808] Bluetooth: hci4: command tx timeout [ 500.731170][ T5808] Bluetooth: hci5: command tx timeout [ 501.537519][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.537587][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.720944][ T5808] Bluetooth: hci6: command tx timeout [ 502.944206][ T5120] Bluetooth: hci5: command tx timeout [ 502.944293][ T5808] Bluetooth: hci4: command tx timeout [ 503.770850][ T61] Bluetooth: hci6: command tx timeout [ 504.971058][ T61] Bluetooth: hci5: command tx timeout [ 505.861152][ T61] Bluetooth: hci6: command tx timeout [ 506.778587][ T8572] chnl_net:caif_netlink_parms(): no params data found [ 508.148611][ T61] Bluetooth: hci6: command tx timeout [ 515.534366][ T8572] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.535775][ T8572] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.536046][ T8572] bridge_slave_0: entered allmulticast mode [ 515.571214][ T8572] bridge_slave_0: entered promiscuous mode [ 515.620135][ T8572] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.620269][ T8572] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.620516][ T8572] bridge_slave_1: entered allmulticast mode [ 515.678894][ T8572] bridge_slave_1: entered promiscuous mode [ 519.607497][ T8572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 519.645397][ T8572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.637835][ T8572] team0: Port device team_slave_0 added [ 522.859776][ T8572] team0: Port device team_slave_1 added [ 526.565598][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 527.594130][ T5808] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 527.625679][ T5808] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 527.629209][ T5808] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 528.023802][ T5120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 528.027156][ T5120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 528.143979][ T8724] chnl_net:caif_netlink_parms(): no params data found [ 528.678544][ T8754] chnl_net:caif_netlink_parms(): no params data found [ 530.094359][ T5120] Bluetooth: hci7: command tx timeout [ 532.170919][ T5120] Bluetooth: hci7: command tx timeout [ 534.250811][ T5120] Bluetooth: hci7: command tx timeout [ 536.330860][ T5120] Bluetooth: hci7: command tx timeout [ 542.268804][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.288462][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.288747][ T8736] bridge_slave_0: entered allmulticast mode [ 542.504996][ T8736] bridge_slave_0: entered promiscuous mode [ 543.361119][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.361272][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.361547][ T8736] bridge_slave_1: entered allmulticast mode [ 543.364234][ T8736] bridge_slave_1: entered promiscuous mode [ 548.075918][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.749'. [ 550.329699][ T8724] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.329896][ T8724] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.330126][ T8724] bridge_slave_0: entered allmulticast mode [ 550.355288][ T8724] bridge_slave_0: entered promiscuous mode [ 551.820997][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.821262][ T8724] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.821407][ T8724] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.821643][ T8724] bridge_slave_1: entered allmulticast mode [ 551.881266][ T8724] bridge_slave_1: entered promiscuous mode [ 551.882854][ T8754] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.882973][ T8754] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.883181][ T8754] bridge_slave_0: entered allmulticast mode [ 551.891989][ T8754] bridge_slave_0: entered promiscuous mode [ 551.975683][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.975963][ T8754] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.976082][ T8754] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.976296][ T8754] bridge_slave_1: entered allmulticast mode [ 551.978868][ T8754] bridge_slave_1: entered promiscuous mode [ 554.278100][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 554.290654][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 554.302776][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 554.343849][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 554.354879][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 556.530952][ T5120] Bluetooth: hci3: command tx timeout [ 556.542131][ T5120] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 