last executing test programs: 4m17.394558089s ago: executing program 2 (id=867): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x304}, "76131e58a256d4af", "4448076cc60af592e807e038c4797041", "8076e30e", "f79d7fbbf3985dbb"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "0010000000000900", "d830008520f1c2a6044cd8f52b0000000000fef6170000f1f7379d0000004000", "5615f9f5", "7c5cec21291a43fe"}, 0x38) 4m16.895070092s ago: executing program 2 (id=869): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}) 4m16.804997999s ago: executing program 2 (id=871): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_STATE={0x5}]}}}]}, 0x44}}, 0x0) 4m16.59877056s ago: executing program 2 (id=874): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0) move_mount(r0, &(0x7f0000000280)='./file0\x00', r0, &(0x7f0000000200)='.\x00', 0x277) 4m16.417924554s ago: executing program 2 (id=876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x1}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000) 4m16.066281823s ago: executing program 2 (id=879): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 4m15.738422929s ago: executing program 32 (id=879): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) 2m58.379922999s ago: executing program 4 (id=1379): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x3) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m58.270479991s ago: executing program 4 (id=1380): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="80fd"], 0x9) 2m57.421661523s ago: executing program 4 (id=1385): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3e82f07070d240701060000fd80000000e80924030000000001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001840)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x2, "c4a2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000b00)=ANY=[@ANYBLOB="200603"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000500)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "b32e"}, 0x0}) 2m54.584130142s ago: executing program 4 (id=1399): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x3041008, 0x0) 2m54.389922797s ago: executing program 4 (id=1401): unshare(0x22000400) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x60102, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x2) vmsplice(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="d5", 0x1}], 0x1, 0x0) 2m53.961650272s ago: executing program 4 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m53.545667113s ago: executing program 33 (id=1404): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7, 0x4, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m38.24641989s ago: executing program 6 (id=1405): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000c86c73b33970fc0d2a1d4c6726b29961f542f32c9c9a4af967d2e84b8e60c8c201be26b12467a2df24e4ba5916ea4b4c9fd420570a520a399213d932e49404ef5c75f0cef0e946a2266f23797f9aa6d2d8a8b990178a0817c7b333c78462c6e39b0d3a9c338079b786f6ecd8964afdc734e24e33f35a580e833e2f71b6e5b59b6dc14688c0932c58dc99da0ff406fc0754369451fca5215fa5c307633ed18a8732d3a31d18a0143f7259cf2bef38f6c4756cce31ee02ab0d292d93"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @sk_reuseport=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 2m37.876037367s ago: executing program 6 (id=1487): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400a685b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r2, &(0x7f0000000700)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}}], 0x1, 0x8040) sendmmsg$inet6(r2, &(0x7f0000000000)=[{{&(0x7f0000004d40)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000008b80)=[{0x0, 0x3e}, {&(0x7f0000008900)='y', 0x1}], 0x2}}], 0x2, 0x4008040) 2m37.644178826s ago: executing program 6 (id=1488): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) umount2(&(0x7f00000004c0)='./file0\x00', 0x0) 2m37.472877642s ago: executing program 6 (id=1489): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000004cc0)=[{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000400)="2f6718ee53d7077b94acbd5701efe28f1f1b5504429cf6aac1e8ee48f8c2e5324d0abd94979dc4469e4d317394eaf8d9b0f631d64f314d6476adc621a5efbe6bad2917f9a137a26116948077316d8b27d77a1c02ffb27f4d38fa3039418b3acc48b7aac447e336773f9e16cb5ba07b843ac48c3f04c6f47daafd16ac8e2ccf49d707ed9c6d8a332d076c956323a14e78c08a032da53104cb42437cf117c8fd0c9ab829d2ea7af98886b31b99", 0xac}, {&(0x7f0000000700)="4679754fb881850299c308cb6757327978b3a9d425276553334f1c29bd191066782c34903fa62e882f7db3cd2f3cd4ea9941215ad1e46b9ac68279af3d235c3e69ccecb62c899ef449ce29f0476fe48798abd0f9aa514d59da26f4bb4a8948ae0095e135455284dc0be0e9166f8964c27034e829b3f0db958179c866f81bda75", 0x80}], 0x2, &(0x7f0000000580)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000009040)=[{{0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000001d80)=""/198, 0xc6}, {&(0x7f0000001e80)=""/101, 0x65}], 0x2}}], 0x1, 0x0, 0x0) 2m37.122374522s ago: executing program 6 (id=1490): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="c787659a072519f6a2280ef8898972db9bdfc955f82d089b9c7cfe14e9e8ed5228169057268f701a11f775d7c4d36599b46931ca7b66c45140836f2023f710f433fce83f1d4d39816b462c7f79ce6cc864d1b3f30ebe2b022a6d70ea90989b48c8c589beeb78666d6116bd1d2565ac92dd2deee9b784bb70068e5d963739726b393f38a32d552103a8427db3045e8839a12cf0edf12103688bbae2ddce79ef907626d61b6907a0e976a3dfa54a403cc60c00a37f7cdd8090771ff8530af6041e922b22dbe4ad9abfc04e0ad422047572f05821acc8a58a5ebff372c49f956e3fbfde81cb79537d37ca8ff658cc5f49ef2a8cd3546b4a9dee1a3ee285e8bddb494e55528865e5db2a2be845e19d9e6e9cf641c348970ad47684cdee48013684b3ad431161ee61f2dae98151b1cfb980d82e23798a2cb89332f0ac026398bc2ad9fdd5bbc6fbe68379b897136d4beb56d420948fc3ef925bc1a38c5d25230057e50a2444f9440143c7634461592a02bca2bba08e161b37318cea5bf6c3b43fe8ab377706c34ef783f81ae7bda1f1b47e491290f2b005d386adb46dff2320cfa7dbf1ca860ddafd0835c88895142ae98c55cb8fa6a5e7c21dfffb1cf95e9ab2acae2e8ae4a77c305f832304836290e10a699aab408dd05b63f7426c62251a1dc91593587be00c6e9085ceb1e563167ce6886075114ba92203903801bfb993cfa3935faec79c072b380c03a9069dbecb94b0ca5c6f4873e70bfa3009c7d6888ad531a69b333512a7c310ffdf53958cf86215dda23e89a65bfbeffcad8af787523ff990cdd02c8418147345bf11f7d3bb0577ae52afa1fbeb3ef49bd9001f6bda131d5c852f96e80989fdeab285e7af96dcf3c4d4793d274d9de04462594a421854e4b94bf7b5a68c5243836033ba9719d89c14684281291349c37c8a07e09901a8b246facf0ffd3e54f2f3e1ed79f28d970caca4be94cc05ff33a2397226adc531541a544d911d4e307f16b8391ec3464489db1c749c2c37a16611819aba9c024c43a8d24e6de2f15f0b39c0206684a3566a4283466c0110d61b3fb08eb4dd060d5cae37917b52490c7a3317a60af9d095b094022d447987bbaf2bfcfd1193c3e926dbed3754f50da7cb493adeeadafefdc689c747fbdb9c05820371a3f22afa3722f35f6db8dd2492c57ff2065757d1416a8564223c7622072eb12744f9b5af0453cd01da1586d71669dce1ba9ebed977095f20cec6a1bd800dcbd9fa861d33498936d636689e1928866196132904c2f1820733d5246d39be43ef86c4cb77c1f2d572d02f3d67ad8d015a8ff753ccefd6c946d5bebfa15900f87f500610794a72a230f19e039610cd637804929c286967edf5a96b69c94fda1bdb0c7cee5dacf27c01e1dfc293b02fbc4dcf238c6f1a4b5fd49a825441699e147839e341362b7e4735c891206909459ea3d5c4b89d695bd8eb55dc793d704807962d7540bca57fc43b79aaa975d80adeb3af5f8df29e2d84d21c7b08b05805e938ab60f907a414901f05a754696b22d433e9d5b96f1183979805aa16dbe0b4cac73eac9926fb65a0184d002967ae2e0bd8b8c503c4495fcfb03c4a4dfd91d14773a4b74329940a1ea59256e16e64ce80ed1e6e867f8049272b7560ddc399092433ec8d9b7b44bc8150d85f5a3d81ad0402007d98867c38a12822712b29a5a228da5bae632edf0d324f766ca7c92b57ebaa0437b6a7563d3676aa2ec55033f011c5d14fd4b57d4d2138ed5e11f61c925e7b0ec71307364906e5436309d6dd73ac4655afbc8e17cd9159a4a98092955c91f565b2d6cece372aecf45d5e26693de8d815fc727ecfbe752d39e6fac76eef5fbfd04b3987002f5ae0af15d7e1163f1c604e69fb903ee1d656218a5ef90f633fa95812e49d5e0f56146572a96540866284c29db2c07c6d32ce2980", 0x563}], 0x1}}], 0x2, 0x6004c0c0) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) 2m36.829199979s ago: executing program 34 (id=1490): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001380)="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", 0x563}], 0x1}}], 0x2, 0x6004c0c0) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) 2m9.622304342s ago: executing program 5 (id=1630): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f0000000300)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xc, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2m9.031698191s ago: executing program 5 (id=1637): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x42800) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000040)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) syz_usb_connect(0x0, 0x62, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b0102030109025000010000000009041f0000ff0100000a24010400050201020724070500000508240805040004960400000001030200010006000609240305050306058109240306010104050507240405"], 0x0) 2m7.481195194s ago: executing program 5 (id=1645): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0xfffffffd, 0x80000801}, 0x8) bind$bt_sco(r1, &(0x7f0000000400), 0x8) listen(r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m7.301448404s ago: executing program 5 (id=1648): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0/file0/file0\x00', 0x0, 0x18e5811, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x84000, 0x0) 2m7.118842852s ago: executing program 5 (id=1650): r0 = socket(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600000060600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42e32a097dbd4be5ffca88faca"], 0xdd12}, {&(0x7f0000000440)=ANY=[], 0x10}], 0x2}, 0x20040051) 2m6.45033645s ago: executing program 5 (id=1654): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.188040957s ago: executing program 35 (id=1654): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0}, &(0x7f0000000400), &(0x7f0000000600)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m37.987147294s ago: executing program 1 (id=1788): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_on}]}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0x2020) 1m37.87732476s ago: executing program 1 (id=1789): mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f0000002080)={0x2e3a, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000002200)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000021c0)='./file1/file3\x00', 0x2) 1m37.630976611s ago: executing program 1 (id=1790): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[], 0x50}}, 0x0) 1m37.328765703s ago: executing program 1 (id=1791): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 1m37.215062012s ago: executing program 1 (id=1792): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0) 1m36.719609599s ago: executing program 1 (id=1793): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0x7, 0x4, 0x2}]}, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m36.341213596s ago: executing program 36 (id=1793): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x12000021) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000f00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x4, 0x0, 0x0, 0x7fff, 0x3, 0x3e, 0xffffffec, 0x294, 0x40, 0x0, 0x0, 0x0, 0x38, 0x1, 0x0, 0x2}, [{0x3, 0xf97, 0x4, 0xd, 0x1c8, 0x7, 0x4, 0x2}]}, 0x78) close(r1) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 1m35.29936101s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 1m33.52459169s ago: executing program 7 (id=1589): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 1m12.943050001s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 1m11.737008994s ago: executing program 7 (id=1589): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 56.616357615s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 55.92936334s ago: executing program 7 (id=1589): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 39.745919267s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 38.664839856s ago: executing program 7 (id=1589): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 28.114141756s ago: executing program 8 (id=2144): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 26.945493538s ago: executing program 8 (id=2152): openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x0) dup(r0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 26.017902053s ago: executing program 8 (id=2157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}}, 0x14}}, 0x4000800) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SIGNAL_MASK(r3, 0x4004ae8b, &(0x7f0000000080)={0x8}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 25.817641775s ago: executing program 8 (id=2158): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) lseek(r1, 0x4, 0x0) getdents(r1, 0x0, 0x58) 24.645503763s ago: executing program 8 (id=2163): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 24.515515882s ago: executing program 8 (id=2164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r2, 0xe85, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) 19.471577081s ago: executing program 7 (id=1589): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 18.887747057s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 9.416682624s ago: executing program 37 (id=2164): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000480)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1, 0x0, 0x0, 0x0, 0x2001, 0x1, {0x1}}) io_uring_enter(r2, 0xe85, 0x0, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2140, 0x0) 8.63883447s ago: executing program 7 (id=1589): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @loopback={0x0, 0x460c6}, 0x7800, 0x0, 0x1}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x4}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000000000008302"]) 6.905861701s ago: executing program 3 (id=914): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010102}, 0x10) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2}, 0x8) 2.694208747s ago: executing program 0 (id=2222): mount$bind(&(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000080), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.639817311s ago: executing program 9 (id=2223): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f00000000c0)=0xf41, 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 2.54999103s ago: executing program 0 (id=2224): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}, 0x45c) r1 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 2.433771513s ago: executing program 9 (id=2225): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000300)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x20000000, 0x26b}, &(0x7f0000000040)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r3, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r1, 0x6ed2, 0x8000dae5, 0x0, 0x0, 0x0) 2.269862115s ago: executing program 0 (id=2226): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x0) socket$caif_seqpacket(0x25, 0x5, 0x0) unshare(0x22020600) pselect6(0x40, &(0x7f0000000080), &(0x7f00000000c0)={0x7a}, 0x0, 0x0, 0x0) 2.220959122s ago: executing program 9 (id=2227): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0x10, 0x3, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x5) 1.298711085s ago: executing program 0 (id=2228): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000240)={0x1, 0x0, 0x0, 0x10001, 0xffffffffffffffff, 0xfffffffffffff748, 0x100000000080, 0x9, 0x0, 0x2c, 0x1, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r2, 0xc0984124, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 1.145117284s ago: executing program 9 (id=2229): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000002c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 1.022629647s ago: executing program 9 (id=2230): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9905}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x8000) sendto$packet(r0, &(0x7f0000000000)='1', 0x26, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) 736.600193ms ago: executing program 9 (id=2231): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 399.6081ms ago: executing program 0 (id=2232): syz_open_dev$dmmidi(&(0x7f0000000c00), 0x2, 0x80) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) io_uring_setup(0x7bda, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 0 (id=2233): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000cc0)={r2, 0xe0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000013c0)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) kernel console output (not intermixed with test programs): eating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.741784][ T9713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.777629][ T9713] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.805918][ T9] usb 9-1: Firmware version (0.0) predates our first public release. [ 327.825382][ T9] usb 9-1: Please update to version 0.2 or newer [ 327.840394][ T9] usb 9-1: atusb_probe: initialization failed, error = -19 [ 327.886535][ T9] usb 9-1: USB disconnect, device number 2 [ 328.012954][ T9713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.032872][ T9713] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.106032][ T9703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.113917][ T9703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.194776][ T9713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 328.205537][ T9713] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.259424][ T9716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.295540][ T9716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.371014][ T9711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.416841][ T9711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.604894][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.617684][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 328.631419][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 328.646817][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 328.672171][ T5828] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 328.682011][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 328.856588][ T9713] bridge_slave_1: left allmulticast mode [ 328.862315][ T9713] bridge_slave_1: left promiscuous mode [ 328.884989][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.924114][ T9713] bridge_slave_0: left allmulticast mode [ 328.944539][ T9713] bridge_slave_0: left promiscuous mode [ 328.950341][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.022872][ T9713] tipc: Resetting bearer [ 329.482130][ T9713] tipc: Disabling bearer [ 329.857659][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.880092][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.901427][ T9713] bond0 (unregistering): Released all slaves [ 330.054582][ T9713] tipc: Left network mode [ 330.796000][ T5831] Bluetooth: hci1: command tx timeout [ 331.173728][T11727] loop8: detected capacity change from 0 to 7 [ 331.191244][T11727] Dev loop8: unable to read RDB block 7 [ 331.205635][T11727] loop8: unable to read partition table [ 331.211642][T11727] loop8: partition table beyond EOD, truncated [ 331.254577][T11727] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 331.254577][T11727] ) failed (rc=-5) [ 331.277045][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.288034][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.296045][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.307565][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.316167][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 331.322137][T11707] chnl_net:caif_netlink_parms(): no params data found [ 331.337817][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 331.345687][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.356618][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 331.363683][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 331.371514][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.379902][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 331.389001][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 331.861776][ T9713] hsr_slave_0: left promiscuous mode [ 331.872916][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.890612][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.935482][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.943642][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.036137][ T9713] veth1_macvtap: left promiscuous mode [ 332.051260][ T9713] veth0_macvtap: left promiscuous mode [ 332.060695][ T9713] veth1_vlan: left promiscuous mode [ 332.066256][ T9713] veth0_vlan: left promiscuous mode [ 332.719634][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 332.777877][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 332.874458][ T54] Bluetooth: hci1: command tx timeout [ 333.410594][ T5831] Bluetooth: hci5: sending frame failed (-49) [ 333.418921][ T54] Bluetooth: hci5: Entering manufacturer mode failed (-49) [ 333.434724][ T5831] Bluetooth: hci4: command tx timeout [ 333.554445][ T54] Bluetooth: hci2: command tx timeout [ 334.046760][T11774] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1817'. [ 334.316371][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1819'. [ 334.332518][T11769] syzkaller1: entered promiscuous mode [ 334.338456][T11769] syzkaller1: entered allmulticast mode [ 334.404002][T11707] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.419229][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.427647][T11707] bridge_slave_0: entered allmulticast mode [ 334.439334][T11707] bridge_slave_0: entered promiscuous mode [ 334.447273][T11780] bridge_slave_1: left allmulticast mode [ 334.453055][T11780] bridge_slave_1: left promiscuous mode [ 334.463576][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.480556][T11780] bridge_slave_0: left allmulticast mode [ 334.486472][T11780] bridge_slave_0: left promiscuous mode [ 334.492169][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.623486][T11707] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.631834][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.639284][T11707] bridge_slave_1: entered allmulticast mode [ 334.646649][T11707] bridge_slave_1: entered promiscuous mode [ 334.801553][T11707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.836900][T11707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.954667][ T54] Bluetooth: hci1: command tx timeout [ 335.078358][T11707] team0: Port device team_slave_0 added [ 335.137352][T11707] team0: Port device team_slave_1 added [ 335.252000][T11723] chnl_net:caif_netlink_parms(): no params data found [ 335.289265][T11707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.299046][T11707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.328582][T11707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.342009][T11707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.350216][T11707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.379535][T11707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.421390][T11728] chnl_net:caif_netlink_parms(): no params data found [ 335.514581][ T54] Bluetooth: hci4: command tx timeout [ 335.581424][T11707] hsr_slave_0: entered promiscuous mode [ 335.591805][T11707] hsr_slave_1: entered promiscuous mode [ 335.604539][ T54] Bluetooth: hci2: command tx timeout [ 335.758934][ T9713] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.877460][T11723] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.894124][T11723] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.902668][T11723] bridge_slave_0: entered allmulticast mode [ 335.919894][T11723] bridge_slave_0: entered promiscuous mode [ 335.999252][ T9713] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.024001][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.040962][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.067610][T11728] bridge_slave_0: entered allmulticast mode [ 336.085861][T11728] bridge_slave_0: entered promiscuous mode [ 336.097125][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.123849][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.168679][T11728] bridge_slave_1: entered allmulticast mode [ 336.196893][T11728] bridge_slave_1: entered promiscuous mode [ 336.232558][T11723] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.245574][T11723] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.257643][T11723] bridge_slave_1: entered allmulticast mode [ 336.269052][T11723] bridge_slave_1: entered promiscuous mode [ 336.373360][ T9713] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.602420][ T9713] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.644095][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.673123][T11723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.685715][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.708115][T11723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 336.845841][T11728] team0: Port device team_slave_0 added [ 336.853306][T11728] team0: Port device team_slave_1 added [ 336.882273][T11723] team0: Port device team_slave_0 added [ 336.928028][T11723] team0: Port device team_slave_1 added [ 337.034881][ T54] Bluetooth: hci1: command tx timeout [ 337.112819][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.132237][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.190868][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.216354][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.223355][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.263073][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.280794][T11723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.294838][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.321572][T11723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.343550][T11723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.352328][T11723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.399071][T11723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.594589][ T54] Bluetooth: hci4: command tx timeout [ 337.626932][T11728] hsr_slave_0: entered promiscuous mode [ 337.659939][T11728] hsr_slave_1: entered promiscuous mode [ 337.667614][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.676426][ T54] Bluetooth: hci2: command tx timeout [ 337.699549][T11728] Cannot create hsr debugfs directory [ 337.712807][T11852] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1840'. [ 337.767002][T11723] hsr_slave_0: entered promiscuous mode [ 337.777618][T11723] hsr_slave_1: entered promiscuous mode [ 337.784661][T11723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.792546][T11723] Cannot create hsr debugfs directory [ 337.798802][T11852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.807180][T11852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.821993][T11852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.830201][T11852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.032163][ T9713] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.071001][T11707] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 338.143751][T11707] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 338.179133][T11707] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 338.266600][ T9713] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.343763][T11707] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 338.476444][ T9713] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.646803][ T9713] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.079545][ T9713] bridge_slave_1: left allmulticast mode [ 339.097215][ T9713] bridge_slave_1: left promiscuous mode [ 339.103033][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.135887][ T9713] bridge_slave_0: left allmulticast mode [ 339.141736][ T9713] bridge_slave_0: left promiscuous mode [ 339.161320][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.183743][ T9713] bridge_slave_1: left allmulticast mode [ 339.204516][ T9713] bridge_slave_1: left promiscuous mode [ 339.215814][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.250289][ T9713] bridge_slave_0: left allmulticast mode [ 339.263249][ T9713] bridge_slave_0: left promiscuous mode [ 339.293345][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.675721][ T54] Bluetooth: hci4: command tx timeout [ 339.754549][ T54] Bluetooth: hci2: command tx timeout [ 341.063603][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.086977][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.110487][ T9713] bond0 (unregistering): Released all slaves [ 341.316123][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.327843][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.338247][ T9713] bond0 (unregistering): Released all slaves [ 341.799803][T11707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.930407][T11707] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.038982][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.046180][ T9703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.060190][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.067390][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.365682][ T9713] hsr_slave_0: left promiscuous mode [ 342.372367][ T9713] hsr_slave_1: left promiscuous mode [ 342.382699][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.404517][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.416623][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.424098][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.439403][ T9713] hsr_slave_0: left promiscuous mode [ 342.447148][ T9713] hsr_slave_1: left promiscuous mode [ 342.461006][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.471394][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.496136][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 342.503636][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 342.571858][ T9713] veth1_macvtap: left promiscuous mode [ 342.577598][ T9713] veth0_macvtap: left promiscuous mode [ 342.583272][ T9713] veth1_vlan: left promiscuous mode [ 342.589427][ T9713] veth0_vlan: left promiscuous mode [ 342.613040][ T9713] veth1_macvtap: left promiscuous mode [ 342.621379][ T9713] veth0_macvtap: left promiscuous mode [ 342.633285][ T9713] veth1_vlan: left promiscuous mode [ 342.641534][ T9713] veth0_vlan: left promiscuous mode [ 343.926017][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 343.996876][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 345.470923][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 345.535853][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 346.346457][T11723] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 346.382158][T11723] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 346.447072][T11723] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 346.668886][T11723] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 347.312803][T11707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.358727][T11723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.424769][T11723] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.492461][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.499681][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.608159][T11723] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.618763][T11723] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.671828][ T9711] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.679020][ T9711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.755889][ T5911] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 347.811397][T11728] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 347.851143][T11728] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 347.887748][T11728] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 347.914955][ T5911] usb 9-1: Using ep0 maxpacket: 8 [ 347.942007][T11728] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 347.942726][ T5911] usb 9-1: config 11 has an invalid interface number: 95 but max is 0 [ 347.985004][ T5911] usb 9-1: config 11 has no interface number 0 [ 348.010606][ T5911] usb 9-1: config 11 interface 95 has no altsetting 0 [ 348.034616][ T120] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 348.042421][ T5911] usb 9-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 348.073791][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.103912][ T5911] usb 9-1: Product: syz [ 348.110482][ T5911] usb 9-1: Manufacturer: syz [ 348.128606][ T5911] usb 9-1: SerialNumber: syz [ 348.181830][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.205782][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.214967][ T120] usb 1-1: Using ep0 maxpacket: 8 [ 348.234232][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.241474][ T1895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.256686][ T120] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 348.293379][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.299671][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.302409][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.318387][ T120] usb 1-1: config 0 descriptor?? [ 348.365955][T11723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.386497][T11707] veth0_vlan: entered promiscuous mode [ 348.422839][T11707] veth1_vlan: entered promiscuous mode [ 348.463742][T11728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.465178][ T5911] usb 9-1: USB disconnect, device number 3 [ 348.606848][T11707] veth0_macvtap: entered promiscuous mode [ 348.623901][T11707] veth1_macvtap: entered promiscuous mode [ 348.687481][T11723] veth0_vlan: entered promiscuous mode [ 348.704044][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.723341][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.737450][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.749190][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.760571][T11707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.785645][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.832423][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.853409][T11707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.864525][T11707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.877233][T11707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.887201][T11723] veth1_vlan: entered promiscuous mode [ 348.909257][T11707] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.934591][T11707] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.953484][T11707] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.975660][T11707] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.074011][T11723] veth0_macvtap: entered promiscuous mode [ 349.142398][T11723] veth1_macvtap: entered promiscuous mode [ 349.208995][T11728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 349.272614][ T9713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.296434][ T9713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.306507][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.324358][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.344371][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.365212][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.383288][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 