last executing test programs: 9m18.464623342s ago: executing program 3 (id=1940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@multicast2, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0xa, 0x1, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x138}}, 0x0) 9m16.948697875s ago: executing program 3 (id=1944): syz_emit_ethernet(0x52, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7002000edd00000022020403a80000"], 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) socket$inet_icmp(0x2, 0x2, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) r1 = socket$caif_stream(0x25, 0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$caif(r1, 0x0, 0x0) 9m15.514106375s ago: executing program 3 (id=1946): quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f00000000c0)=@nullb, 0x0, &(0x7f0000000000)='.\x00') socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) keyctl$join(0x1, &(0x7f0000000280)={'syz', 0x1}) r1 = request_key(&(0x7f0000000040)='keyring\x00', &(0x7f0000000100)={'syz', 0x1}, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r1, 0x202000) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @sack_perm, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) lseek(r2, 0x40000007, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000540)={0x20, 0xc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0cc5605, &(0x7f0000000180)={0x1, @vbi={0x500, 0x0, 0x32315842}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=@newsa={0x134, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x80}, {@in6=@rand_addr=' \x01\x00', 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x0, 0x80000000}, {0x0, 0x0, 0xffffffff}, 0x70bd2d, 0x1, 0xa, 0x4, 0x9, 0x4c}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}]}, 0x134}}, 0x0) syz_usb_control_io$uac2(r0, &(0x7f0000000000)={0xc, &(0x7f00000001c0)={0x40, 0xc, 0x89, {0x89, 0xd99c72c13b23cb21, "53788871008c213ead3a6cd82d554a27a5e155dc76c73fbdbb5ae2f3da49d0aa183f4552cfdaf763a10b08e43adac05fd5099a176c5c23437bad0199736d4db8c148a37aa0f1517f34563e5f8044b7ec589aaaf4ec0874b9321e34a1df7c6b7c6400093a9204067d2971ac0cfb389641155bbcdf5a23b83c05fbc9957a3c3e4acfe0646a8327d9"}}, &(0x7f0000000280)={0x0, 0x3, 0xa8, @string={0xa8, 0x3, "99a76b6ce1b7e69851b346c3b6c7e15cb0a8646f0ec727cce691efe35a8c845212b845a7bff42f29b9b0ba602d88e8c1ed05f86ec3feefe318fd3f1d10da52446813a34aa3bb1bc70fdebc9f08bc289982ef26e5eb3fc36e1bd60e951bf08f8f7715b7fcdcef7351587e618bb419cb46ae3e91642c1516cdcda4312859026eca06faab1c91c07f850f50e60d66e60bd3f20419a85d5bf3f026d01b5ae110dbbbd7228852c8dd"}}}, &(0x7f0000000500)={0x24, &(0x7f0000000580)={0x20, 0x8, 0xf1, "2d2591302494f8f675085d558228b66adf87463438fd8a67963cf244aeaeb2e19bf33cd1d4f9dfc5324ba468ac9e6beac66aef439e1bb29bccba0d4fcf790c95ff3d262742b375771fd318292cd1c7b5efebf678df1c4bedef51d737a216cc6e19c8cf5666bc5ad824528a1f02b558e9ef4dc7779a5aa0e3063401af90a78cf93d9aef471ed38502025bc2e67bd50af3957f1d23549f31140e6d7ddb9739be4c0b108b0ea668352eace12bea0f5073caf2c4553b11cd3e6e3bd5f43eb65172b57505f0071f51e909619a2d0733bc593ecb5423b41c09e23a67f3fed28e1c20a6b60c1aae7693023cb0b8d6fd79050e8bff"}, &(0x7f0000000040)={0x0, 0xa, 0x1, 0xd7}, 0x0, &(0x7f0000000140)={0x20, 0x81, 0x1, "90"}, &(0x7f0000000340)={0x20, 0x82, 0x3, "d3f0e5"}, &(0x7f00000003c0)={0x20, 0x83, 0x2, '\bO'}, &(0x7f0000000440)={0x20, 0x84, 0x2, "2f81"}, &(0x7f00000004c0)={0x20, 0x85, 0x3, "1ea6db"}}) 9m10.022042152s ago: executing program 3 (id=1958): writev(0xffffffffffffffff, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e8fcce8f00c20c3713b0c220663c3b66bb174e7d57d1fe72dbb0d27d9cbe1ec30047462375528c2c005a0ccd366c1ab0b8e5e0d788c178dbbdea330a90fa9e7c51a1aaf175a9d59559f29c09ff5e337e791be17c1ef703647852fe9e1b3ab3e6cd1c3b84b92c9822e232e0052", 0x6d}, {&(0x7f0000000640)="146d7d1fe23f2a38218e567b79d540f9855f11c272611653b571eaa7f1ae51d8da60a58cf2", 0x25}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000020000000c000000001466bfdac3c37dd5273545b9193c412d42832b1bc897a82f6f0b95c99bcf82e5ef1a49736b94ceead334e440a96111d5713c3408ca"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x70bd21, 0x25dfdbfe, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x14024811}, 0x4000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5c5e1804e820fae306984dbb3e81420beef915d56", 0x18) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000600)={0x80, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'skcipher\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x6}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}]}, 0x80}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00', @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff050003ff800000000500030080ffffff050003"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m9.716092598s ago: executing program 3 (id=1960): dup(0xffffffffffffffff) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, 0x0) pipe(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mq_timedreceive(r4, 0x0, 0x0, 0x1000002, 0x0) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 9m7.313550978s ago: executing program 3 (id=1962): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r10, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) gettid() 8m51.415151702s ago: executing program 32 (id=1962): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x1801) ioctl$VIDIOC_SUBDEV_G_SELECTION(r5, 0xc040563d, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000400)={0x0, 0x0, {0x3}, 0xb2a1}) write$sndseq(r7, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) ioctl$SNDCTL_DSP_RESET(r6, 0x5000, 0x0) write$binfmt_script(r4, &(0x7f0000000140)={'#! ', './file0'}, 0xb) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f", 0x6c, 0xfffffffffffffffe) r9 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r8, r9, r8}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r10 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r10, &(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x40, 0x9, "82b0cfc4337965941538be09000000000000000000007400a391793ba70d0000000000fdf700000000baffda6e4a4d83"}, 0x40) gettid() 7m42.893552848s ago: executing program 5 (id=2137): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r3, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, 0x0, 0x0) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x1f) 7m36.082589066s ago: executing program 5 (id=2140): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, 0x0, 0x0) pipe(&(0x7f0000000200)) 7m35.623586059s ago: executing program 5 (id=2142): r0 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r0, &(0x7f00000033c0)={0xa, 0x4e24, 0x2f6, @local, 0xfffffffc}, 0x1c) mq_open(0x0, 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_clone(0x0, &(0x7f0000000300)="f8a72a557219e89814bef8b219293d76b2750b9a5ad82a629522b8c97b99748e887d94f7e0f6b2affe600ffbd6fe84e4b95a2040f1f523366f694fde5ae004b0169c53eb30d385f4b02dcb9e9707d5bbfcebcbc058f99a19abaced51fcd9568492eebb61", 0x64, &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000400)="110856002f23c47b50daad8fec0ccf3f028bad65cd9e91778bd4e168372e37d6d2fdb2fc401b8c9d400ee7d45c830bc6b5423acb55e93a82f8e14d865a1890412ee78a593a059f37b5fdf1de72f964ad35e191e0ed2a28cafc627cd79e655e3b47c49dd1ceb08f61383e542f8beca0f3146227dee0294f913c29a1986729709cedb0de8ed657202409de840aa4e613698b1150db7a78867134ff75cc060a0d9f1b8b97872d1001c17f1a8ee449b8c7") 7m34.15697341s ago: executing program 5 (id=2146): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 7m32.426701651s ago: executing program 5 (id=2148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFNL_MSG_CTHELPER_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40000010) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10004893}, 0x80) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0) 7m31.055036908s ago: executing program 5 (id=2149): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r12, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r12, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0}]) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r10, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r2, r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) 7m14.797191195s ago: executing program 33 (id=2149): socket$xdp(0x2c, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xfffffdd1) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80080, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) fsopen(&(0x7f0000000340)='ocfs2\x00', 0x0) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000001c0)={"3c24139ed44aec57f2e2ad238e7b448ed886923c31d4a043e3b614fd00", r3, 0xffffffffffffffff}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0x3fe, &(0x7f00000001c0)=0x0) io_getevents(r12, 0x1, 0x1, &(0x7f0000004600)=[{}], 0x0) io_submit(r12, 0x1, &(0x7f0000000280)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r11, 0x0}]) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32=r10, @ANYBLOB="0008000007500500580012800b0001006272696467650000480002800500190002000000050017"], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) close_range(r2, r6, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4088800) 5m15.888209721s ago: executing program 2 (id=2325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) getitimer(0xe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000100001070000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) 5m14.526062968s ago: executing program 2 (id=2327): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e23, @loopback}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000000)=0x90000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r3, 0x890c, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1a000}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e0001000000002d000000000002000000010000000000000037b8ad06c2c9e262"], 0x24}, 0x1, 0x0, 0x0, 0x2}, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c4603000701810000000000000003003e00f9ffffffd80100000000000040000000000000008b00000000000000320d00000500380004"], 0x120) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 5m10.83255384s ago: executing program 2 (id=2333): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x16, &(0x7f0000000000)=[&(0x7f0000ff4000/0x1000)=nil], &(0x7f0000000240), 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0x10000a0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000001a700)={0x0, 0x0, &(0x7f0000019640), 0x0, 0x0, &(0x7f0000019700)}) bind$inet(0xffffffffffffffff, &(0x7f0000019340)={0x2, 0xffff, @rand_addr=0x64010100}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x9c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) 5m8.948868693s ago: executing program 2 (id=2338): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r1, 0x4611, 0x2) 5m6.145045195s ago: executing program 2 (id=2345): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[]) read$FUSE(r1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) ioctl$FBIOBLANK(r2, 0x4611, 0x2) 5m5.210489742s ago: executing program 2 (id=2348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 4m49.48592854s ago: executing program 34 (id=2348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = msgget$private(0x0, 0x0) msgrcv(r1, 0x0, 0x0, 0x2, 0x3800) syz_pidfd_open(0x0, 0x0) pipe2(&(0x7f00000000c0), 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) msgctl$MSG_STAT_ANY(r1, 0xd, &(0x7f00000002c0)=""/99) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000) 1m57.795870376s ago: executing program 1 (id=2937): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) fchdir(r0) r1 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x9, 0x3a, '-', 0x3a, './&($,%&/+\\-', 0x3a, './cgroup', 0x3a, [0x46]}, 0x36) 1m57.518792443s ago: executing program 1 (id=2941): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001880)={0x2020}, 0x2020) 1m56.595132633s ago: executing program 1 (id=2942): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00'}) sendmsg$nl_route(r4, 0x0, 0x20000000) r5 = gettid() r6 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x1) ftruncate(r6, 0x800799c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendfile(r7, r6, 0x0, 0xf000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1c2a) r8 = getpid() rt_tgsigqueueinfo(r8, r5, 0x16, &(0x7f0000000940)={0x15, 0xfffff42f, 0x40}) 1m55.082804283s ago: executing program 1 (id=2946): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x2}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m54.589028608s ago: executing program 1 (id=2950): r0 = fsopen(&(0x7f0000000080)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 1m30.114929104s ago: executing program 0 (id=3091): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 1m29.798539517s ago: executing program 0 (id=3094): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x28a0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000180)='./file1\x00') 1m29.737966275s ago: executing program 6 (id=3095): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2(0x0, 0x4000) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x137db) 1m29.465526622s ago: executing program 0 (id=3097): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) 1m29.334770486s ago: executing program 6 (id=3098): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000100)={0x7fff, 0x80000, r0}) write(r0, &(0x7f0000000200)='G', 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x8) 1m29.172696938s ago: executing program 0 (id=3100): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000021c0), 0x80802, 0x0) pwritev2(r0, &(0x7f0000005680)=[{0x0}, {&(0x7f0000004540)="1c291583764da67e8cfb26da8755a7b8283a619498ae4cb7c7fa7c302eebe2219db5ca0d06c35de8af4221ab549c8fed6664dcfe88e8ce7dfd6bc242f2d55ca08034475c95723c29f5bd89435523933c1eeed6d34a8b408a14cd61b861a02c6b0fa064338ee150f2acdb8b541e0412cf2e91fd029ab2999cdbb9e12f1a035dd0ba291b05aaab9838fae987965fc996f1b6d8380949e327ee9077f3d4130ca72236d9f8d8cd", 0xa5}], 0x2, 0xffffff86, 0x9, 0x0) 1m28.865136307s ago: executing program 0 (id=3103): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r1 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0) landlock_restrict_self(r1, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 1m28.680934893s ago: executing program 0 (id=3105): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$usbfs(&(0x7f0000000480), 0x0, 0x40000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000002500000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xd3f0, 0x2000, 0x9, 0xadeb}) 1m28.356789264s ago: executing program 6 (id=3108): r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) openat(0xffffffffffffff9c, 0x0, 0x143041, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) getdents64(r2, 0x0, 0x22) 1m27.844631843s ago: executing program 1 (id=2955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 1m27.795222006s ago: executing program 6 (id=3111): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffdffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="18002f80080002"], 0x34}}, 0x0) 1m27.361977059s ago: executing program 6 (id=3114): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@security={'security\x00', 0x3a, 0x4, 0x2d0, 0xffffffff, 0x110, 0x1a8, 0x0, 0x110, 0xffffffff, 0x2a0, 0x2a0, 0x2a0, 0x2a0, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@private=0xa010101, @private, 0x0, 0x0, 'bond_slave_1\x00', 'vlan0\x00', {}, {}, 0x0, 0x7c6f976ca9d961e1}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x1]}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000090abd5e200000b4699986a758455"], 0x0}, 0x0) 1m25.382780284s ago: executing program 6 (id=3120): ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1e, 0x1, 0x70bd26, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 1m12.497471104s ago: executing program 35 (id=2955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 1m10.10530805s ago: executing program 36 (id=3120): ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)={0x114, 0x1e, 0x1, 0x70bd26, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) 23.206203216s ago: executing program 4 (id=3247): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) 22.568815756s ago: executing program 4 (id=3249): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x15}}, @void, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) 22.052245025s ago: executing program 4 (id=3250): syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a240608000b020102000600040007000300390c24"], 0x0) socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000380)=0x4210, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth0_to_bond\x00'}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x18001, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4000) sendmsg$nl_route(r4, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4c010) 21.287188893s ago: executing program 7 (id=3251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x80, r1, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x4c, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x1, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}}, 0x20000014) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000ee000000001300000008000300", @ANYRES32=r6, @ANYBLOB="07001300850109000a00060008021100000100000600100080050000060012"], 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 20.618332659s ago: executing program 7 (id=3252): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f0000000f40)=[{0x0}, {0x0}], 0x2}, 0x0) 20.549319014s ago: executing program 7 (id=3253): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 19.59817086s ago: executing program 7 (id=3254): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 19.506045854s ago: executing program 7 (id=3255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700) 18.612759402s ago: executing program 4 (id=3256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='bic', 0x3) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) 18.350200226s ago: executing program 7 (id=3257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x15}}, @void, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) 17.509619215s ago: executing program 4 (id=3258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611866000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000002500000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x28) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0xd3f0, 0x2000, 0x9, 0xadeb}) 15.824311591s ago: executing program 4 (id=3259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) 2.982816031s ago: executing program 37 (id=3257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3, {0x0, 0x15}}, @void, @void}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x84}, 0x4040000) 0s ago: executing program 38 (id=3259): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) kernel console output (not intermixed with test programs): W filter on device team0 [ 1058.609059][T14155] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1059.308429][ T5803] Bluetooth: hci5: command tx timeout [ 1062.986051][ T1027] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.731288][ T1027] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.769861][T14199] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1063.799246][T14114] chnl_net:caif_netlink_parms(): no params data found [ 1066.567371][ T1027] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.015090][T14114] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.015294][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.015569][T14114] bridge_slave_0: entered allmulticast mode [ 1067.048311][T14114] bridge_slave_0: entered promiscuous mode [ 1067.077405][T14114] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.092845][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.093067][T14114] bridge_slave_1: entered allmulticast mode [ 1067.106160][T14114] bridge_slave_1: entered promiscuous mode [ 1067.425536][T14114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.862113][T14114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1068.350191][T14114] team0: Port device team_slave_0 added [ 1068.365510][T14114] team0: Port device team_slave_1 added [ 1069.744208][T14236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1071.059123][T14114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1071.059143][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.059176][T14114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.689181][T14250] EXT4-fs (nbd4): unable to read superblock [ 1073.236399][T14262] netlink: 164 bytes leftover after parsing attributes in process `syz.6.2401'. [ 1075.341068][ T1027] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1075.789143][ T1027] bond0 (unregistering): left allmulticast mode [ 1075.789171][ T1027] bond_slave_0: left allmulticast mode [ 1075.789192][ T1027] bond_slave_1: left allmulticast mode [ 1076.078606][ T1027] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1076.108720][ T1027] bond_slave_0: left promiscuous mode [ 1076.131970][ T1027] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1076.148769][ T1027] bond_slave_1: left promiscuous mode [ 1076.150811][ T1027] bond0 (unregistering): Released all slaves [ 1076.158247][ T1027] bond1 (unregistering): Released all slaves [ 1076.171698][ T1027] bond2 (unregistering): Released all slaves [ 1076.228390][T14264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1076.350955][T14114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1076.351014][T14114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1076.351108][T14114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1076.792526][T14272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1077.662154][T14280] Invalid argument reading file caps for ./file0 [ 1078.229838][ T1027] !: left promiscuous mode [ 1078.672217][T14114] hsr_slave_0: entered promiscuous mode [ 1078.677625][T14114] hsr_slave_1: entered promiscuous mode [ 1078.682883][T14114] debugfs: 'hsr0' already exists in 'hsr' [ 1078.682914][T14114] Cannot create hsr debugfs directory [ 1084.732900][T14322] Invalid argument reading file caps for ./file0 [ 1085.249341][T14324] Invalid argument reading file caps for ./file0 [ 1086.139947][ T1027] IPVS: stopping master sync thread 7868 ... [ 1086.748116][ T5958] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1086.965432][ T5958] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 1086.965463][ T5958] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 1086.981655][ T5958] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 1086.981746][ T5958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.981766][ T5958] usb 7-1: Product: syz [ 1086.981780][ T5958] usb 7-1: Manufacturer: syz [ 1086.981793][ T5958] usb 7-1: SerialNumber: syz [ 1087.051361][ T5958] usb 7-1: config 0 descriptor?? [ 1087.324891][ T5958] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 1088.564940][ T5958] gspca_sunplus: reg_r err -110 [ 1088.565042][ T5958] sunplus 7-1:0.0: probe with driver sunplus failed with error -110 [ 1091.434397][ T5880] usb 7-1: USB disconnect, device number 3 [ 1091.479019][T14356] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1093.898064][T14114] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1094.021664][T14114] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1094.095243][T14114] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1094.271002][T14378] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2426'. [ 1094.453660][ T1027] hsr_slave_0: left promiscuous mode [ 1094.488050][ T1027] hsr_slave_1: left promiscuous mode [ 1094.489115][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1094.489144][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1094.687002][ T1027] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1094.687132][ T1027] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.914471][ T1027] veth1_macvtap: left promiscuous mode [ 1095.926834][ T1027] veth0_macvtap: left promiscuous mode [ 1095.968158][ T1027] veth1_vlan: left promiscuous mode [ 1096.055627][ T1027] veth0_vlan: left promiscuous mode [ 1098.361469][T14402] EXT4-fs (nbd4): unable to read superblock [ 1100.270705][T14420] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2443'. [ 1101.292678][ T1027] team_slave_1 (unregistering): left promiscuous mode [ 1102.339125][T14430] overlayfs: failed to clone lowerpath [ 1103.457943][ T1027] team0 (unregistering): Port device team_slave_1 removed [ 1103.479485][ T1027] team_slave_0 (unregistering): left promiscuous mode [ 1104.362105][ T1027] team0 (unregistering): Port device team_slave_0 removed [ 1104.791007][T14114] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1105.457203][T14447] overlayfs: failed to clone lowerpath [ 1106.794557][T14463] netlink: 208 bytes leftover after parsing attributes in process `syz.0.2450'. [ 1106.974378][T14114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1107.104659][T14114] 8021q: adding VLAN 0 to HW filter on device team0 [ 1107.123207][ T1471] bridge0: port 1(bridge_slave_0) entered blocking state [ 1107.128461][ T1471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1107.185128][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1107.185272][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1108.508196][T14483] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2455'. [ 1112.833663][ T5810] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1112.866134][ T5810] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1112.876305][ T5810] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1112.884157][ T5810] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1112.885143][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1113.212248][T14521] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2462'. [ 1114.052413][T14531] overlayfs: failed to clone lowerpath [ 1115.136526][T12415] Bluetooth: hci1: command tx timeout [ 1115.607730][T14544] overlayfs: failed to clone lowerpath [ 1116.026660][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.026737][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.148143][T12415] Bluetooth: hci1: command tx timeout [ 1119.557431][T12415] Bluetooth: hci1: command tx timeout [ 1121.442685][T14573] syz.0.2475(14573): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 1121.597074][T14517] chnl_net:caif_netlink_parms(): no params data found [ 1121.618147][T12415] Bluetooth: hci1: command tx timeout [ 1122.328056][ T5910] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1122.517461][ T5910] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1122.517519][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.517548][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1122.517571][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1122.526078][ T5910] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1122.526174][ T5910] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1122.526238][ T5910] usb 5-1: Manufacturer: syz [ 1122.607824][T14602] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2480'. [ 1123.495609][ T5910] usb 5-1: config 0 descriptor?? [ 1124.005713][T14614] kvm: emulating exchange as write [ 1124.134466][ T5910] hid_parser_main: 3 callbacks suppressed [ 1124.134494][ T5910] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 1124.189306][ T5910] appleir 0003:05AC:8243.0005: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1124.433225][ T5910] usb 5-1: USB disconnect, device number 32 [ 1124.627504][T14517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.654404][T14517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.654680][T14517] bridge_slave_0: entered allmulticast mode [ 1124.680401][T14517] bridge_slave_0: entered promiscuous mode [ 1124.687011][T14517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.687250][T14517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.687469][T14517] bridge_slave_1: entered allmulticast mode [ 1124.718249][T14517] bridge_slave_1: entered promiscuous mode [ 1124.795378][T14517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.810536][T14517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.950542][T14517] team0: Port device team_slave_0 added [ 1124.961504][T14517] team0: Port device team_slave_1 added [ 1125.265159][T14517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.265180][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.265211][T14517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1125.287004][T14517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1125.287067][T14517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1125.287150][T14517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1125.994261][T14635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2488'. [ 1125.994347][T14635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2488'. [ 1126.082194][T14635] tipc: Can't bind to reserved service type 0 [ 1126.689435][T14517] hsr_slave_0: entered promiscuous mode [ 1126.696056][T14517] hsr_slave_1: entered promiscuous mode [ 1126.697044][T14517] debugfs: 'hsr0' already exists in 'hsr' [ 1126.697071][T14517] Cannot create hsr debugfs directory [ 1127.054857][ T13] bridge_slave_1: left allmulticast mode [ 1127.054889][ T13] bridge_slave_1: left promiscuous mode [ 1127.055123][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.140078][ T13] bridge_slave_0: left allmulticast mode [ 1127.140111][ T13] bridge_slave_0: left promiscuous mode [ 1127.143858][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.258281][T14683] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1128.310798][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.398749][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.432690][ T13] bond0 (unregistering): Released all slaves [ 1128.754595][ T31] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1128.908389][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 1128.914431][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1128.914462][ T31] usb 5-1: config 0 has no interface number 0 [ 1128.918962][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1128.918997][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.919019][ T31] usb 5-1: Product: syz [ 1128.919035][ T31] usb 5-1: Manufacturer: syz [ 1128.919051][ T31] usb 5-1: SerialNumber: syz [ 1128.973362][ T31] usb 5-1: config 0 descriptor?? [ 1129.088051][ T13] hsr_slave_0: left promiscuous mode [ 1129.128185][ T13] hsr_slave_1: left promiscuous mode [ 1129.131418][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1129.180828][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1130.004186][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1130.004222][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1130.005017][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1130.005377][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1130.176930][ T31] usb 5-1: USB disconnect, device number 33 [ 1130.233160][ T5936] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1130.436634][ T5936] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1130.436666][ T5936] usb 7-1: config 0 has no interface number 0 [ 1130.436713][ T5936] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.436742][ T5936] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.436782][ T5936] usb 7-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 1130.436807][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1130.532197][ T5936] usb 7-1: config 0 descriptor?? [ 1130.651918][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1130.729215][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1131.033785][ T5936] input: HID 04d9:a055 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:04D9:A055.0006/input/input17 [ 1131.115469][T14701] netlink: 'syz.1.2517': attribute type 12 has an invalid length. [ 1131.213419][T14713] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1131.529151][ T5936] holtek_kbd 0003:04D9:A055.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.6-1/input1 [ 1131.566295][ T5936] usb 7-1: USB disconnect, device number 4 [ 1131.581027][T14732] overlayfs: failed to clone lowerpath [ 1131.610949][T14732] overlayfs: failed to clone lowerpath [ 1131.685471][T14735] fido_id[14735]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1131.841711][ T36] audit: type=1326 audit(1774068936.251:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14739 comm="syz.0.2530" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb24629c799 code=0x0 [ 1132.039324][T14741] futex_wake_op: syz.1.2531 tries to shift op by 32; fix this program [ 1132.394736][ T5910] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 1132.410285][T14751] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1132.455076][ T5910] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1133.556970][T14517] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1133.623131][T14517] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1134.461628][T14517] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1134.478046][ T5910] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1134.522067][T14517] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1134.760666][ T5910] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1134.760697][ T5910] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1134.760718][ T5910] usb 7-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1134.760740][ T5910] usb 7-1: config 220 has no interface number 2 [ 1134.760822][ T5910] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1134.760853][ T5910] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1134.760874][ T5910] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1134.760893][ T5910] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1134.763859][ T5910] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1134.763892][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.763914][ T5910] usb 7-1: Product: syz [ 1134.763931][ T5910] usb 7-1: Manufacturer: syz [ 1134.763948][ T5910] usb 7-1: SerialNumber: syz [ 1135.149007][ T5910] usb 7-1: selecting invalid altsetting 0 [ 1135.155779][ T5910] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1135.155846][ T5910] uvcvideo 7-1:220.0: No valid video chain found. [ 1135.240174][ T5910] usb 7-1: selecting invalid altsetting 0 [ 1135.240215][ T5910] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1135.241003][T14517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1135.269043][ T5910] usb 7-1: USB disconnect, device number 5 [ 1135.384996][T14517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1135.401325][T14796] capability: warning: `syz.1.2543' uses deprecated v2 capabilities in a way that may be insecure [ 1135.454897][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1135.467043][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1135.501056][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1135.504937][ T3965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1136.423029][T14822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2548'. [ 1136.531379][T14517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1137.327584][T14837] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1138.100323][T14517] veth0_vlan: entered promiscuous mode [ 1138.169761][T14517] veth1_vlan: entered promiscuous mode [ 1138.426229][T14517] veth0_macvtap: entered promiscuous mode [ 1138.464972][T14517] veth1_macvtap: entered promiscuous mode [ 1138.601261][T14517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1138.637573][T14517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.732718][ T3965] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.736178][ T3965] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.736734][ T3965] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.788028][ T3965] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1140.951920][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1140.951945][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.150229][ T1307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1141.150253][ T1307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1141.738075][ T5958] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1142.120898][ T5958] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1142.120932][ T5958] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1142.120954][ T5958] usb 7-1: config 220 has an invalid descriptor of length 13, skipping remainder of the config [ 1142.120976][ T5958] usb 7-1: config 220 has no interface number 2 [ 1142.121055][ T5958] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1142.121087][ T5958] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1142.121105][ T5958] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1142.121126][ T5958] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1142.123720][ T5958] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1142.123752][ T5958] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.123774][ T5958] usb 7-1: Product: syz [ 1142.123791][ T5958] usb 7-1: Manufacturer: syz [ 1142.123807][ T5958] usb 7-1: SerialNumber: syz [ 1143.272446][ T5958] usb 7-1: selecting invalid altsetting 0 [ 1143.297339][ T5958] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1143.297380][ T5958] uvcvideo 7-1:220.0: No valid video chain found. [ 1143.357790][ T5958] usb 7-1: selecting invalid altsetting 0 [ 1143.357832][ T5958] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1143.388538][ T5958] usb 7-1: USB disconnect, device number 6 [ 1144.552905][T14927] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1145.332214][ T36] audit: type=1326 audit(1774068949.691:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.332503][ T36] audit: type=1326 audit(1774068949.691:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.332797][ T36] audit: type=1326 audit(1774068949.701:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.333018][ T36] audit: type=1326 audit(1774068949.701:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.333239][ T36] audit: type=1326 audit(1774068949.721:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.333459][ T36] audit: type=1326 audit(1774068949.721:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.333684][ T36] audit: type=1326 audit(1774068949.721:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.333905][ T36] audit: type=1326 audit(1774068949.721:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.334110][ T36] audit: type=1326 audit(1774068949.731:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1145.423276][T14945] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2583'. [ 1145.942741][ T36] audit: type=1326 audit(1774068950.351:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14935 comm="syz.7.2583" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f18648bc799 code=0x7ffc0000 [ 1149.409509][T15010] syz.4.2603 (15010) used greatest stack depth: 17600 bytes left [ 1150.768034][ T5910] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1150.938190][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 1150.940584][ T5910] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.940621][ T5910] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1150.940647][ T5910] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1150.940676][ T5910] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1150.940711][ T5910] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1150.940737][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.987740][ T5910] usb 7-1: config 0 descriptor?? [ 1151.448359][T15057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1151.454856][T15057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1151.689239][T15091] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2626'. [ 1151.689378][T15091] tipc: Enabling of bearer rejected, failed to enable media [ 1151.718581][ T5910] usb 7-1: USB disconnect, device number 7 [ 1151.958246][T12632] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1152.109459][T12632] usb 5-1: Using ep0 maxpacket: 32 [ 1152.112976][T12632] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1152.113011][T12632] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1152.125212][T12632] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1152.125289][T12632] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1152.125312][T12632] usb 5-1: Product: syz [ 1152.125328][T12632] usb 5-1: Manufacturer: syz [ 1152.193744][T12632] hub 5-1:4.0: USB hub found [ 1152.449312][T12632] hub 5-1:4.0: 2 ports detected [ 1152.828903][ T5910] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1152.885926][T12632] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 1152.885951][T12632] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 1153.040437][T12632] usb 5-1: USB disconnect, device number 34 [ 1153.048267][ T5910] usb 7-1: Using ep0 maxpacket: 16 [ 1153.054066][ T5910] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1153.074888][ T5910] usb 7-1: config 1 has an invalid interface descriptor of length 7, skipping [ 1153.074917][ T5910] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.074939][ T5910] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1153.075069][ T5910] usb 7-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1153.088761][ T5910] usb 7-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 1153.088816][ T5910] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.088838][ T5910] usb 7-1: Product: syz [ 1153.088855][ T5910] usb 7-1: Manufacturer: syz [ 1153.088880][ T5910] usb 7-1: SerialNumber: syz [ 1153.427386][ T5910] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1153.443251][ T5910] usb 7-1: 0:2 : does not exist [ 1153.610590][ T5910] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1153.641866][ T5910] usb 7-1: USB disconnect, device number 8 [ 1153.707161][T14592] udevd[14592]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1153.938551][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 1154.242627][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2638'. [ 1158.642146][T15187] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1158.748471][ T5880] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1159.863907][ T5880] usb 5-1: device descriptor read/64, error -71 [ 1159.883720][T15196] input: syz1 as /devices/virtual/input/input18 [ 1162.721405][T15214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1163.113310][ T1471] Bluetooth: hci5: Frame reassembly failed (-84) [ 1163.820976][T15252] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2678'. [ 1165.151606][T12415] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1166.295264][T15292] af_packet: tpacket_rcv: packet too big, clamped from 40 to 4294967272. macoff=96 [ 1167.361434][T15321] overlayfs: failed to clone lowerpath [ 1167.857645][T15324] tmpfs: Unknown parameter 'fscontext' [ 1169.258665][ T5958] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1169.330115][T15339] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2707'. [ 1170.074234][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.074271][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.075812][ T5958] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1170.075844][ T5958] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1170.075951][ T5958] usb 5-1: Manufacturer: syz [ 1170.132379][ T5958] usb 5-1: config 0 descriptor?? [ 1171.227379][T15366] mmap: syz.0.2716 (15366): VmData 37462016 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data. [ 1171.783309][T15361] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1171.932370][T15376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2720'. [ 1171.934784][ T5958] uclogic 0003:256C:006D.0009: failed retrieving string descriptor #200: -71 [ 1171.934945][ T5958] uclogic 0003:256C:006D.0009: failed retrieving pen parameters: -71 [ 1171.934966][ T5958] uclogic 0003:256C:006D.0009: failed probing pen v2 parameters: -71 [ 1171.935055][ T5958] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 1171.935171][ T5958] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 1171.999469][ T5958] usb 5-1: USB disconnect, device number 37 [ 1175.175723][T15387] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2722'. [ 1177.543711][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.568154][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.355851][T15423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1181.341917][ T5958] hid-generic 000F:FFFFFFFA:0009.000A: unknown main item tag 0x5 [ 1181.421941][ T5958] hid-generic 000F:FFFFFFFA:0009.000A: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1181.660162][T15473] input: syz1 as /devices/virtual/input/input19 [ 1181.820327][T15468] fido_id[15468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1187.017426][T15571] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1189.508469][T15600] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2810'. [ 1190.673761][T15600] bridge0: port 2(bridge_slave_1) entered disabled state [ 1190.674572][T15600] bridge0: port 1(bridge_slave_0) entered disabled state [ 1192.220617][T15600] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1192.229083][T15600] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1196.016612][T15671] overlay: ./file0 is not a directory [ 1196.195450][ T1471] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.203556][ T1471] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.203884][ T1471] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.204000][ T1471] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1207.173792][ T31] hid-generic 000F:FFFFFFFA:0009.000B: unknown main item tag 0x5 [ 1207.250721][ T31] hid-generic 000F:FFFFFFFA:0009.000B: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1208.559456][T15775] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1208.693096][T15770] fido_id[15770]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1210.955797][ T31] hid-generic 000F:FFFFFFFA:0009.000C: unknown main item tag 0x5 [ 1210.990314][ T31] hid-generic 000F:FFFFFFFA:0009.000C: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1211.266484][T15826] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2890'. [ 1211.301417][T15818] fido_id[15818]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1212.484356][T15845] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2900'. [ 1213.012916][T15857] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.2896'. [ 1213.020609][T15857] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 1213.916225][T15857] 0ªX¹¦Dö»: entered allmulticast mode [ 1220.518014][ T5910] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1220.674937][ T5910] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.675000][ T5910] usb 7-1: New USB device found, idVendor=0cbb, idProduct=f001, bcdDevice= 0.00 [ 1220.675026][ T5910] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.731741][ T5910] usb 7-1: config 0 descriptor?? [ 1220.737658][ T5910] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1222.308032][ T5910] usb 7-1: USB disconnect, device number 9 [ 1223.591498][ T5803] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 1223.591541][ T5803] CPU: 0 UID: 0 PID: 5803 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1223.591575][ T5803] Tainted: [L]=SOFTLOCKUP [ 1223.591584][ T5803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1223.591600][ T5803] Workqueue: hci3 hci_rx_work [ 1223.591779][ T5803] Call Trace: [ 1223.591788][ T5803] [ 1223.591799][ T5803] dump_stack_lvl+0xe8/0x150 [ 1223.591842][ T5803] sysfs_create_dir_ns+0x271/0x2a0 [ 1223.591874][ T5803] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1223.591962][ T5803] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1223.591994][ T5803] ? rt_spin_unlock+0x160/0x200 [ 1223.592027][ T5803] kobject_add_internal+0x631/0xd10 [ 1223.592201][ T5803] kobject_add+0x163/0x240 [ 1223.592235][ T5803] ? __pfx_kobject_add+0x10/0x10 [ 1223.592278][ T5803] ? get_device_parent+0x370/0x3a0 [ 1223.592318][ T5803] device_add+0x408/0xb80 [ 1223.592350][ T5803] hci_conn_add_sysfs+0xd5/0x210 [ 1223.592468][ T5803] le_conn_complete_evt+0xf1d/0x1430 [ 1223.592537][ T5803] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1223.592566][ T5803] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1223.592604][ T5803] ? lockdep_hardirqs_on+0x7a/0x110 [ 1223.592674][ T5803] ? skb_pull_data+0xfb/0x200 [ 1223.592708][ T5803] hci_le_conn_complete_evt+0x187/0x470 [ 1223.592744][ T5803] hci_event_packet+0x7af/0x12c0 [ 1223.592786][ T5803] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1223.592841][ T5803] ? __pfx_hci_event_packet+0x10/0x10 [ 1223.592876][ T5803] ? rt_spin_unlock+0x14f/0x200 [ 1223.592930][ T5803] ? hci_send_to_monitor+0xe2/0x590 [ 1223.592965][ T5803] hci_rx_work+0x3ee/0x1030 [ 1223.593011][ T5803] ? process_scheduled_works+0xa8d/0x18c0 [ 1223.593050][ T5803] process_scheduled_works+0xb6e/0x18c0 [ 1223.593115][ T5803] ? __pfx_process_scheduled_works+0x10/0x10 [ 1223.593167][ T5803] ? assign_work+0x3d5/0x5e0 [ 1223.593196][ T5803] worker_thread+0xa53/0xfc0 [ 1223.593242][ T5803] kthread+0x388/0x470 [ 1223.593262][ T5803] ? __pfx_worker_thread+0x10/0x10 [ 1223.593285][ T5803] ? __pfx_kthread+0x10/0x10 [ 1223.593303][ T5803] ret_from_fork+0x51e/0xb90 [ 1223.593347][ T5803] ? __pfx_ret_from_fork+0x10/0x10 [ 1223.593370][ T5803] ? __switch_to+0xc7d/0x1450 [ 1223.593407][ T5803] ? __pfx_kthread+0x10/0x10 [ 1223.593427][ T5803] ret_from_fork_asm+0x1a/0x30 [ 1223.593457][ T5803] [ 1223.593489][ T5803] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1223.593524][ T5803] Bluetooth: hci3: failed to register connection device [ 1225.763622][T12415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1225.785385][T12415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1225.788679][T12415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1225.793352][T12415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1225.795114][T12415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1227.938992][T12415] Bluetooth: hci5: command tx timeout [ 1229.868308][ T5803] Bluetooth: hci3: command tx timeout [ 1230.018047][ T5803] Bluetooth: hci5: command tx timeout [ 1232.116548][ T5803] Bluetooth: hci5: command tx timeout [ 1233.055648][T16012] chnl_net:caif_netlink_parms(): no params data found [ 1234.039440][T16143] tmpfs: Unknown parameter 'fscontext' [ 1234.598391][ T5803] Bluetooth: hci5: command tx timeout [ 1234.673217][T16140] warning: `syz.6.3010' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1235.986195][T16012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1235.986301][T16012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1235.986472][T16012] bridge_slave_0: entered allmulticast mode [ 1235.995393][T16012] bridge_slave_0: entered promiscuous mode [ 1236.032342][ T5803] Bluetooth: hci1: command 0x0406 tx timeout [ 1236.041823][T16012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1236.053766][T16012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1236.054039][T16012] bridge_slave_1: entered allmulticast mode [ 1236.057974][ T31] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1236.063020][T16012] bridge_slave_1: entered promiscuous mode [ 1236.218234][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 1236.227573][ T31] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1236.227611][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1236.268542][ T31] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1236.268577][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1236.268603][ T31] usb 7-1: Product: syz [ 1236.268620][ T31] usb 7-1: Manufacturer: syz [ 1236.268636][ T31] usb 7-1: SerialNumber: syz [ 1236.324440][ T31] usb 7-1: config 0 descriptor?? [ 1236.336695][ T31] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1236.336735][ T31] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1236.671316][ T68] bond1 (unregistering): (slave ip6gretap0): Releasing active interface [ 1236.946699][ T31] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 1236.947392][ T31] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1237.468950][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1237.528955][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1237.569052][ T68] bond0 (unregistering): Released all slaves [ 1237.576855][ T68] bond1 (unregistering): Released all slaves [ 1237.587970][ T31] em28xx 7-1:0.0: AC97 command still being executed: not handled properly! [ 1237.588044][ T31] em28xx 7-1:0.0: Unknown AC97 audio processor detected! [ 1237.620206][ T68] bond2 (unregistering): Released all slaves [ 1237.767101][ T31] em28xx 7-1:0.0: couldn't setup AC97 register 2 [ 1237.768845][ T31] em28xx 7-1:0.0: couldn't setup AC97 register 4 [ 1237.769234][ T31] em28xx 7-1:0.0: couldn't setup AC97 register 6 [ 1237.769624][ T31] em28xx 7-1:0.0: couldn't setup AC97 register 54 [ 1237.770222][ T31] em28xx 7-1:0.0: couldn't setup AC97 register 56 [ 1237.801796][ T31] usb 7-1: USB disconnect, device number 10 [ 1237.867665][T16165] pim6reg: entered allmulticast mode [ 1237.876657][T16168] pim6reg: left allmulticast mode [ 1237.978926][ T68] !: left promiscuous mode [ 1238.124662][T16012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1238.140181][T16012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1238.281927][T16012] team0: Port device team_slave_0 added [ 1238.286069][T16012] team0: Port device team_slave_1 added [ 1238.350266][T16012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1238.350285][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.350316][T16012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1238.352683][T16012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1238.352700][T16012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1238.352731][T16012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1238.635078][T16012] hsr_slave_0: entered promiscuous mode [ 1238.641773][T16012] hsr_slave_1: entered promiscuous mode [ 1238.644481][T16012] debugfs: 'hsr0' already exists in 'hsr' [ 1238.644508][T16012] Cannot create hsr debugfs directory [ 1238.847526][ T68] IPVS: stopping master sync thread 6010 ... [ 1238.912740][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.912813][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.570994][T16222] sctp: [Deprecated]: syz.0.3043 (pid 16222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1239.570994][T16222] Use struct sctp_sack_info instead [ 1239.578108][ T5910] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1239.727996][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 1239.754690][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1239.780692][ T5910] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1239.780726][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1239.780750][ T5910] usb 5-1: Product: syz [ 1239.780764][ T5910] usb 5-1: Manufacturer: syz [ 1239.780780][ T5910] usb 5-1: SerialNumber: syz [ 1239.829173][ T5910] usb 5-1: config 0 descriptor?? [ 1239.830319][T16213] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1240.063046][T12632] usb 5-1: USB disconnect, device number 38 [ 1240.846163][ T68] hsr_slave_0: left promiscuous mode [ 1240.880884][ T68] hsr_slave_1: left promiscuous mode [ 1240.882026][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1241.465727][T16265] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3059'. [ 1241.868659][ T68] team0 (unregistering): Port device team_slave_1 removed [ 1243.126770][ T68] team0 (unregistering): Port device team_slave_0 removed [ 1245.535715][T10328] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1245.688429][T10328] usb 5-1: Using ep0 maxpacket: 32 [ 1245.690376][T10328] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 255 [ 1245.692827][T10328] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1245.692860][T10328] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1245.692884][T10328] usb 5-1: Product: syz [ 1245.692900][T10328] usb 5-1: Manufacturer: syz [ 1245.692916][T10328] usb 5-1: SerialNumber: syz [ 1245.802523][T10328] usb 5-1: config 0 descriptor?? [ 1245.808483][T16290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1246.330592][T16315] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 1246.331349][T16315] kvm: requested 43580 ns i8254 timer period limited to 200000 ns [ 1246.331918][T16315] kvm: requested 123200 ns i8254 timer period limited to 200000 ns [ 1246.332202][T16315] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 1246.332391][T16315] kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 1246.334290][T16315] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 1247.246567][T16012] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1247.422492][T16012] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1247.767695][T16012] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1247.983470][T16012] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1248.210362][ T5910] usb 5-1: USB disconnect, device number 39 [ 1248.402204][T16012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.514217][T16012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.585062][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.585197][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1248.654740][ T3965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.655019][ T3965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1248.871303][T16376] overlayfs: failed to clone upperpath [ 1249.253541][T16012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.409281][T16012] veth0_vlan: entered promiscuous mode [ 1249.426341][T16012] veth1_vlan: entered promiscuous mode [ 1249.529556][T16012] veth0_macvtap: entered promiscuous mode [ 1249.548359][T16012] veth1_macvtap: entered promiscuous mode [ 1249.605312][T16012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1249.634368][T16012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1249.666773][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.667035][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.667078][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.667118][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1250.074488][T16406] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1250.281229][ T6070] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.281252][ T6070] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.442958][T15403] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1250.442981][T15403] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1250.917419][T16419] netlink: 'syz.6.3111': attribute type 2 has an invalid length. [ 1250.936564][T16420] tipc: Started in network mode [ 1250.936612][T16420] tipc: Node identity 96e557569a52, cluster identity 4711 [ 1250.969203][T16420] tipc: Enabled bearer , priority 0 [ 1251.358888][T16420] syzkaller0: entered promiscuous mode [ 1251.358920][T16420] syzkaller0: entered allmulticast mode [ 1251.421512][T16420] tipc: Resetting bearer [ 1251.523872][ T5803] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1251.564729][ T5803] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1251.577323][ T5803] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1251.602039][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1251.609345][ T5873] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1251.621866][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1251.656296][T16418] tipc: Resetting bearer [ 1251.821254][ T5873] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.821295][ T5873] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1251.821342][ T5873] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1251.821369][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.881154][ T5873] usb 7-1: config 0 descriptor?? [ 1252.367404][ T5873] plantronics 0003:047F:FFFF.000D: unbalanced delimiter at end of report description [ 1252.388386][ T5873] plantronics 0003:047F:FFFF.000D: parse failed [ 1252.388490][ T5873] plantronics 0003:047F:FFFF.000D: probe with driver plantronics failed with error -22 [ 1252.486641][T16441] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1252.556883][ T5873] usb 7-1: USB disconnect, device number 11 [ 1253.028065][ T5873] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1253.179283][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 1253.204869][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1253.204909][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1253.206364][T16445] netlink: 'syz.6.3120': attribute type 1 has an invalid length. [ 1253.206518][T16445] netlink: 'syz.6.3120': attribute type 3 has an invalid length. [ 1253.206537][T16445] netlink: 224 bytes leftover after parsing attributes in process `syz.6.3120'. [ 1253.207607][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1253.207640][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.207655][ T5873] usb 5-1: Product: syz [ 1253.207666][ T5873] usb 5-1: Manufacturer: syz [ 1253.207677][ T5873] usb 5-1: SerialNumber: syz [ 1253.267331][ T5873] usb 5-1: config 0 descriptor?? [ 1253.340652][ T5873] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1253.340682][ T5873] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1253.700942][ T5803] Bluetooth: hci2: command tx timeout [ 1253.923500][ T5873] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1253.924644][ T5873] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1254.529816][ T5873] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1254.531590][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1254.531980][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1254.532386][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1254.532846][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1254.534889][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1254.560042][ T5873] usb 5-1: USB disconnect, device number 40 [ 1255.778049][ T5803] Bluetooth: hci2: command tx timeout [ 1256.124481][T16468] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1257.945997][ T5803] Bluetooth: hci2: command tx timeout [ 1258.288174][T10328] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1258.470078][T10328] usb 5-1: Using ep0 maxpacket: 8 [ 1258.472754][T10328] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 1258.472786][T10328] usb 5-1: config 0 has no interface number 0 [ 1258.475575][T10328] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 1258.475607][T10328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1258.475630][T10328] usb 5-1: Product: syz [ 1258.475641][T10328] usb 5-1: Manufacturer: syz [ 1258.475652][T10328] usb 5-1: SerialNumber: syz [ 1258.509058][T10328] usb 5-1: config 0 descriptor?? [ 1258.741142][T10328] uvcvideo 5-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 1258.741290][T10328] uvcvideo 5-1:0.31: No valid video chain found. [ 1258.945421][T10328] usb 5-1: USB disconnect, device number 41 [ 1259.817985][ T5958] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1260.008188][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 1260.046671][ T5803] Bluetooth: hci2: command tx timeout [ 1260.056870][ T5958] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1260.056908][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1260.082775][ T5958] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1260.082817][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.082832][ T5958] usb 5-1: Product: syz [ 1260.082843][ T5958] usb 5-1: Manufacturer: syz [ 1260.082853][ T5958] usb 5-1: SerialNumber: syz [ 1260.087134][ T5958] usb 5-1: config 0 descriptor?? [ 1260.137322][ T5958] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1260.137357][ T5958] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1260.722395][ T5958] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1260.723145][ T5958] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1261.366477][ T5958] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1261.366941][ T5958] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1261.367373][ T5958] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1261.367786][ T5958] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1261.368632][ T5958] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1261.369058][ T5958] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1261.413669][ T5958] usb 5-1: USB disconnect, device number 42 [ 1261.985457][T16490] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.114165][T16516] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1266.290412][T12415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1266.297084][T12415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1266.306596][T12415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1266.331737][T12415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1266.334094][T12415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1266.648105][ T5873] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1266.798282][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 1266.801330][ T5873] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1266.801366][ T5873] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1266.804133][ T5873] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1266.804163][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1266.804190][ T5873] usb 5-1: Product: syz [ 1266.804201][ T5873] usb 5-1: Manufacturer: syz [ 1266.804212][ T5873] usb 5-1: SerialNumber: syz [ 1266.818742][ T5873] usb 5-1: config 0 descriptor?? [ 1266.882088][ T5873] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1266.882125][ T5873] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1267.444607][ T5873] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1267.445411][ T5873] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1268.072711][ T5873] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 1268.073522][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 1268.073839][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 1268.074193][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 1268.074570][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 1268.078977][ T5873] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 1268.124296][ T5873] usb 5-1: USB disconnect, device number 43 [ 1268.418065][ T5803] Bluetooth: hci4: command tx timeout [ 1268.642877][T12415] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1268.650518][T12415] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1268.654439][T12415] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1268.658876][T12415] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1268.668348][T12415] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1269.836271][T12632] hid-generic 000F:FFFFFFFA:0009.000E: unknown main item tag 0x5 [ 1269.851361][T12632] hid-generic 000F:FFFFFFFA:0009.000E: hidraw0: HID v0.02 Device [syz0] on syz1 [ 1269.995629][T16535] fido_id[16535]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1270.498016][ T5803] Bluetooth: hci4: command tx timeout [ 1270.738013][ T5803] Bluetooth: hci6: command tx timeout [ 1271.863539][T12632] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1272.018210][T12632] usb 5-1: Using ep0 maxpacket: 32 [ 1272.025905][T12632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1272.025942][T12632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1272.025972][T12632] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 1272.025990][T12632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.074835][T12632] usb 5-1: config 0 descriptor?? [ 1272.529653][T12632] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1272.529692][T12632] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 1272.578023][ T5803] Bluetooth: hci4: command tx timeout [ 1272.581516][T16418] tipc: Disabling bearer [ 1272.712785][ T5910] tipc: Node number set to 213342038 [ 1272.719759][T12632] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 1272.818073][ T5803] Bluetooth: hci6: command tx timeout [ 1273.184100][ T5910] usb 5-1: USB disconnect, device number 44 [ 1273.385763][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3157'. [ 1274.173045][T16552] netlink: 'syz.4.3158': attribute type 13 has an invalid length. [ 1274.658253][ T5803] Bluetooth: hci4: command tx timeout [ 1274.898151][ T5803] Bluetooth: hci6: command tx timeout [ 1274.989191][T16552] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1275.938810][T14157] bond0: (slave netdevsim0): Releasing backup interface [ 1276.652507][T16430] chnl_net:caif_netlink_parms(): no params data found [ 1276.835795][T16517] chnl_net:caif_netlink_parms(): no params data found [ 1276.866050][T16522] chnl_net:caif_netlink_parms(): no params data found [ 1276.884748][T14157] bridge0: port 3(batadv0) entered disabled state [ 1276.949844][T14157] bridge_slave_1: left allmulticast mode [ 1276.949870][T14157] bridge_slave_1: left promiscuous mode [ 1276.950091][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.978386][ T5803] Bluetooth: hci6: command tx timeout [ 1277.036551][T14157] bridge_slave_0: left allmulticast mode [ 1277.036576][T14157] bridge_slave_0: left promiscuous mode [ 1277.036750][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.340744][T14157] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1277.907525][T14157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1277.958822][T14157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1278.000496][T14157] bond0 (unregistering): Released all slaves [ 1278.019012][T14157] bond1 (unregistering): Released all slaves [ 1278.053678][T14157] bond2 (unregistering): Released all slaves [ 1278.093020][T14157] bond3 (unregistering): Released all slaves [ 1278.445130][T14157] !: left promiscuous mode [ 1278.854119][T16430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.854254][T16430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.854521][T16430] bridge_slave_0: entered allmulticast mode [ 1278.857283][T16430] bridge_slave_0: entered promiscuous mode [ 1278.961213][T16430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.961421][T16430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.961688][T16430] bridge_slave_1: entered allmulticast mode [ 1278.964569][T16430] bridge_slave_1: entered promiscuous mode [ 1279.727287][T16517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.727450][T16517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.727661][T16517] bridge_slave_0: entered allmulticast mode [ 1279.742754][T16517] bridge_slave_0: entered promiscuous mode [ 1279.785762][T16522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.128875][T16522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1280.147325][T16522] bridge_slave_0: entered allmulticast mode [ 1280.689383][T16522] bridge_slave_0: entered promiscuous mode [ 1281.004773][T16430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1281.524173][T16517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.524750][T16517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.546819][T16517] bridge_slave_1: entered allmulticast mode [ 1281.668502][T16517] bridge_slave_1: entered promiscuous mode [ 1281.703973][T16522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.704419][T16522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.705233][T16522] bridge_slave_1: entered allmulticast mode [ 1281.777580][T16522] bridge_slave_1: entered promiscuous mode [ 1282.011366][T16430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.490763][T16517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.513606][T16522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.793283][T16430] team0: Port device team_slave_0 added [ 1282.796145][T16517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.803257][T16522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.830994][T16430] team0: Port device team_slave_1 added [ 1285.231208][T16634] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3184'. [ 1285.236235][T16517] team0: Port device team_slave_0 added [ 1285.254053][T16522] team0: Port device team_slave_0 added [ 1285.256043][T16430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1285.256056][T16430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1285.256077][T16430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1285.310115][T16517] team0: Port device team_slave_1 added [ 1285.316201][T16522] team0: Port device team_slave_1 added [ 1285.380269][T16643] Bluetooth: MGMT ver 1.23 [ 1285.488058][T14157] hsr_slave_0: left promiscuous mode [ 1285.513992][T14157] hsr_slave_1: left promiscuous mode [ 