556.571141][ T5120] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 556.574124][ T5120] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 556.580089][ T5120] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 556.632797][ T5120] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 558.597987][ T5120] Bluetooth: hci3: command tx timeout [ 559.051259][ T5120] Bluetooth: hci8: command tx timeout [ 559.628091][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 559.654609][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 559.655895][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 559.657278][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 559.659904][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 560.314167][ T8002] syz-executor (8002) used greatest stack depth: 18072 bytes left [ 560.321089][ T8283] syz-executor (8283) used greatest stack depth: 17432 bytes left [ 560.652318][ T61] Bluetooth: hci3: command tx timeout [ 561.173857][ T61] Bluetooth: hci8: command tx timeout [ 561.876627][ T61] Bluetooth: hci4: command tx timeout [ 562.731153][ T61] Bluetooth: hci3: command tx timeout [ 562.734627][ T8991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.763'. [ 562.977794][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.977863][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.210857][ T61] Bluetooth: hci8: command tx timeout [ 563.931444][ T61] Bluetooth: hci4: command tx timeout [ 565.290812][ T61] Bluetooth: hci8: command tx timeout [ 566.130854][ T61] Bluetooth: hci4: command tx timeout [ 568.170963][ T61] Bluetooth: hci4: command tx timeout [ 572.016974][ T8877] chnl_net:caif_netlink_parms(): no params data found [ 582.352958][ T8877] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.361376][ T8877] bridge0: port 1(bridge_slave_0) entered disabled state [ 582.361681][ T8877] bridge_slave_0: entered allmulticast mode [ 582.365491][ T8877] bridge_slave_0: entered promiscuous mode [ 582.441190][ T8877] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.441330][ T8877] bridge0: port 2(bridge_slave_1) entered disabled state [ 582.441630][ T8877] bridge_slave_1: entered allmulticast mode [ 582.472346][ T8877] bridge_slave_1: entered promiscuous mode [ 587.176971][ T9084] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 588.798627][ T8953] chnl_net:caif_netlink_parms(): no params data found [ 589.276625][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 589.289557][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 589.299117][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 589.315858][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 589.323248][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 591.466561][ T61] Bluetooth: hci5: command tx timeout [ 591.819815][ T8976] chnl_net:caif_netlink_parms(): no params data found [ 592.254750][ T8962] chnl_net:caif_netlink_parms(): no params data found [ 593.530926][ T61] Bluetooth: hci5: command tx timeout [ 595.645592][ T5120] Bluetooth: hci5: command tx timeout [ 597.726764][ T61] Bluetooth: hci5: command tx timeout [ 600.902097][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.803'. [ 602.722571][ T8953] bridge0: port 1(bridge_slave_0) entered blocking state [ 602.723461][ T8953] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.724036][ T8953] bridge_slave_0: entered allmulticast mode [ 602.728653][ T8953] bridge_slave_0: entered promiscuous mode [ 602.940906][ T5929] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 602.964612][ T8953] bridge0: port 2(bridge_slave_1) entered blocking state [ 602.965035][ T8953] bridge0: port 2(bridge_slave_1) entered disabled state [ 602.965321][ T8953] bridge_slave_1: entered allmulticast mode [ 603.002470][ T8953] bridge_slave_1: entered promiscuous mode [ 603.147049][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.147081][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 603.147102][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.147143][ T5929] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.147164][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.209315][ T5929] usb 4-1: config 0 descriptor?? [ 605.773808][ T5929] usbhid 4-1:0.0: can't add hid device: -71 [ 605.773942][ T5929] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 605.798906][ T5929] usb 4-1: USB disconnect, device number 22 [ 610.118150][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 