349.393950][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.413173][T11723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.484013][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.532224][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.561776][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.584450][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.604384][T11723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 349.623471][T11723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 349.641234][T11723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.673286][ T9716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.693215][ T9716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.729514][T11723] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.738427][T11723] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.747479][T11723] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.756660][T11723] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.758615][ T120] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 349.805084][ T120] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 349.859328][ T120] asix 1-1:0.0: probe with driver asix failed with error -71 [ 349.882854][ T120] usb 1-1: USB disconnect, device number 29 [ 350.009890][ T9713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.029416][ T9713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.081426][T11728] veth0_vlan: entered promiscuous mode [ 350.150386][T11728] veth1_vlan: entered promiscuous mode [ 350.179846][ T9711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.218517][ T9711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.270280][T12078] Falling back ldisc for ptm0. [ 350.425963][T11728] veth0_macvtap: entered promiscuous mode [ 350.452635][T11728] veth1_macvtap: entered promiscuous mode [ 350.980509][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.992220][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.016733][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.064432][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.095077][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.106287][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.118782][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.129610][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.168709][T11728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.315813][ T9716] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.380387][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.437840][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.474637][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.494344][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.524320][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.544302][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.555257][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.569314][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.580946][T11728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.603215][T11728] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.614970][T11728] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.624077][T11728] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.634543][T11728] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.663362][ T9716] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.740996][ T9716] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.811861][ T1895] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.822402][ T1895] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.858011][ T1895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.868150][ T1895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.022801][ T9716] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.501132][ T9716] bridge_slave_1: left allmulticast mode [ 352.507361][ T9716] bridge_slave_1: left promiscuous mode [ 352.518099][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.598562][ T9716] bridge_slave_0: left allmulticast mode [ 352.617391][ T9716] bridge_slave_0: left promiscuous mode [ 352.623215][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.925304][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 352.937907][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 352.947239][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 352.964062][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 352.976242][ T5831] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 352.983671][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 353.144995][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 353.145019][ T29] audit: type=1326 audit(2000000138.010:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12129 comm="syz.9.1902" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa1be985d19 code=0x0 [ 353.189494][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 353.215056][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 353.245061][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 353.257741][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 353.267588][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 353.278414][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 353.735428][ T9716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.749424][ T9716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.765120][ T9716] bond0 (unregistering): Released all slaves [ 354.288015][T12160] vivid-000: disconnect [ 354.306969][T12156] vivid-000: reconnect [ 354.687490][T12127] chnl_net:caif_netlink_parms(): no params data found [ 354.892093][T12137] chnl_net:caif_netlink_parms(): no params data found [ 354.967595][ T9716] hsr_slave_0: left promiscuous mode [ 354.973934][ T9716] hsr_slave_1: left promiscuous mode [ 354.982134][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.990189][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.000287][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.008251][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.038312][ T9716] veth1_macvtap: left promiscuous mode [ 355.044116][ T9716] veth0_macvtap: left promiscuous mode [ 355.050049][ T9716] veth1_vlan: left promiscuous mode [ 355.055751][ T9716] veth0_vlan: left promiscuous mode [ 355.124435][ T5839] Bluetooth: hci2: command tx timeout [ 355.354625][ T5839] Bluetooth: hci4: command tx timeout [ 355.773345][ T9716] team0 (unregistering): Port device team_slave_1 removed [ 355.828213][ T9716] team0 (unregistering): Port device team_slave_0 removed [ 356.447642][T12182] netlink: 'syz.0.1916': attribute type 29 has an invalid length. [ 356.734419][T12127] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.741556][T12127] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.774132][T12127] bridge_slave_0: entered allmulticast mode [ 356.786202][T12127] bridge_slave_0: entered promiscuous mode [ 356.855679][T12127] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.862844][T12127] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.884574][T12127] bridge_slave_1: entered allmulticast mode [ 356.891907][T12127] bridge_slave_1: entered promiscuous mode [ 356.928073][T12137] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.956251][T12137] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.963549][T12137] bridge_slave_0: entered allmulticast mode [ 356.977079][T12137] bridge_slave_0: entered promiscuous mode [ 356.998134][T12137] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.009210][T12137] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.016630][T12137] bridge_slave_1: entered allmulticast mode [ 357.023806][T12137] bridge_slave_1: entered promiscuous mode [ 357.113219][T12127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.131680][T12127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.194746][ T5839] Bluetooth: hci2: command tx timeout [ 357.228219][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.291282][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.330172][T12127] team0: Port device team_slave_0 added [ 357.411249][T12127] team0: Port device team_slave_1 added [ 357.434443][ T5839] Bluetooth: hci4: command tx timeout [ 357.471718][T12137] team0: Port device team_slave_0 added [ 357.522421][T12127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.568423][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.653780][T12127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.683488][T12137] team0: Port device team_slave_1 added [ 357.730390][T12127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.737805][T12127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.804666][T12127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.953026][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.960501][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.986701][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.001728][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.068659][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.084357][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.110954][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.362538][ T9716] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.461333][T12127] hsr_slave_0: entered promiscuous mode [ 358.489698][T12127] hsr_slave_1: entered promiscuous mode [ 358.514839][T12127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.527064][T12127] Cannot create hsr debugfs directory [ 358.595456][ T9716] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.612905][T12137] hsr_slave_0: entered promiscuous mode [ 358.620699][T12137] hsr_slave_1: entered promiscuous mode [ 358.635355][T12137] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.651520][T12137] Cannot create hsr debugfs directory [ 358.740811][ T9716] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.904236][ T9716] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.292246][ T5839] Bluetooth: hci2: command tx timeout [ 359.458896][ T29] audit: type=1800 audit(2000000144.450:175): pid=12262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1946" name="file2" dev="overlay" ino=2759 res=0 errno=0 [ 359.516574][ T5839] Bluetooth: hci4: command tx timeout [ 359.547390][ T9716] bridge_slave_1: left allmulticast mode [ 359.553139][ T9716] bridge_slave_1: left promiscuous mode [ 359.572720][ T9716] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.632760][ T9716] bridge_slave_0: left allmulticast mode [ 359.651212][ T9716] bridge_slave_0: left promiscuous mode [ 359.672626][ T9716] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.301826][T12284] Process accounting resumed [ 360.600126][ T9716] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 360.613427][ T9716] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 360.632093][ T9716] bond0 (unregistering): Released all slaves [ 361.069084][ T9716] hsr_slave_0: left promiscuous mode [ 361.098096][ T9716] hsr_slave_1: left promiscuous mode [ 361.104207][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 361.112334][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.129887][ T9716] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 361.138112][ T9716] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.174300][ T9716] veth1_macvtap: left promiscuous mode [ 361.193006][ T9716] veth0_macvtap: left promiscuous mode [ 361.209055][ T9716] veth1_vlan: left promiscuous mode [ 361.225335][ T9716] veth0_vlan: left promiscuous mode [ 361.324916][T12299] netlink: 'syz.8.1960': attribute type 10 has an invalid length. [ 361.354433][ T5839] Bluetooth: hci2: command tx timeout [ 361.614432][ T5839] Bluetooth: hci4: command tx timeout [ 361.655866][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888023382400: rx timeout, send abort [ 361.667298][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888023382400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 362.014386][ T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 362.164484][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 362.201584][ T9] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 362.210115][ T9] usb 1-1: config 0 has no interface number 0 [ 362.216413][ T9] usb 1-1: config 0 interface 132 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 362.229616][ T9] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 362.235915][ T9716] team0 (unregistering): Port device team_slave_1 removed [ 362.239731][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.256383][ T9] usb 1-1: Product: syz [ 362.261257][ T9] usb 1-1: Manufacturer: syz [ 362.266380][ T9] usb 1-1: SerialNumber: syz [ 362.290217][ T9] usb 1-1: config 0 descriptor?? [ 362.296638][T12306] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.309661][ T9] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 362.327480][ T9] em28xx 1-1:0.132: Video interface 132 found: bulk [ 362.379979][ T9716] team0 (unregistering): Port device team_slave_0 removed [ 362.730378][ T9] em28xx 1-1:0.132: chip ID is em28174 [ 363.221125][T12299] bond0: (slave netdevsim0): no link monitoring support [ 363.229596][T12299] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 363.250308][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.271468][T12299] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 363.474621][T12314] input: syz0 as /devices/virtual/input/input40 [ 363.558147][ T9] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 363.567970][ T9] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 363.814879][ T9] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 363.823930][ T9] em28xx 1-1:0.132: analog set to bulk mode. [ 363.839039][ T5911] em28xx 1-1:0.132: Registering V4L2 extension [ 363.858863][ T9] usb 1-1: USB disconnect, device number 30 [ 363.889680][ T9] em28xx 1-1:0.132: Disconnecting em28xx [ 363.913083][T12127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 363.935092][T12127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 364.010956][T12127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 364.043502][T12127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 364.122997][ T5911] usb 1-1: Decoder not found [ 364.128127][ T5911] em28xx 1-1:0.132: failed to create media graph [ 364.134816][ T5911] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 364.148258][T12137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 364.158593][ T5911] em28xx 1-1:0.132: Remote control support is not available for this card. [ 364.171522][ T9] em28xx 1-1:0.132: Closing input extension [ 364.197299][ T9] em28xx 1-1:0.132: Freeing device [ 364.212435][T12137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 364.255407][T12137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 364.327128][T12137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 364.526932][T12127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.579919][T12127] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.601099][ T9716] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.608796][ T9716] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.630057][ T9716] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.637265][ T9716] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.658905][T12137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.731765][T12137] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.751301][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.758466][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 364.783316][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.790581][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.934491][ T120] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 365.025823][T12127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.084610][ T120] usb 9-1: Using ep0 maxpacket: 8 [ 365.098812][T12127] veth0_vlan: entered promiscuous mode [ 365.106912][ T120] usb 9-1: config 61 has too many interfaces: 213, using maximum allowed: 32 [ 365.113753][T12127] veth1_vlan: entered promiscuous mode [ 365.131095][ T120] usb 9-1: config 61 has an invalid descriptor of length 0, skipping remainder of the config [ 365.139808][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.148350][ T120] usb 9-1: config 61 has 0 interfaces, different from the descriptor's value: 213 [ 365.171575][T12127] veth0_macvtap: entered promiscuous mode [ 365.190443][T12127] veth1_macvtap: entered promiscuous mode [ 365.203899][ T120] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 365.231922][ T120] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.233869][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.256795][ T120] usb 9-1: Product: syz [ 365.261079][ T120] usb 9-1: Manufacturer: syz [ 365.275937][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.286543][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.299199][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.309576][ T120] usb 9-1: SerialNumber: syz [ 365.309959][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.371046][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.405798][T12127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 365.453862][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.477420][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.497842][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.524335][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.554375][T12127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 365.575290][T12127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.591518][T12127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 