1285.514831][T14157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1286.749516][T14157] team0 (unregistering): Port device team_slave_1 removed [ 1286.801216][T14157] team0 (unregistering): Port device team_slave_0 removed [ 1287.086299][T16430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.086314][T16430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.086336][T16430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.599560][T16517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.599582][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.599613][T16517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.602161][T16522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.602178][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.602209][T16522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.607374][T16517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.607392][T16517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.607423][T16517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.614770][T16522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.614822][T16522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1287.614912][T16522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.937370][T16430] hsr_slave_0: entered promiscuous mode [ 1288.009001][T16430] hsr_slave_1: entered promiscuous mode [ 1288.010027][T16430] debugfs: 'hsr0' already exists in 'hsr' [ 1288.010054][T16430] Cannot create hsr debugfs directory [ 1289.459677][T16517] hsr_slave_0: entered promiscuous mode [ 1289.475564][T16517] hsr_slave_1: entered promiscuous mode [ 1289.476645][T16517] debugfs: 'hsr0' already exists in 'hsr' [ 1289.476665][T16517] Cannot create hsr debugfs directory [ 1289.513653][T16522] hsr_slave_0: entered promiscuous mode [ 1289.515081][T16522] hsr_slave_1: entered promiscuous mode [ 1289.516151][T16522] debugfs: 'hsr0' already exists in 'hsr' [ 1289.516178][T16522] Cannot create hsr debugfs directory [ 1291.623942][T14157] IPVS: stop unused estimator thread 0... [ 1291.938531][T11071] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1292.137544][T11071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.137583][T11071] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.137609][T11071] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1292.137655][T11071] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1292.137681][T11071] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.178390][T11071] usb 5-1: config 0 descriptor?? [ 1292.709846][T11071] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1293.873086][ T5910] usb 5-1: USB disconnect, device number 45 [ 1293.980267][T16695] fido_id[16695]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1294.040143][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3203'. [ 1294.040174][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3203'. [ 1294.040249][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3203'. [ 1296.205523][T16726] netlink: 'syz.4.3211': attribute type 1 has an invalid length. [ 1296.205547][T16726] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3211'. [ 1296.691637][T14157] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1296.804212][T16517] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1296.847990][ T5910] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1296.871796][T16517] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1297.000277][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.000314][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.000338][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1297.000384][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1297.000410][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.068426][ T5910] usb 5-1: config 0 descriptor?? [ 1297.234825][T14157] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1297.310739][T16517] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1297.445785][T16517] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1297.529235][ T5910] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1297.690273][T14157] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.013244][T14157] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.165822][T16430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1298.252546][T16430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1298.360912][T16430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1298.755234][T16430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1299.708914][ T5873] usb 5-1: reset high-speed USB device number 46 using dummy_hcd [ 1300.158294][T16522] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1300.296701][T16522] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1300.336317][T16522] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1300.344679][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.344752][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.425787][T14157] bridge_slave_1: left allmulticast mode [ 1300.425818][T14157] bridge_slave_1: left promiscuous mode [ 1300.426091][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.528318][T14157] bridge_slave_0: left allmulticast mode [ 1300.528350][T14157] bridge_slave_0: left promiscuous mode [ 1300.528604][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1300.534816][T12632] usb 5-1: USB disconnect, device number 46 [ 1300.626881][T14157] bridge_slave_1: left allmulticast mode [ 1300.626912][T14157] bridge_slave_1: left promiscuous mode [ 1300.627160][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1300.751523][T14157] bridge_slave_0: left allmulticast mode [ 1300.751555][T14157] bridge_slave_0: left promiscuous mode [ 1300.751800][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.169507][T14157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.230114][T14157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.251194][T14157] bond0 (unregistering): Released all slaves [ 1302.682224][T14157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1302.758949][T14157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1302.781615][T14157] bond0 (unregistering): Released all slaves [ 1302.820228][T16522] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1303.018061][T16796] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1303.436531][T14157] tipc: Left network mode [ 1304.552450][T16517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.577920][ T31] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1304.744228][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.744267][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.744292][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1304.744340][ T31] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1304.744368][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.807666][ T31] usb 5-1: config 0 descriptor?? [ 1304.995727][T16517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.253306][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1305.253548][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1305.432354][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 1305.432485][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1305.476883][T16430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1305.531450][ T31] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1305.579828][ T31] usb 5-1: USB disconnect, device number 47 [ 1305.744916][T16831] fido_id[16831]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1306.094577][T16430] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.402312][T16522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.404651][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.404919][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.431364][T12632] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1306.562751][T15403] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.562870][T15403] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.589123][T12632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1306.589160][T12632] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1306.589187][T12632] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1306.589233][T12632] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1306.589259][T12632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.655826][T12632] usb 5-1: config 0 descriptor?? [ 1306.779847][T14157] hsr_slave_0: left promiscuous mode [ 1306.818141][T14157] hsr_slave_1: left promiscuous mode [ 1306.819982][T14157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1306.861861][T14157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.027617][T16848] syz.7.3232 uses obsolete (PF_INET,SOCK_PACKET) [ 1307.037971][T14157] hsr_slave_0: left promiscuous mode [ 1307.078132][T14157] hsr_slave_1: left promiscuous mode [ 1307.083736][T14157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.101817][T14157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.116498][T12632] plantronics 0003:047F:FFFF.0013: unbalanced delimiter at end of report description [ 1307.117315][T12632] plantronics 0003:047F:FFFF.0013: parse failed [ 1307.117429][T12632] plantronics 0003:047F:FFFF.0013: probe with driver plantronics failed with error -22 [ 1307.149848][T14157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.152291][T14157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.239773][T14157] veth1_macvtap: left promiscuous mode [ 1307.239886][T14157] veth0_macvtap: left promiscuous mode [ 1307.240072][T14157] veth1_vlan: left promiscuous mode [ 1307.240193][T14157] veth0_vlan: left promiscuous mode [ 1307.310848][ T5958] usb 5-1: USB disconnect, device number 48 [ 1309.181032][T14157] team0 (unregistering): Port device team_slave_1 removed [ 1309.212264][T16857] sg_write: data in/out 204756/52 bytes for SCSI command 0x0-- guessing data in; [ 1309.212264][T16857] program syz.4.3234 not setting count and/or reply_len properly [ 1309.285170][T14157] team0 (unregistering): Port device team_slave_0 removed [ 1310.049714][T14157] team0 (unregistering): Port device team_slave_1 removed [ 1310.112093][T14157] team0 (unregistering): Port device team_slave_0 removed [ 1311.104226][T16522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1311.184152][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1311.184303][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1311.251428][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 1311.268074][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1311.699263][T12415] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1311.710626][T12415] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1311.730882][T12415] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1311.813337][T12415] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1311.816456][T12415] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1312.114669][T16517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1312.279869][T16887] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3240'. [ 1313.670072][T16910] sg_write: data in/out 204756/55 bytes for SCSI command 0x0-- guessing data in; [ 1313.670072][T16910] program syz.4.3242 not setting count and/or reply_len properly [ 1313.807442][T16522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.930965][T16517] veth0_vlan: entered promiscuous mode [ 1313.938720][ T5803] Bluetooth: hci3: command tx timeout [ 1314.031787][T16874] chnl_net:caif_netlink_parms(): no params data found [ 1314.186347][T16517] veth1_vlan: entered promiscuous mode [ 1314.849505][T16874] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.850283][T16874] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.850520][T16874] bridge_slave_0: entered allmulticast mode [ 1314.852862][T16874] bridge_slave_0: entered promiscuous mode [ 1314.971027][T16874] bridge0: port 2(bridge_slave_1) entered blocking state [ 1314.971170][T16874] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.971429][T16874] bridge_slave_1: entered allmulticast mode [ 1315.006056][T16874] bridge_slave_1: entered promiscuous mode [ 1315.351806][T16874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1315.449234][T16874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1315.565179][T16947] tipc: Started in network mode [ 1315.565214][T16947] tipc: Node identity e2c28533a7d6, cluster identity 4711 [ 1315.565390][T16947] tipc: Enabled bearer , priority 0 [ 1315.703800][T16946] tipc: Disabling bearer [ 1315.867346][T16874] team0: Port device team_slave_0 added [ 1315.877028][T16517] veth0_macvtap: entered promiscuous mode [ 1315.923524][T16874] team0: Port device team_slave_1 added [ 1315.988560][T16517] veth1_macvtap: entered promiscuous mode [ 1316.018229][ T5803] Bluetooth: hci3: command tx timeout [ 1316.042244][T16874] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1316.042616][T16874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.042706][T16874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1316.115702][T16874] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1316.115721][T16874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1316.115753][T16874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1316.315598][T16522] veth0_vlan: entered promiscuous mode [ 1316.586283][T16517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1316.632036][T16874] hsr_slave_0: entered promiscuous mode [ 1316.633048][T16874] hsr_slave_1: entered promiscuous mode [ 1316.633750][T16874] debugfs: 'hsr0' already exists in 'hsr' [ 1316.633770][T16874] Cannot create hsr debugfs directory [ 1316.635589][T16522] veth1_vlan: entered promiscuous mode [ 1316.828105][T10328] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1316.946423][T16517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1317.000604][T10328] usb 5-1: config 0 has an invalid interface number: 64 but max is 0 [ 1317.000636][T10328] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.000659][T10328] usb 5-1: config 0 has no interface number 0 [ 1317.004219][T10328] usb 5-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 1317.004255][T10328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1317.004279][T10328] usb 5-1: Product: syz [ 1317.004295][T10328] usb 5-1: Manufacturer: syz [ 1317.004312][T10328] usb 5-1: SerialNumber: syz [ 1317.065819][T10328] usb 5-1: config 0 descriptor?? [ 1317.091860][T10328] uvcvideo 5-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 1317.091900][T10328] uvcvideo 5-1:0.64: No valid video chain found. [ 1317.422137][T16970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3251'. [ 1317.823515][ T3965] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.850411][ T3965] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1317.855813][ T3965] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.098993][ T5803] Bluetooth: hci3: command tx timeout [ 1318.119674][ T3965] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1318.635625][T16522] veth0_macvtap: entered promiscuous mode [ 1318.782385][T16522] veth1_macvtap: entered promiscuous mode [ 1319.011732][ T1307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.011756][ T1307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.155246][T16522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1319.259695][T16522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1319.336408][T15404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1319.336433][T15404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.436711][T11008] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.464813][ T68] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.465145][ T68] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.465933][ T68] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1319.850753][T11071] usb 5-1: USB disconnect, device number 49 [ 1320.178055][ T5803] Bluetooth: hci3: command tx timeout [ 1321.322317][T14157] bridge_slave_1: left allmulticast mode [ 1321.322351][T14157] bridge_slave_1: left promiscuous mode [ 1321.322611][T14157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.637733][T14157] bridge_slave_0: left allmulticast mode [ 1325.637767][T14157] bridge_slave_0: left promiscuous mode [ 1325.651765][T14157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.685998][T12415] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1326.704295][T12415] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1326.705820][T12415] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1326.726284][T12415] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1326.727047][T12415] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1328.849536][ T5803] Bluetooth: hci2: command tx timeout [ 1329.354360][T12415] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1329.381998][T12415] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1329.398171][T12415] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1329.400932][T12415] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1329.483449][T12415] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1330.897976][ T5803] Bluetooth: hci2: command tx timeout [ 1331.628169][ T5803] Bluetooth: hci5: command tx timeout [ 1332.987965][ T5803] Bluetooth: hci2: command tx timeout [ 1333.699981][ T5803] Bluetooth: hci5: command tx timeout [ 1335.058587][ T5803] Bluetooth: hci2: command tx timeout [ 1335.777972][ T5803] Bluetooth: hci5: command tx timeout [ 1335.855703][T12415] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1335.888295][T12415] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1335.890492][T12415] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1335.909864][T12415] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1335.912342][T12415] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1337.857972][ T5803] Bluetooth: hci5: command tx timeout [ 1338.022226][ T5803] Bluetooth: hci7: command tx timeout [ 1338.826675][T12415] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1338.862595][T12415] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1338.864155][T12415] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1338.882473][T12415] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1338.886069][T12415] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1339.036875][T14157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1339.665320][T14157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1340.097983][T12415] Bluetooth: hci7: command tx timeout [ 1340.221200][T14157] bond0 (unregistering): Released all slaves [ 1340.978814][T12415] Bluetooth: hci8: command tx timeout [ 1342.179470][T12415] Bluetooth: hci7: command tx timeout [ 1343.063475][T12415] Bluetooth: hci8: command tx timeout [ 1344.258168][T12415] Bluetooth: hci7: command tx timeout [ 1345.137965][T12415] Bluetooth: hci8: command tx timeout [ 1347.218254][T12415] Bluetooth: hci8: command tx timeout [ 1349.921099][T17017] chnl_net:caif_netlink_parms(): no params data found [ 1349.978653][T17022] chnl_net:caif_netlink_parms(): no params data found [ 1350.306747][T17029] chnl_net:caif_netlink_parms(): no params data found [ 1350.506533][T17025] chnl_net:caif_netlink_parms(): no params data found [ 1351.254349][T17017] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.254482][T17017] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.254727][T17017] bridge_slave_0: entered allmulticast mode [ 1351.285068][T17017] bridge_slave_0: entered promiscuous mode [ 1351.338982][T17022] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.339139][T17022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.339417][T17022] bridge_slave_0: entered allmulticast mode [ 1351.342284][T17022] bridge_slave_0: entered promiscuous mode [ 1351.389571][T17017] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.389733][T17017] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.390005][T17017] bridge_slave_1: entered allmulticast mode [ 1351.392977][T17017] bridge_slave_1: entered promiscuous mode [ 1351.525746][T17022] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.525871][T17022] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.526033][T17022] bridge_slave_1: entered allmulticast mode [ 1351.530707][T17022] bridge_slave_1: entered promiscuous mode [ 1351.768651][T17029] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.768862][T17029] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.769109][T17029] bridge_slave_0: entered allmulticast mode [ 1351.772386][T17029] bridge_slave_0: entered promiscuous mode [ 1351.854919][T17017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1351.905836][T17029] bridge0: port 2(bridge_slave_1) entered blocking state [ 1351.905998][T17029] bridge0: port 2(bridge_slave_1) entered disabled state [ 1351.906290][T17029] bridge_slave_1: entered allmulticast mode [ 1351.935574][T17029] bridge_slave_1: entered promiscuous mode [ 1351.937579][T17025] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.954699][T17025] bridge0: port 1(bridge_slave_0) entered disabled state [ 1351.955017][T17025] bridge_slave_0: entered allmulticast mode [ 1351.972684][T17025] bridge_slave_0: entered promiscuous mode [ 1351.992555][T17017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1352.012653][T17022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1352.061796][T17025] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.061987][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 1352.062951][T17025] bridge_slave_1: entered allmulticast mode [ 1352.066185][T17025] bridge_slave_1: entered promiscuous mode [ 1352.128463][T17022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.342308][T17029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.393316][T17017] team0: Port device team_slave_0 added [ 1353.486242][T17029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.508358][T17025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1353.512252][T17017] team0: Port device team_slave_1 added [ 1353.555097][T17025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1353.683560][T17029] team0: Port device team_slave_0 added [ 1353.736259][T17017] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1353.736280][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.736312][T17017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1353.786961][T17029] team0: Port device team_slave_1 added [ 1353.802277][T17025] team0: Port device team_slave_0 added [ 1353.805088][T17017] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1353.805107][T17017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1353.805138][T17017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.871188][T17022] team0: Port device team_slave_0 added [ 1353.935567][T17025] team0: Port device team_slave_1 added [ 1353.959376][T17022] team0: Port device team_slave_1 added [ 1354.047359][T17029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.047379][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.047412][T17029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1354.129924][T17029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1354.129944][T17029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.129977][T17029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1354.226710][T17025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1354.226730][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1354.226762][T17025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.104221][T17022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1356.104236][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.104258][T17022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1356.106127][T17025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.106144][T17025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.106175][T17025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.177489][T17017] hsr_slave_0: entered promiscuous mode [ 1356.231040][T17017] hsr_slave_1: entered promiscuous mode [ 1356.232865][T17017] debugfs: 'hsr0' already exists in 'hsr' [ 1356.232895][T17017] Cannot create hsr debugfs directory [ 1356.244448][T17022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1356.244502][T17022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1356.244584][T17022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1356.523147][T17029] hsr_slave_0: entered promiscuous mode [ 1356.524770][T17029] hsr_slave_1: entered promiscuous mode [ 1356.540473][T17029] debugfs: 'hsr0' already exists in 'hsr' [ 1356.540505][T17029] Cannot create hsr debugfs directory [ 1357.735231][T17025] hsr_slave_0: entered promiscuous mode [ 1357.736767][T17025] hsr_slave_1: entered promiscuous mode [ 1357.750332][T17025] debugfs: 'hsr0' already exists in 'hsr' [ 1357.750364][T17025] Cannot create hsr debugfs directory [ 1357.792128][T17022] hsr_slave_0: entered promiscuous mode [ 1357.793607][T17022] hsr_slave_1: entered promiscuous mode [ 1357.794587][T17022] debugfs: 'hsr0' already exists in 'hsr' [ 1357.794613][T17022] Cannot create hsr debugfs directory [ 1361.784737][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.784813][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.564201][T14157] hsr_slave_0: left promiscuous mode [ 1365.635002][T14157] hsr_slave_1: left promiscuous mode [ 1365.691792][T14157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1366.059149][T14157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1368.594046][T14157] team0 (unregistering): Port device team_slave_1 removed [ 1368.720879][T14157] team0 (unregistering): Port device team_slave_0 removed [ 1372.640774][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1372.678193][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1372.684502][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1372.686134][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1372.686972][ T5803] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1373.802291][T17165] chnl_net:caif_netlink_parms(): no params data found [ 1374.191692][T17165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.197083][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.197397][T17165] bridge_slave_0: entered allmulticast mode [ 1374.222798][T17165] bridge_slave_0: entered promiscuous mode [ 1374.244160][T17165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.244731][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.245055][T17165] bridge_slave_1: entered allmulticast mode [ 1374.269957][T17165] bridge_slave_1: entered promiscuous mode [ 1374.323748][T17165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1374.347999][T17165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1374.455247][T17165] team0: Port device team_slave_0 added [ 1374.469398][T17165] team0: Port device team_slave_1 added [ 1374.566873][T17165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1374.566893][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.566923][T17165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1374.619730][T17165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1374.619750][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1374.619781][T17165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1374.818009][T12415] Bluetooth: hci0: command tx timeout [ 1376.898230][T12415] Bluetooth: hci0: command tx timeout [ 1377.189448][T17165] hsr_slave_0: entered promiscuous mode [ 1377.190999][T17165] hsr_slave_1: entered promiscuous mode [ 1377.192075][T17165] debugfs: 'hsr0' already exists in 'hsr' [ 1377.192103][T17165] Cannot create hsr debugfs directory [ 1378.978846][T12415] Bluetooth: hci0: command tx timeout [ 1381.058176][T12415] Bluetooth: hci0: command tx timeout [ 1387.359654][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1387.440002][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1387.443395][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1387.445142][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1387.446010][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1387.889266][T17301] chnl_net:caif_netlink_parms(): no params data found [ 1388.347255][T17301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1388.347490][T17301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1388.362837][T17301] bridge_slave_0: entered allmulticast mode [ 1388.365935][T17301] bridge_slave_0: entered promiscuous mode [ 1388.391953][T17301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1388.392782][T17301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1388.393514][T17301] bridge_slave_1: entered allmulticast mode [ 1388.396596][T17301] bridge_slave_1: entered promiscuous mode [ 1388.494256][T17301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1388.514268][T17301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1388.586025][T17301] team0: Port device team_slave_0 added [ 1388.600848][T17301] team0: Port device team_slave_1 added [ 1388.678432][T17301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.678452][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.678485][T17301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.682395][T17301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.682417][T17301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1388.682450][T17301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1389.403249][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1389.433365][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1389.435627][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1389.437286][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1389.438420][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1389.538154][T12415] Bluetooth: hci1: command tx timeout [ 1391.538314][T12415] Bluetooth: hci4: command tx timeout [ 1391.618521][T12415] Bluetooth: hci1: command tx timeout [ 1391.853654][T17301] hsr_slave_0: entered promiscuous mode [ 1391.855301][T17301] hsr_slave_1: entered promiscuous mode [ 1391.856380][T17301] debugfs: 'hsr0' already exists in 'hsr' [ 1391.856407][T17301] Cannot create hsr debugfs directory [ 1392.875024][T17313] chnl_net:caif_netlink_parms(): no params data found [ 1393.099300][T17313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1393.099538][T17313] bridge0: port 1(bridge_slave_0) entered disabled state [ 1393.099841][T17313] bridge_slave_0: entered allmulticast mode [ 1393.102884][T17313] bridge_slave_0: entered promiscuous mode [ 1393.106662][T17313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1393.106873][T17313] bridge0: port 2(bridge_slave_1) entered disabled state [ 1393.107122][T17313] bridge_slave_1: entered allmulticast mode [ 1393.172701][T17313] bridge_slave_1: entered promiscuous mode [ 1393.255684][T17313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.271416][T17313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1393.347381][T17313] team0: Port device team_slave_0 added [ 1393.361155][T17313] team0: Port device team_slave_1 added [ 1393.428896][T17313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1393.428917][T17313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.428949][T17313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1393.431461][T17313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1393.431478][T17313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1393.431509][T17313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1393.622777][T12415] Bluetooth: hci4: command tx timeout [ 1393.626417][T17313] hsr_slave_0: entered promiscuous mode [ 1393.642419][T17313] hsr_slave_1: entered promiscuous mode [ 1393.643943][T17313] debugfs: 'hsr0' already exists in 'hsr' [ 1393.643970][T17313] Cannot create hsr debugfs directory [ 1393.699425][T12415] Bluetooth: hci1: command tx timeout [ 1395.698343][T12415] Bluetooth: hci4: command tx timeout [ 1395.778065][T12415] Bluetooth: hci1: command tx timeout [ 1396.482923][ T5803] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1396.506174][ T5803] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1396.507740][ T5803] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1396.561732][ T5803] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1396.562674][ T5803] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1397.040627][T17322] chnl_net:caif_netlink_parms(): no params data found [ 1397.278537][T17322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.278764][T17322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.279036][T17322] bridge_slave_0: entered allmulticast mode [ 1397.281955][T17322] bridge_slave_0: entered promiscuous mode [ 1397.285832][T17322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.286044][T17322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.286308][T17322] bridge_slave_1: entered allmulticast mode [ 1397.353637][T17322] bridge_slave_1: entered promiscuous mode [ 1397.444798][T17322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.467292][T17322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1397.539504][T17322] team0: Port device team_slave_0 added [ 1397.544370][T17322] team0: Port device team_slave_1 added [ 1397.607375][T17322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1397.607394][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.607426][T17322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1397.778617][ T5803] Bluetooth: hci4: command tx timeout [ 1397.893510][T17322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1397.893527][T17322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1397.893554][T17322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1398.561798][T17322] hsr_slave_0: entered promiscuous mode [ 1398.563432][T17322] hsr_slave_1: entered promiscuous mode [ 1398.564567][T17322] debugfs: 'hsr0' already exists in 'hsr' [ 1398.564596][T17322] Cannot create hsr debugfs directory [ 1398.663988][ T5803] Bluetooth: hci6: command tx timeout [ 1399.569589][T12415] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1399.598799][T12415] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1399.601099][T12415] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1399.602447][T12415] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1399.603328][T12415] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1400.168196][T17333] chnl_net:caif_netlink_parms(): no params data found [ 1400.364732][T17333] bridge0: port 1(bridge_slave_0) entered blocking state [ 1400.364995][T17333] bridge0: port 1(bridge_slave_0) entered disabled state [ 1400.365271][T17333] bridge_slave_0: entered allmulticast mode [ 1400.396416][T17333] bridge_slave_0: entered promiscuous mode [ 1400.407024][T17333] bridge0: port 2(bridge_slave_1) entered blocking state [ 1400.407235][T17333] bridge0: port 2(bridge_slave_1) entered disabled state [ 1400.407525][T17333] bridge_slave_1: entered allmulticast mode [ 1400.472322][T17333] bridge_slave_1: entered promiscuous mode [ 1400.541108][T17333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.545778][T17333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.614819][T17333] team0: Port device team_slave_0 added [ 1400.625374][T17333] team0: Port device team_slave_1 added [ 1400.678162][T17333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1400.678182][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.678214][T17333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1400.680731][T17333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1400.680748][T17333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1400.680780][T17333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1400.738395][ T5803] Bluetooth: hci6: command tx timeout [ 1400.862244][T17333] hsr_slave_0: entered promiscuous mode [ 1400.864182][T17333] hsr_slave_1: entered promiscuous mode [ 1400.865262][T17333] debugfs: 'hsr0' already exists in 'hsr' [ 1400.865290][T17333] Cannot create hsr debugfs directory [ 1401.698378][ T5803] Bluetooth: hci9: command tx timeout [ 1402.824604][ T5803] Bluetooth: hci6: command tx timeout [ 1403.778103][ T5803] Bluetooth: hci9: command tx timeout [ 1404.899702][ T5803] Bluetooth: hci6: command tx timeout [ 1405.857975][ T5803] Bluetooth: hci9: command tx timeout [ 1407.938138][ T5803] Bluetooth: hci9: command tx timeout [ 