last executing test programs: 3m30.943093237s ago: executing program 3 (id=146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 3m29.621456739s ago: executing program 3 (id=148): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000500)="66b87f000f01b0279b0000ea4641ab83b5003e0fc76e00c74424000d000000c744240200500000c7442406000000000f0114242e0fc75f000f79707df30f01ea663626f3a70f0095000000000f09", 0x4e}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3m21.056497657s ago: executing program 3 (id=157): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3}], {0x14}}, 0x50}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2, 0x0, 0x3}, 0x18) r3 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r3, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r3, 0x80045505, &(0x7f0000000000)=0x1) 3m18.850132817s ago: executing program 3 (id=159): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) fsmount(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000000180)=0x6, 0x4) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000000c0)={@remote}, 0x14) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x4000001) 3m16.960536167s ago: executing program 3 (id=160): r0 = socket$rxrpc(0x21, 0x2, 0x2) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x100000d, 0x810, r0, 0x326ef000) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffec4, &(0x7f0000000200)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x0) pipe2(0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) 3m2.446855461s ago: executing program 3 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20040000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 2m45.284195382s ago: executing program 32 (id=172): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20040000) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, 0x3, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) 1m26.631552844s ago: executing program 1 (id=406): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000280)=@gcm_256={{0x303}, "1afc7c14d332bcc6", "a9ba0c85d68723369f51322151d9f41aaa2832bb07cc1e49ad714beac6f1ade8", "49960d8f", "bff2a81527ae4190"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000004000000080000000800000080e50500", @ANYRES32=0x1, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYBLOB="cd3a26c76efb10f3f25ec1aa9c372890f27039a64df3135a6521117345d2888bf41d19a658a7020eae1e356ff2a8015796ad3686d203667d75848f7b4bb64dad64079a6ff43eba4f5bad893d1f84b0619e00e257e87bf67eaa9b1f2663bebccadf067cd86fd356988b267f4cb59e1b151a697214a7a16ea24460bc065384562294586ab298e6159c1ff11578ed042428ccb8377c1903ed99e844719c7c7d6f064e", @ANYRES32=r3, @ANYBLOB], 0x33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) close(0x3) listen(r6, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) accept(r6, &(0x7f0000000440)=@phonet, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m25.531309882s ago: executing program 1 (id=410): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"/3432], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="5aee41dea43e63a3f7fb7f110000", 0x0, 0xf004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m24.731812397s ago: executing program 1 (id=416): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x9) 1m24.668143045s ago: executing program 1 (id=418): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'s526\x00', [0x8001, 0x2, 0x4, 0x0, 0xd, 0xcc7, 0x10001, 0x800004, 0xa, 0x3, 0x1, 0x1, 0x8, 0x1100004, 0x1, 0xa, 0x8, 0x1a449, 0x42, 0x40000003, 0xc, 0x2, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x8, 0x8, 0x4, 0xc]}) 1m24.429208521s ago: executing program 1 (id=421): r0 = syz_open_dev$I2C(&(0x7f0000000180), 0x0, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000100)={&(0x7f0000000080)}) 1m24.225335838s ago: executing program 1 (id=423): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 1m14.971820176s ago: executing program 2 (id=464): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000780)=[{0x4, 0x800, 0x0, 0x0}], 0x1}) 1m11.307325935s ago: executing program 2 (id=472): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000080)={r0, 0x56, 0x32}) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 1m11.045684973s ago: executing program 2 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000049c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x4e, 0x0, &(0x7f0000000180)="e0b9547ed387dbe9005bec6886dd", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.660038161s ago: executing program 2 (id=478): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x3}, 0x6) 1m10.398663576s ago: executing program 2 (id=481): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) symlinkat(&(0x7f00000000c0)='./file1/file4\x00', r0, &(0x7f0000000100)='./file0\x00') 1m10.100473354s ago: executing program 2 (id=484): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 1m9.169072956s ago: executing program 33 (id=423): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dffbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) 55.020338998s ago: executing program 34 (id=484): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x46032, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000440)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) ptrace(0x10, 0x1) 23.077109124s ago: executing program 4 (id=686): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x111, 0x4}}, 0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, 0xffffffffffffffff, 0x0) 22.910290376s ago: executing program 0 (id=688): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x4, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r1}, 0x20) 22.739663147s ago: executing program 0 (id=689): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 22.576483193s ago: executing program 0 (id=690): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000004000000080000000800000080e50500", @ANYRES32=0x1, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYBLOB="cd3a26c76efb10f3f25ec1aa9c372890f27039a64df3135a6521117345d2888bf41d19a658a7020eae1e356ff2a8015796ad3686d203667d75848f7b4bb64dad64079a6ff43eba4f5bad893d1f84b0619e00e257e87bf67eaa9b1f2663bebccadf067cd86fd356988b267f4cb59e1b151a697214a7a16ea24460bc065384562294586ab298e6159c1ff11578ed042428ccb8377c1903ed99e844719c7c7d6f064e", @ANYRES32=r3, @ANYBLOB], 0x33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) close(0x3) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) accept(r6, &(0x7f0000000440)=@phonet, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22.055470702s ago: executing program 4 (id=691): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x3e, &(0x7f00000002c0)={0x40, 0xe, 0x28, "e7bc8c0db3ac32260c3c95b4d5636431347101b842db6a75fe03e52604f55bb1cfaf828e5d80d83f"}, 0x0, 0x0}) 21.493952471s ago: executing program 0 (id=692): r0 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x8501) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100)='&', 0x1}], 0x1) r1 = syz_io_uring_setup(0x230, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) 20.789721169s ago: executing program 0 (id=693): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x10003, 0x2, 0xdddd1000, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 20.459236925s ago: executing program 0 (id=694): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x400c0c0) 20.022452623s ago: executing program 4 (id=695): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 19.081851151s ago: executing program 4 (id=699): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0), &(0x7f0000000740), 0x80000002, r0}, 0x38) 18.866405355s ago: executing program 4 (id=700): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0x20000000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000000)={0x1100, 0x1, 0x400000, 0x8}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0b00000004000000080000000800000080e50500", @ANYRES32=0x1, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB='\x00'/20, @ANYRESOCT=r0, @ANYBLOB="cd3a26c76efb10f3f25ec1aa9c372890f27039a64df3135a6521117345d2888bf41d19a658a7020eae1e356ff2a8015796ad3686d203667d75848f7b4bb64dad64079a6ff43eba4f5bad893d1f84b0619e00e257e87bf67eaa9b1f2663bebccadf067cd86fd356988b267f4cb59e1b151a697214a7a16ea24460bc065384562294586ab298e6159c1ff11578ed042428ccb8377c1903ed99e844719c7c7d6f064e", @ANYRES32=r3, @ANYBLOB], 0x33) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000940), 0x10) close(0x3) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) accept(r6, &(0x7f0000000440)=@phonet, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r5, 0x0, 0x8084) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.795242234s ago: executing program 4 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 16.625159183s ago: executing program 5 (id=705): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x2b) listen(r0, 0x101) unshare(0x20000400) connect$bt_sco(r0, &(0x7f0000000100)={0x1f, @none}, 0x8) 16.508894866s ago: executing program 5 (id=706): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x8000) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x1, r0, &(0x7f0000000100)="653de841f0", 0x5, 0x8000}]) 15.99530726s ago: executing program 5 (id=707): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000100)={0x18, 0x2, {0x7ff, @loopback}}, 0x1e) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e) 15.819627408s ago: executing program 5 (id=708): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x102000100000d, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) r1 = open(0x0, 0x80ff, 0x84) fcntl$setlease(r1, 0x400, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 15.668283365s ago: executing program 5 (id=709): ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000780)={'tunl0\x00', &(0x7f00000006c0)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x5, 0x8, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x65, 0x0, 0x74, 0x4, 0x0, @loopback, @broadcast}}}}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400010000000900020073797a3000000000050005000000000005000100060000001c0007800600044000000000060005400000000008000640"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) 15.507380918s ago: executing program 5 (id=710): socket$igmp(0x2, 0x3, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) 5.050846906s ago: executing program 35 (id=694): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x400c0c0) 2.561640469s ago: executing program 36 (id=702): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x48, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x15}}, {0x8, 0x2, @remote}}}]}, @CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x80}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x80}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x406c450}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=r2, @ANYBLOB="60300300001400005800128009000100626f6e6400000000480002802c0008"], 0x78}}, 0x0) 0s ago: executing program 37 (id=710): socket$igmp(0x2, 0x3, 0x2) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x40, r0, 0x801, 0x70bd29, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee339084eeef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT={0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x0) kernel console output (not intermixed with test programs): andle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.583859][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.763231][ T5813] team0: Port device team_slave_1 added [ 104.764802][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.764814][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.764833][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.766062][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.766076][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.766105][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.768465][ T5804] team0: Port device team_slave_0 added [ 104.850958][ T5802] team0: Port device team_slave_0 added [ 104.937202][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.937220][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.937247][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.998163][ T5804] team0: Port device team_slave_1 added [ 105.006208][ T5802] team0: Port device team_slave_1 added [ 105.202074][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.202088][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.202107][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.372692][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.372712][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.372740][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.473002][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.473020][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.473048][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.572601][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.572614][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.572635][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.751917][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.751937][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.751957][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.753120][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.753130][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.753150][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.781841][ T5805] hsr_slave_0: entered promiscuous mode [ 105.783111][ T5805] hsr_slave_1: entered promiscuous mode [ 105.887946][ T5817] Bluetooth: hci1: command tx timeout [ 105.933826][ T5801] hsr_slave_0: entered promiscuous mode [ 105.934864][ T5801] hsr_slave_1: entered promiscuous mode [ 105.936689][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 105.936779][ T5801] Cannot create hsr debugfs directory [ 105.963756][ T5807] Bluetooth: hci0: command tx timeout [ 105.964799][ T5817] Bluetooth: hci2: command tx timeout [ 106.040316][ T5817] Bluetooth: hci3: command tx timeout [ 106.040410][ T5807] Bluetooth: hci4: command tx timeout [ 106.309040][ T5813] hsr_slave_0: entered promiscuous mode [ 106.316588][ T5813] hsr_slave_1: entered promiscuous mode [ 106.317324][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 106.317342][ T5813] Cannot create hsr debugfs directory [ 106.607763][ T5802] hsr_slave_0: entered promiscuous mode [ 106.608858][ T5802] hsr_slave_1: entered promiscuous mode [ 106.609592][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 106.609615][ T5802] Cannot create hsr debugfs directory [ 106.747264][ T5804] hsr_slave_0: entered promiscuous mode [ 106.748302][ T5804] hsr_slave_1: entered promiscuous mode [ 106.748987][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 106.749004][ T5804] Cannot create hsr debugfs directory [ 107.960091][ T5807] Bluetooth: hci1: command tx timeout [ 108.040598][ T5817] Bluetooth: hci0: command tx timeout [ 108.040631][ T5817] Bluetooth: hci2: command tx timeout [ 108.101126][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.120704][ T5819] Bluetooth: hci4: command tx timeout [ 108.120735][ T5819] Bluetooth: hci3: command tx timeout [ 108.158856][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.174163][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.231571][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.345410][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.381661][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.427018][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.485136][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.622618][ T5813] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 108.659560][ T5813] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 108.698537][ T5813] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 108.757502][ T5813] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.916772][ T5802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.949551][ T5802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.989289][ T5802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.027066][ T5802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.165401][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.188290][ T5804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.234740][ T5804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.273672][ T5804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.308281][ T5804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.394239][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.458670][ T3538] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.459437][ T3538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.488809][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.515242][ T3538] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.515369][ T3538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.598671][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.613309][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.659172][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.659350][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.703551][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.703701][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.743511][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.791831][ T1113] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.791989][ T1113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.796118][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.856728][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.856885][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.954776][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.004693][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.024604][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.024701][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.096559][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.096707][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.163100][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.232999][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.233153][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.288522][ T1330] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.288642][ T1330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.506422][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.603365][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.853516][ T5805] veth0_vlan: entered promiscuous mode [ 110.917017][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.917699][ T5801] veth0_vlan: entered promiscuous mode [ 110.956021][ T5805] veth1_vlan: entered promiscuous mode [ 111.007508][ T5801] veth1_vlan: entered promiscuous mode [ 111.084017][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.147072][ T5805] veth0_macvtap: entered promiscuous mode [ 111.172770][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.180555][ T5813] veth0_vlan: entered promiscuous mode [ 111.197461][ T5805] veth1_macvtap: entered promiscuous mode [ 111.213696][ T5801] veth0_macvtap: entered promiscuous mode [ 111.262029][ T5801] veth1_macvtap: entered promiscuous mode [ 111.312310][ T5813] veth1_vlan: entered promiscuous mode [ 111.354998][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.426880][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.469549][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.533109][ T3552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.538255][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.539374][ T3552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.574778][ T5802] veth0_vlan: entered promiscuous mode [ 111.575269][ T3552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.604665][ T3552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.626524][ T3552] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.639223][ T3552] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.688038][ T5813] veth0_macvtap: entered promiscuous mode [ 111.700192][ T3552] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.706749][ T3552] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.732240][ T5802] veth1_vlan: entered promiscuous mode [ 111.783934][ T5813] veth1_macvtap: entered promiscuous mode [ 112.065786][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.115623][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.117568][ T3552] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.117590][ T3552] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.159318][ T5804] veth0_vlan: entered promiscuous mode [ 112.193748][ T37] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.197304][ T37] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.217944][ T5802] veth0_macvtap: entered promiscuous mode [ 112.219240][ T37] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.253744][ T37] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.281917][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.282587][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.285122][ T5804] veth1_vlan: entered promiscuous mode [ 112.323334][ T5802] veth1_macvtap: entered promiscuous mode [ 112.377738][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.377760][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.563809][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.579826][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.579846][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.632408][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.698591][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.698614][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.734670][ T5804] veth0_macvtap: entered promiscuous mode [ 112.758827][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.772609][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.792049][ T5804] veth1_macvtap: entered promiscuous mode [ 112.830630][ T1113] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.838194][ T1113] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.059597][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.059622][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.107466][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.441139][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.594345][ T1330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.627951][ T1330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.641124][ T1330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.644166][ T1330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.005108][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.005130][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.136158][ T5929] binder: 5928:5929 ioctl c0306201 200000000640 returned -22 [ 114.226417][ T5932] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.264613][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.264636][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.661545][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.661568][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.115338][ T3552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.115363][ T3552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.911361][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 116.131899][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 116.224927][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 116.224957][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.224975][ T10] usb 1-1: Product: syz [ 116.224987][ T10] usb 1-1: Manufacturer: syz [ 116.224999][ T10] usb 1-1: SerialNumber: syz [ 116.345110][ T10] usb 1-1: config 0 descriptor?? [ 116.682293][ T10] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 117.003084][ T10] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 117.093027][ T10] usb 1-1: USB disconnect, device number 2 [ 121.877512][ T5996] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.896777][ T5993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22'. [ 121.936637][ T5993] netlink: 28 bytes leftover after parsing attributes in process `syz.1.22'. [ 124.483483][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 124.552578][ T6033] netlink: 8 bytes leftover after parsing attributes in process `syz.4.29'. [ 124.552604][ T6033] netlink: 4 bytes leftover after parsing attributes in process `syz.4.29'. [ 124.940942][ T6036] bridge_slave_0: left allmulticast mode [ 124.940974][ T6036] bridge_slave_0: left promiscuous mode [ 124.941456][ T6036] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.573859][ T6047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.32'. [ 125.573885][ T6047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.32'. [ 125.573929][ T6047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.32'. [ 125.574062][ T6047] netlink: 36 bytes leftover after parsing attributes in process `syz.0.32'. [ 125.924175][ T6036] bridge_slave_1: left allmulticast mode [ 125.924206][ T6036] bridge_slave_1: left promiscuous mode [ 125.924443][ T6036] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.137779][ T6036] bond0: (slave bond_slave_0): Releasing backup interface [ 126.415102][ T6036] bond0: (slave bond_slave_1): Releasing backup interface [ 126.490658][ T6036] team0: Port device team_slave_0 removed [ 127.720667][ T6036] team0: Port device team_slave_1 removed [ 127.721960][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.721986][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.014974][ T6036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.015006][ T6036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.125193][ T6036] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 130.821966][ T6106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 130.910209][ T5939] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 131.000003][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.029188][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 131.029253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 131.060016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 131.148169][ T6117] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.300650][ T5939] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 131.300730][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.300800][ T5939] usb 3-1: Product: syz [ 131.300866][ T5939] usb 3-1: Manufacturer: syz [ 131.300935][ T5939] usb 3-1: SerialNumber: syz [ 132.684945][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 132.685034][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 133.230502][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.299946][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 133.437053][ T6133] netlink: 32 bytes leftover after parsing attributes in process `syz.0.51'. [ 134.055120][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 134.672588][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -EPROTO [ 134.677696][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 134.677759][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 134.679089][ T5939] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 134.763428][ T5939] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 134.791650][ T5939] usb 3-1: USB disconnect, device number 2 [ 135.220046][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.230038][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.240024][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 135.250012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 137.630874][ T6153] syzkaller0: entered promiscuous mode [ 137.630902][ T6153] syzkaller0: entered allmulticast mode [ 138.764344][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.764446][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.709458][ T6194] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 143.709555][ T3096] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.709604][ T3096] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.709642][ T3096] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 143.709680][ T3096] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.469228][ T5888] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 153.416146][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.416175][ T5888] usb 5-1: config 0 has no interfaces? [ 153.455998][ T5888] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 153.456032][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 153.456055][ T5888] usb 5-1: Product: syz [ 153.456070][ T5888] usb 5-1: Manufacturer: syz [ 153.456085][ T5888] usb 5-1: SerialNumber: syz [ 153.504593][ T5888] usb 5-1: config 0 descriptor?? [ 154.102972][ T5888] usb 5-1: USB disconnect, device number 2 [ 158.761734][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.0.89'. [ 162.679949][ T6293] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 165.900026][ T5990] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 166.055205][ T5990] usb 5-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=5e.ad [ 166.055239][ T5990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.061751][ T5990] usb 5-1: config 0 descriptor?? [ 166.290185][ T5990] usb 5-1: can't set config #0, error -71 [ 166.297544][ T5990] usb 5-1: USB disconnect, device number 3 [ 169.892751][ T6326] kvm: kvm [6325]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc500 [ 169.892883][ T6326] kvm: kvm [6325]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 171.648480][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.99'. [ 171.648512][ T6343] bond0: option resend_igmp: invalid value (6815744) [ 171.648527][ T6343] bond0: option resend_igmp: allowed values 0 - 255 [ 172.381378][ T5889] IPVS: starting estimator thread 0... [ 175.690547][ T6358] IPVS: using max 11 ests per chain, 26400 per kthread [ 180.080799][ T6388] cifs: Unknown parameter 'mode' [ 180.080969][ T6388] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 180.081017][ T6388] CIFS mount error: No usable UNC path provided in device string! [ 180.081017][ T6388] [ 180.344727][ T6388] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 189.256230][ T6420] binder: 6419:6420 ioctl 4018620d 0 returned -22 [ 189.257026][ T6420] binder: 6419:6420 ioctl c0306201 0 returned -14 [ 200.121512][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.121590][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.670697][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 204.230144][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 204.234313][ T5888] usb 4-1: config 0 has no interfaces? [ 204.234352][ T5888] usb 4-1: New USB device found, idVendor=0279, idProduct=2200, bcdDevice= e.fd [ 204.234375][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.254026][ T5888] usb 4-1: config 0 descriptor?? [ 204.633186][ T5982] usb 4-1: USB disconnect, device number 2 [ 206.500148][ T6501] process 'gtp' launched '/dev/fd/5' with NULL argv: empty string added [ 209.245557][ T6514] hub 1-0:1.0: USB hub found [ 209.255689][ T6514] hub 1-0:1.0: 1 port detected [ 215.556988][ T6541] hub 1-0:1.0: USB hub found [ 215.573857][ T6541] hub 1-0:1.0: 1 port detected [ 223.080092][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 223.080175][ T5819] Bluetooth: hci0: command 0x0406 tx timeout [ 223.080340][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 223.080398][ T5819] Bluetooth: hci3: command 0x0406 tx timeout [ 223.080557][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 223.777204][ T6573] syz.4.164 uses obsolete (PF_INET,SOCK_PACKET) [ 223.888038][ T6575] ======================================================= [ 223.888038][ T6575] WARNING: The mand mount option has been deprecated and [ 223.888038][ T6575] and is ignored by this kernel. Remove the mand [ 223.888038][ T6575] option from the mount to silence this warning. [ 223.888038][ T6575] ======================================================= [ 235.488821][ T6614] delete_channel: no stack [ 238.141853][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 239.072261][ T6630] capability: warning: `syz.4.177' uses 32-bit capabilities (legacy support in use) [ 246.843496][ T6663] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 251.746432][ T6682] usb usb8: usbfs: process 6682 (syz.0.190) did not claim interface 0 before use [ 252.033903][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.055799][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.057859][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.059686][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.102635][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.120044][ T5803] Bluetooth: hci5: command tx timeout [ 256.096252][ T6684] chnl_net:caif_netlink_parms(): no params data found [ 256.200092][ T5803] Bluetooth: hci5: command tx timeout [ 258.494697][ T5803] Bluetooth: hci5: command tx timeout [ 260.528569][ T5803] Bluetooth: hci5: command tx timeout [ 260.993337][ T6684] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.011158][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.011421][ T6684] bridge_slave_0: entered allmulticast mode [ 261.014245][ T6684] bridge_slave_0: entered promiscuous mode [ 261.039198][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.039444][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.055620][ T6684] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.057394][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.057667][ T6684] bridge_slave_1: entered allmulticast mode [ 261.082661][ T6684] bridge_slave_1: entered promiscuous mode [ 261.652819][ T6735] program syz.4.198 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 265.283192][ T38] audit: type=1326 audit(1767439447.221:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6746 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54037cf749 code=0x7ffc0000 [ 265.283251][ T38] audit: type=1326 audit(1767439447.231:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6746 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f54037d1667 code=0x7ffc0000 [ 265.283303][ T38] audit: type=1326 audit(1767439447.231:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6746 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54037cf749 code=0x7ffc0000 [ 265.283349][ T38] audit: type=1326 audit(1767439447.231:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6746 comm="syz.4.201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54037cf749 code=0x7ffc0000 [ 266.412478][ T6684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.646185][ T6785] overlayfs: missing 'lowerdir' [ 272.451956][ T6784] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 272.766049][ T5888] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 272.808989][ T1330] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.777675][ T6684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.943257][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.1.210'. [ 278.235390][ T1330] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.395353][ T6684] team0: Port device team_slave_0 added [ 284.947101][ T1330] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.828115][ T6844] ptrace attach of ""[6847] was attempted by "./syz-executor exec"[6844] [ 286.007473][ T6684] team0: Port device team_slave_1 added [ 286.667044][ T1330] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.120226][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.120246][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.120274][ T6684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.122776][ T6684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.122790][ T6684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 288.122817][ T6684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.277782][ T6855] program syz.2.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.789200][ T6863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.225'. [ 288.798466][ T6863] unsupported nlmsg_type 40 [ 291.821482][ T6684] hsr_slave_0: entered promiscuous mode [ 291.826791][ T6684] hsr_slave_1: entered promiscuous mode [ 291.830520][ T6684] debugfs: 'hsr0' already exists in 'hsr' [ 291.830632][ T6684] Cannot create hsr debugfs directory [ 294.503207][ T6885] Bluetooth: MGMT ver 1.23 [ 295.894909][ T1330] bridge_slave_1: left allmulticast mode [ 295.895103][ T1330] bridge_slave_1: left promiscuous mode [ 295.898031][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.060014][ T5846] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 296.107515][ T1330] bridge_slave_0: left allmulticast mode [ 296.107549][ T1330] bridge_slave_0: left promiscuous mode [ 296.107796][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.210048][ T5846] usb 5-1: Using ep0 maxpacket: 8 [ 296.226525][ T5846] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 296.226552][ T5846] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 296.252845][ T5846] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 296.252881][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.252896][ T5846] usb 5-1: Product: syz [ 296.252906][ T5846] usb 5-1: Manufacturer: syz [ 296.252916][ T5846] usb 5-1: SerialNumber: syz [ 297.030270][ T5846] usb 5-1: USB disconnect, device number 5 [ 298.426497][ T6861] udevd[6861]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 300.132864][ T5803] Bluetooth: hci2: unexpected event for opcode 0x202f [ 300.530002][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 301.825014][ T10] usb 2-1: config 6 has an invalid interface number: 216 but max is 0 [ 301.825045][ T10] usb 2-1: config 6 has no interface number 0 [ 301.825144][ T10] usb 2-1: config 6 interface 216 altsetting 1 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 301.825174][ T10] usb 2-1: config 6 interface 216 has no altsetting 0 [ 301.828727][ T10] usb 2-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=91.f6 [ 301.828760][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.828783][ T10] usb 2-1: Product: syz [ 301.828800][ T10] usb 2-1: Manufacturer: syz [ 301.828815][ T10] usb 2-1: SerialNumber: syz [ 303.368310][ T10] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 303.368544][ T10] gspca_mr97310a: reg write [21] error -22 [ 303.368641][ T10] mr97310a 2-1:6.216: probe with driver mr97310a failed with error -22 [ 303.551580][ T10] usb 2-1: USB disconnect, device number 2 [ 304.212218][ T5803] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 304.212485][ T5803] Bluetooth: hci2: Injecting HCI hardware error event [ 304.215783][ T5803] Bluetooth: hci2: hardware error 0x00 [ 305.021936][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.081107][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.103397][ T1330] bond0 (unregistering): Released all slaves [ 305.159109][ T12] bond0: (slave bond_slave_0): interface is now down [ 305.159144][ T12] bond0: (slave bond_slave_1): interface is now down [ 305.261749][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 305.293111][ T12] bond0: (slave bond_slave_0): interface is now down [ 305.293137][ T12] bond0: (slave bond_slave_1): interface is now down [ 305.430049][ T1167] bond0: (slave bond_slave_0): interface is now down [ 305.430074][ T1167] bond0: (slave bond_slave_1): interface is now down [ 305.430117][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 305.436300][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.436353][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.00 [ 305.436377][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.458985][ T9] usb 2-1: config 0 descriptor?? [ 305.572867][ T69] bond0: (slave bond_slave_0): interface is now down [ 305.572907][ T69] bond0: (slave bond_slave_1): interface is now down [ 305.710103][ T3096] bond0: (slave bond_slave_0): interface is now down [ 305.710129][ T3096] bond0: (slave bond_slave_1): interface is now down [ 305.765186][ T9] usb 2-1: string descriptor 0 read error: -71 [ 305.852187][ T69] bond0: (slave bond_slave_0): interface is now down [ 305.852212][ T69] bond0: (slave bond_slave_1): interface is now down [ 306.010456][ T9] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 306.020985][ T12] bond0: (slave bond_slave_0): interface is now down [ 306.021010][ T12] bond0: (slave bond_slave_1): interface is now down [ 306.062650][ T12] bond0: now running without any active interface! [ 306.139636][ T5153] bcm5974 2-1:0.0: could not read from device [ 306.235771][ T9] usb 2-1: USB disconnect, device number 3 [ 306.429568][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 306.601648][ T6970] netlink: 'syz.2.260': attribute type 2 has an invalid length. [ 306.760287][ T5803] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 306.760386][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 307.420011][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 307.445952][ T6684] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 307.578765][ T6684] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 307.592423][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.592454][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 307.592508][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 307.595600][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.595631][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.595654][ T9] usb 3-1: Product: syz [ 307.595670][ T9] usb 3-1: Manufacturer: syz [ 307.595694][ T9] usb 3-1: SerialNumber: syz [ 307.906738][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 307.906795][ T9] cdc_ncm 3-1:1.0: bind() failure [ 307.977043][ T9] usb 3-1: USB disconnect, device number 3 [ 308.260827][ T7011] 9pnet_virtio: no channels available for device syz [ 308.324487][ T6684] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 308.406813][ T6684] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 308.777094][ T7037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.282'. [ 308.817160][ T1330] hsr_slave_0: left promiscuous mode [ 308.850112][ T1330] hsr_slave_1: left promiscuous mode [ 308.851477][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.887898][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.933367][ T1330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.933407][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.432036][ T1330] veth1_macvtap: left promiscuous mode [ 309.432326][ T1330] veth0_macvtap: left promiscuous mode [ 309.432662][ T1330] veth1_vlan: left promiscuous mode [ 309.433031][ T1330] veth0_vlan: left promiscuous mode [ 310.877517][ T7048] delete_channel: no stack [ 311.663262][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 311.678903][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 311.715447][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 311.729628][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 311.744315][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 312.227189][ T7075] netlink: ct family unspecified [ 312.227228][ T7075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 312.987550][ T7095] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 313.156614][ T7102] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 313.162138][ T6177] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 313.326597][ T6177] usb 3-1: Using ep0 maxpacket: 8 [ 313.350573][ T6177] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.350636][ T6177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 313.350666][ T6177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.350690][ T6177] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.350714][ T6177] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.350758][ T6177] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 313.350783][ T6177] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.356159][ T6177] usb 3-1: config 0 descriptor?? [ 313.584344][ T6177] usb 3-1: USB disconnect, device number 4 [ 313.946283][ T5809] Bluetooth: hci4: command tx timeout [ 316.163596][ T5809] Bluetooth: hci4: command tx timeout [ 316.841632][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 316.989538][ T7161] netlink: 168 bytes leftover after parsing attributes in process `syz.2.337'. [ 317.151002][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 318.200773][ T5809] Bluetooth: hci4: command tx timeout [ 320.043828][ T7199] random: crng reseeded on system resumption [ 320.280943][ T5809] Bluetooth: hci4: command tx timeout [ 321.099360][ T7226] delete_channel: no stack [ 321.265173][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 321.699420][ T7240] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 322.464945][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.465065][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.162746][ T5803] Bluetooth: hci4: command 0x0405 tx timeout [ 323.736605][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.744179][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.744872][ T7072] bridge_slave_0: entered allmulticast mode [ 323.761375][ T7072] bridge_slave_0: entered promiscuous mode [ 323.779821][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.794613][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.794886][ T7072] bridge_slave_1: entered allmulticast mode [ 323.841472][ T7072] bridge_slave_1: entered promiscuous mode [ 324.663026][ T7265] delete_channel: no stack [ 324.861502][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.909787][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.990032][ T5846] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 325.151725][ T5846] usb 3-1: Using ep0 maxpacket: 8 [ 325.166898][ T5846] usb 3-1: unable to get BOS descriptor or descriptor too short [ 325.169163][ T5846] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 325.169188][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.169209][ T5846] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.169232][ T5846] usb 3-1: config 1 has no interface number 1 [ 325.169280][ T5846] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 325.169335][ T5846] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 325.169364][ T5846] usb 3-1: config 1 interface 2 has no altsetting 0 [ 325.251648][ T5846] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.251671][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.251685][ T5846] usb 3-1: Product: syz [ 325.251696][ T5846] usb 3-1: Manufacturer: syz [ 325.251706][ T5846] usb 3-1: SerialNumber: syz [ 325.522434][ T5846] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 325.522693][ T5846] usb 3-1: MIDIStreaming interface descriptor not found [ 325.741354][ T5846] usb 3-1: USB disconnect, device number 5 [ 326.097012][ T7072] team0: Port device team_slave_0 added [ 326.130011][ T7313] udevd[7313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.172349][ T7072] team0: Port device team_slave_1 added [ 326.235719][ T7317] delete_channel: no stack [ 326.547258][ T7324] netlink: 596 bytes leftover after parsing attributes in process `syz.4.393'. [ 326.951331][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 326.951361][ T7323] netlink: 28 bytes leftover after parsing attributes in process `syz.2.392'. [ 326.951377][ T7323] netlink: 32 bytes leftover after parsing attributes in process `syz.2.392'. [ 327.004377][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.004398][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.004428][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.035386][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.035461][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.035557][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.571260][ T7072] hsr_slave_0: entered promiscuous mode [ 327.572747][ T7072] hsr_slave_1: entered promiscuous mode [ 327.577275][ T7072] debugfs: 'hsr0' already exists in 'hsr' [ 327.577302][ T7072] Cannot create hsr debugfs directory [ 328.795858][ T1330] bridge_slave_1: left allmulticast mode [ 328.795890][ T1330] bridge_slave_1: left promiscuous mode [ 328.796150][ T1330] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.990911][ T1330] bridge_slave_0: left allmulticast mode [ 328.990943][ T1330] bridge_slave_0: left promiscuous mode [ 328.991238][ T1330] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.166732][ T7340] delete_channel: no stack [ 329.629035][ T1330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.700938][ T1330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.763462][ T1330] bond0 (unregistering): Released all slaves [ 330.568752][ T1330] hsr_slave_0: left promiscuous mode [ 330.767521][ T1330] hsr_slave_1: left promiscuous mode [ 330.768688][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.833254][ T1330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.022369][ T7396] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 332.070076][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 332.243619][ T1330] team0 (unregistering): Port device team_slave_1 removed [ 332.253065][ T10] usb 1-1: config 0 has an invalid interface number: 16 but max is 0 [ 332.253110][ T10] usb 1-1: config 0 has no interface number 0 [ 332.253233][ T10] usb 1-1: too many endpoints for config 0 interface 16 altsetting 144: 127, using maximum allowed: 30 [ 332.253351][ T10] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.253442][ T10] usb 1-1: config 0 interface 16 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.253500][ T10] usb 1-1: config 0 interface 16 altsetting 144 has 1 endpoint descriptor, different from the interface descriptor's value: 127 [ 332.253528][ T10] usb 1-1: config 0 interface 16 has no altsetting 0 [ 332.253563][ T10] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 332.253588][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.286597][ T10] usb 1-1: config 0 descriptor?? [ 332.561143][ T1330] team0 (unregistering): Port device team_slave_0 removed [ 332.803600][ T10] uclogic 0003:5543:004D.0001: interface is invalid, ignoring [ 332.973599][ T10] usb 1-1: USB disconnect, device number 3 [ 333.021233][ T7431] mmap: syz.4.432 (7431) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 333.444999][ T7412] lo speed is unknown, defaulting to 1000 [ 333.595461][ T7412] lo speed is unknown, defaulting to 1000 [ 333.599468][ T7412] lo speed is unknown, defaulting to 1000 [ 333.661649][ T7437] delete_channel: no stack [ 333.810012][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 334.049955][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 334.071192][ T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 334.071224][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.149336][ T7443] netlink: 28 bytes leftover after parsing attributes in process `syz.0.437'. [ 334.170177][ T10] usb 3-1: config 0 descriptor?? [ 334.237768][ T10] as10x_usb: device has been detected [ 334.239128][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 334.409144][ T10] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 334.848406][ T10] as10x_usb: error during firmware upload part1 [ 334.849150][ T10] Registered device nBox DVB-T Dongle [ 334.920988][ T10] usb 3-1: USB disconnect, device number 6 [ 335.241744][ T10] Unregistered device nBox DVB-T Dongle [ 335.323297][ T10] as10x_usb: device has been disconnected [ 335.432332][ T7072] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 335.506023][ T7072] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 335.586953][ T7072] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 335.695481][ T7072] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 335.794736][ T9] lo speed is unknown, defaulting to 1000 [ 335.826437][ T7412] infiniband syz1: set active [ 335.826460][ T7412] infiniband syz1: added lo [ 335.858397][ T7412] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 335.867979][ T7412] infiniband syz1: Couldn't open port 1 [ 335.958132][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 335.970728][ T7412] RDS/IB: syz1: added [ 335.971766][ T7412] smc: adding ib device syz1 with port count 1 [ 335.977318][ T7412] smc: ib device syz1 port 1 has no pnetid [ 336.023480][ T5846] lo speed is unknown, defaulting to 1000 [ 336.095510][ T7412] lo speed is unknown, defaulting to 1000 [ 336.107452][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.107499][ T10] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 336.107522][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.207758][ T7072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.233525][ T7072] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.270252][ T10] usb 3-1: config 0 descriptor?? [ 336.309123][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.309270][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.462777][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.463075][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.765767][ T10] kye 0003:0458:5011.0002: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 336.956392][ T10] kye 0003:0458:5011.0002: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 336.956430][ T10] kye 0003:0458:5011.0002: tablet-enabling feature report not found [ 336.956446][ T10] kye 0003:0458:5011.0002: tablet enabling failed [ 337.054041][ T10] usb 3-1: USB disconnect, device number 7 [ 337.287741][ T7495] fido_id[7495]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 337.387075][ T7072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.560102][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 337.710926][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 337.714136][ T10] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 337.714162][ T10] usb 1-1: config 0 has no interface number 0 [ 337.733778][ T10] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 337.733811][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.733832][ T10] usb 1-1: Product: syz [ 337.733847][ T10] usb 1-1: Manufacturer: syz [ 337.733862][ T10] usb 1-1: SerialNumber: syz [ 337.828389][ T7512] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.452'. [ 337.828729][ T7512] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 337.904061][ T10] usb 1-1: config 0 descriptor?? [ 337.920714][ T10] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 338.408133][ T7072] veth0_vlan: entered promiscuous mode [ 338.458314][ T7072] veth1_vlan: entered promiscuous mode [ 338.470472][ T5846] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 338.470589][ T7412] lo speed is unknown, defaulting to 1000 [ 338.527493][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x00, error -71) [ 338.527923][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 338.528336][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 338.528886][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 338.529320][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 338.529721][ T10] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 338.532077][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 338.550271][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 338.565953][ T10] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 338.566912][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 338.567788][ T10] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 338.568661][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 338.576540][ T10] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 338.607139][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 338.609149][ T10] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 338.610199][ T10] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 338.625419][ T10] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 338.670824][ T10] input: xirlink-cit as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 338.800364][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 338.803249][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.803284][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.803308][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 338.803353][ T5846] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 338.803378][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.914898][ T7072] veth0_macvtap: entered promiscuous mode [ 338.928408][ T5846] usb 3-1: config 0 descriptor?? [ 338.943190][ T10] usb 1-1: USB disconnect, device number 4 [ 338.975875][ T7072] veth1_macvtap: entered promiscuous mode [ 339.096718][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 339.134664][ T7072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 339.245182][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.246276][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.246323][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.246364][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.473488][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.473531][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.473556][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.473582][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.473608][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.473633][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.476598][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.476631][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.476658][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.476684][ T5846] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 339.731577][ T5846] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input8 [ 339.874745][ T5846] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 339.912478][ T5846] usb 3-1: USB disconnect, device number 8 [ 340.184347][ T1330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.184369][ T1330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.282355][ T7542] fido_id[7542]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 340.474173][ T38] audit: type=1326 audit(1767439778.881:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7546 comm="syz.0.461" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1d44bdf749 code=0x0 [ 340.505132][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.505155][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.706102][ T7412] lo speed is unknown, defaulting to 1000 [ 341.793091][ T5889] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 341.951301][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 341.970031][ T5889] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 341.970061][ T5889] usb 3-1: config 0 has no interface number 0 [ 341.987576][ T5889] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 341.987608][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.987630][ T5889] usb 3-1: Product: syz [ 341.987645][ T5889] usb 3-1: Manufacturer: syz [ 341.987662][ T5889] usb 3-1: SerialNumber: syz [ 342.039330][ T5889] usb 3-1: config 0 descriptor?? [ 342.061770][ T5889] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 342.061819][ T5889] usb 3-1: selecting invalid altsetting 1 [ 342.061837][ T5889] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 342.118931][ T5889] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 342.210642][ T5889] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 342.210818][ T5889] usb 3-1: media controller created [ 343.138324][ T5889] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 343.450075][ T7559] can: request_module (can-proto-3) failed. [ 344.125874][ T7552] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 344.201332][ T5889] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 344.201393][ T5889] zl10353_read_register: readreg error (reg=127, ret==-32) [ 344.310531][ T5889] usb 3-1: USB disconnect, device number 9 [ 345.311751][ T7412] lo speed is unknown, defaulting to 1000 [ 346.090033][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 346.250034][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 346.253804][ T44] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 346.253831][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.253850][ T44] usb 1-1: config 0 has no interface number 0 [ 346.253901][ T44] usb 1-1: config 0 interface 8 altsetting 248 has an invalid descriptor for endpoint zero, skipping [ 346.253924][ T44] usb 1-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 346.253952][ T44] usb 1-1: config 0 interface 8 has no altsetting 0 [ 346.258478][ T44] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 346.258510][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.258531][ T44] usb 1-1: Product: syz [ 346.258546][ T44] usb 1-1: Manufacturer: syz [ 346.258562][ T44] usb 1-1: SerialNumber: syz [ 346.380213][ T44] usb 1-1: config 0 descriptor?? [ 346.504244][ T7619] binder_alloc: binder_alloc_mmap_handler: 7618 2000000a0000-2000000a2000 already mapped failed -16 [ 346.632810][ T7412] lo speed is unknown, defaulting to 1000 [ 346.660628][ T44] ath6kl: Failed to submit usb control message: -71 [ 346.660677][ T44] ath6kl: unable to send the bmi data to the device: -71 [ 346.660693][ T44] ath6kl: Unable to send get target info: -71 [ 346.700327][ T44] ath6kl: Failed to init ath6kl core: -71 [ 346.702453][ T44] ath6kl_usb 1-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 346.966958][ T44] usb 1-1: USB disconnect, device number 5 [ 347.245837][ T7635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 347.473772][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.494091][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.495472][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.520213][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.524485][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.739984][ T5976] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 347.894130][ T5976] usb 1-1: Using ep0 maxpacket: 16 [ 347.899495][ T5976] usb 1-1: config 0 has an invalid interface number: 46 but max is 0 [ 347.899524][ T5976] usb 1-1: config 0 has no interface number 0 [ 347.899578][ T5976] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.899606][ T5976] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.899647][ T5976] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 347.899671][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.973608][ T5976] usb 1-1: config 0 descriptor?? [ 348.424810][ T38] audit: type=1326 audit(1767439786.821:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7641 comm="syz.4.497" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54037cf749 code=0x7fc00000 [ 348.490280][ T5976] logitech-djreceiver 0003:046D:C52B.0004: hidraw0: USB HID v0.00 Device [HID 046d:c52b] on usb-dummy_hcd.0-1/input46 [ 348.574222][ T7637] lo speed is unknown, defaulting to 1000 [ 348.618534][ T5888] usb 1-1: USB disconnect, device number 6 [ 348.712665][ T7666] netlink: 'syz.4.501': attribute type 8 has an invalid length. [ 348.736170][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 348.893962][ T7668] Driver unsupported XDP return value 0 on prog (id 82) dev N/A, expect packet loss! [ 349.560024][ T5803] Bluetooth: hci5: command tx timeout [ 349.902173][ T7695] delete_channel: no stack [ 351.640141][ T5803] Bluetooth: hci5: command tx timeout [ 352.146435][ T5803] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 353.026974][ T7637] chnl_net:caif_netlink_parms(): no params data found [ 353.727394][ T5803] Bluetooth: hci5: command tx timeout [ 353.956689][ T6605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.708810][ T6605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.082644][ T5889] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 355.250285][ T5889] usb 1-1: Using ep0 maxpacket: 16 [ 355.252248][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.252301][ T5889] usb 1-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 355.252325][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.256575][ T5889] usb 1-1: config 0 descriptor?? [ 355.683937][ T5889] hid_parser_main: 6 callbacks suppressed [ 355.683968][ T5889] hid-picolcd 0003:04D8:C002.0005: unknown main item tag 0x6 [ 355.780970][ T5889] hid-picolcd 0003:04D8:C002.0005: No report with id 0x11 found [ 355.800153][ T5803] Bluetooth: hci5: command tx timeout [ 355.912405][ T5889] usb 1-1: USB disconnect, device number 7 [ 356.130025][ T31] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 356.208178][ T5803] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 356.208590][ T5803] Bluetooth: hci1: Injecting HCI hardware error event [ 356.217182][ T6605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.231808][ T5809] Bluetooth: hci1: hardware error 0x00 [ 356.318892][ T31] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.318948][ T31] usb 6-1: New USB device found, idVendor=0543, idProduct=e621, bcdDevice= 0.00 [ 356.318966][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.362800][ T7637] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.363032][ T7637] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.363282][ T7637] bridge_slave_0: entered allmulticast mode [ 356.366117][ T7637] bridge_slave_0: entered promiscuous mode [ 356.368267][ T31] usb 6-1: config 0 descriptor?? [ 356.405030][ T7637] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.405410][ T7637] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.405640][ T7637] bridge_slave_1: entered allmulticast mode [ 356.407919][ T7637] bridge_slave_1: entered promiscuous mode [ 356.874325][ T31] viewsonic 0003:0543:E621.0006: item fetching failed at offset 2/5 [ 356.875226][ T31] viewsonic 0003:0543:E621.0006: probe with driver viewsonic failed with error -22 [ 357.110066][ T31] usb 6-1: USB disconnect, device number 2 [ 357.373464][ T6605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.671145][ T7637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.678142][ T7637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.162646][ T7637] team0: Port device