365.617906][T12127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.628162][T12127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.640000][T12127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.690147][T12127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 365.802680][ T120] usb 9-1: USB disconnect, device number 4 [ 365.912015][T12137] veth0_vlan: entered promiscuous mode [ 365.986262][ T9711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.002659][ T9711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.076201][T12137] veth1_vlan: entered promiscuous mode [ 366.116179][ T9703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.125409][ T9703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 366.168165][T12137] veth0_macvtap: entered promiscuous mode [ 366.200052][T12137] veth1_macvtap: entered promiscuous mode [ 366.250390][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.276345][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.292095][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.304105][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.318161][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.330124][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.340728][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.352691][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.364942][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.438726][ T9] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 366.460979][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.494469][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.518468][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.539492][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.565066][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.584305][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.594208][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.609842][ T9] usb 10-1: config 0 has no interfaces? [ 366.621487][ T9] usb 10-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 366.624562][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.641648][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.655765][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.675950][ T9] usb 10-1: config 0 descriptor?? [ 366.717471][T12137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.735134][T12137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.744039][T12137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.753728][T12137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.902779][ T9] usb 10-1: USB disconnect, device number 2 [ 366.985227][ T9713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 366.993143][ T9713] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.034033][ T9713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.043270][ T9713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.684027][ T9703] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.346121][ T9703] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.518234][ T9703] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.645038][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 368.668708][ T9703] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.675854][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 368.690290][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 368.700672][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 368.718688][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 368.744670][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 369.116454][ T9703] bridge_slave_1: left allmulticast mode [ 369.123432][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 369.144805][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 369.157020][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 369.170943][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 369.180101][ T5839] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 369.180784][ T9703] bridge_slave_1: left promiscuous mode [ 369.193504][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 369.212855][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.228759][ T9703] bridge_slave_0: left allmulticast mode [ 369.235046][ T9703] bridge_slave_0: left promiscuous mode [ 369.240933][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.717615][ T9703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.734037][ T9703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.762584][ T9703] bond0 (unregistering): Released all slaves [ 369.809802][T12393] chnl_net:caif_netlink_parms(): no params data found [ 370.552853][T12393] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.573223][T12393] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.581511][T12393] bridge_slave_0: entered allmulticast mode [ 370.595624][T12393] bridge_slave_0: entered promiscuous mode [ 370.616047][T12393] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.626281][T12393] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.633593][T12393] bridge_slave_1: entered allmulticast mode [ 370.655562][T12393] bridge_slave_1: entered promiscuous mode [ 370.795116][ T54] Bluetooth: hci2: command tx timeout [ 370.796509][ T9703] hsr_slave_0: left promiscuous mode [ 370.831353][ T9703] hsr_slave_1: left promiscuous mode [ 370.841754][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.861052][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.885949][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.913656][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.988238][ T9703] veth1_macvtap: left promiscuous mode [ 370.993854][ T9703] veth0_macvtap: left promiscuous mode [ 371.014587][ T9703] veth1_vlan: left promiscuous mode [ 371.028003][ T9703] veth0_vlan: left promiscuous mode [ 371.274813][ T54] Bluetooth: hci4: command tx timeout [ 372.578834][ T9703] team0 (unregistering): Port device team_slave_1 removed [ 372.692150][ T9703] team0 (unregistering): Port device team_slave_0 removed [ 372.874805][ T54] Bluetooth: hci2: command tx timeout [ 373.363706][ T54] Bluetooth: hci4: command tx timeout [ 373.629843][T12393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.690940][T12393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.901793][T12393] team0: Port device team_slave_0 added [ 373.989775][T12393] team0: Port device team_slave_1 added [ 374.059739][T12393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.077616][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.105160][T12393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.118373][T12393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.162440][T12393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.242601][T12393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.441819][T12404] chnl_net:caif_netlink_parms(): no params data found [ 374.506151][T12393] hsr_slave_0: entered promiscuous mode [ 374.585562][T12393] hsr_slave_1: entered promiscuous mode [ 374.596045][T12393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.626711][T12393] Cannot create hsr debugfs directory [ 374.935156][T12404] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.942499][T12404] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.951984][T12404] bridge_slave_0: entered allmulticast mode [ 374.960443][T12404] bridge_slave_0: entered promiscuous mode [ 374.964578][ T54] Bluetooth: hci2: command tx timeout [ 374.977719][T12404] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.986175][T12404] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.993670][T12404] bridge_slave_1: entered allmulticast mode [ 375.004997][T12404] bridge_slave_1: entered promiscuous mode [ 375.230086][ T9703] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.322741][T12404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.373001][T12404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.434912][ T54] Bluetooth: hci4: command tx timeout [ 375.491448][ T9703] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.651224][T12404] team0: Port device team_slave_0 added [ 375.765830][ T9703] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.878776][T12404] team0: Port device team_slave_1 added [ 376.119337][ T9703] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.325237][T12404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.348731][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.454563][T12404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.486422][T12404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.500370][T12404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.546463][T12506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 376.577810][T12404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.618483][T12508] netlink: 'syz.8.2028': attribute type 1 has an invalid length. [ 376.642373][T12508] netlink: 'syz.8.2028': attribute type 4 has an invalid length. [ 376.656413][T12508] netlink: 15334 bytes leftover after parsing attributes in process `syz.8.2028'. [ 376.830891][T12404] hsr_slave_0: entered promiscuous mode [ 376.865450][T12404] hsr_slave_1: entered promiscuous mode [ 376.896303][T12404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.916100][T12404] Cannot create hsr debugfs directory [ 376.978921][T12511] block device autoloading is deprecated and will be removed. [ 377.034535][ T54] Bluetooth: hci2: command tx timeout [ 377.106639][ T9703] bridge_slave_1: left allmulticast mode [ 377.113036][T12516] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 377.142513][ T9703] bridge_slave_1: left promiscuous mode [ 377.154614][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.185725][ T9703] bridge_slave_0: left allmulticast mode [ 377.191436][ T9703] bridge_slave_0: left promiscuous mode [ 377.226625][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.516013][ T54] Bluetooth: hci4: command tx timeout [ 377.950943][ T5911] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 378.104653][ T5911] usb 10-1: Using ep0 maxpacket: 16 [ 378.115086][ T5911] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 378.123440][ T5911] usb 10-1: config 0 has no interface number 0 [ 378.149172][ T5911] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 378.159239][ T5911] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.167935][ T5911] usb 10-1: Product: syz [ 378.184726][ T5911] usb 10-1: Manufacturer: syz [ 378.189482][ T5911] usb 10-1: SerialNumber: syz [ 378.225967][ T5911] usb 10-1: config 0 descriptor?? [ 378.238187][ T5911] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 378.248596][ T9703] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.267418][ T9703] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.293705][ T9703] bond0 (unregistering): Released all slaves [ 378.728163][T12393] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 378.758839][T12393] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 378.879271][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.008186][T12393] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 379.072982][T12393] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 379.178822][ T9703] hsr_slave_0: left promiscuous mode [ 379.187746][ T9703] hsr_slave_1: left promiscuous mode [ 379.207989][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.224679][T12567] input: syz0 as /devices/virtual/input/input42 [ 379.226574][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.245952][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.261593][ T9703] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.335550][ T9703] veth1_macvtap: left promiscuous mode [ 379.348096][ T9703] veth0_macvtap: left promiscuous mode [ 379.359742][ T9703] veth1_vlan: left promiscuous mode [ 379.370075][ T9703] veth0_vlan: left promiscuous mode [ 379.557477][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2053'. [ 379.580839][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2053'. [ 379.666543][ T5911] gspca_spca1528: reg_w err -71 [ 379.671757][ T5911] spca1528 10-1:0.1: probe with driver spca1528 failed with error -71 [ 379.712715][ T5911] usb 10-1: USB disconnect, device number 3 [ 380.149841][ T9703] team0 (unregistering): Port device team_slave_1 removed [ 380.228366][ T9703] team0 (unregistering): Port device team_slave_0 removed [ 381.443603][T12574] erspan0: entered promiscuous mode [ 381.460477][T12574] batadv_slave_1: entered promiscuous mode [ 381.469461][T12574] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 381.480776][T12574] Cannot create hsr debugfs directory [ 381.489025][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2053'. [ 381.498561][T12574] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2053'. [ 381.821154][T12404] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 381.849182][T12404] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 381.889168][T12404] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 381.919418][T12404] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 381.930176][ T5878] kernel write not supported for file /1380/attr/keycreate (pid: 5878 comm: kworker/0:5) [ 381.963090][T12393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.020766][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 382.034657][T12608] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2067'. [ 382.052516][T12393] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.108910][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.116151][ T1895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.159334][ T1895] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.166554][ T1895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.360183][T12404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.421853][T12404] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.468922][ T9703] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.476124][ T9703] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.533147][ T9703] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.540385][ T9703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.646673][T12404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 382.744737][ T5834] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 382.812131][T12393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.901162][T12393] veth0_vlan: entered promiscuous mode [ 382.914802][ T5834] usb 10-1: Using ep0 maxpacket: 32 [ 382.928564][ T5834] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.941757][T12393] veth1_vlan: entered promiscuous mode [ 382.961036][ T5834] usb 10-1: config 0 has no interfaces? [ 382.981533][ T5834] usb 10-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 383.003861][ T5834] usb 10-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 383.027679][T12393] veth0_macvtap: entered promiscuous mode [ 383.031331][ T5834] usb 10-1: Product: syz [ 383.039794][ T5834] usb 10-1: Manufacturer: syz [ 383.055365][ T5834] usb 10-1: config 0 descriptor?? [ 383.063442][T12393] veth1_macvtap: entered promiscuous mode [ 383.108569][T12404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.131497][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.143746][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.155543][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.166615][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.176777][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.188348][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.200101][T12393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.224609][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 383.233080][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.245855][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.270432][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.281641][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.291970][T12393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.302938][T12393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.315727][T12393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.336497][T12393] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.346601][T12393] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.357507][T12393] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.366503][T12393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.397585][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 383.426086][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 383.474072][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 383.486743][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.500828][ T9] usb 9-1: Product: syz [ 383.505467][ T9] usb 9-1: Manufacturer: syz [ 383.528387][ T9] usb 9-1: SerialNumber: syz [ 383.544125][ T9] usb 9-1: config 0 descriptor?? [ 383.556466][ T9] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 383.567808][ T9] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 383.617340][ T9711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.625714][ T9711] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.707304][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.732170][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.841936][T12404] veth0_vlan: entered promiscuous mode [ 383.923035][T12404] veth1_vlan: entered promiscuous mode [ 383.961199][T12404] veth0_macvtap: entered promiscuous mode [ 383.979852][T12404] veth1_macvtap: entered promiscuous mode [ 