612.736711][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.811478][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.811787][ T8976] bridge_slave_0: entered allmulticast mode [ 612.814564][ T8976] bridge_slave_0: entered promiscuous mode [ 612.890207][ T8953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.897856][ T8962] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.897986][ T8962] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.898293][ T8962] bridge_slave_0: entered allmulticast mode [ 612.977240][ T8962] bridge_slave_0: entered promiscuous mode [ 612.988287][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.988484][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.988780][ T8976] bridge_slave_1: entered allmulticast mode [ 612.997616][ T8976] bridge_slave_1: entered promiscuous mode [ 612.999407][ T8962] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.000116][ T8962] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.000377][ T8962] bridge_slave_1: entered allmulticast mode [ 613.042762][ T8962] bridge_slave_1: entered promiscuous mode [ 617.467156][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 617.585022][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 617.642917][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 617.647031][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 617.677011][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 618.908199][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 618.937650][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 618.938949][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 618.940304][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 618.967241][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 619.770945][ T61] Bluetooth: hci6: command tx timeout [ 621.051075][ T61] Bluetooth: hci7: command tx timeout [ 621.880956][ T61] Bluetooth: hci6: command tx timeout [ 621.996915][ T9190] Bluetooth: MGMT ver 1.23 [ 623.155933][ T61] Bluetooth: hci7: command tx timeout [ 623.634921][ T5120] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 623.646556][ T5120] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 623.648129][ T5120] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 623.657635][ T5120] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 623.658406][ T5120] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 623.936450][ T61] Bluetooth: hci6: command tx timeout [ 624.419772][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.419843][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.247147][ T5120] Bluetooth: hci7: command tx timeout [ 626.157240][ T5120] Bluetooth: hci6: command tx timeout [ 626.171065][ T5120] Bluetooth: hci3: command tx timeout [ 627.500961][ T5120] Bluetooth: hci7: command tx timeout [ 628.250864][ T5120] Bluetooth: hci3: command tx timeout [ 630.200984][ T806] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 630.412210][ T5120] Bluetooth: hci3: command tx timeout [ 630.439747][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 630.439779][ T806] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 630.439800][ T806] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 630.439842][ T806] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 630.439863][ T806] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.445332][ T806] usb 4-1: config 0 descriptor?? [ 631.400796][ T806] usbhid 4-1:0.0: can't add hid device: -71 [ 631.400916][ T806] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 631.549852][ T806] usb 4-1: USB disconnect, device number 23 [ 632.491146][ T5120] Bluetooth: hci3: command tx timeout [ 634.021003][ T38] INFO: task syz.2.679:8660 blocked for more than 143 seconds. [ 634.021034][ T38] Tainted: G L syzkaller #0 [ 634.021044][ T38] Blocked by coredump. [ 634.021050][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.021058][ T38] task:syz.2.679 state:D stack:23552 pid:8660 tgid:8655 ppid:5800 task_flags:0x40044c flags:0x00080000 [ 634.021120][ T38] Call Trace: [ 634.021130][ T38] [ 634.021143][ T38] __schedule+0x145f/0x5070 [ 634.021214][ T38] ? __pfx___schedule+0x10/0x10 [ 634.021250][ T38] ? schedule+0x91/0x360 [ 634.021279][ T38] schedule+0x165/0x360 [ 634.021308][ T38] schedule_timeout+0x9a/0x270 [ 634.021334][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 634.021361][ T38] ? do_raw_spin_lock+0x121/0x290 [ 634.021393][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.021410][ T38] ? wait_for_completion+0x267/0x5d0 [ 634.021435][ T38] wait_for_completion+0x2bf/0x5d0 [ 634.021467][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 634.021498][ T38] exit_aio+0x2f1/0x3b0 [ 634.021526][ T38] ? __pfx_exit_aio+0x10/0x10 [ 634.021560][ T38] ? uprobe_clear_state+0x288/0x2a0 [ 634.021592][ T38] __mmput+0x68/0x3d0 [ 634.021616][ T38] exit_mm+0x169/0x230 [ 634.021645][ T38] do_exit+0x627/0x22f0 [ 634.021673][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 634.021692][ T38] ? lockdep_hardirqs_on+0x7b/0x110 [ 634.021712][ T38] ? __pfx_do_exit+0x10/0x10 [ 634.021735][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 634.021758][ T38] ? reacquire_held_locks+0x104/0x190 [ 634.021784][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 634.021820][ T38] do_group_exit+0x21c/0x2d0 [ 634.021846][ T38] ? rt_spin_unlock+0x161/0x200 [ 634.021872][ T38] get_signal+0x125d/0x1310 [ 634.021916][ T38] arch_do_signal_or_restart+0x9a/0x7a0 [ 634.021948][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 634.021986][ T38] ? __pfx___se_sys_futex+0x10/0x10 [ 634.022020][ T38] exit_to_user_mode_loop+0x87/0x4e0 [ 634.022045][ T38] ? rcu_is_watching+0x15/0xb0 [ 634.022067][ T38] do_syscall_64+0x2b7/0xf80 [ 634.022085][ T38] ? rcu_is_watching+0x15/0xb0 [ 634.022101][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.022120][ T38] ? clear_bhb_loop+0x60/0xb0 [ 634.022143][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.022162][ T38] RIP: 0033:0x7fc995fdf749 [ 634.022183][ T38] RSP: 002b:00007fc9941fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 634.022201][ T38] RAX: fffffffffffffe00 RBX: 00007fc996236188 RCX: 00007fc995fdf749 [ 634.022214][ T38] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc996236188 [ 634.022225][ T38] RBP: 00007fc996236180 R08: 0000000000000000 R09: 0000000000000000 [ 634.022237][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.022248][ T38] R13: 00007fc996236218 R14: 00007fffa0080ad0 R15: 00007fffa0080bb8 [ 634.022282][ T38] [ 634.022327][ T38] [ 634.022327][ T38] Showing all locks held in the system: [ 634.022338][ T38] 4 locks held by rcuc/0/20: [ 634.022351][ T38] 4 locks held by ksoftirqd/1/30: [ 634.022363][ T38] 1 lock held by khungtaskd/38: [ 634.022373][ T38] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 634.022439][ T38] 3 locks held by kworker/u8:3/57: [ 634.022450][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.022501][ T38] #1: ffffc9000123fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.022548][ T38] #2: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.022605][ T38] 3 locks held by kworker/u8:6/165: [ 634.022616][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.022665][ T38] #1: ffffc90003b87bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.022710][ T38] #2: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.022756][ T38] 3 locks held by kworker/u8:7/780: [ 634.022766][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.022817][ T38] #1: ffffc90003f37bc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.022862][ T38] #2: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.022910][ T38] 3 locks held by kworker/u8:9/1143: [ 634.022921][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.022971][ T38] #1: ffffc90004a4fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.023016][ T38] #2: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.023061][ T38] 2 locks held by kworker/u8:10/1161: [ 634.023071][ T38] #0: ffff88801bb35138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.023117][ T38] #1: ffffc90004b1fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.023164][ T38] 9 locks held by kworker/u8:12/1409: [ 634.023175][ T38] 5 locks held by kworker/u8:13/1417: [ 634.023186][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.023238][ T38] #1: ffffc9000531fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.023283][ T38] #2: ffffffff8e898720 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 634.023330][ T38] #3: ffff88803b2897b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 634.023381][ T38] #4: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.023432][ T38] 3 locks held by kworker/u8:14/1438: [ 634.023443][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.023493][ T38] #1: ffffc9000540fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.023538][ T38] #2: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.023584][ T38] 2 locks held by kworker/u8:16/1490: [ 634.023595][ T38] #0: ffff88801bb35138 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.023640][ T38] #1: ffffc9000566fbc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.023696][ T38] 2 locks held by dhcpcd/5465: [ 634.023707][ T38] #0: ffffffff8e8898b8 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x5f1/0x790 [ 634.023757][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0xd0/0x650 [ 634.023815][ T38] 2 locks held by getty/5561: [ 634.023826][ T38] #0: ffff88814db3d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 634.023873][ T38] #1: ffffc90003e7e2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 634.023917][ T38] 9 locks held by syz-executor/5802: [ 634.023930][ T38] 2 locks held by kworker/1:5/5879: [ 634.023942][ T38] 3 locks held by kworker/u8:21/6345: [ 634.023953][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 634.024004][ T38] #1: ffffc90005b8fbc0 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 634.024050][ T38] #2: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024097][ T38] 7 locks held by syz-executor/7808: [ 634.024108][ T38] #0: ffff888035cec480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x217/0xb40 [ 634.024160][ T38] #1: ffff88805c575478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 634.024206][ T38] #2: ffff8881433ca788 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 634.024256][ T38] #3: ffffffff8e12c6f8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 634.024302][ T38] #4: ffff88802a1270d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 634.024350][ T38] #5: ffff88814cbf5300 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 634.024417][ T38] #6: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024471][ T38] 1 lock held by syz-executor/8442: [ 634.024481][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024527][ T38] 1 lock held by syz-executor/8467: [ 634.024537][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024583][ T38] 1 lock held by syz-executor/8572: [ 634.024594][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024639][ T38] 1 lock held by syz-executor/8724: [ 634.024650][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024695][ T38] 1 lock held by syz-executor/8736: [ 634.024705][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024749][ T38] 1 lock held by syz-executor/8754: [ 634.024760][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024806][ T38] 1 lock held by syz-executor/8877: [ 634.024815][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024860][ T38] 1 lock held by syz-executor/8953: [ 634.024871][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024915][ T38] 1 lock held by syz-executor/8962: [ 634.024927][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.024970][ T38] 1 lock held by syz-executor/8976: [ 634.024981][ T38] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 634.025027][ T38] 2 locks held by syz-executor/9087: [ 634.025038][ T38] #0: ffffffff8edd0c00 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 634.025089][ T38] #1: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 634.025134][ T38] 7 locks held by syz-executor/9176: [ 634.025145][ T38] 1 lock held by syz-executor/9178: [ 634.025156][ T38] 1 lock held by syz-executor/9197: [ 634.025167][ T38] #0: ffffffff8e8a5838 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 634.025213][ T38] [ 634.025218][ T38] ============================================= [ 634.025218][ T38] [ 634.025233][ T38] NMI backtrace for cpu 1 [ 634.025258][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 634.025284][ T38] Tainted: [L]=SOFTLOCKUP [ 634.025291][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.025302][ T38] Call Trace: [ 634.025309][ T38] [ 634.025317][ T38] dump_stack_lvl+0xe8/0x150 [ 634.025343][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 634.025367][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 634.025390][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 634.025416][ T38] sys_info+0x135/0x170 [ 634.025442][ T38] watchdog+0xf95/0xfe0 [ 634.025468][ T38] ? watchdog+0x20a/0xfe0 [ 634.025495][ T38] kthread+0x711/0x8a0 [ 634.025523][ T38] ? __pfx_watchdog+0x10/0x10 [ 634.025543][ T38] ? __pfx_kthread+0x10/0x10 [ 634.025564][ T38] ? rt_spin_unlock+0x150/0x200 [ 634.025592][ T38] ? rt_spin_unlock+0x161/0x200 [ 634.025613][ T38] ? __pfx_kthread+0x10/0x10 [ 634.025638][ T38] ret_from_fork+0x510/0xa50 [ 634.025661][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 634.025679][ T38] ? __switch_to+0xc9e/0x1480 [ 634.025709][ T38] ? __pfx_kthread+0x10/0x10 [ 634.025734][ T38] ret_from_fork_asm+0x1a/0x30 [ 634.025776][ T38] [ 634.025783][ T38] Sending NMI from CPU 1 to CPUs 0: [ 634.025813][ C0] NMI backtrace for cpu 0 [ 634.025829][ C0] CPU: 0 UID: 0 PID: 1409 Comm: kworker/u8:12 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 634.025854][ C0] Tainted: [L]=SOFTLOCKUP [ 634.025861][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.025873][ C0] Workqueue: events_unbound nsim_dev_trap_report_work [ 634.025899][ C0] RIP: 0010:trace_hardirqs_off+0x5/0x40 [ 634.025920][ C0] Code: 16 ff ff ff 90 0f 0b 90 e9 77 ff ff ff 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 53 <48> 8b 5c 24 08 48 89 df e8 be 1a 0a 09 65 8b 05 df ae ec 0f 85 c0 [ 634.025936][ C0] RSP: 0018:ffffc9000500f4d8 EFLAGS: 00000006 [ 634.025950][ C0] RAX: 1ffff92000a01ead RBX: 0000000000000246 RCX: 0000000000000046 [ 634.025963][ C0] RDX: 0000000000000006 RSI: ffffffff8cfdeef6 RDI: ffff8880b883d228 [ 634.025976][ C0] RBP: ffffc9000500f5f8 R08: ffffffff8ad3e001 R09: ffffffff8d5ae940 [ 634.025989][ C0] R10: 0000000000000000 R11: fffffbfff1db668f R12: dffffc0000000000 [ 634.026002][ C0] R13: ffff8880b883d228 R14: ffff8880b883d228 R15: 1ffff92000a01ea8 [ 634.026016][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 634.026031][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.026043][ C0] CR2: 00007f822d1f098b CR3: 0000000039fea000 CR4: 00000000003526f0 [ 634.026059][ C0] Call Trace: [ 634.026065][ C0] [ 634.026072][ C0] _raw_spin_lock_irqsave+0x1a/0x60 [ 634.026089][ C0] rt_mutex_slowunlock+0xb0/0x8a0 [ 634.026111][ C0] ? reacquire_held_locks+0x104/0x190 [ 634.026134][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 634.026157][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 634.026179][ C0] ? rt_spin_unlock+0x150/0x200 [ 634.026203][ C0] ? rt_spin_unlock+0x161/0x200 [ 634.026225][ C0] process_backlog+0x4fb/0x8f0 [ 634.026248][ C0] __napi_poll+0xae/0x520 [ 634.026266][ C0] net_rx_action+0x64a/0xdb0 [ 634.026291][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 634.026308][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 634.026338][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 634.026363][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 634.026385][ C0] handle_softirqs+0x1df/0x650 [ 634.026410][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 634.026428][ C0] ? nsim_dev_trap_report_work+0x72e/0xbc0 [ 634.026453][ C0] nsim_dev_trap_report_work+0x7f2/0xbc0 [ 634.026486][ C0] ? process_scheduled_works+0x9ef/0x1770 [ 634.026506][ C0] process_scheduled_works+0xad1/0x1770 [ 634.026539][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.026557][ C0] ? do_raw_spin_lock+0x121/0x290 [ 634.026583][ C0] worker_thread+0x8a0/0xda0 [ 634.026609][ C0] ? __kthread_parkme+0x7b/0x200 [ 634.026634][ C0] kthread+0x711/0x8a0 [ 634.026657][ C0] ? __pfx_worker_thread+0x10/0x10 [ 634.026675][ C0] ? __pfx_kthread+0x10/0x10 [ 634.026701][ C0] ? rt_spin_unlock+0x150/0x200 [ 634.026725][ C0] ? rt_spin_unlock+0x161/0x200 [ 634.026745][ C0] ? __pfx_kthread+0x10/0x10 [ 634.026767][ C0] ret_from_fork+0x510/0xa50 [ 634.026786][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 634.026803][ C0] ? __switch_to+0xc9e/0x1480 [ 634.026829][ C0] ? __pfx_kthread+0x10/0x10 [ 634.026851][ C0] ret_from_fork_asm+0x1a/0x30 [ 634.026882][ C0] [ 634.027815][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 634.027835][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 634.027862][ T38] Tainted: [L]=SOFTLOCKUP [ 634.027868][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 634.027879][ T38] Call Trace: [ 634.027886][ T38] [ 634.027894][ T38] vpanic+0x1e0/0x670 [ 634.027922][ T38] panic+0xb9/0xc0 [ 634.027945][ T38] ? __pfx_panic+0x10/0x10 [ 634.027978][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 634.028006][ T38] watchdog+0xfdf/0xfe0 [ 634.028032][ T38] ? watchdog+0x20a/0xfe0 [ 634.028059][ T38] kthread+0x711/0x8a0 [ 634.028087][ T38] ? __pfx_watchdog+0x10/0x10 [ 634.028106][ T38] ? __pfx_kthread+0x10/0x10 [ 634.028128][ T38] ? rt_spin_unlock+0x150/0x200 [ 634.028155][ T38] ? rt_spin_unlock+0x161/0x200 [ 634.028176][ T38] ? __pfx_kthread+0x10/0x10 [ 634.028202][ T38] ret_from_fork+0x510/0xa50 [ 634.028224][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 634.028243][ T38] ? __switch_to+0xc9e/0x1480 [ 634.028274][ T38] ? __pfx_kthread+0x10/0x10 [ 634.028299][ T38] ret_from_fork_asm+0x1a/0x30 [ 634.028340][ T38] [ 634.028787][ T38] Kernel Offset: disabled