team_slave_0 added [ 358.181601][ T7637] team0: Port device team_slave_1 added [ 358.600183][ T5809] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 358.778163][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.778183][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.778218][ T7637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.914241][ T7637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.914260][ T7637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 358.914288][ T7637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.150042][ T5982] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 359.315172][ T5982] usb 1-1: config index 0 descriptor too short (expected 39, got 27) [ 359.315236][ T5982] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 359.315261][ T5982] usb 1-1: config 0 interface 0 has no altsetting 0 [ 359.346997][ T5982] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 359.347028][ T5982] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 359.347049][ T5982] usb 1-1: Product: syz [ 359.347064][ T5982] usb 1-1: Manufacturer: syz [ 359.347080][ T5982] usb 1-1: SerialNumber: syz [ 359.387471][ T5982] usb 1-1: config 0 descriptor?? [ 359.428731][ T5982] hub 1-1:0.0: bad descriptor, ignoring hub [ 359.428772][ T5982] hub 1-1:0.0: probe with driver hub failed with error -5 [ 359.455318][ T5982] usb 1-1: selecting invalid altsetting 0 [ 359.813899][ T5982] usb 1-1: USB disconnect, device number 8 [ 359.814522][ T7826] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow! [ 359.860094][ T7637] hsr_slave_0: entered promiscuous mode [ 359.909460][ T7637] hsr_slave_1: entered promiscuous mode [ 359.971355][ T7637] debugfs: 'hsr0' already exists in 'hsr' [ 359.971384][ T7637] Cannot create hsr debugfs directory [ 360.217234][ T6605] bridge_slave_1: left allmulticast mode [ 360.217265][ T6605] bridge_slave_1: left promiscuous mode [ 360.217541][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.369237][ T6605] bridge_slave_0: left allmulticast mode [ 360.369267][ T6605] bridge_slave_0: left promiscuous mode [ 360.369516][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.922450][ T7833] delete_channel: no stack [ 361.390790][ T5939] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 361.626610][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.658138][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.670244][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.681729][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.683950][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.729942][ T5939] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 361.729971][ T5939] usb 1-1: config 0 has no interface number 0 [ 361.730025][ T5939] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.730053][ T5939] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 361.730096][ T5939] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 361.730119][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.801632][ T5939] usb 1-1: config 0 descriptor?? [ 362.293561][ T5939] prodikeys 0003:041E:2801.0007: report_id 2289684570 is invalid [ 362.293591][ T5939] prodikeys 0003:041E:2801.0007: item 0 4 1 8 parsing failed [ 362.294470][ T5939] prodikeys 0003:041E:2801.0007: hid parse failed [ 362.294587][ T5939] prodikeys 0003:041E:2801.0007: probe with driver prodikeys failed with error -22 [ 362.484701][ T5939] usb 1-1: USB disconnect, device number 9 [ 364.062937][ T5809] Bluetooth: hci3: command tx timeout [ 364.900728][ T6605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.981523][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.007329][ T6605] bond0 (unregistering): Released all slaves [ 365.116832][ T7844] pim6reg: entered allmulticast mode [ 365.708699][ T7868] netlink: 'syz.0.569': attribute type 4 has an invalid length. [ 365.868929][ T7865] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.120273][ T5809] Bluetooth: hci3: command tx timeout [ 366.190658][ T7872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.571'. [ 366.846541][ T7847] lo speed is unknown, defaulting to 1000 [ 368.068198][ T7637] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 368.200626][ T5809] Bluetooth: hci3: command tx timeout [ 368.269062][ T7637] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 368.495375][ T7637] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 368.645318][ T7918] warning: `syz.5.588' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 368.645591][ T7637] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 368.739017][ T7915] input: syz1 as /devices/virtual/input/input9 [ 369.302177][ T6605] hsr_slave_0: left promiscuous mode [ 369.340012][ T6605] hsr_slave_1: left promiscuous mode [ 369.346572][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.346604][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.415910][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.415942][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.578537][ T6605] veth1_macvtap: left promiscuous mode [ 369.578640][ T6605] veth0_macvtap: left promiscuous mode [ 369.578881][ T6605] veth1_vlan: left promiscuous mode [ 369.579009][ T6605] veth0_vlan: left promiscuous mode [ 370.280066][ T5809] Bluetooth: hci3: command tx timeout [ 372.580576][ T6605] team0 (unregistering): Port device team_slave_1 removed [ 372.870676][ T6605] team0 (unregistering): Port device team_slave_0 removed [ 373.080113][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 373.232583][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.232625][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.232666][ T44] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 373.232683][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.236928][ T44] usb 5-1: config 0 descriptor?? [ 374.130243][ T44] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 374.130321][ T44] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 374.130437][ T44] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 374.137539][ T44] usb 5-1: USB disconnect, device number 6 [ 375.866745][ T1167] smc: removing ib device syz1 [ 375.992272][ T5990] lo speed is unknown, defaulting to 1000 [ 375.992322][ T5990] syz1: Port: 1 Link DOWN [ 377.660021][ T6218] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 377.844855][ T6218] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 377.844887][ T6218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.927127][ T6218] usb 5-1: config 0 descriptor?? [ 377.953189][ T6218] cp210x 5-1:0.0: cp210x converter detected [ 378.094388][ T7637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.148980][ T7847] chnl_net:caif_netlink_parms(): no params data found [ 378.341560][ T6218] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 378.513276][ T6218] usb 5-1: cp210x converter now attached to ttyUSB0 [ 378.641924][ T6218] usb 5-1: USB disconnect, device number 7 [ 378.756738][ T6218] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 378.901627][ T6218] cp210x 5-1:0.0: device disconnected [ 379.354566][ T7637] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.487175][ T31] kernel read not supported for file /dsp (pid: 31 comm: kworker/1:0) [ 379.705227][ T8009] netlink: 32 bytes leftover after parsing attributes in process `syz.0.617'. [ 379.990662][ T8009] bond0: option miimon: invalid value (18446744073709518848) [ 379.990692][ T8009] bond0: option miimon: allowed values 0 - 2147483647 [ 380.027747][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.048037][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.048321][ T7847] bridge_slave_0: entered allmulticast mode [ 380.082677][ T7847] bridge_slave_0: entered promiscuous mode [ 380.106770][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.106929][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.149260][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.162592][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.162875][ T7847] bridge_slave_1: entered allmulticast mode [ 380.222281][ T7847] bridge_slave_1: entered promiscuous mode [ 380.645890][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.646498][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.984064][ T7847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.009725][ T7847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.815874][ T7847] team0: Port device team_slave_0 added [ 381.833725][ T7847] team0: Port device team_slave_1 added [ 382.186969][ T8060] capability: warning: `syz.5.630' uses deprecated v2 capabilities in a way that may be insecure [ 382.387224][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.387243][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.387272][ T7847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.426742][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.426791][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 382.426880][ T7847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.581287][ T8066] program syz.4.632 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.784508][ T7847] hsr_slave_0: entered promiscuous mode [ 382.787631][ T7847] hsr_slave_1: entered promiscuous mode [ 383.895428][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.895534][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.065939][ T6605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.065982][ T6605] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.749042][ T6605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 384.749089][ T6605] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.810776][ T8114] loop6: detected capacity change from 0 to 524287999 [ 386.449636][ T6605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 386.449674][ T6605] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.569611][ T8133] input: syz0 as /devices/virtual/input/input10 [ 386.902971][ T8140] input: syz0 as /devices/virtual/input/input11 [ 387.076356][ T6605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.076398][ T6605] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.704553][ T7637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.601089][ T6605] bridge_slave_1: left allmulticast mode [ 388.601121][ T6605] bridge_slave_1: left promiscuous mode [ 388.601404][ T6605] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.726348][ T6605] bridge_slave_0: left allmulticast mode [ 388.726380][ T6605] bridge_slave_0: left promiscuous mode [ 388.726658][ T6605] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.737386][ T8181] delete_channel: no stack [ 390.940824][ T6605] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 392.251205][ T6605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 392.331580][ T6605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 392.374170][ T6605] bond0 (unregistering): Released all slaves [ 392.543943][ T7847] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 392.595071][ T7847] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 392.711140][ T38] audit: type=1326 audit(1767439831.111:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8233 comm="syz.4.686" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54037cf749 code=0x0 [ 393.182849][ T7847] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 393.307066][ T7847] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 393.869972][ T5939] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 394.040148][ T5939] usb 5-1: Using ep0 maxpacket: 32 [ 394.063942][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 394.067106][ T5939] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 394.067138][ T5939] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.067159][ T5939] usb 5-1: Product: syz [ 394.067173][ T5939] usb 5-1: Manufacturer: syz [ 394.067189][ T5939] usb 5-1: SerialNumber: syz [ 394.136110][ T5939] usb 5-1: config 0 descriptor?? [ 394.310156][ T6605] hsr_slave_0: left promiscuous mode [ 394.350074][ T6605] hsr_slave_1: left promiscuous mode [ 394.353026][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.353055][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.417344][ T6605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.417375][ T6605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.646711][ T5939] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 394.786388][ T6605] veth1_macvtap: left promiscuous mode [ 394.789168][ T6605] veth0_macvtap: left promiscuous mode [ 394.804815][ T6605] veth1_vlan: left promiscuous mode [ 394.817094][ T6605] veth0_vlan: left promiscuous mode [ 395.059453][ T5939] gs_usb 5-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 398.000155][ T8279] netlink: 24 bytes leftover after parsing attributes in process `syz.4.702'. [ 402.832252][ T6605] team0 (unregistering): Port device team_slave_1 removed [ 403.146198][ T6605] team0 (unregistering): Port device team_slave_0 removed [ 407.541913][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 407.549061][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 407.577146][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 407.603908][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 407.604949][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 409.720233][ T5809] Bluetooth: hci0: command tx timeout [ 410.844152][ T5803] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 410.869563][ T5803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 410.891153][ T5803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 410.892563][ T5803] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 410.893955][ T5803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.800012][ T5809] Bluetooth: hci0: command tx timeout [ 413.000829][ T5809] Bluetooth: hci6: command tx timeout [ 413.433023][ T5803] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 413.452719][ T5803] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 413.470223][ T5803] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 413.471691][ T5803] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 413.473270][ T5803] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 413.880030][ T5809] Bluetooth: hci0: command tx timeout [ 415.080546][ T5809] Bluetooth: hci6: command tx timeout [ 415.480395][ T5809] Bluetooth: hci7: command tx timeout [ 415.960291][ T5803] Bluetooth: hci0: command tx timeout [ 415.963958][ T5803] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 415.993543][ T5803] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 416.001252][ T5803] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 416.082209][ T5803] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 416.089403][ T5803] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 417.160962][ T5809] Bluetooth: hci6: command tx timeout [ 417.560219][ T5803] Bluetooth: hci7: command tx timeout [ 418.202985][ T5803] Bluetooth: hci8: command tx timeout [ 419.240661][ T5803] Bluetooth: hci6: command tx timeout [ 419.640132][ T5803] Bluetooth: hci7: command tx timeout [ 420.280083][ T5803] Bluetooth: hci8: command tx timeout [ 421.309502][ T5809] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 421.323250][ T5809] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 421.340112][ T5809] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 421.342567][ T5809] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 421.350668][ T5809] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 421.720226][ T5809] Bluetooth: hci7: command tx timeout [ 421.944481][ T8258] team0: No ports can be present during mode change [ 421.947117][ T8279] bond0: ARP target 128.0.0.0 is already present [ 421.947143][ T8279] bond0: option arp_ip_target: invalid value (128) [ 422.306112][ T5939] usb 5-1: USB disconnect, device number 8 [ 422.362551][ T5809] Bluetooth: hci8: command tx timeout [ 423.480053][ T5809] Bluetooth: hci9: command tx timeout [ 424.440720][ T5809] Bluetooth: hci8: command tx timeout [ 425.560047][ T5809] Bluetooth: hci9: command tx timeout [ 427.640170][ T5809] Bluetooth: hci9: command tx timeout [ 429.720014][ T5809] Bluetooth: hci9: command tx timeout [ 437.760144][ T8310] chnl_net:caif_netlink_parms(): no params data found [ 437.781480][ T8298] chnl_net:caif_netlink_parms(): no params data found [ 437.831310][ T8301] chnl_net:caif_netlink_parms(): no params data found [ 440.786069][ T8304] chnl_net:caif_netlink_parms(): no params data found [ 440.833708][ T8307] chnl_net:caif_netlink_parms(): no