384.016533][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.027559][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.038906][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.049947][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.060243][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.072363][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.083916][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 384.097386][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.108749][T12404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.129223][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.140120][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.150290][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.171345][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.182868][ T9] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 384.184417][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.200160][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.211112][T12404] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.227277][T12404] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.239767][T12404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.250814][T12404] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.274452][ T120] usb 10-1: USB disconnect, device number 4 [ 384.303480][T12404] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.312826][T12404] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.322268][T12404] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.565694][ T9711] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.652834][ T9715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.661076][ T9715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.705851][ T9711] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.770223][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.786604][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.821822][ T9711] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.834850][ T9] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 384.843320][ T9] em28xx 9-1:0.0: board has no eeprom [ 384.955078][ T9] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 384.963003][ T9] em28xx 9-1:0.0: dvb set to bulk mode. [ 384.970665][ T5911] em28xx 9-1:0.0: Binding DVB extension [ 385.013948][ T9] usb 9-1: USB disconnect, device number 5 [ 385.031470][ T5911] em28xx 9-1:0.0: Registering input extension [ 385.039065][ T9] em28xx 9-1:0.0: Disconnecting em28xx [ 385.051856][ T9] em28xx 9-1:0.0: Closing input extension [ 385.075924][ T9] em28xx 9-1:0.0: Freeing device [ 385.242655][ T9711] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.538208][T12661] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2084'. [ 385.684621][ T9711] bridge_slave_1: left allmulticast mode [ 385.690605][ T9711] bridge_slave_1: left promiscuous mode [ 385.705265][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.751377][ T9711] bridge_slave_0: left allmulticast mode [ 385.764497][ T9711] bridge_slave_0: left promiscuous mode [ 385.770307][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.932787][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.956290][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 385.969517][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 385.997391][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.012813][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.025474][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 386.444494][ T120] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 386.474553][ T5911] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 386.496690][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 386.508589][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 386.533553][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 386.567932][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 386.590883][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 386.611510][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 386.634548][ T120] usb 10-1: Using ep0 maxpacket: 16 [ 386.651847][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 386.653358][ T120] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 386.675808][ T5911] usb 9-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 386.686490][ T120] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 386.697030][ T120] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 386.710416][ T120] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.715989][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.720134][ T120] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.737290][ T120] usb 10-1: Product: syz [ 386.741601][ T120] usb 10-1: Manufacturer: syz [ 386.746425][ T120] usb 10-1: SerialNumber: syz [ 386.772327][ T5911] usb 9-1: config 0 descriptor?? [ 386.792939][ T5911] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 386.935450][ T9711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.959047][ T9711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.995968][ T9711] bond0 (unregistering): Released all slaves [ 387.173505][ T120] usb 10-1: 2:1 : format type 0 is detected, processed as PCM [ 387.565961][ T9711] hsr_slave_0: left promiscuous mode [ 387.584878][ T9711] hsr_slave_1: left promiscuous mode [ 387.612542][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.624202][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.641422][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.653272][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.699314][ T9711] veth1_macvtap: left promiscuous mode [ 387.705415][ T9711] veth0_macvtap: left promiscuous mode [ 387.711659][ T9711] veth1_vlan: left promiscuous mode [ 387.717297][ T9711] veth0_vlan: left promiscuous mode [ 388.008279][ T120] usb 10-1: failed to read current rate; disabling the check [ 388.128674][T12692] ptrace attach of "./syz-executor exec"[5820] was attempted by "aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 388.162126][ T54] Bluetooth: hci2: command tx timeout [ 388.284388][ T5911] gspca_sonixj: i2c_w8 err -71 [ 388.304451][ T5911] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 388.325873][ T5911] usb 9-1: USB disconnect, device number 6 [ 388.363824][ T120] usb 10-1: USB disconnect, device number 5 [ 388.685479][ T5833] udevd[5833]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.719818][ T54] Bluetooth: hci4: command tx timeout [ 389.039700][T12705] fuse: root generation should be zero [ 389.101053][ T9711] team0 (unregistering): Port device team_slave_1 removed [ 389.357801][ T9711] team0 (unregistering): Port device team_slave_0 removed [ 389.762080][ T5911] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 389.940661][ T5911] usb 9-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 389.950076][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.970557][ T5911] usb 9-1: config 0 descriptor?? [ 390.080443][T12663] chnl_net:caif_netlink_parms(): no params data found [ 390.125689][T12723] netlink: 507 bytes leftover after parsing attributes in process `syz.0.2105'. [ 390.315115][ T54] Bluetooth: hci2: command tx timeout [ 390.360235][T12673] chnl_net:caif_netlink_parms(): no params data found [ 390.552127][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 390.629100][T12732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2108'. [ 390.660309][T12663] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.667858][T12663] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.675906][T12663] bridge_slave_0: entered allmulticast mode [ 390.683797][T12663] bridge_slave_0: entered promiscuous mode [ 390.726760][T12663] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.759153][T12663] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.780279][T12663] bridge_slave_1: entered allmulticast mode [ 390.788606][T12737] input: syz0 as /devices/virtual/input/input44 [ 390.796053][ T54] Bluetooth: hci4: command tx timeout [ 390.816191][T12663] bridge_slave_1: entered promiscuous mode [ 390.956883][T12663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.974098][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.987679][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.996309][T12673] bridge_slave_0: entered allmulticast mode [ 391.003968][T12673] bridge_slave_0: entered promiscuous mode [ 391.022037][T12663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.055153][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.070085][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.088614][T12673] bridge_slave_1: entered allmulticast mode [ 391.115743][T12673] bridge_slave_1: entered promiscuous mode [ 391.323216][ T9711] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.408033][T12663] team0: Port device team_slave_0 added [ 391.429383][T12663] team0: Port device team_slave_1 added [ 391.456394][ T5911] usb 9-1: Cannot set autoneg [ 391.465291][T12673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.478547][ T5911] MOSCHIP usb-ethernet driver 9-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 391.533073][ T5911] usb 9-1: USB disconnect, device number 7 [ 391.583523][ T9711] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.648808][T12673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.716087][T12663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.723120][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.769522][T12663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.825513][ T9711] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.878189][T12673] team0: Port device team_slave_0 added [ 391.892449][T12663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.901604][T12663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.932747][T12663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.989743][ T9711] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.036953][T12673] team0: Port device team_slave_1 added [ 392.169559][T12673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.183239][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.220207][T12673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.233855][T12673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.241675][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.290678][T12673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.359603][T12663] hsr_slave_0: entered promiscuous mode [ 392.381774][T12663] hsr_slave_1: entered promiscuous mode [ 392.391795][T12663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.396997][ T54] Bluetooth: hci2: command tx timeout [ 392.409694][T12663] Cannot create hsr debugfs directory [ 392.576350][T12673] hsr_slave_0: entered promiscuous mode [ 392.589931][T12673] hsr_slave_1: entered promiscuous mode [ 392.598019][T12673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.607174][T12673] Cannot create hsr debugfs directory [ 392.711262][ T9711] bridge_slave_1: left allmulticast mode [ 392.720857][ T9711] bridge_slave_1: left promiscuous mode [ 392.732405][ T9711] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.759648][ T9711] bridge_slave_0: left allmulticast mode [ 392.779844][ T9711] bridge_slave_0: left promiscuous mode [ 392.786898][ T9711] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.875233][ T54] Bluetooth: hci4: command tx timeout [ 393.002841][T12782] netlink: 'syz.8.2125': attribute type 10 has an invalid length. [ 393.616803][ T9711] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.632862][ T9711] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.643814][ T9711] bond0 (unregistering): Released all slaves [ 393.674194][T12782] bridge0: port 3(team0) entered disabled state [ 393.680838][T12782] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.688384][T12782] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.734765][T12782] bridge0: port 3(team0) entered blocking state [ 393.741172][T12782] bridge0: port 3(team0) entered forwarding state [ 393.747976][T12782] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.755176][T12782] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.762645][T12782] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.769893][T12782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.817023][T12782] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 394.139273][T12799] netlink: 'syz.0.2133': attribute type 39 has an invalid length. [ 394.475584][ T54] Bluetooth: hci2: command tx timeout [ 394.504457][ T9711] hsr_slave_0: left promiscuous mode [ 394.574692][ T9711] hsr_slave_1: left promiscuous mode [ 394.608216][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.628565][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.675518][ T9711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.714480][ T9711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.766335][ T9711] veth1_macvtap: left promiscuous mode [ 394.771929][ T9711] veth0_macvtap: left promiscuous mode [ 394.794611][ T9711] veth1_vlan: left promiscuous mode [ 394.804434][ T9711] veth0_vlan: left promiscuous mode [ 394.964459][ T54] Bluetooth: hci4: command tx timeout [ 396.303423][T12834] netlink: 'syz.9.2147': attribute type 3 has an invalid length. [ 396.314885][T12834] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2147'. [ 396.710317][ T9711] team0 (unregistering): Port device team_slave_1 removed [ 396.790286][ T9711] team0 (unregistering): Port device team_slave_0 removed [ 397.198785][T12844] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2151'. [ 398.318490][T12673] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 398.330971][T12673] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 398.347649][T12673] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 398.373576][T12673] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 398.568148][T12663] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 398.639114][T12663] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 398.677285][T12663] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 398.706582][T12663] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 398.923895][T12868] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 398.958466][T12673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.981904][T12673] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.016303][ T1895] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.023518][ T1895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.105890][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.113069][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.162788][T12663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.201848][T12673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 399.247321][T12663] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.324940][T12871] syzkaller0: entered promiscuous mode [ 399.331046][T12871] syzkaller0: entered allmulticast mode [ 399.353316][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.360514][ T9720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.410850][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.418110][ T9720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.676116][ T29] audit: type=1800 audit(2000000440.657:176): pid=12878 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.2162" name="file2" dev="overlay" ino=3237 res=0 errno=0 [ 402.451358][T12673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.485435][T12891] loop9: detected capacity change from 0 to 7 [ 402.520993][T12891] Dev loop9: unable to read RDB block 7 [ 402.537198][T12891] loop9: unable to read partition table [ 402.543069][T12891] loop9: partition table beyond EOD, truncated [ 402.578205][T12891] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 402.782336][T12663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.890155][T12663] veth0_vlan: entered promiscuous mode [ 402.956381][T12663] veth1_vlan: entered promiscuous mode [ 402.996983][T12663] veth0_macvtap: entered promiscuous mode [ 403.029679][T12673] veth0_vlan: entered promiscuous mode [ 403.043123][T12663] veth1_macvtap: entered promiscuous mode [ 403.058117][T12673] veth1_vlan: entered promiscuous mode [ 403.074382][ T120] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 403.092404][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.113017][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.130206][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.142097][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.152436][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.164208][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.177039][T12663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.198646][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.217564][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.235286][ T120] usb 1-1: Using ep0 maxpacket: 8 [ 403.240721][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.261346][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.271789][ T120] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 403.280403][T12663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.297657][ T120] usb 1-1: config 179 has no interface number 0 [ 403.304005][ T120] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 403.315950][T12663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.327113][T12663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.334615][ T120] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 403.349106][T12663] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.358460][ T120] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 403.366802][T12663] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.369732][ T120] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 