1423.232756][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.232889][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.833874][T12415] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1432.847239][T12415] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1432.873241][T12415] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1432.980834][T12415] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1433.021315][T12415] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1433.651758][T17400] chnl_net:caif_netlink_parms(): no params data found [ 1433.814291][T17400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1433.814546][T17400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1433.814805][T17400] bridge_slave_0: entered allmulticast mode [ 1433.839176][T17400] bridge_slave_0: entered promiscuous mode [ 1433.843170][T17400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1433.843393][T17400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1433.843663][T17400] bridge_slave_1: entered allmulticast mode [ 1433.846648][T17400] bridge_slave_1: entered promiscuous mode [ 1433.955502][T17400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1433.971136][T17400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1434.042947][T17400] team0: Port device team_slave_0 added [ 1434.047303][T17400] team0: Port device team_slave_1 added [ 1434.116527][T17400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1434.116547][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.116578][T17400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1434.172728][T17400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1434.172747][T17400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1434.172780][T17400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1434.321862][T17400] hsr_slave_0: entered promiscuous mode [ 1434.323642][T17400] hsr_slave_1: entered promiscuous mode [ 1434.324759][T17400] debugfs: 'hsr0' already exists in 'hsr' [ 1434.324786][T17400] Cannot create hsr debugfs directory [ 1435.138161][T12415] Bluetooth: hci10: command tx timeout [ 1435.542242][T12415] Bluetooth: hci3: command 0x0406 tx timeout [ 1437.218050][ T5803] Bluetooth: hci10: command tx timeout [ 1439.298086][ T5803] Bluetooth: hci10: command tx timeout [ 1441.378066][ T5803] Bluetooth: hci10: command tx timeout [ 1448.249479][T12415] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1448.285601][T12415] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1448.296058][T12415] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1448.347539][T12415] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1448.365760][T12415] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1448.784247][T17411] chnl_net:caif_netlink_parms(): no params data found [ 1449.032539][T17411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1449.032763][T17411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1449.033048][T17411] bridge_slave_0: entered allmulticast mode [ 1449.036118][T17411] bridge_slave_0: entered promiscuous mode [ 1449.067543][T17411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1449.084272][T17411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1449.084981][T17411] bridge_slave_1: entered allmulticast mode [ 1449.105960][T17411] bridge_slave_1: entered promiscuous mode [ 1449.186777][T17411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1449.224300][T17411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1449.283107][T17411] team0: Port device team_slave_0 added [ 1449.304774][T17411] team0: Port device team_slave_1 added [ 1449.365231][T17411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1449.365252][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.365285][T17411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1449.426625][T17411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.426646][T17411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1449.426677][T17411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.842204][T12415] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1449.845464][T12415] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1449.846918][T12415] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1449.872411][T12415] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1449.874290][T12415] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1450.429420][T17304] Bluetooth: hci11: command tx timeout [ 1450.616068][T17411] hsr_slave_0: entered promiscuous mode [ 1450.624171][T17411] hsr_slave_1: entered promiscuous mode [ 1450.625467][T17411] debugfs: 'hsr0' already exists in 'hsr' [ 1450.625495][T17411] Cannot create hsr debugfs directory [ 1450.898164][T17304] Bluetooth: hci2: command 0x0406 tx timeout [ 1451.264701][T17422] chnl_net:caif_netlink_parms(): no params data found [ 1452.018607][ T5803] Bluetooth: hci12: command tx timeout [ 1452.473029][T17422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1452.473264][T17422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1452.473546][T17422] bridge_slave_0: entered allmulticast mode [ 1452.503480][ T5803] Bluetooth: hci11: command tx timeout [ 1452.510042][T17422] bridge_slave_0: entered promiscuous mode [ 1452.514380][T17422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1452.514602][T17422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1452.514889][T17422] bridge_slave_1: entered allmulticast mode [ 1452.548584][T17422] bridge_slave_1: entered promiscuous mode [ 1452.603355][T17422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1452.621329][T17422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1452.679344][T17422] team0: Port device team_slave_0 added [ 1452.685517][T17422] team0: Port device team_slave_1 added [ 1452.790445][T17422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1452.790465][T17422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.790496][T17422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1452.793087][T17422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1452.793103][T17422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1452.793135][T17422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1452.966080][T17422] hsr_slave_0: entered promiscuous mode [ 1452.975640][T17422] hsr_slave_1: entered promiscuous mode [ 1452.976994][T17422] debugfs: 'hsr0' already exists in 'hsr' [ 1452.977021][T17422] Cannot create hsr debugfs directory [ 1454.097972][ T5803] Bluetooth: hci12: command tx timeout [ 1454.586255][ T5803] Bluetooth: hci11: command tx timeout [ 1456.035758][T12415] Bluetooth: hci5: command 0x0406 tx timeout [ 1456.178131][T12415] Bluetooth: hci12: command tx timeout [ 1456.658113][T17304] Bluetooth: hci11: command tx timeout [ 1456.904100][T12415] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1456.931150][T12415] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1456.933906][T12415] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1456.935942][T12415] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1456.936754][T12415] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1457.481467][T17432] chnl_net:caif_netlink_parms(): no params data found [ 1457.803897][T17432] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.804156][T17432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.804574][T17432] bridge_slave_0: entered allmulticast mode [ 1457.849506][T17432] bridge_slave_0: entered promiscuous mode [ 1457.880626][T17432] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.880846][T17432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.881226][T17432] bridge_slave_1: entered allmulticast mode [ 1457.884283][T17432] bridge_slave_1: entered promiscuous mode [ 1457.969759][T17432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1457.975211][T17432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1458.080947][T17432] team0: Port device team_slave_0 added [ 1458.085426][T17432] team0: Port device team_slave_1 added [ 1458.150386][T17432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1458.150406][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.150454][T17432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1458.153125][T17432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1458.153142][T17432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1458.153173][T17432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1458.257934][T17304] Bluetooth: hci12: command tx timeout [ 1459.060538][T12415] Bluetooth: hci13: command tx timeout [ 1459.926637][T17442] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1459.945123][T17442] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1459.946615][T17442] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1459.974346][T17442] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1459.975551][T17442] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1461.159805][T17442] Bluetooth: hci8: command 0x0406 tx timeout [ 1461.159878][T17442] Bluetooth: hci7: command 0x0406 tx timeout [ 1461.159908][T17442] Bluetooth: hci13: command tx timeout [ 1461.785786][T17432] hsr_slave_0: entered promiscuous mode [ 1461.787015][T17432] hsr_slave_1: entered promiscuous mode [ 1461.861520][T17432] debugfs: 'hsr0' already exists in 'hsr' [ 1461.861552][T17432] Cannot create hsr debugfs directory [ 1462.098252][ T5803] Bluetooth: hci14: command tx timeout [ 1462.500363][T17444] chnl_net:caif_netlink_parms(): no params data found [ 1462.707663][T17444] bridge0: port 1(bridge_slave_0) entered blocking state [ 1462.715756][T17444] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.716154][T17444] bridge_slave_0: entered allmulticast mode [ 1462.739774][T17444] bridge_slave_0: entered promiscuous mode [ 1462.756135][T17444] bridge0: port 2(bridge_slave_1) entered blocking state [ 1462.756423][T17444] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.757156][T17444] bridge_slave_1: entered allmulticast mode [ 1462.786129][T17444] bridge_slave_1: entered promiscuous mode [ 1462.874735][T17444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1462.893295][T17444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1463.218131][ T5803] Bluetooth: hci13: command tx timeout [ 1463.999428][T17444] team0: Port device team_slave_0 added [ 1464.003973][T17444] team0: Port device team_slave_1 added [ 1464.092485][T17444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1464.092505][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.092536][T17444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1464.095703][T17444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1464.095721][T17444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1464.095754][T17444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1464.180914][ T5803] Bluetooth: hci14: command tx timeout [ 1464.307256][T17444] hsr_slave_0: entered promiscuous mode [ 1464.329649][T17444] hsr_slave_1: entered promiscuous mode [ 1464.334779][T17444] debugfs: 'hsr0' already exists in 'hsr' [ 1464.334810][T17444] Cannot create hsr debugfs directory [ 1465.297968][T12415] Bluetooth: hci13: command tx timeout [ 1466.258087][T12415] Bluetooth: hci14: command tx timeout [ 1468.369080][T12415] Bluetooth: hci14: command tx timeout [ 1484.667291][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.667367][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.394044][ T5803] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1493.428155][ T5803] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1493.430994][ T5803] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1493.433312][ T5803] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1493.434113][ T5803] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1494.148991][T17456] chnl_net:caif_netlink_parms(): no params data found [ 1494.395377][T17456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1494.395603][T17456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1494.395921][T17456] bridge_slave_0: entered allmulticast mode [ 1494.441791][T17456] bridge_slave_0: entered promiscuous mode [ 1494.445636][T17456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1494.445858][T17456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1494.446899][T17456] bridge_slave_1: entered allmulticast mode [ 1494.478367][T17456] bridge_slave_1: entered promiscuous mode [ 1494.563702][T17456] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1494.580777][T17456] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1494.658930][T17456] team0: Port device team_slave_0 added [ 1494.663491][T17456] team0: Port device team_slave_1 added [ 1494.730298][T17456] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1494.730318][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.730349][T17456] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1494.733180][T17456] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1494.733199][T17456] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1494.733238][T17456] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1494.951307][T17456] hsr_slave_0: entered promiscuous mode [ 1494.953069][T17456] hsr_slave_1: entered promiscuous mode [ 1494.954267][T17456] debugfs: 'hsr0' already exists in 'hsr' [ 1494.954294][T17456] Cannot create hsr debugfs directory [ 1495.538336][T12415] Bluetooth: hci15: command tx timeout [ 1496.984298][T12415] Bluetooth: hci0: command 0x0406 tx timeout [ 1497.618160][ T5803] Bluetooth: hci15: command tx timeout [ 1499.698064][ T5803] Bluetooth: hci15: command tx timeout [ 1501.778220][ T5803] Bluetooth: hci15: command tx timeout [ 1509.715410][T12415] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1509.753091][T12415] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1509.754737][T12415] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1509.757016][T12415] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1509.809119][T12415] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1510.258495][ T37] INFO: task syz-executor:17017 blocked for more than 143 seconds. [ 1510.258527][ T37] Tainted: G L syzkaller #0 [ 1510.258541][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1510.258552][ T37] task:syz-executor state:D stack:18848 pid:17017 tgid:17017 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1510.258613][ T37] Call Trace: [ 1510.258621][ T37] [ 1510.258635][ T37] __schedule+0x1553/0x5240 [ 1510.258748][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1510.258795][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 1510.258824][ T37] ? __pfx___schedule+0x10/0x10 [ 1510.258868][ T37] rt_mutex_schedule+0x76/0xf0 [ 1510.258929][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1510.259015][ T37] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 1510.259047][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1510.259078][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1510.259107][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1510.259156][ T37] ? del_device_store+0xd7/0x370 [ 1510.259324][ T37] ? del_device_store+0xd7/0x370 [ 1510.259359][ T37] mutex_lock_nested+0x168/0x1d0 [ 1510.259394][ T37] del_device_store+0xd7/0x370 [ 1510.259428][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1510.259479][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1510.259515][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1510.259539][ T37] ? sysfs_kf_write+0x166/0x260 [ 1510.259568][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1510.259591][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1510.259632][ T37] vfs_write+0x629/0xba0 [ 1510.259756][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1510.259793][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1510.259821][ T37] ? do_sys_openat2+0x14c/0x200 [ 1510.259873][ T37] ksys_write+0x156/0x270 [ 1510.259912][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1510.259959][ T37] do_syscall_64+0x14d/0xf80 [ 1510.260007][ T37] ? trace_irq_disable+0x3b/0x150 [ 1510.260048][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.260089][ T37] ? clear_bhb_loop+0x40/0x90 [ 1510.260119][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.260143][ T37] RIP: 0033:0x7f8115ddcfce [ 1510.260164][ T37] RSP: 002b:00007ffdbace2698 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1510.260189][ T37] RAX: ffffffffffffffda RBX: 0000555562bcb500 RCX: 00007f8115ddcfce [ 1510.260207][ T37] RDX: 0000000000000001 RSI: 00007ffdbace2720 RDI: 0000000000000005 [ 1510.260222][ T37] RBP: 00007f8115eb351c R08: 0000000000000000 R09: 0000000000000000 [ 1510.260237][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.260252][ T37] R13: 00007ffdbace2720 R14: 00007f8116bc4620 R15: 0000000000000003 [ 1510.260289][ T37] [ 1510.260299][ T37] INFO: task syz-executor:17022 blocked for more than 143 seconds. [ 1510.260318][ T37] Tainted: G L syzkaller #0 [ 1510.260330][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1510.260341][ T37] task:syz-executor state:D stack:19808 pid:17022 tgid:17022 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1510.260399][ T37] Call Trace: [ 1510.260408][ T37] [ 1510.260422][ T37] __schedule+0x1553/0x5240 [ 1510.260461][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1510.260503][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1510.260543][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 1510.260574][ T37] ? __pfx___schedule+0x10/0x10 [ 1510.260623][ T37] rt_mutex_schedule+0x76/0xf0 [ 1510.260662][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1510.260718][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1510.260751][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1510.260781][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1510.260831][ T37] ? del_device_store+0xd7/0x370 [ 1510.260872][ T37] ? del_device_store+0xd7/0x370 [ 1510.260907][ T37] mutex_lock_nested+0x168/0x1d0 [ 1510.260942][ T37] del_device_store+0xd7/0x370 [ 1510.260976][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1510.261001][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1510.261037][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1510.261062][ T37] ? sysfs_kf_write+0x166/0x260 [ 1510.261090][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1510.261112][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1510.261152][ T37] vfs_write+0x629/0xba0 [ 1510.261196][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1510.261233][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1510.261254][ T37] ? do_sys_openat2+0x14c/0x200 [ 1510.261299][ T37] ksys_write+0x156/0x270 [ 1510.261336][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1510.261384][ T37] do_syscall_64+0x14d/0xf80 [ 1510.261416][ T37] ? trace_irq_disable+0x3b/0x150 [ 1510.261442][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.261464][ T37] ? clear_bhb_loop+0x40/0x90 [ 1510.261493][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.261516][ T37] RIP: 0033:0x7fcced27cfce [ 1510.261536][ T37] RSP: 002b:00007ffc2940c6d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1510.261559][ T37] RAX: ffffffffffffffda RBX: 0000555559daa500 RCX: 00007fcced27cfce [ 1510.261577][ T37] RDX: 0000000000000001 RSI: 00007ffc2940c760 RDI: 0000000000000005 [ 1510.261592][ T37] RBP: 00007fcced35351c R08: 0000000000000000 R09: 0000000000000000 [ 1510.261607][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.261621][ T37] R13: 00007ffc2940c760 R14: 00007fccee064620 R15: 0000000000000003 [ 1510.261657][ T37] [ 1510.261667][ T37] INFO: task syz-executor:17025 blocked for more than 143 seconds. [ 1510.261685][ T37] Tainted: G L syzkaller #0 [ 1510.261697][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1510.261716][ T37] task:syz-executor state:D stack:22472 pid:17025 tgid:17025 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1510.261781][ T37] Call Trace: [ 1510.261789][ T37] [ 1510.261803][ T37] __schedule+0x1553/0x5240 [ 1510.261841][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1510.261876][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1510.261915][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 1510.261946][ T37] ? __pfx___schedule+0x10/0x10 [ 1510.262003][ T37] rt_mutex_schedule+0x76/0xf0 [ 1510.262032][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1510.262078][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1510.262109][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1510.262137][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1510.262183][ T37] ? del_device_store+0xd7/0x370 [ 1510.262227][ T37] ? del_device_store+0xd7/0x370 [ 1510.262260][ T37] mutex_lock_nested+0x168/0x1d0 [ 1510.262290][ T37] del_device_store+0xd7/0x370 [ 1510.262318][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1510.262338][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1510.262367][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1510.262387][ T37] ? sysfs_kf_write+0x166/0x260 [ 1510.262409][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1510.262427][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1510.262461][ T37] vfs_write+0x629/0xba0 [ 1510.262496][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1510.262542][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1510.262558][ T37] ? do_sys_openat2+0x14c/0x200 [ 1510.262594][ T37] ksys_write+0x156/0x270 [ 1510.262624][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1510.262662][ T37] do_syscall_64+0x14d/0xf80 [ 1510.262690][ T37] ? trace_irq_disable+0x3b/0x150 [ 1510.262722][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.262741][ T37] ? clear_bhb_loop+0x40/0x90 [ 1510.262765][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.262786][ T37] RIP: 0033:0x7f3dc7adcfce [ 1510.262804][ T37] RSP: 002b:00007ffc765cd2b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1510.262828][ T37] RAX: ffffffffffffffda RBX: 000055556ede0500 RCX: 00007f3dc7adcfce [ 1510.262844][ T37] RDX: 0000000000000001 RSI: 00007ffc765cd340 RDI: 0000000000000005 [ 1510.262860][ T37] RBP: 00007f3dc7bb351c R08: 0000000000000000 R09: 0000000000000000 [ 1510.262875][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.262888][ T37] R13: 00007ffc765cd340 R14: 00007f3dc88c4620 R15: 0000000000000003 [ 1510.262924][ T37] [ 1510.262935][ T37] INFO: task syz-executor:17029 blocked for more than 143 seconds. [ 1510.262953][ T37] Tainted: G L syzkaller #0 [ 1510.262966][ T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1510.262976][ T37] task:syz-executor state:D stack:22688 pid:17029 tgid:17029 ppid:1 task_flags:0x400140 flags:0x00080002 [ 1510.263036][ T37] Call Trace: [ 1510.263044][ T37] [ 1510.263057][ T37] __schedule+0x1553/0x5240 [ 1510.263096][ T37] ? __lock_acquire+0x6b5/0x2cf0 [ 1510.263131][ T37] ? _raw_spin_unlock_irq+0x23/0x50 [ 1510.263170][ T37] ? rt_mutex_adjust_prio_chain+0x21fd/0x23f0 [ 1510.263200][ T37] ? __pfx___schedule+0x10/0x10 [ 1510.263248][ T37] rt_mutex_schedule+0x76/0xf0 [ 1510.263278][ T37] rt_mutex_slowlock_block+0x508/0x680 [ 1510.263325][ T37] rt_mutex_slowlock+0x2dc/0x7b0 [ 1510.263355][ T37] ? rt_mutex_slowlock+0x1fd/0x7b0 [ 1510.263384][ T37] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1510.263430][ T37] ? del_device_store+0xd7/0x370 [ 1510.263474][ T37] ? del_device_store+0xd7/0x370 [ 1510.263508][ T37] mutex_lock_nested+0x168/0x1d0 [ 1510.263539][ T37] del_device_store+0xd7/0x370 [ 1510.263574][ T37] ? sysfs_file_kobj+0x1a/0x230 [ 1510.263598][ T37] ? __pfx_del_device_store+0x10/0x10 [ 1510.263635][ T37] ? sysfs_file_kobj+0x1e4/0x230 [ 1510.263657][ T37] ? sysfs_kf_write+0x166/0x260 [ 1510.263685][ T37] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1510.263707][ T37] kernfs_fop_write_iter+0x3b0/0x540 [ 1510.263757][ T37] vfs_write+0x629/0xba0 [ 1510.263802][ T37] ? __pfx_vfs_write+0x10/0x10 [ 1510.263840][ T37] ? kmem_cache_free+0x185/0x6b0 [ 1510.263861][ T37] ? do_sys_openat2+0x14c/0x200 [ 1510.263906][ T37] ksys_write+0x156/0x270 [ 1510.263943][ T37] ? __pfx_ksys_write+0x10/0x10 [ 1510.263991][ T37] do_syscall_64+0x14d/0xf80 [ 1510.264024][ T37] ? trace_irq_disable+0x3b/0x150 [ 1510.264051][ T37] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.264075][ T37] ? clear_bhb_loop+0x40/0x90 [ 1510.264105][ T37] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.264128][ T37] RIP: 0033:0x7fa0f02fcfce [ 1510.264147][ T37] RSP: 002b:00007fff9f70bf48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1510.264170][ T37] RAX: ffffffffffffffda RBX: 0000555563b3b500 RCX: 00007fa0f02fcfce [ 1510.264188][ T37] RDX: 0000000000000001 RSI: 00007fff9f70bfd0 RDI: 0000000000000005 [ 1510.264203][ T37] RBP: 00007fa0f03d351c R08: 0000000000000000 R09: 0000000000000000 [ 1510.264218][ T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1510.264231][ T37] R13: 00007fff9f70bfd0 R14: 00007fa0f10e4620 R15: 0000000000000003 [ 1510.264267][ T37] [ 1510.264353][ T37] [ 1510.264353][ T37] Showing all locks held in the system: [ 1510.264367][ T37] 4 locks held by rcuc/1/28: [ 1510.264442][ T37] 1 lock held by khungtaskd/37: [ 1510.264452][ T37] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1510.264577][ T37] 2 locks held by getty/5556: [ 1510.264591][ T37] #0: ffff8880374360a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1510.264734][ T37] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1510.264791][ T37] 4 locks held by kworker/u8:0/11008: [ 1510.264809][ T37] 5 locks held by kworker/u8:5/14157: [ 1510.264821][ T37] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1510.264883][ T37] #1: ffffc90003a3fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1510.264944][ T37] #2: ffffffff8f14c400 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1510.265060][ T37] #3: ffff88805dc5d7b8 (&wg->device_update_lock){+.+.}-{4:4}, at: wg_destruct+0x116/0x310 [ 1510.265158][ T37] #4: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1510.265217][ T37] 3 locks held by kworker/u8:10/15404: [ 1510.265234][ T37] 7 locks held by syz-executor/16874: [ 1510.265246][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.265309][ T37] #1: ffff8880337f8878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.265370][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.265435][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.265495][ T37] #4: ffff8880407aa0d8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1510.265589][ T37] #5: ffff888020eca300 (&devlink->lock_key#14){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1510.265632][ T37] #6: ffffffff8ddd1bf0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 1510.265675][ T37] 4 locks held by syz-executor/17017: [ 1510.265684][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.265737][ T37] #1: ffff88803876d478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.265782][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.265830][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.265876][ T37] 4 locks held by syz-executor/17022: [ 1510.265885][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.265931][ T37] #1: ffff888026492878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.265976][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.266023][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.266069][ T37] 4 locks held by syz-executor/17025: [ 1510.266078][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.266124][ T37] #1: ffff8880339a7878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.266169][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.266219][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.266265][ T37] 4 locks held by syz-executor/17029: [ 1510.266274][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.266321][ T37] #1: ffff88803bb0b078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.266365][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.266413][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.266464][ T37] 4 locks held by syz-executor/17165: [ 1510.266473][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.266519][ T37] #1: ffff88806079c078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.266564][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.266612][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.266665][ T37] 4 locks held by syz-executor/17301: [ 1510.266674][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.266727][ T37] #1: ffff88803efb8478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.266772][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.266820][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.266867][ T37] 4 locks held by syz-executor/17313: [ 1510.266876][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.266922][ T37] #1: ffff888068b22078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.266966][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.267014][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.267061][ T37] 4 locks held by syz-executor/17322: [ 1510.267070][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.267116][ T37] #1: ffff888057495478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.267160][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.267209][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.267257][ T37] 4 locks held by syz-executor/17333: [ 1510.267266][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.267313][ T37] #1: ffff88803782ac78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.267356][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.267405][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.267451][ T37] 4 locks held by syz-executor/17400: [ 1510.267460][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.267506][ T37] #1: ffff888063273478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.267551][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.267599][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.267645][ T37] 4 locks held by syz-executor/17411: [ 1510.267655][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.267977][ T37] #1: ffff88803abbcc78 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.268151][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.268313][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.268491][ T37] 4 locks held by syz-executor/17422: [ 1510.268530][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.268704][ T37] #1: ffff88804dba3078 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.268891][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.269070][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.269245][ T37] 4 locks held by syz-executor/17432: [ 1510.269278][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.269457][ T37] #1: ffff8880630be878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.269666][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.269871][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.270049][ T37] 4 locks held by syz-executor/17444: [ 1510.270081][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.270248][ T37] #1: ffff88805ddf2478 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.270418][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.270599][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.270832][ T37] 4 locks held by syz-executor/17456: [ 1510.270873][ T37] #0: ffff8880334aa480 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x22d/0xba0 [ 1510.271090][ T37] #1: ffff8880591c2878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1df/0x540 [ 1510.271255][ T37] #2: ffff8880295cfa58 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x232/0x540 [ 1510.271435][ T37] #3: ffffffff8e9c85d8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1510.271617][ T37] [ 1510.271637][ T37] ============================================= [ 1510.271637][ T37] [ 1510.271680][ T37] NMI backtrace for cpu 1 [ 1510.271740][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.271817][ T37] Tainted: [L]=SOFTLOCKUP [ 1510.271839][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.271879][ T37] Call Trace: [ 1510.271901][ T37] [ 1510.271931][ T37] dump_stack_lvl+0xe8/0x150 [ 1510.272062][ T37] nmi_cpu_backtrace+0x274/0x2d0 [ 1510.272198][ T37] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1510.272322][ T37] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1510.272418][ T37] sys_info+0x135/0x170 [ 1510.272480][ T37] watchdog+0xfd9/0x1030 [ 1510.272574][ T37] ? watchdog+0x21a/0x1030 [ 1510.272669][ T37] kthread+0x388/0x470 [ 1510.272751][ T37] ? __pfx_watchdog+0x10/0x10 [ 1510.272818][ T37] ? __pfx_kthread+0x10/0x10 [ 1510.272883][ T37] ret_from_fork+0x51e/0xb90 [ 1510.272978][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1510.273060][ T37] ? __switch_to+0xc7d/0x1450 [ 1510.273161][ T37] ? __pfx_kthread+0x10/0x10 [ 1510.273232][ T37] ret_from_fork_asm+0x1a/0x30 [ 1510.273331][ T37] [ 1510.273348][ T37] Sending NMI from CPU 1 to CPUs 0: [ 1510.273418][ C0] NMI backtrace for cpu 0 [ 1510.273436][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.273466][ C0] Tainted: [L]=SOFTLOCKUP [ 1510.273473][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.273488][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 1510.273607][ C0] Code: e8 5e 94 94 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 9f ab fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 1510.273624][ C0] RSP: 0018:ffffc900001679d0 EFLAGS: 00000202 [ 1510.273641][ C0] RAX: 1ffffffff332a600 RBX: 00000000000003fd RCX: 0000000000000000 [ 1510.273655][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1510.273678][ C0] RBP: ffffffff999537d0 R08: 0000000000000000 R09: 0000000000000000 [ 1510.273704][ C0] R10: dffffc0000000000 R11: ffffffff852fe270 R12: dffffc0000000000 [ 1510.273789][ C0] R13: 0000000000000000 R14: ffffffff99953540 R15: 0000000000000000 [ 1510.273804][ C0] FS: 0000000000000000(0000) GS:ffff88812633c000(0000) knlGS:0000000000000000 [ 1510.273820][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1510.273833][ C0] CR2: 00007f385e3ca358 CR3: 0000000052d74000 CR4: 00000000003526f0 [ 1510.273852][ C0] Call Trace: [ 1510.273862][ C0] [ 1510.273873][ C0] wait_for_lsr+0x1aa/0x2f0 [ 1510.273901][ C0] serial8250_console_write+0x120d/0x1b90 [ 1510.273941][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 1510.273974][ C0] ? console_flush_one_record+0x48f/0xb90 [ 1510.274007][ C0] console_flush_one_record+0x68b/0xb90 [ 1510.274041][ C0] ? console_flush_one_record+0xfa/0xb90 [ 1510.274074][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 1510.274106][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1510.274142][ C0] legacy_kthread_func+0x1b6/0x250 [ 1510.274177][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1510.274209][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1510.274242][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 1510.274280][ C0] kthread+0x388/0x470 [ 1510.274301][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1510.274331][ C0] ? __pfx_kthread+0x10/0x10 [ 1510.274352][ C0] ret_from_fork+0x51e/0xb90 [ 1510.274385][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1510.274412][ C0] ? __switch_to+0xc7d/0x1450 [ 1510.274439][ C0] ? __pfx_kthread+0x10/0x10 [ 1510.274460][ C0] ret_from_fork_asm+0x1a/0x30 [ 1510.274489][ C0] [ 1510.275456][ T37] Kernel panic - not syncing: hung_task: blocked tasks [ 1510.275541][ T37] CPU: 1 UID: 0 PID: 37 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1510.275628][ T37] Tainted: [L]=SOFTLOCKUP [ 1510.275658][ T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1510.275696][ T37] Call Trace: [ 1510.275721][ T37] [ 1510.275753][ T37] vpanic+0x56c/0xa60 [ 1510.275861][ T37] ? __pfx_vpanic+0x10/0x10 [ 1510.275994][ T37] panic+0xc5/0xd0 [ 1510.276102][ T37] ? __pfx_panic+0x10/0x10 [ 1510.276197][ T37] ? printk_trigger_flush+0x117/0x180 [ 1510.276285][ T37] ? lockdep_hardirqs_on+0x7a/0x110 [ 1510.276401][ T37] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1510.276488][ T37] watchdog+0x1023/0x1030 [ 1510.276583][ T37] ? watchdog+0x21a/0x1030 [ 1510.276692][ T37] kthread+0x388/0x470 [ 1510.276772][ T37] ? __pfx_watchdog+0x10/0x10 [ 1510.276835][ T37] ? __pfx_kthread+0x10/0x10 [ 1510.276859][ T37] ret_from_fork+0x51e/0xb90 [ 1510.276893][ T37] ? __pfx_ret_from_fork+0x10/0x10 [ 1510.276924][ T37] ? __switch_to+0xc7d/0x1450 [ 1510.276956][ T37] ? __pfx_kthread+0x10/0x10 [ 1510.276976][ T37] ret_from_fork_asm+0x1a/0x30 [ 1510.277012][ T37] [ 1510.277643][ T37] Kernel Offset: disabled