params data found [ 445.330835][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.330913][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.386568][ T8310] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.386789][ T8310] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.387009][ T8310] bridge_slave_0: entered allmulticast mode [ 446.422268][ T8310] bridge_slave_0: entered promiscuous mode [ 446.437521][ T8298] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.437665][ T8298] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.437934][ T8298] bridge_slave_0: entered allmulticast mode [ 446.462228][ T8298] bridge_slave_0: entered promiscuous mode [ 446.506073][ T8301] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.506249][ T8301] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.506499][ T8301] bridge_slave_0: entered allmulticast mode [ 446.509351][ T8301] bridge_slave_0: entered promiscuous mode [ 446.554256][ T8310] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.554691][ T8310] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.554925][ T8310] bridge_slave_1: entered allmulticast mode [ 446.557836][ T8310] bridge_slave_1: entered promiscuous mode [ 446.559176][ T8298] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.559286][ T8298] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.559447][ T8298] bridge_slave_1: entered allmulticast mode [ 446.611690][ T8298] bridge_slave_1: entered promiscuous mode [ 446.646487][ T8301] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.646588][ T8301] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.646776][ T8301] bridge_slave_1: entered allmulticast mode [ 446.649092][ T8301] bridge_slave_1: entered promiscuous mode [ 452.072787][ T8310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.097766][ T8298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.104527][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.118767][ T8304] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.119057][ T8304] bridge_slave_0: entered allmulticast mode [ 452.125908][ T8304] bridge_slave_0: entered promiscuous mode [ 452.168663][ T8301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.180120][ T8307] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.180262][ T8307] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.180549][ T8307] bridge_slave_0: entered allmulticast mode [ 452.183364][ T8307] bridge_slave_0: entered promiscuous mode [ 452.244795][ T8310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.248816][ T8298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.249314][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.249477][ T8304] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.249666][ T8304] bridge_slave_1: entered allmulticast mode [ 452.271732][ T8304] bridge_slave_1: entered promiscuous mode [ 452.289347][ T8301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.305064][ T8307] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.305153][ T8307] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.305365][ T8307] bridge_slave_1: entered allmulticast mode [ 452.307300][ T8307] bridge_slave_1: entered promiscuous mode [ 459.550914][ T8310] team0: Port device team_slave_0 added [ 459.554872][ T8298] team0: Port device team_slave_0 added [ 459.559117][ T8304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.595655][ T8307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.598458][ T8310] team0: Port device team_slave_1 added [ 459.633299][ T8304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.977149][ T8298] team0: Port device team_slave_1 added [ 459.990672][ T8301] team0: Port device team_slave_0 added [ 459.996348][ T8307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.893135][ T8301] team0: Port device team_slave_1 added [ 465.258619][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.258639][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.258667][ T8310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.621518][ T8304] team0: Port device team_slave_0 added [ 466.263439][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.263458][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.263488][ T8298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.451041][ T8307] team0: Port device team_slave_0 added [ 466.468485][ T8310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.468503][ T8310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.468532][ T8310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.532921][ T8304] team0: Port device team_slave_1 added [ 466.533935][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.533951][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.533980][ T8301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.613522][ T8298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.613542][ T8298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.613571][ T8298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.672654][ T8307] team0: Port device team_slave_1 added [ 466.714907][ T8301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.714926][ T8301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.714955][ T8301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.872362][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 467.891595][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 467.925958][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 467.927378][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 467.928743][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.040311][ T5803] Bluetooth: hci1: command tx timeout [ 471.452279][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 471.476886][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 471.479278][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 471.496650][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 471.531985][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.532005][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.532035][ T8304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.541245][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 472.120391][ T5809] Bluetooth: hci1: command tx timeout [ 472.296823][ T8307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.296843][ T8307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.296882][ T8307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.298439][ T8304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.298454][ T8304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.298483][ T8304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.730529][ T5809] Bluetooth: hci2: command tx timeout [ 473.922180][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 473.927675][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 473.954752][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 473.956837][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 473.957770][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.200315][ T5803] Bluetooth: hci1: command tx timeout [ 474.393743][ T8307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.393763][ T8307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.393792][ T8307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.800361][ T5803] Bluetooth: hci2: command tx timeout [ 476.040847][ T5803] Bluetooth: hci0: command tx timeout [ 476.280500][ T5803] Bluetooth: hci1: command tx timeout [ 476.419147][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.443923][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.445589][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.447010][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.447953][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 477.168106][ T8310] hsr_slave_0: entered promiscuous mode [ 477.179904][ T8310] hsr_slave_1: entered promiscuous mode [ 477.186690][ T8310] debugfs: 'hsr0' already exists in 'hsr' [ 477.186730][ T8310] Cannot create hsr debugfs directory [ 477.879907][ T5803] Bluetooth: hci2: command tx timeout [ 478.121942][ T5803] Bluetooth: hci0: command tx timeout [ 478.600867][ T5803] Bluetooth: hci3: command tx timeout [ 479.960590][ T5803] Bluetooth: hci2: command tx timeout [ 480.200261][ T5803] Bluetooth: hci0: command tx timeout [ 480.679926][ T5803] Bluetooth: hci3: command tx timeout [ 481.601956][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 481.608175][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 481.633718][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 481.635151][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 481.636050][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.280287][ T5803] Bluetooth: hci0: command tx timeout [ 482.770266][ T5803] Bluetooth: hci3: command tx timeout [ 483.800422][ T5803] Bluetooth: hci4: command tx timeout [ 484.840014][ T5803] Bluetooth: hci3: command tx timeout [ 485.880151][ T5803] Bluetooth: hci4: command tx timeout [ 486.201739][ T8393] chnl_net:caif_netlink_parms(): no params data found [ 487.878634][ T8406] chnl_net:caif_netlink_parms(): no params data found [ 487.960119][ T5803] Bluetooth: hci4: command tx timeout [ 488.063149][ T8411] chnl_net:caif_netlink_parms(): no params data found [ 488.180146][ T8414] chnl_net:caif_netlink_parms(): no params data found [ 490.040183][ T5803] Bluetooth: hci4: command tx timeout [ 491.837678][ T8417] chnl_net:caif_netlink_parms(): no params data found [ 491.858209][ T8393] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.858449][ T8393] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.858710][ T8393] bridge_slave_0: entered allmulticast mode [ 491.886209][ T8393] bridge_slave_0: entered promiscuous mode [ 492.029238][ T8393] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.029408][ T8393] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.029687][ T8393] bridge_slave_1: entered allmulticast mode [ 492.070676][ T8393] bridge_slave_1: entered promiscuous mode [ 495.970006][ T8406] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.970234][ T8406] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.970524][ T8406] bridge_slave_0: entered allmulticast mode [ 495.976011][ T8406] bridge_slave_0: entered promiscuous mode [ 497.929609][ T8393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.940300][ T8406] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.940442][ T8406] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.940746][ T8406] bridge_slave_1: entered allmulticast mode [ 497.943843][ T8406] bridge_slave_1: entered promiscuous mode [ 497.948985][ T8411] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.949124][ T8411] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.949363][ T8411] bridge_slave_0: entered allmulticast mode [ 497.998256][ T8411] bridge_slave_0: entered promiscuous mode [ 499.053493][ T8393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.784806][ T8411] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.784975][ T8411] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.785301][ T8411] bridge_slave_1: entered allmulticast mode [ 499.813754][ T8411] bridge_slave_1: entered promiscuous mode [ 499.817352][ T8414] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.817498][ T8414] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.817759][ T8414] bridge_slave_0: entered allmulticast mode [ 499.847678][ T8414] bridge_slave_0: entered promiscuous mode [ 504.066871][ T8414] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.067052][ T8414] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.067242][ T8414] bridge_slave_1: entered allmulticast mode [ 504.069178][ T8414] bridge_slave_1: entered promiscuous mode [ 505.982130][ T8406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.767197][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.767277][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.475436][ T8393] team0: Port device team_slave_0 added [ 507.898650][ T8406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.924760][ T8411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.065240][ T8393] team0: Port device team_slave_1 added [ 509.066857][ T8417] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.067078][ T8417] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.067367][ T8417] bridge_slave_0: entered allmulticast mode [ 509.106880][ T8417] bridge_slave_0: entered promiscuous mode [ 509.958204][ T8411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.983515][ T8414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 512.089997][ T8417] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.090140][ T8417] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.090425][ T8417] bridge_slave_1: entered allmulticast mode [ 512.093371][ T8417] bridge_slave_1: entered promiscuous mode [ 514.716563][ T8414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.976276][ T8406] team0: Port device team_slave_0 added [ 517.762402][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.762421][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 517.762449][ T8393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.757174][ T8406] team0: Port device team_slave_1 added [ 518.768482][ T8411] team0: Port device team_slave_0 added [ 520.393197][ T8393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 520.393216][ T8393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 520.393245][ T8393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 520.480378][ T8417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.638508][ T8411] team0: Port device team_slave_1 added [ 521.661027][ T8414] team0: Port device team_slave_0 added [ 521.696004][ T8417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.213371][ T8414] team0: Port device team_slave_1 added [ 524.077606][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.077625][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.077654][ T8406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.424120][ T8406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.424139][ T8406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.424167][ T8406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.217840][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.217860][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.217888][ T8411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.992046][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 528.018096][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 528.019605][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 528.056229][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 528.057198][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 528.215995][ T8417] team0: Port device team_slave_0 added [ 528.498894][ T8411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.498913][ T8411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.498942][ T8411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.545835][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.545853][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.545881][ T8414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.600725][ T8417] team0: Port device team_slave_1 added [ 528.670589][ T8414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.670609][ T8414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 528.670639][ T8414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.120178][ T5803] Bluetooth: hci5: command tx timeout [ 531.553496][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 531.581199][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 531.583439][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 531.584815][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 531.585713][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 532.199865][ T5803] Bluetooth: hci5: command tx timeout [ 533.639880][ T5803] Bluetooth: hci1: command tx timeout [ 534.022870][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 534.028498][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 534.064077][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 534.066332][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 534.067230][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 534.279852][ T5803] Bluetooth: hci5: command tx timeout [ 535.570351][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.570371][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.570400][ T8417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.720390][ T5809] Bluetooth: hci1: command tx timeout [ 536.120008][ T5809] Bluetooth: hci6: command tx timeout [ 536.359882][ T5809] Bluetooth: hci5: command tx timeout [ 537.127880][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 537.145753][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 537.162010][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 537.169143][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 537.179333][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 537.799857][ T5803] Bluetooth: hci1: command tx timeout [ 537.908714][ T8417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 537.908734][ T8417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 537.908764][ T8417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.199879][ T5803] Bluetooth: hci6: command tx timeout [ 539.239960][ T5803] Bluetooth: hci2: command tx timeout [ 539.879827][ T5803] Bluetooth: hci1: command tx timeout [ 540.279886][ T5803] Bluetooth: hci6: command tx timeout [ 540.600390][ T8298] syz-executor (8298) used greatest stack depth: 18456 bytes left [ 541.320221][ T5803] Bluetooth: hci2: command tx timeout [ 542.072618][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.076265][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.107585][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.121800][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.122756][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.361376][ T5803] Bluetooth: hci6: command tx timeout [ 543.108153][ T8417] hsr_slave_0: entered promiscuous mode [ 543.116355][ T8417] hsr_slave_1: entered promiscuous mode [ 543.117612][ T8417] debugfs: 'hsr0' already exists in 'hsr' [ 543.117640][ T8417] Cannot create hsr debugfs directory [ 543.400851][ T5803] Bluetooth: hci2: command tx timeout [ 544.199864][ T5803] Bluetooth: hci0: command tx timeout [ 544.965779][ T8524] chnl_net:caif_netlink_parms(): no params data found [ 545.479978][ T5803] Bluetooth: hci2: command tx timeout [ 546.279934][ T5803] Bluetooth: hci0: command tx timeout [ 548.240642][ T8536] chnl_net:caif_netlink_parms(): no params data found [ 548.359845][ T5803] Bluetooth: hci0: command tx timeout [ 550.439841][ T5803] Bluetooth: hci0: command tx timeout [ 550.963686][ T8540] chnl_net:caif_netlink_parms(): no params data found [ 551.081479][ T8533] chnl_net:caif_netlink_parms(): no params data found [ 554.341752][ T8524] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.342220][ T8524] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.342510][ T8524] bridge_slave_0: entered allmulticast mode [ 554.345522][ T8524] bridge_slave_0: entered promiscuous mode [ 555.259142][ T8524] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.259314][ T8524] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.259586][ T8524] bridge_slave_1: entered allmulticast mode [ 555.304424][ T8524] bridge_slave_1: entered promiscuous mode [ 556.211044][ T8536] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.211180][ T8536] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.211510][ T8536] bridge_slave_0: entered allmulticast mode [ 556.243498][ T8536] bridge_slave_0: entered promiscuous mode [ 557.017067][ T8536] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.018583][ T8536] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.018902][ T8536] bridge_slave_1: entered allmulticast mode [ 557.060432][ T8536] bridge_slave_1: entered promiscuous mode [ 557.274169][ T8550] chnl_net:caif_netlink_parms(): no params data found [ 557.324123][ T8524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.014095][ T8524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.677345][ T8540] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.679390][ T8540] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.708935][ T8540] bridge_slave_0: entered allmulticast mode [ 561.721476][ T8540] bridge_slave_0: entered promiscuous mode [ 563.507186][ T8536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 563.507879][ T8540] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.508016][ T8540] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.508259][ T8540] bridge_slave_1: entered allmulticast mode [ 564.102276][ T8540] bridge_slave_1: entered promiscuous mode [ 565.908691][ T8533] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.908836][ T8533] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.909110][ T8533] bridge_slave_0: entered allmulticast mode [ 565.935112][ T8533] bridge_slave_0: entered promiscuous mode [ 565.950793][ T8536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.422722][ T8524] team0: Port device team_slave_0 added [ 567.603804][ T8533] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.604933][ T8533] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.605301][ T8533] bridge_slave_1: entered allmulticast mode [ 567.608420][ T8533] bridge_slave_1: entered promiscuous mode [ 568.209511][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.209592][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.589107][ T8524] team0: Port device team_slave_1 added [ 570.993022][ T8540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.662050][ T8536] team0: Port device team_slave_0 added [ 571.796119][ T8540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.624316][ T8536] team0: Port device team_slave_1 added [ 573.105336][ T8533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.446262][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.446281][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.446310][ T8524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.517717][ T8533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.112266][ T8550] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.112499][ T8550] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.112757][ T8550] bridge_slave_0: entered allmulticast mode [ 577.144615][ T8550] bridge_slave_0: entered promiscuous mode [ 578.526631][ T8524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.526651][ T8524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 578.526682][ T8524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 579.580039][ T8540] team0: Port device team_slave_0 added [ 579.580253][ T8550] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.580381][ T8550] bridge0: port 2(bridge_slave_1) entered disabled state [ 579.580579][ T8550] bridge_slave_1: entered allmulticast mode [ 579.582757][ T8550] bridge_slave_1: entered promiscuous mode [ 579.585100][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 579.585113][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 579.585136][ T8536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 581.586391][ T8536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 581.586410][ T8536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 581.586441][ T8536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 581.656820][ T8540] team0: Port device team_slave_1 added [ 582.098199][ T8533] team0: Port device team_slave_0 added [ 584.263037][ T8533] team0: Port device team_slave_1 added [ 586.235256][ T8550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 587.296825][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.296846][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 587.296878][ T8540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 588.429075][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 588.447734][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 588.457328][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 588.477218][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 588.478145][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.932710][ T8550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.401881][ T8540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.401902][ T8540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.401935][ T8540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.521135][ T5803] Bluetooth: hci3: command tx timeout [ 592.073067][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 592.095487][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 592.113142][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 592.117874][ T5809] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 592.119134][ T5809] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 592.602329][ T5809] Bluetooth: hci3: command tx timeout [ 593.323789][ T8533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.323804][ T8533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.323832][ T8533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.369911][ T5809] Bluetooth: hci4: command tx timeout [ 594.416005][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 594.460835][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 594.463487][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 594.508023][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 594.508968][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 594.679938][ T5803] Bluetooth: hci3: command tx timeout [ 596.440021][ T5803] Bluetooth: hci4: command tx timeout [ 596.680083][ T5803] Bluetooth: hci5: command tx timeout [ 596.759869][ T5803] Bluetooth: hci3: command tx timeout [ 597.266536][ T8536] hsr_slave_0: entered promiscuous mode [ 597.268437][ T8536] hsr_slave_1: entered promiscuous mode [ 597.284948][ T8536] debugfs: 'hsr0' already exists in 'hsr' [ 597.284979][ T8536] Cannot create hsr debugfs directory [ 598.237001][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.265407][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.267193][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 598.268820][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 598.334832][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 598.527626][ T5803] Bluetooth: hci4: command tx timeout [ 598.759963][ T5803] Bluetooth: hci5: command tx timeout [ 599.534249][ T8550] team0: Port device team_slave_0 added [ 600.360062][ T5809] Bluetooth: hci1: command tx timeout [ 600.600332][ T5809] Bluetooth: hci4: command tx timeout [ 600.840722][ T5803] Bluetooth: hci5: command tx timeout [ 602.226438][ T8550] team0: Port device team_slave_1 added [ 602.453830][ T5809] Bluetooth: hci1: command tx timeout [ 602.838442][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 602.871424][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 602.873740][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 602.919849][ T5803] Bluetooth: hci5: command tx timeout [ 602.980059][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 602.982473][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 604.520144][ T5803] Bluetooth: hci1: command tx timeout [ 605.012156][ T5803] Bluetooth: hci2: command tx timeout [ 606.609880][ T5809] Bluetooth: hci1: command tx timeout [ 607.089165][ T5803] Bluetooth: hci2: command tx timeout [ 609.171272][ T5809] Bluetooth: hci2: command tx timeout [ 609.667487][ T8655] chnl_net:caif_netlink_parms(): no params data found [ 609.703621][ T8644] chnl_net:caif_netlink_parms(): no params data found [ 609.736511][ T8649] chnl_net:caif_netlink_parms(): no params data found [ 609.842147][ T8652] chnl_net:caif_netlink_parms(): no params data found [ 611.239821][ T5803] Bluetooth: hci2: command tx timeout [ 613.104801][ T8661] chnl_net:caif_netlink_parms(): no params data found [ 619.069766][ T8655] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.069958][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.070298][ T8655] bridge_slave_0: entered allmulticast mode [ 619.073682][ T8655] bridge_slave_0: entered promiscuous mode [ 619.078990][ T8644] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.079141][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.079414][ T8644] bridge_slave_0: entered allmulticast mode [ 619.083263][ T8644] bridge_slave_0: entered promiscuous mode [ 619.092070][ T8649] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.092429][ T8649] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.093215][ T8649] bridge_slave_0: entered allmulticast mode [ 619.110412][ T8649] bridge_slave_0: entered promiscuous mode [ 619.453779][ T8655] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.454259][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.454590][ T8655] bridge_slave_1: entered allmulticast mode [ 619.457648][ T8655] bridge_slave_1: entered promiscuous mode [ 619.459537][ T8644] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.459854][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.460636][ T8644] bridge_slave_1: entered allmulticast mode [ 619.469528][ T8644] bridge_slave_1: entered promiscuous mode [ 619.481001][ T8649] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.481357][ T8649] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.482120][ T8649] bridge_slave_1: entered allmulticast mode [ 619.522916][ T8649] bridge_slave_1: entered promiscuous mode [ 619.533694][ T8652] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.534048][ T8652] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.534946][ T8652] bridge_slave_0: entered allmulticast mode [ 619.549465][ T8652] bridge_slave_0: entered promiscuous mode [ 620.547068][ T8652] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.547314][ T8652] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.547612][ T8652] bridge_slave_1: entered allmulticast mode [ 620.556275][ T8652] bridge_slave_1: entered promiscuous mode [ 624.798577][ T8655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.832832][ T8644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 624.852506][ T8649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.564001][ T8661] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.564220][ T8661] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.564565][ T8661] bridge_slave_0: entered allmulticast mode [ 625.569013][ T8661] bridge_slave_0: entered promiscuous mode [ 625.605572][ T8655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.613106][ T8644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.633182][ T8649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.661059][ T8652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.661314][ T8661] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.661473][ T8661] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.661742][ T8661] bridge_slave_1: entered allmulticast mode [ 625.667259][ T8661] bridge_slave_1: entered promiscuous mode [ 626.440387][ T39] INFO: task kworker/u8:20:6605 blocked for more than 143 seconds. [ 626.440425][ T39] Tainted: G L syzkaller #0 [ 626.440440][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.440451][ T39] task:kworker/u8:20 state:D stack:21568 pid:6605 tgid:6605 ppid:2 task_flags:0x42[ 626.440451][ T39] task:kworker/u8:20 state:D stack:21568 pid:6605 tgid:6605 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 626.440524][ T39] Workqueue: netns cleanup_net [ 626.440564][ T39] Call Trace: [ 626.440576][ T39] [ 626.440592][ T39] __schedule+0x145f/0x5070 [ 626.440663][ T39] ? __pfx___schedule+0x10/0x10 [ 626.440718][ T39] rt_mutex_schedule+0x77/0xf0 [ 626.440757][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 626.440790][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 626.440840][ T39] rt_mutex_slowlock+0x2a8/0x6b0 [ 626.440875][ T39] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 626.440908][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 626.440958][ T39] ? rcu_barrier+0x4c/0x570 [ 626.440991][ T39] ? rcu_barrier+0x4c/0x570 [ 626.441024][ T39] mutex_lock_nested+0x16a/0x1d0 [ 626.441061][ T39] rcu_barrier+0x4c/0x570 [ 626.441086][ T39] ? wg_destruct+0x219/0x310 [ 626.441120][ T39] ? kfree+0x1bd/0x900 [ 626.441149][ T39] ? wg_destruct+0x219/0x310 [ 626.441188][ T39] wg_destruct+0x21e/0x310 [ 626.441223][ T39] ? __pfx_wg_destruct+0x10/0x10 [ 626.441257][ T39] netdev_run_todo+0xcd5/0xea0 [ 626.441298][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 626.441329][ T39] ? unregister_netdevice_queue+0x19b/0x350 [ 626.441367][ T39] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 626.441399][ T39] ? batadv_meshif_vlan_put+0x131/0x1e0 [ 626.441430][ T39] ? batadv_meshif_destroy_netlink+0x125/0x160 [ 626.441463][ T39] default_device_exit_batch+0x969/0x9e0 [ 