403.390045][ T120] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 403.403534][T12663] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.412364][ T120] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 403.422171][T12663] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.431294][ T120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.473597][T12906] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 403.523936][T12673] veth0_macvtap: entered promiscuous mode [ 403.564542][T12673] veth1_macvtap: entered promiscuous mode [ 403.579759][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.590291][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.600491][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.610998][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.621126][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.631938][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.641953][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 403.652541][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.663726][T12673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.673597][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.684498][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.694411][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.704936][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.716124][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.726942][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.737128][T12673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 403.747733][T12673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 403.758857][T12673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.773443][ T29] audit: type=1326 audit(2000000444.757:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12915 comm="syz.9.2173" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa1be985d19 code=0x0 [ 403.814384][T12673] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.844519][T12673] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.863518][T12673] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.872459][T12673] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.951139][ T9720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.969296][ T9720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.059833][ T9720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.092301][ T9720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.142040][ T9715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.164157][ T9715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.209442][ T9715] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.225860][ T9715] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.802453][ T9713] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.969440][ T9713] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.118649][ T9713] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.239560][ T9713] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.616468][ T9713] bridge_slave_1: left allmulticast mode [ 405.622191][ T9713] bridge_slave_1: left promiscuous mode [ 405.628188][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.649794][ T9713] bridge_slave_0: left allmulticast mode [ 405.655872][ T9713] bridge_slave_0: left promiscuous mode [ 405.661823][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.728078][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.742306][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.757109][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.771389][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.792435][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 405.804785][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.901984][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 405.901999][ T5909] usb 1-1: USB disconnect, device number 31 [ 405.916238][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 406.303479][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.318367][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 406.330325][ T9713] bond0 (unregistering): Released all slaves [ 406.539733][T12929] chnl_net:caif_netlink_parms(): no params data found [ 406.615479][T12929] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.622744][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.630059][T12929] bridge_slave_0: entered allmulticast mode [ 406.637743][T12929] bridge_slave_0: entered promiscuous mode [ 406.672157][T12929] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.683038][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.690529][T12929] bridge_slave_1: entered allmulticast mode [ 406.698653][T12929] bridge_slave_1: entered promiscuous mode [ 406.731793][T12929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.791205][T12929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.902063][ T9713] hsr_slave_0: left promiscuous mode [ 406.936245][ T9713] hsr_slave_1: left promiscuous mode [ 406.943762][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.964374][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.982423][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.005821][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.056121][ T9713] veth1_macvtap: left promiscuous mode [ 407.061680][ T9713] veth0_macvtap: left promiscuous mode [ 407.074434][ T9713] veth1_vlan: left promiscuous mode [ 407.079814][ T9713] veth0_vlan: left promiscuous mode [ 407.094356][ T120] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 407.266295][ T120] usb 10-1: Using ep0 maxpacket: 16 [ 407.276366][ T120] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.277264][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 407.299898][ T120] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.310801][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 407.311029][ T120] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 407.318388][ T120] usb 10-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 407.340875][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 407.355407][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 407.360945][ T120] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.374535][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 407.387516][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.412223][ T120] usb 10-1: config 0 descriptor?? [ 407.862933][ T120] input: HID 28bd:0909 Mouse as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:28BD:0909.001D/input/input45 [ 407.920362][ T5839] Bluetooth: hci2: command tx timeout [ 407.965250][ T120] uclogic 0003:28BD:0909.001D: input,hidraw0: USB HID vff.fe Mouse [HID 28bd:0909] on usb-dummy_hcd.9-1/input0 [ 408.019156][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 408.137207][ T46] usb 10-1: USB disconnect, device number 6 [ 408.182365][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 408.909473][T12929] team0: Port device team_slave_0 added [ 408.953114][T12929] team0: Port device team_slave_1 added [ 409.136415][T12929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.143452][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.181706][T12929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.217480][T12929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.225769][T12929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.254165][T12929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.474814][T12929] hsr_slave_0: entered promiscuous mode [ 409.483179][T12929] hsr_slave_1: entered promiscuous mode [ 409.489659][T12929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.499854][T12929] Cannot create hsr debugfs directory [ 409.514511][ T5839] Bluetooth: hci4: command tx timeout [ 409.995579][ T5839] Bluetooth: hci2: command tx timeout [ 410.102426][ T9713] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.251916][ T9713] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.328710][T12946] chnl_net:caif_netlink_parms(): no params data found [ 410.385639][ T9713] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.546979][ T9713] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.779776][T12946] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.804454][T12946] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.811771][T12946] bridge_slave_0: entered allmulticast mode [ 410.818931][T12946] bridge_slave_0: entered promiscuous mode [ 410.826401][ T9713] bridge_slave_1: left allmulticast mode [ 410.832089][ T9713] bridge_slave_1: left promiscuous mode [ 410.842224][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.851301][ T9713] bridge_slave_0: left allmulticast mode [ 410.857538][ T9713] bridge_slave_0: left promiscuous mode [ 410.863238][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.301791][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.313059][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.323862][ T9713] bond0 (unregistering): Released all slaves [ 411.335736][T12946] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.342888][T12946] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.350611][T12946] bridge_slave_1: entered allmulticast mode [ 411.358392][T12946] bridge_slave_1: entered promiscuous mode [ 411.445221][T12946] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.485531][T12946] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.525591][T12929] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 411.544505][T12929] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 411.587706][T12929] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 411.603140][ T5839] Bluetooth: hci4: command tx timeout [ 411.622902][T12929] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 411.638899][T12946] team0: Port device team_slave_0 added [ 411.673481][T12946] team0: Port device team_slave_1 added [ 411.701522][T12946] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.713021][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.740218][T12946] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.770399][T12946] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.779047][T12946] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.806233][T12946] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.837527][ T9713] hsr_slave_0: left promiscuous mode [ 411.843491][ T9713] hsr_slave_1: left promiscuous mode [ 411.850090][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.857931][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.870721][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.878882][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.901259][ T9713] veth1_macvtap: left promiscuous mode [ 411.906942][ T9713] veth0_macvtap: left promiscuous mode [ 411.912565][ T9713] veth1_vlan: left promiscuous mode [ 411.918405][ T9713] veth0_vlan: left promiscuous mode [ 412.074386][ T5839] Bluetooth: hci2: command tx timeout [ 412.494872][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 412.552532][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 413.102922][T12946] hsr_slave_0: entered promiscuous mode [ 413.110004][T12946] hsr_slave_1: entered promiscuous mode [ 413.122152][T12946] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.130325][T12946] Cannot create hsr debugfs directory [ 413.377497][T12929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.412175][T12929] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.443481][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.450677][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.466388][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.473505][ T9715] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.675755][ T5839] Bluetooth: hci4: command tx timeout [ 413.728640][T12929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.737146][T12946] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 413.760117][T12946] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 413.776519][T12946] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 413.796598][T12946] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 413.920442][T12946] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.947793][T12946] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.969443][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.976636][ T9715] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.001212][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.008403][ T9713] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.068571][T12946] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 414.092008][T12929] veth0_vlan: entered promiscuous mode [ 414.112661][T12929] veth1_vlan: entered promiscuous mode [ 414.154596][ T5839] Bluetooth: hci2: command tx timeout [ 414.155904][T12929] veth0_macvtap: entered promiscuous mode [ 414.191406][T12929] veth1_macvtap: entered promiscuous mode [ 414.215948][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.228373][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.240015][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.250981][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.261217][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.272396][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.284044][T12929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.295362][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.306949][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.317556][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.328618][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.338874][T12929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.349668][T12929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.361168][T12929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.384588][T12929] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.393514][T12929] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.403144][T12929] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.413064][T12929] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.430798][T12946] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.533197][T12946] veth0_vlan: entered promiscuous mode [ 414.540664][ T9709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.561003][ T9709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.589436][ T9711] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.593648][T12946] veth1_vlan: entered promiscuous mode [ 414.604616][ T9711] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.652953][T12946] veth0_macvtap: entered promiscuous mode [ 414.685496][T12946] veth1_macvtap: entered promiscuous mode [ 414.716394][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.752679][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.774777][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.794273][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.805320][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.815837][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.825919][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.836764][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.848486][T12946] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.907762][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.932124][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.951792][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.001222][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.044355][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.067393][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.077706][T12946] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 415.088275][T12946] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 415.103390][T12946] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.179380][T12946] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.204441][T12946] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.213212][T12946] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.249723][T12946] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.310250][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 415.326730][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 415.337217][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 415.350324][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 415.360907][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 415.368587][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 415.650871][ T9713] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.754767][ T54] Bluetooth: hci4: command tx timeout [ 415.811600][ T9715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.823356][ T9715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.918023][T13021] chnl_net:caif_netlink_parms(): no params data found [ 415.948106][ T1895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.974574][ T1895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.143565][ T9713] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.162340][T13021] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.169678][T13021] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.177642][T13021] bridge_slave_0: entered allmulticast mode [ 416.184951][T13021] bridge_slave_0: entered promiscuous mode [ 416.196547][T13021] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.203734][T13021] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.211183][T13021] bridge_slave_1: entered allmulticast mode [ 416.219323][T13021] bridge_slave_1: entered promiscuous mode [ 416.248540][T13021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.260422][T13021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.293771][T13021] team0: Port device team_slave_0 added [ 416.303142][T13021] team0: Port device team_slave_1 added [ 416.340344][T13021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 416.348107][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.375572][T13021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 416.388348][T13021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 416.396160][T13021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 416.424780][T13021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 416.470794][T13021] hsr_slave_0: entered promiscuous mode [ 416.477741][T13021] hsr_slave_1: entered promiscuous mode [ 416.484170][T13021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 416.492490][T13021] Cannot create hsr debugfs directory [ 416.907168][ T9713] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.062264][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.092813][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.106341][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.128150][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.137740][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 417.146643][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.251571][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2208'. [ 417.307826][ T9713] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.394579][T13046] erspan0: entered promiscuous mode [ 417.413412][T13046] macvtap1: entered promiscuous mode [ 417.430398][T13046] macvtap1: entered allmulticast mode [ 417.436759][ T5839] Bluetooth: hci2: command tx timeout [ 417.445158][T13046] erspan0: entered allmulticast mode [ 417.642479][T13049] erspan0: left allmulticast mode [ 417.648599][T13049] erspan0: left promiscuous mode [ 417.897689][ T9713] bridge_slave_1: left allmulticast mode [ 417.903406][ T9713] bridge_slave_1: left promiscuous mode [ 417.910319][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.921727][ T9713] bridge_slave_0: left allmulticast mode [ 417.929940][ T9713] bridge_slave_0: left promiscuous mode [ 417.936632][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.397353][ T9713] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.409417][ T9713] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.419803][ T9713] bond0 (unregistering): Released all slaves [ 418.614988][T13021] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 418.652426][T13021] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 418.707238][T13021] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 418.726532][T13041] chnl_net:caif_netlink_parms(): no params data found [ 418.761430][T13021] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 418.831146][ T9713] hsr_slave_0: left promiscuous mode [ 418.841383][ T9713] hsr_slave_1: left promiscuous mode [ 418.849013][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.860549][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.869887][ T9713] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.878767][ T9713] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.901180][ T9713] veth1_macvtap: left promiscuous mode [ 418.907114][ T9713] veth0_macvtap: left promiscuous mode [ 418.912694][ T9713] veth1_vlan: left promiscuous mode [ 418.918986][ T9713] veth0_vlan: left promiscuous mode [ 419.211341][ T5839] Bluetooth: hci3: command tx timeout [ 419.530038][ T5839] Bluetooth: hci2: command tx timeout [ 419.694903][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.711277][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.723040][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.734650][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.742406][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 419.768084][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 420.057928][ T9713] team0 (unregistering): Port device team_slave_1 removed [ 420.121224][ T9713] team0 (unregistering): Port device team_slave_0 removed [ 420.804500][T13041] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.811637][T13041] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.831460][T13041] bridge_slave_0: entered allmulticast mode [ 420.851178][T13041] bridge_slave_0: entered promiscuous mode [ 420.876748][T13041] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.883922][T13041] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.893154][T13041] bridge_slave_1: entered allmulticast mode [ 420.900925][T13041] bridge_slave_1: entered promiscuous mode [ 421.088755][T13041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.113054][T13041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.205795][T13041] team0: Port device team_slave_0 added [ 421.242676][T13041] team0: Port device team_slave_1 added [ 421.276638][ T5839] Bluetooth: hci3: command tx timeout [ 421.449756][T13041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.464390][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.536080][T13041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.579542][T13041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.592016][T13041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 421.624832][ T5839] Bluetooth: hci2: command tx timeout [ 421.651371][T13041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.698488][T13096] input: syz0 as /devices/virtual/input/input46 [ 421.708914][T13041] hsr_slave_0: entered promiscuous mode [ 421.715585][T13041] hsr_slave_1: entered promiscuous mode [ 421.761047][T13041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 421.784772][T13041] Cannot create hsr debugfs directory [ 421.880817][T13021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.914983][ T5839] Bluetooth: hci4: command tx timeout [ 421.996179][T13021] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.068487][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.075707][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.110362][T13106] mkiss: ax0: crc mode is auto. [ 422.130505][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.137792][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.199903][ T9715] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.233609][T13068] chnl_net:caif_netlink_parms(): no params data found [ 422.349185][ T9715] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.470735][ T9715] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.491668][T13068] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.500763][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.510978][T13068] bridge_slave_0: entered allmulticast mode [ 422.520850][T13068] bridge_slave_0: entered promiscuous mode [ 422.574119][ T9715] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.591842][T13068] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.601883][T13068] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.609478][T13068] bridge_slave_1: entered allmulticast mode [ 422.619370][T13068] bridge_slave_1: entered promiscuous mode [ 422.671965][T13068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.700182][T13068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.787980][T13068] team0: Port device team_slave_0 added [ 422.970746][T13068] team0: Port device team_slave_1 added [ 423.107953][ T9715] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.192976][T13068] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.200648][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.227758][T13068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.249649][T13120] gre1: entered promiscuous mode [ 423.342368][ T9715] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.359950][T13068] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.372284][ T5839] Bluetooth: hci3: command tx timeout [ 423.387220][T13068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.421019][T13068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.446704][T13021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.485813][ T9715] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.587333][ T9715] bond0: (slave netdevsim0): Releasing backup interface [ 423.614084][ T9715] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.628951][T13041] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.654465][ T46] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 423.669959][T13041] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.677256][ T5839] Bluetooth: hci2: command tx timeout [ 423.699776][T13068] hsr_slave_0: entered promiscuous mode [ 423.712946][T13068] hsr_slave_1: entered promiscuous mode [ 423.732596][T13068] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.741230][T13068] Cannot create hsr debugfs directory [ 423.775609][T13041] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.804192][T13041] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.816112][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.842017][ T46] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 423.861791][ T46] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.882634][ T46] usb 10-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 423.910717][ T46] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.926685][ T46] usb 10-1: config 0 descriptor?? [ 423.994430][ T5839] Bluetooth: hci4: command tx timeout [ 424.042294][T13021] veth0_vlan: entered promiscuous mode [ 424.056284][ T9715] bridge_slave_1: left allmulticast mode [ 424.062088][ T9715] bridge_slave_1: left promiscuous mode [ 424.069427][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.080502][ T9715] bridge_slave_0: left allmulticast mode [ 424.086975][ T9715] bridge_slave_0: left promiscuous mode [ 424.092840][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.120031][ T9715] team0: left allmulticast mode [ 424.131879][ T9715] team_slave_0: left allmulticast mode [ 424.140788][ T46] usbhid 10-1:0.0: can't add hid device: -71 [ 424.144720][ T9715] team_slave_1: left allmulticast mode [ 424.153765][ T9715] bridge0: port 3(team0) entered disabled state [ 424.162946][ T46] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 424.175379][ T9715] bridge_slave_1: left allmulticast mode [ 424.181087][ T9715] bridge_slave_1: left promiscuous mode [ 424.187746][ T9715] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.204036][ T46] usb 10-1: USB disconnect, device number 7 [ 424.216143][ T9715] bridge_slave_0: left allmulticast mode [ 424.221922][ T9715] bridge_slave_0: left promiscuous mode [ 424.232695][ T9715] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.244848][ T9720] [ 424.247810][ T9720] ============================= [ 424.252721][ T9720] WARNING: suspicious RCU usage [ 424.257757][ T9720] 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 Not tainted [ 424.264949][ T9720] ----------------------------- [ 424.269825][ T9720] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 424.278938][ T9720] [ 424.278938][ T9720] other info that might help us debug this: [ 424.278938][ T9720] [ 424.289349][ T9720] [ 424.289349][ T9720] rcu_scheduler_active = 2, debug_locks = 1 [ 424.297729][ T9720] 3 locks held by kworker/u8:19/9720: [ 424.303141][ T9720] #0: ffff88805c591948 ((wq_completion)bond0#14){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 424.315526][ T9720] #1: ffffc90003387d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 424.329313][ T9720] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 424.339268][ T9720] [ 424.339268][ T9720] stack backtrace: [ 424.345366][ T9720] CPU: 1 UID: 0 PID: 9720 Comm: kworker/u8:19 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 424.356356][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 424.366462][ T9720] Workqueue: bond0 bond_mii_monitor [ 424.371747][ T9720] Call Trace: [ 424.375061][ T9720] [ 424.378024][ T9720] dump_stack_lvl+0x241/0x360 [ 424.382760][ T9720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.388013][ T9720] ? __pfx__printk+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 424.392761][ T9720] lockdep_rcu_suspicious+0x226/0x340 [ 424.398272][ T9720] dev_deactivate_queue+0x8f/0x160 [ 424.403438][ T9720] dev_deactivate_many+0xc8/0xb10 [ 424.408519][ T9720] dev_deactivate+0x184/0x280 [ 424.413254][ T9720] ? __pfx_dev_deactivate+0x10/0x10 [ 424.418500][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 424.424443][ T9720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.430822][ T9720] ? rfc2863_policy+0x1db/0x3b0 [ 424.435743][ T9720] linkwatch_do_dev+0x10a/0x170 [ 424.440657][ T9720] ethtool_op_get_link+0x15/0x60 [ 424.445647][ T9720] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 424.451331][ T9720] bond_check_dev_link+0x1f1/0x3f0 [ 424.456501][ T9720] ? __pfx_bond_check_dev_link+0x10/0x10 [ 424.462207][ T9720] bond_mii_monitor+0x49a/0x3170 [ 424.467205][ T9720] ? __lock_acquire+0x1397/0x2100 [ 424.472269][ T9720] ? bond_mii_monitor+0x174/0x3170 [ 424.477416][ T9720] ? __pfx_bond_mii_monitor+0x10/0x10 [ 424.482820][ T9720] ? __pfx_lock_acquire+0x10/0x10 [ 424.487865][ T9720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.493866][ T9720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.500219][ T9720] ? process_scheduled_works+0x976/0x1840 [ 424.505976][ T9720] process_scheduled_works+0xa66/0x1840 [ 424.511572][ T9720] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.517590][ T9720] ? assign_work+0x364/0x3d0 [ 424.522238][ T9720] worker_thread+0x870/0xd30 [ 424.526866][ T9720] ? __kthread_parkme+0x169/0x1d0 [ 424.531917][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 424.537041][ T9720] kthread+0x2f0/0x390 [ 424.541127][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 424.546338][ T9720] ? __pfx_kthread+0x10/0x10 [ 424.550966][ T9720] ret_from_fork+0x4b/0x80 [ 424.555396][ T9720] ? __pfx_kthread+0x10/0x10 [ 424.560003][ T9720] ret_from_fork_asm+0x1a/0x30 [ 424.564798][ T9720] [ 424.608732][ T9720] [ 424.611158][ T9720] ============================= [ 424.616440][ T9720] WARNING: suspicious RCU usage [ 424.621611][ T9720] 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 Not tainted [ 424.628890][ T9720] ----------------------------- [ 424.633772][ T9720] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 424.642953][ T9720] [ 424.642953][ T9720] other info that might help us debug this: [ 424.642953][ T9720] [ 424.653292][ T9720] [ 424.653292][ T9720] rcu_scheduler_active = 2, debug_locks = 1 [ 424.661482][ T9720] 3 locks held by kworker/u8:19/9720: [ 424.666982][ T9720] #0: ffff88805c591948 ((wq_completion)bond0#14){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 424.678361][ T9720] #1: ffffc90003387d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 424.691621][ T9720] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 424.701564][ T9720] [ 424.701564][ T9720] stack backtrace: [ 424.707688][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: kworker/u8:19 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 424.718669][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 424.728753][ T9720] Workqueue: bond0 bond_mii_monitor [ 424.733993][ T9720] Call Trace: [ 424.737284][ T9720] [ 424.740228][ T9720] dump_stack_lvl+0x241/0x360 [ 424.744932][ T9720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.750152][ T9720] ? __pfx__printk+0x10/0x10 [ 424.754775][ T9720] lockdep_rcu_suspicious+0x226/0x340 [ 424.760167][ T9720] dev_deactivate_many+0x18f/0xb10 [ 424.765314][ T9720] dev_deactivate+0x184/0x280 [ 424.770008][ T9720] ? __pfx_dev_deactivate+0x10/0x10 [ 424.775242][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 424.781238][ T9720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 424.787588][ T9720] ? rfc2863_policy+0x1db/0x3b0 [ 424.792464][ T9720] linkwatch_do_dev+0x10a/0x170 [ 424.797356][ T9720] ethtool_op_get_link+0x15/0x60 [ 424.802308][ T9720] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 424.807955][ T9720] bond_check_dev_link+0x1f1/0x3f0 [ 424.813092][ T9720] ? __pfx_bond_check_dev_link+0x10/0x10 [ 424.818763][ T9720] bond_mii_monitor+0x49a/0x3170 [ 424.823732][ T9720] ? __lock_acquire+0x1397/0x2100 [ 424.828779][ T9720] ? bond_mii_monitor+0x174/0x3170 [ 424.833928][ T9720] ? __pfx_bond_mii_monitor+0x10/0x10 [ 424.839337][ T9720] ? __pfx_lock_acquire+0x10/0x10 [ 424.844382][ T9720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 424.850386][ T9720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.856742][ T9720] ? process_scheduled_works+0x976/0x1840 [ 424.862485][ T9720] process_scheduled_works+0xa66/0x1840 [ 424.868097][ T9720] ? __pfx_process_scheduled_works+0x10/0x10 [ 424.874106][ T9720] ? assign_work+0x364/0x3d0 [ 424.878734][ T9720] worker_thread+0x870/0xd30 [ 424.883360][ T9720] ? __kthread_parkme+0x169/0x1d0 [ 424.888406][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 424.893550][ T9720] kthread+0x2f0/0x390 [ 424.897633][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 424.902758][ T9720] ? __pfx_kthread+0x10/0x10 [ 424.907365][ T9720] ret_from_fork+0x4b/0x80 [ 424.911795][ T9720] ? __pfx_kthread+0x10/0x10 [ 424.916438][ T9720] ret_from_fork_asm+0x1a/0x30 [ 424.921238][ T9720] [ 425.004960][ T9720] BUG: sleeping function called from invalid context at net/core/dev.c:11403 [ 425.013821][ T9720] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 9720, name: kworker/u8:19 [ 425.023638][ T9720] preempt_count: 0, expected: 0 [ 425.028623][ T9720] RCU nest depth: 1, expected: 0 [ 425.034119][ T9720] 3 locks held by kworker/u8:19/9720: [ 425.039731][ T9720] #0: ffff88805c591948 ((wq_completion)bond0#14){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 425.053716][ T9720] #1: ffffc90003387d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 425.066912][ T9720] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 425.076741][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: kworker/u8:19 Not tainted 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 425.087742][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 425.097833][ T9720] Workqueue: bond0 bond_mii_monitor [ 425.103065][ T9720] Call Trace: [ 425.106356][ T9720] [ 425.109299][ T9720] dump_stack_lvl+0x241/0x360 [ 425.114000][ T9720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.119306][ T9720] ? __pfx__printk+0x10/0x10 [ 425.123934][ T9720] __might_resched+0x5d4/0x780 [ 425.128738][ T9720] ? dev_deactivate_many+0x25f/0xb10 [ 425.134061][ T9720] ? __pfx___might_resched+0x10/0x10 [ 425.139393][ T9720] ? __local_bh_enable_ip+0x168/0x200 [ 425.144801][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 425.150458][ T9720] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 425.156205][ T9720] ? do_raw_spin_unlock+0x13c/0x8b0 [ 425.161432][ T9720] synchronize_net+0x1b/0x50 [ 425.166039][ T9720] dev_deactivate_many+0x4a7/0xb10 [ 425.171167][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 425.176473][ T9720] dev_deactivate+0x184/0x280 [ 425.181165][ T9720] ? __pfx_dev_deactivate+0x10/0x10 [ 425.186475][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 425.192389][ T9720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.198842][ T9720] ? rfc2863_policy+0x1db/0x3b0 [ 425.203733][ T9720] linkwatch_do_dev+0x10a/0x170 [ 425.208627][ T9720] ethtool_op_get_link+0x15/0x60 [ 425.213592][ T9720] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 425.219239][ T9720] bond_check_dev_link+0x1f1/0x3f0 [ 425.224374][ T9720] ? __pfx_bond_check_dev_link+0x10/0x10 [ 425.230050][ T9720] bond_mii_monitor+0x49a/0x3170 [ 425.235021][ T9720] ? __lock_acquire+0x1397/0x2100 [ 425.240061][ T9720] ? bond_mii_monitor+0x174/0x3170 [ 425.245207][ T9720] ? __pfx_bond_mii_monitor+0x10/0x10 [ 425.250644][ T9720] ? __pfx_lock_acquire+0x10/0x10 [ 425.255699][ T9720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.261710][ T9720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.268069][ T9720] ? process_scheduled_works+0x976/0x1840 [ 425.273821][ T9720] process_scheduled_works+0xa66/0x1840 [ 425.279419][ T9720] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.285441][ T9720] ? assign_work+0x364/0x3d0 [ 425.290059][ T9720] worker_thread+0x870/0xd30 [ 425.294688][ T9720] ? __kthread_parkme+0x169/0x1d0 [ 425.299733][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 425.304856][ T9720] kthread+0x2f0/0x390 [ 425.308946][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 425.314069][ T9720] ? __pfx_kthread+0x10/0x10 [ 425.318680][ T9720] ret_from_fork+0x4b/0x80 [ 425.323106][ T9720] ? __pfx_kthread+0x10/0x10 [ 425.327715][ T9720] ret_from_fork_asm+0x1a/0x30 [ 425.332515][ T9720] [ 425.355088][ T9720] [ 425.357475][ T9720] ============================= [ 425.362362][ T9720] WARNING: suspicious RCU usage [ 425.367313][ T9720] 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 Tainted: G W [ 425.376042][ T9720] ----------------------------- [ 425.380930][ T9720] kernel/rcu/tree_exp.h:949 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 425.391680][ T9720] [ 425.391680][ T9720] other info that might help us debug this: [ 425.391680][ T9720] [ 425.402050][ T9720] [ 425.402050][ T9720] rcu_scheduler_active = 2, debug_locks = 1 [ 425.410239][ T9720] 3 locks held by kworker/u8:19/9720: [ 425.415703][ T9720] #0: ffff88805c591948 ((wq_completion)bond0#14){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 425.426996][ T9720] #1: ffffc90003387d00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 425.440655][ T9720] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 425.444542][ T5839] Bluetooth: hci3: command tx timeout [ 425.451276][ T9720] [ 425.451276][ T9720] stack backtrace: [ 425.461744][ T9720] CPU: 1 UID: 0 PID: 9720 Comm: kworker/u8:19 Tainted: G W 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 425.474179][ T9720] Tainted: [W]=WARN [ 425.477989][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 425.488064][ T9720] Workqueue: bond0 bond_mii_monitor [ 425.493316][ T9720] Call Trace: [ 425.496606][ T9720] [ 425.499551][ T9720] dump_stack_lvl+0x241/0x360 [ 425.504261][ T9720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.509487][ T9720] ? __pfx__printk+0x10/0x10 [ 425.514100][ T9720] lockdep_rcu_suspicious+0x226/0x340 [ 425.519526][ T9720] synchronize_rcu_expedited+0x12e/0x830 [ 425.525181][ T9720] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 425.531373][ T9720] ? add_taint+0x99/0xe0 [ 425.535641][ T9720] ? __might_resched+0x5e0/0x780 [ 425.540629][ T9720] ? __local_bh_enable_ip+0x168/0x200 [ 425.546020][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 425.551318][ T9720] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 425.557062][ T9720] ? do_raw_spin_unlock+0x13c/0x8b0 [ 425.562291][ T9720] dev_deactivate_many+0x4a7/0xb10 [ 425.567421][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 425.572721][ T9720] dev_deactivate+0x184/0x280 [ 425.577420][ T9720] ? __pfx_dev_deactivate+0x10/0x10 [ 425.582634][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 425.588541][ T9720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 425.594886][ T9720] ? rfc2863_policy+0x1db/0x3b0 [ 425.599758][ T9720] linkwatch_do_dev+0x10a/0x170 [ 425.604636][ T9720] ethtool_op_get_link+0x15/0x60 [ 425.609600][ T9720] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 425.615264][ T9720] bond_check_dev_link+0x1f1/0x3f0 [ 425.620443][ T9720] ? __pfx_bond_check_dev_link+0x10/0x10 [ 425.626110][ T9720] bond_mii_monitor+0x49a/0x3170 [ 425.631072][ T9720] ? __lock_acquire+0x1397/0x2100 [ 425.636121][ T9720] ? bond_mii_monitor+0x174/0x3170 [ 425.641369][ T9720] ? __pfx_bond_mii_monitor+0x10/0x10 [ 425.646776][ T9720] ? __pfx_lock_acquire+0x10/0x10 [ 425.651824][ T9720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 425.657823][ T9720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 425.664196][ T9720] ? process_scheduled_works+0x976/0x1840 [ 425.669944][ T9720] process_scheduled_works+0xa66/0x1840 [ 425.675552][ T9720] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.681590][ T9720] ? assign_work+0x364/0x3d0 [ 425.686246][ T9720] worker_thread+0x870/0xd30 [ 425.690873][ T9720] ? __kthread_parkme+0x169/0x1d0 [ 425.695919][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 425.701130][ T9720] kthread+0x2f0/0x390 [ 425.705234][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 425.710359][ T9720] ? __pfx_kthread+0x10/0x10 [ 425.714965][ T9720] ret_from_fork+0x4b/0x80 [ 425.719417][ T9720] ? __pfx_kthread+0x10/0x10 [ 425.724111][ T9720] ret_from_fork_asm+0x1a/0x30 [ 425.728909][ T9720] [ 425.742804][ T9720] ------------[ cut here ]------------ [ 425.748332][ T9720] Voluntary context switch within RCU read-side critical section! [ 425.748462][ T9720] WARNING: CPU: 0 PID: 9720 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xcf4/0xff0 [ 425.766751][ T9720] Modules linked in: [ 425.770667][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: kworker/u8:19 Tainted: G W 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 425.783199][ T9720] Tainted: [W]=WARN [ 425.787110][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 425.797182][ T9720] Workqueue: bond0 bond_mii_monitor [ 425.802424][ T9720] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 425.808690][ T9720] Code: 00 ba 02 00 00 00 e8 7b 13 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 e6 98 7c 0e 01 90 48 c7 c7 00 ed 0b 8c e8 0d 30 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 425.828311][ T9720] RSP: 0018:ffffc90003387100 EFLAGS: 00010046 [ 425.834402][ T9720] RAX: 31163ea86470a600 RBX: ffff88801e3a2244 RCX: ffff88801e3a1e00 [ 425.842387][ T9720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 425.850379][ T9720] RBP: ffffc90003387250 R08: ffffffff81600962 R09: fffffbfff1cfa210 [ 425.858370][ T9720] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88801e3a1e00 [ 425.866360][ T9720] R13: 0000000000000000 R14: 1ffff92000670e38 R15: dffffc0000000000 [ 425.874353][ T9720] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 425.883289][ T9720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 425.889884][ T9720] CR2: 00005604193df250 CR3: 000000007e0d8000 CR4: 00000000003526f0 [ 425.897870][ T9720] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000cdb2 [ 425.905854][ T9720] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 425.913833][ T9720] Call Trace: [ 425.917119][ T9720] [ 425.920062][ T9720] ? __warn+0x165/0x4d0 [ 425.924242][ T9720] ? rcu_note_context_switch+0xcf4/0xff0 [ 425.929904][ T9720] ? report_bug+0x2b3/0x500 [ 425.934426][ T9720] ? rcu_note_context_switch+0xcf4/0xff0 [ 425.940071][ T9720] ? handle_bug+0x60/0x90 [ 425.944428][ T9720] ? exc_invalid_op+0x1a/0x50 [ 425.949142][ T9720] ? asm_exc_invalid_op+0x1a/0x20 [ 425.954198][ T9720] ? __warn_printk+0x292/0x360 [ 425.959029][ T9720] ? rcu_note_context_switch+0xcf4/0xff0 [ 425.964684][ T9720] ? mark_lock+0x9a/0x360 [ 425.969050][ T9720] ? __lock_acquire+0x1397/0x2100 [ 425.974093][ T9720] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 425.980175][ T9720] ? mark_lock+0x9a/0x360 [ 425.984524][ T9720] ? rcu_is_watching+0x15/0xb0 [ 425.989307][ T9720] __schedule+0x34b/0x4be0 [ 425.993786][ T9720] ? __pfx___schedule+0x10/0x10 [ 425.998660][ T9720] ? schedule+0x90/0x320 [ 426.002925][ T9720] ? __pfx_lock_release+0x10/0x10 [ 426.007962][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 426.013880][ T9720] ? kthread_data+0x52/0xd0 [ 426.018410][ T9720] ? wq_worker_sleeping+0x66/0x240 [ 426.023537][ T9720] ? schedule+0x90/0x320 [ 426.027805][ T9720] schedule+0x14b/0x320 [ 426.032004][ T9720] synchronize_rcu_expedited+0x70a/0x830 [ 426.037684][ T9720] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 426.043873][ T9720] ? __pfx_autoremove_wake_function+0x10/0x10 [ 426.049969][ T9720] ? add_taint+0x99/0xe0 [ 426.054248][ T9720] ? __might_resched+0x5e0/0x780 [ 426.059246][ T9720] ? __local_bh_enable_ip+0x168/0x200 [ 426.064645][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 426.069947][ T9720] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 426.075710][ T9720] ? do_raw_spin_unlock+0x13c/0x8b0 [ 426.080946][ T9720] dev_deactivate_many+0x4a7/0xb10 [ 426.086075][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 426.091383][ T9720] dev_deactivate+0x184/0x280 [ 426.096081][ T9720] ? __pfx_dev_deactivate+0x10/0x10 [ 426.101293][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 426.107205][ T9720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.113554][ T9720] ? rfc2863_policy+0x1db/0x3b0 [ 426.118438][ T9720] linkwatch_do_dev+0x10a/0x170 [ 426.123320][ T9720] ethtool_op_get_link+0x15/0x60 [ 426.128274][ T9720] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 426.133921][ T9720] bond_check_dev_link+0x1f1/0x3f0 [ 426.139057][ T9720] ? __pfx_bond_check_dev_link+0x10/0x10 [ 426.144760][ T9720] bond_mii_monitor+0x49a/0x3170 [ 426.149728][ T9720] ? __lock_acquire+0x1397/0x2100 [ 426.154780][ T9720] ? bond_mii_monitor+0x174/0x3170 [ 426.160122][ T9720] ? __pfx_bond_mii_monitor+0x10/0x10 [ 426.165551][ T9720] ? __pfx_lock_acquire+0x10/0x10 [ 426.170610][ T9720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.176613][ T9720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.182968][ T9720] ? process_scheduled_works+0x976/0x1840 [ 426.188830][ T9720] process_scheduled_works+0xa66/0x1840 [ 426.194439][ T9720] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.200483][ T9720] ? assign_work+0x364/0x3d0 [ 426.205114][ T9720] worker_thread+0x870/0xd30 [ 426.209750][ T9720] ? __kthread_parkme+0x169/0x1d0 [ 426.214795][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 426.219921][ T9720] kthread+0x2f0/0x390 [ 426.224003][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 426.229123][ T9720] ? __pfx_kthread+0x10/0x10 [ 426.233731][ T9720] ret_from_fork+0x4b/0x80 [ 426.238167][ T9720] ? __pfx_kthread+0x10/0x10 [ 426.242778][ T9720] ret_from_fork_asm+0x1a/0x30 [ 426.247578][ T9720] [ 426.250633][ T9720] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 426.257937][ T9720] CPU: 0 UID: 0 PID: 9720 Comm: kworker/u8:19 Tainted: G W 6.13.0-rc2-syzkaller-00159-gf932fb9b4074 #0 [ 426.270391][ T9720] Tainted: [W]=WARN [ 426.274201][ T9720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 426.284279][ T9720] Workqueue: bond0 bond_mii_monitor [ 426.289514][ T9720] Call Trace: [ 426.292805][ T9720] [ 426.295834][ T9720] dump_stack_lvl+0x241/0x360 [ 426.300535][ T9720] ? __pfx_dump_stack_lvl+0x10/0x10 [ 426.305841][ T9720] ? __pfx__printk+0x10/0x10 [ 426.310444][ T9720] ? _printk+0xd5/0x120 [ 426.314623][ T9720] ? __init_begin+0x41000/0x41000 [ 426.319686][ T9720] ? vscnprintf+0x5d/0x90 [ 426.324031][ T9720] panic+0x349/0x880 [ 426.327943][ T9720] ? __warn+0x174/0x4d0 [ 426.332112][ T9720] ? __pfx_panic+0x10/0x10 [ 426.336553][ T9720] ? ret_from_fork_asm+0x1a/0x30 [ 426.341512][ T9720] __warn+0x344/0x4d0 [ 426.345513][ T9720] ? rcu_note_context_switch+0xcf4/0xff0 [ 426.351163][ T9720] report_bug+0x2b3/0x500 [ 426.355546][ T9720] ? rcu_note_context_switch+0xcf4/0xff0 [ 426.361214][ T9720] handle_bug+0x60/0x90 [ 426.365397][ T9720] exc_invalid_op+0x1a/0x50 [ 426.369925][ T9720] asm_exc_invalid_op+0x1a/0x20 [ 426.374794][ T9720] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 426.381053][ T9720] Code: 00 ba 02 00 00 00 e8 7b 13 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 e6 98 7c 0e 01 90 48 c7 c7 00 ed 0b 8c e8 0d 30 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 426.400675][ T9720] RSP: 0018:ffffc90003387100 EFLAGS: 00010046 [ 426.406759][ T9720] RAX: 31163ea86470a600 RBX: ffff88801e3a2244 RCX: ffff88801e3a1e00 [ 426.414746][ T9720] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 426.422773][ T9720] RBP: ffffc90003387250 R08: ffffffff81600962 R09: fffffbfff1cfa210 [ 426.430772][ T9720] R10: dffffc0000000000 R11: fffffbfff1cfa210 R12: ffff88801e3a1e00 [ 426.438756][ T9720] R13: 0000000000000000 R14: 1ffff92000670e38 R15: dffffc0000000000 [ 426.446745][ T9720] ? __warn_printk+0x292/0x360 [ 426.451537][ T9720] ? mark_lock+0x9a/0x360 [ 426.455887][ T9720] ? __lock_acquire+0x1397/0x2100 [ 426.460936][ T9720] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 426.466959][ T9720] ? mark_lock+0x9a/0x360 [ 426.471311][ T9720] ? rcu_is_watching+0x15/0xb0 [ 426.476096][ T9720] __schedule+0x34b/0x4be0 [ 426.480554][ T9720] ? __pfx___schedule+0x10/0x10 [ 426.485422][ T9720] ? schedule+0x90/0x320 [ 426.489682][ T9720] ? __pfx_lock_release+0x10/0x10 [ 426.494717][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 426.500629][ T9720] ? kthread_data+0x52/0xd0 [ 426.505155][ T9720] ? wq_worker_sleeping+0x66/0x240 [ 426.510282][ T9720] ? schedule+0x90/0x320 [ 426.514541][ T9720] schedule+0x14b/0x320 [ 426.518713][ T9720] synchronize_rcu_expedited+0x70a/0x830 [ 426.524368][ T9720] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 426.530628][ T9720] ? __pfx_autoremove_wake_function+0x10/0x10 [ 426.536710][ T9720] ? add_taint+0x99/0xe0 [ 426.540966][ T9720] ? __might_resched+0x5e0/0x780 [ 426.545934][ T9720] ? __local_bh_enable_ip+0x168/0x200 [ 426.551324][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 426.556624][ T9720] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 426.562369][ T9720] ? do_raw_spin_unlock+0x13c/0x8b0 [ 426.567624][ T9720] dev_deactivate_many+0x4a7/0xb10 [ 426.572757][ T9720] ? dev_deactivate_many+0x250/0xb10 [ 426.578061][ T9720] dev_deactivate+0x184/0x280 [ 426.582757][ T9720] ? __pfx_dev_deactivate+0x10/0x10 [ 426.587993][ T9720] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 426.593903][ T9720] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 426.600247][ T9720] ? rfc2863_policy+0x1db/0x3b0 [ 426.605138][ T9720] linkwatch_do_dev+0x10a/0x170 [ 426.610009][ T9720] ethtool_op_get_link+0x15/0x60 [ 426.615043][ T9720] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 426.620693][ T9720] bond_check_dev_link+0x1f1/0x3f0 [ 426.625844][ T9720] ? __pfx_bond_check_dev_link+0x10/0x10 [ 426.631508][ T9720] bond_mii_monitor+0x49a/0x3170 [ 426.636473][ T9720] ? __lock_acquire+0x1397/0x2100 [ 426.641515][ T9720] ? bond_mii_monitor+0x174/0x3170 [ 426.646659][ T9720] ? __pfx_bond_mii_monitor+0x10/0x10 [ 426.652064][ T9720] ? __pfx_lock_acquire+0x10/0x10 [ 426.657105][ T9720] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 426.663103][ T9720] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 426.669466][ T9720] ? process_scheduled_works+0x976/0x1840 [ 426.675215][ T9720] process_scheduled_works+0xa66/0x1840 [ 426.680812][ T9720] ? __pfx_process_scheduled_works+0x10/0x10 [ 426.686821][ T9720] ? assign_work+0x364/0x3d0 [ 426.691436][ T9720] worker_thread+0x870/0xd30 [ 426.696050][ T9720] ? __kthread_parkme+0x169/0x1d0 [ 426.701087][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 426.706211][ T9720] kthread+0x2f0/0x390 [ 426.710300][ T9720] ? __pfx_worker_thread+0x10/0x10 [ 426.715421][ T9720] ? __pfx_kthread+0x10/0x10 [ 426.720028][ T9720] ret_from_fork+0x4b/0x80 [ 426.724455][ T9720] ? __pfx_kthread+0x10/0x10 [ 426.729063][ T9720] ret_from_fork_asm+0x1a/0x30 [ 426.733856][ T9720] [ 426.737151][ T9720] Kernel Offset: disabled [ 426.741577][ T9720] Rebooting in 86400 seconds..