626.441500][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 626.441530][ T39] ? __pfx_default_device_exit_batch+0x10/0x10 [ 626.441573][ T39] ? __pfx_default_device_exit_batch+0x10/0x10 [ 626.441600][ T39] ops_undo_list+0x525/0x990 [ 626.441635][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 626.441659][ T39] ? rt_spin_unlock+0x150/0x200 [ 626.441696][ T39] ? rt_spin_unlock+0x161/0x200 [ 626.441730][ T39] cleanup_net+0x4de/0x7b0 [ 626.441760][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 626.441792][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 626.441818][ T39] ? process_scheduled_works+0x9ef/0x1770 [ 626.441847][ T39] process_scheduled_works+0xad1/0x1770 [ 626.441907][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 626.441932][ T39] ? do_raw_spin_lock+0x121/0x290 [ 626.441978][ T39] worker_thread+0x8a0/0xda0 [ 626.442028][ T39] ? __kthread_parkme+0x7b/0x200 [ 626.442069][ T39] kthread+0x711/0x8a0 [ 626.442103][ T39] ? __pfx_worker_thread+0x10/0x10 [ 626.442131][ T39] ? __pfx_kthread+0x10/0x10 [ 626.442161][ T39] ? rt_spin_unlock+0x150/0x200 [ 626.442197][ T39] ? rt_spin_unlock+0x161/0x200 [ 626.442226][ T39] ? __pfx_kthread+0x10/0x10 [ 626.442261][ T39] ret_from_fork+0x510/0xa50 [ 626.442291][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 626.442315][ T39] ? __switch_to+0xc9e/0x1480 [ 626.442355][ T39] ? __pfx_kthread+0x10/0x10 [ 626.442389][ T39] ret_from_fork_asm+0x1a/0x30 [ 626.442444][ T39] [ 626.442477][ T39] INFO: task syz-executor:8307 blocked for more than 143 seconds. [ 626.442497][ T39] Tainted: G L syzkaller #0 [ 626.442510][ T39] Blocked by coredump. [ 626.442517][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 626.442528][ T39] task:syz-executor state:D stack:22392 pid:8307 tgid:8307 ppid:1 task_flags:0x40054c flags:0x00080003 [ 626.442591][ T39] Call Trace: [ 626.442599][ T39] [ 626.442613][ T39] __schedule+0x145f/0x5070 [ 626.442660][ T39] ? kvm_sched_clock_read+0x11/0x20 [ 626.442695][ T39] ? sched_clock+0x3f/0x60 [ 626.442747][ T39] ? __pfx___schedule+0x10/0x10 [ 626.442801][ T39] rt_mutex_schedule+0x77/0xf0 [ 626.442837][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 626.442868][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 626.442918][ T39] rt_mutex_slowlock+0x2a8/0x6b0 [ 626.442953][ T39] ? rt_mutex_slowlock+0x1c9/0x6b0 [ 626.442985][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 626.443037][ T39] ? rcu_barrier+0x4c/0x570 [ 626.443069][ T39] ? rcu_barrier+0x4c/0x570 [ 626.443114][ T39] ? rcu_barrier+0x4c/0x570 [ 626.443133][ T39] mutex_lock_nested+0x16a/0x1d0 [ 626.443158][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 626.443189][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 626.443219][ T39] rcu_barrier+0x4c/0x570 [ 626.443248][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 626.443277][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 626.443306][ T39] netdev_run_todo+0x327/0xea0 [ 626.443341][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 626.443365][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 626.443397][ T39] ? kasan_quarantine_put+0xbb/0x1f0 [ 626.443440][ T39] ? netdev_state_change+0x1ca/0x220 [ 626.443468][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 626.443497][ T39] tun_chr_close+0x13f/0x1c0 [ 626.443527][ T39] __fput+0x45b/0xa80 [ 626.443567][ T39] task_work_run+0x1d4/0x260 [ 626.443604][ T39] ? __pfx_task_work_run+0x10/0x10 [ 626.443637][ T39] ? do_exit+0x68f/0x22f0 [ 626.443669][ T39] ? do_exit+0x68f/0x22f0 [ 626.443706][ T39] do_exit+0x694/0x22f0 [ 626.443742][ T39] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 626.443765][ T39] ? lockdep_hardirqs_on+0x7b/0x110 [ 626.443789][ T39] ? __pfx_do_exit+0x10/0x10 [ 626.443818][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 626.443849][ T39] ? reacquire_held_locks+0x104/0x190 [ 626.443883][ T39] ? rt_spin_lock+0x1c1/0x3e0 [ 626.443924][ T39] do_group_exit+0x21c/0x2d0 [ 626.443958][ T39] ? rt_spin_unlock+0x161/0x200 [ 626.443991][ T39] get_signal+0x125d/0x1310 [ 626.444048][ T39] arch_do_signal_or_restart+0x9a/0x7a0 [ 626.444088][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 626.444146][ T39] exit_to_user_mode_loop+0x87/0x4e0 [ 626.444179][ T39] ? rcu_is_watching+0x15/0xb0 [ 626.444204][ T39] do_syscall_64+0x2b7/0xf80 [ 626.444227][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.444249][ T39] ? trace_irq_disable+0x37/0x100 [ 626.444273][ T39] ? clear_bhb_loop+0x60/0xb0 [ 626.444302][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.444325][ T39] RIP: 0033:0x7f1ac36d15dc [ 626.444354][ T39] RSP: 002b:00007ffd97c73a70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 626.444377][ T39] RAX: 0000000000000044 RBX: 00007f1ac4454620 RCX: 00007f1ac36d15dc [ 626.444393][ T39] RDX: 0000000000000044 RSI: 00007f1ac4454670 RDI: 0000000000000003 [ 626.444407][ T39] RBP: 0000000000000000 R08: 00007ffd97c73ac4 R09: 000000000000000c [ 626.444420][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 626.444433][ T39] R13: 0000000000000000 R14: 00007f1ac4454670 R15: 0000000000000000 [ 626.444467][ T39] [ 626.444554][ T39] [ 626.444554][ T39] Showing all locks held in the system: [ 626.444566][ T39] 4 locks held by rcuc/0/20: [ 626.444583][ T39] 1 lock held by khungtaskd/39: [ 626.444595][ T39] #0: ffffffff8d5ae940 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 626.444668][ T39] 3 locks held by kworker/1:1/44: [ 626.444681][ T39] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.444736][ T39] #1: ffffc90000b67bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.444790][ T39] #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 626.444861][ T39] 3 locks held by kworker/u8:11/2563: [ 626.444874][ T39] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.444934][ T39] #1: ffffc900098bfbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.445023][ T39] #2: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 626.445095][ T39] 2 locks held by getty/5557: [ 626.445109][ T39] #0: ffff88803070b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 626.445168][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x44f/0x1460 [ 626.445224][ T39] 5 locks held by kworker/u8:20/6605: [ 626.445237][ T39] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x1770 [ 626.445291][ T39] #1: ffffc9000ec87bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x1770 [ 626.445347][ T39] #2: ffffffff8e8989e0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x7b0 [ 626.445401][ T39] #3: ffff8880575097b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 626.445463][ T39] #4: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445523][ T39] 1 lock held by syz-executor/8304: [ 626.445535][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445589][ T39] 1 lock held by syz-executor/8307: [ 626.445601][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445653][ T39] 1 lock held by syz-executor/8310: [ 626.445666][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445721][ T39] 1 lock held by syz-executor/8393: [ 626.445734][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445787][ T39] 1 lock held by syz-executor/8406: [ 626.445800][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445854][ T39] 1 lock held by syz-executor/8411: [ 626.445867][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445920][ T39] 1 lock held by syz-executor/8414: [ 626.445933][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.445986][ T39] 1 lock held by syz-executor/8417: [ 626.445999][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.446064][ T39] 1 lock held by syz-executor/8524: [ 626.446076][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.446129][ T39] 1 lock held by syz-executor/8533: [ 626.446142][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.446195][ T39] 1 lock held by syz-executor/8536: [ 626.446208][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.446262][ T39] 1 lock held by syz-executor/8540: [ 626.446275][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.446330][ T39] 1 lock held by syz-executor/8550: [ 626.446343][ T39] #0: ffffffff8d5b43b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 626.446399][ T39] 2 locks held by syz-executor/8644: [ 626.446412][ T39] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 626.446473][ T39] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 626.446528][ T39] 2 locks held by syz-executor/8649: [ 626.446541][ T39] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 626.446602][ T39] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 626.446656][ T39] 1 lock held by syz-executor/8652: [ 626.446669][ T39] #0: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 626.446722][ T39] 2 locks held by syz-executor/8655: [ 626.446735][ T39] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 626.446794][ T39] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 626.446847][ T39] 2 locks held by syz-executor/8661: [ 626.446877][ T39] #0: ffffffff8e021f08 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 626.446937][ T39] #1: ffffffff8e8a5af8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8ec/0x1c90 [ 626.446991][ T39] [ 626.446996][ T39] ============================================= [ 626.446996][ T39] [ 626.447007][ T39] NMI backtrace for cpu 1 [ 626.447048][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.447078][ T39] Tainted: [L]=SOFTLOCKUP [ 626.447086][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.447099][ T39] Call Trace: [ 626.447107][ T39] [ 626.447116][ T39] dump_stack_lvl+0xe8/0x150 [ 626.447149][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 626.447177][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 626.447204][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 626.447237][ T39] sys_info+0x135/0x170 [ 626.447262][ T39] watchdog+0xf95/0xfe0 [ 626.447291][ T39] ? watchdog+0x20a/0xfe0 [ 626.447324][ T39] kthread+0x711/0x8a0 [ 626.447357][ T39] ? __pfx_watchdog+0x10/0x10 [ 626.447381][ T39] ? __pfx_kthread+0x10/0x10 [ 626.447408][ T39] ? rt_spin_unlock+0x150/0x200 [ 626.447442][ T39] ? rt_spin_unlock+0x161/0x200 [ 626.447469][ T39] ? __pfx_kthread+0x10/0x10 [ 626.447501][ T39] ret_from_fork+0x510/0xa50 [ 626.447528][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 626.447550][ T39] ? __switch_to+0xc9e/0x1480 [ 626.447587][ T39] ? __pfx_kthread+0x10/0x10 [ 626.447620][ T39] ret_from_fork_asm+0x1a/0x30 [ 626.447670][ T39] [ 626.447678][ T39] Sending NMI from CPU 1 to CPUs 0: [ 626.447712][ C0] NMI backtrace for cpu 0 [ 626.447731][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.447756][ C0] Tainted: [L]=SOFTLOCKUP [ 626.447763][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.447774][ C0] RIP: 0010:debug_check_no_obj_freed+0x1d9/0x550 [ 626.447802][ C0] Code: 00 00 48 ba 00 00 00 00 00 fc ff df ff c3 48 8b 04 24 48 89 c5 48 85 c0 0f 84 44 03 00 00 49 89 ee 49 c1 ee 03 41 80 3c 16 00 <74> 12 48 89 ef e8 7d 65 9a fd 48 ba 00 00 00 00 00 fc ff df 48 8b [ 626.447818][ C0] RSP: 0018:ffffc90000196db8 EFLAGS: 00000046 [ 626.447834][ C0] RAX: ffff888056c949d8 RBX: 0000000000000008 RCX: dffffc0000000001 [ 626.447848][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000196d20 [ 626.447861][ C0] RBP: ffff888056c949d8 R08: 0000000000000003 R09: 0000000000000004 [ 626.447873][ C0] R10: dffffc0000000000 R11: fffff52000032da4 R12: ffff88804a0982c0 [ 626.447888][ C0] R13: ffff88804a098000 R14: 1ffff1100ad9293b R15: ffff88805c5a9850 [ 626.447902][ C0] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 626.447918][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 626.447930][ C0] CR2: 00007f2603907eb8 CR3: 000000000d3a8000 CR4: 00000000003526f0 [ 626.447946][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 626.447957][ C0] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 626.447969][ C0] Call Trace: [ 626.447975][ C0] [ 626.447988][ C0] ? skb_release_data+0x62d/0x7c0 [ 626.448012][ C0] kmem_cache_free+0x10a/0x8d0 [ 626.448041][ C0] ? skb_release_data+0x62d/0x7c0 [ 626.448066][ C0] skb_release_data+0x62d/0x7c0 [ 626.448095][ C0] consume_skb+0x9e/0xf0 [ 626.448116][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 626.448140][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 626.448162][ C0] ? nf_ip_checksum+0x13c/0x510 [ 626.448184][ C0] nft_synproxy_do_eval+0x345/0x570 [ 626.448207][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 626.448237][ C0] nft_do_chain+0x40c/0x1920 [ 626.448260][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 626.448294][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 626.448334][ C0] nft_do_chain_inet+0x25d/0x340 [ 626.448353][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 626.448377][ C0] ? NF_HOOK+0x9a/0x3a0 [ 626.448401][ C0] ? NF_HOOK+0x9a/0x3a0 [ 626.448423][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 626.448443][ C0] nf_hook_slow+0xc5/0x220 [ 626.448472][ C0] NF_HOOK+0x206/0x3a0 [ 626.448495][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 626.448520][ C0] ? NF_HOOK+0x9a/0x3a0 [ 626.448541][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 626.448563][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 626.448589][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 626.448614][ C0] ? skb_dst+0x4f/0xd0 [ 626.448637][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 626.448662][ C0] NF_HOOK+0x30c/0x3a0 [ 626.448685][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 626.448708][ C0] ? NF_HOOK+0x9a/0x3a0 [ 626.448731][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 626.448755][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 626.448784][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 626.448806][ C0] __netif_receive_skb+0x143/0x380 [ 626.448826][ C0] ? process_backlog+0x272/0x8f0 [ 626.448863][ C0] process_backlog+0x315/0x8f0 [ 626.448889][ C0] __napi_poll+0xae/0x520 [ 626.448908][ C0] net_rx_action+0x64a/0xdb0 [ 626.448936][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 626.448953][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 626.448987][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 626.449025][ C0] handle_softirqs+0x1df/0x650 [ 626.449054][ C0] __local_bh_enable_ip+0x171/0x2c0 [ 626.449075][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 626.449103][ C0] rcu_cpu_kthread+0xbec/0x1af0 [ 626.449135][ C0] ? rcu_cpu_kthread+0x211/0x1af0 [ 626.449169][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 626.449196][ C0] ? schedule+0x91/0x360 [ 626.449227][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 626.449250][ C0] smpboot_thread_fn+0x542/0xa60 [ 626.449278][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 626.449305][ C0] kthread+0x711/0x8a0 [ 626.449332][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 626.449353][ C0] ? __pfx_kthread+0x10/0x10 [ 626.449376][ C0] ? rt_spin_unlock+0x150/0x200 [ 626.449402][ C0] ? rt_spin_unlock+0x161/0x200 [ 626.449425][ C0] ? __pfx_kthread+0x10/0x10 [ 626.449450][ C0] ret_from_fork+0x510/0xa50 [ 626.449471][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 626.449489][ C0] ? __switch_to+0xc9e/0x1480 [ 626.449517][ C0] ? __pfx_kthread+0x10/0x10 [ 626.449542][ C0] ret_from_fork_asm+0x1a/0x30 [ 626.449579][ C0] [ 626.480943][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 626.481026][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.481110][ T39] Tainted: [L]=SOFTLOCKUP [ 626.481131][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 626.481164][ T39] Call Trace: [ 626.481188][ T39] [ 626.481217][ T39] vpanic+0x1e0/0x670 [ 626.481303][ T39] panic+0xb9/0xc0 [ 626.481379][ T39] ? __pfx_panic+0x10/0x10 [ 626.481458][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 626.481571][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 626.481666][ T39] watchdog+0xfdf/0xfe0 [ 626.481747][ T39] ? watchdog+0x20a/0xfe0 [ 626.481832][ T39] kthread+0x711/0x8a0 [ 626.481915][ T39] ? __pfx_watchdog+0x10/0x10 [ 626.481979][ T39] ? __pfx_kthread+0x10/0x10 [ 626.482051][ T39] ? rt_spin_unlock+0x150/0x200 [ 626.482138][ T39] ? rt_spin_unlock+0x161/0x200 [ 626.482209][ T39] ? __pfx_kthread+0x10/0x10 [ 626.482273][ T39] ret_from_fork+0x510/0xa50 [ 626.482348][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 626.482405][ T39] ? __switch_to+0xc9e/0x1480 [ 626.482501][ T39] ? __pfx_kthread+0x10/0x10 [ 626.482578][ T39] ret_from_fork_asm+0x1a/0x30 [ 626.482701][ T39] [ 626.483341][ T39] Kernel Offset: disabled