last executing test programs: 25.625541199s ago: executing program 0 (id=280): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x0) 22.88442423s ago: executing program 3 (id=293): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200067e"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0xc0045b0f, 0x0) 19.717352257s ago: executing program 3 (id=307): bpf$ENABLE_STATS(0x20, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r2}, 0x10) io_setup(0x3, &(0x7f0000000340)) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r5) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x20004, &(0x7f0000000780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}, {@aname}, {@version_9p2000}, {@debug}]}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x2, &(0x7f0000000280)=@raw=[@map_fd={0x18, 0x5, 0x1, 0x0, r0}], &(0x7f00000002c0)='GPL\x00', 0x7fff, 0xac, &(0x7f0000000380)=""/172, 0x41000, 0x40, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000004c0)={0x1, 0x7, 0x48d, 0x7fffffff}, 0x10, 0x1b2dd, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000500)=[{0x3, 0x2, 0x4, 0x7}, {0x5, 0x5, 0x2, 0xb}, {0x0, 0x2, 0x5}, {0x4, 0x5, 0xc, 0x4}, {0x4, 0x5, 0x10, 0x5}, {0x1, 0x3, 0x3, 0x2}, {0x5, 0x5, 0xf, 0x7}, {0x5, 0x3}], 0x10, 0x7}, 0x90) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r6, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.850635173s ago: executing program 1 (id=403): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0}) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{}, {r1}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 3.72297249s ago: executing program 1 (id=405): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x97, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r4}, 0x0, 0x0}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 3.694365871s ago: executing program 2 (id=406): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x3}, 0x48) 3.604126597s ago: executing program 0 (id=281): openat$tun(0xffffff9c, 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_RECVERR(r0, 0x114, 0xa, &(0x7f0000000000)=0x2, 0x4) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) write$binfmt_elf32(r1, &(0x7f00000008c0)=ANY=[], 0x4b0) close(r1) r2 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x5, &(0x7f0000000140)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffd8b, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0xffffffffffffff57) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xf, &(0x7f0000000580)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000b12000106000000000000000007000000000000"], 0x18}], 0x1}, 0x0) io_setup(0x22, &(0x7f0000000280)=0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20, &(0x7f0000000080)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0xa0200, 0x0) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f00000008c0)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x7, 0xff}, {0x0, 0x9}]}]}, {0x0, [0x6f, 0x61]}}, &(0x7f0000000340)=""/150, 0x38, 0x96, 0x1, 0x4}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) io_submit(r4, 0x2, &(0x7f0000000380)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000180)="7f", 0x1}, 0x0]) r8 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r8, 0x0) 3.549556293s ago: executing program 2 (id=408): socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x8c, 0x0, &(0x7f00000000c0)) 3.358219591s ago: executing program 2 (id=410): bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000ac0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4005) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25140000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0x7dc0efbb, 0x1, 0x0, 0x0) 3.139107549s ago: executing program 0 (id=412): bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$NL802154_CMD_SET_LBT_MODE(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000ac0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x4005) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="08002bbd7000ffdbdf25140000000c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20008010) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0x7dc0efbb, 0x1, 0x0, 0x0) 3.138442059s ago: executing program 4 (id=413): r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {r2}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 2.978169203s ago: executing program 4 (id=414): r0 = socket(0x0, 0x3, 0x67) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 2.583286207s ago: executing program 4 (id=415): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09de", 0x2}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) 2.447130439s ago: executing program 4 (id=416): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008000800", @ANYRES32], 0x2c}}, 0x0) 2.24743019s ago: executing program 4 (id=417): timer_create(0x2, 0x0, &(0x7f0000000540)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x77359400}}, 0x0) timer_gettime(0x0, &(0x7f0000000340)) 2.110404642s ago: executing program 4 (id=418): set_mempolicy(0x3, &(0x7f0000000280)=0x7e, 0x9) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.690500468s ago: executing program 3 (id=324): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f0000001480)=""/4096, 0x38) 1.537682784s ago: executing program 3 (id=419): syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x3, 0x0, 0x10}, @l2cap_cid_le_signaling={{0xc}, @l2cap_conn_param_update_req={{0x12, 0xa4, 0x8}, {0x7, 0x8b, 0x1f, 0x5e02}}}}, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x3, 0xf1a1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e"], 0x15) dup(r0) 672.296213ms ago: executing program 1 (id=420): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[], 0x18}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x310decfa, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xc1) ioctl$USBDEVFS_CONTROL(r0, 0x8004550f, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 501.917627ms ago: executing program 0 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa00000000000079101800000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 475.305781ms ago: executing program 1 (id=422): r0 = msgget$private(0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) msgrcv(r0, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) close(r2) rt_sigreturn() syz_clone(0x80206100, 0x0, 0x0, 0x0, 0x0, 0x0) 431.69188ms ago: executing program 2 (id=423): r0 = timerfd_create(0x8, 0x0) r1 = timerfd_create(0x8, 0x0) clock_gettime(0x7, &(0x7f00000000c0)={0x0}) timerfd_settime(r1, 0x0, &(0x7f0000000080)={{}, {r2}}, 0x0) timerfd_gettime(r0, &(0x7f0000000000)) 377.501904ms ago: executing program 0 (id=424): r0 = socket(0x2, 0x0, 0x67) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 325.893675ms ago: executing program 3 (id=425): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="09de", 0x2}, {&(0x7f0000000340)="d5bb69fd2ec3a88c5df48b69469a", 0xe}], 0x2, &(0x7f0000000540)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/7, 0x7}, {&(0x7f00000008c0)=""/173, 0xad}], 0x2}}], 0x1, 0x0, 0x0) 264.238018ms ago: executing program 2 (id=426): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32, @ANYBLOB="00005200060005000100000008000800", @ANYRES32], 0x2c}}, 0x0) 143.734852ms ago: executing program 2 (id=427): close(0xffffffffffffffff) write$P9_RMKNOD(0xffffffffffffffff, 0x0, 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0xb, 0x0) munlockall() 137.415375ms ago: executing program 0 (id=428): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)='c', 0x1}], 0x1}, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) rt_sigreturn() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fcntl$dupfd(r2, 0x0, r2) read$watch_queue(r3, &(0x7f0000000300)=""/208, 0xd0) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) 106.495471ms ago: executing program 1 (id=429): memfd_create(0x0, 0x0) ioctl$GIO_UNIMAP(0xffffffffffffffff, 0x4b66, &(0x7f0000004080)={0x2, &(0x7f0000004040)=[{}, {}]}) gettid() poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5414) 105.723277ms ago: executing program 3 (id=430): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000240)='ext4_fc_commit_stop\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f00000004c0)={@empty, 0x0}, &(0x7f0000000500)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000001700)=@bloom_filter={0x1e, 0x4, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0xa91, '\x00', r4, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0xa}, 0x48) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r6, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000000), 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x22042, 0x0) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000500), &(0x7f0000000380)) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private0, 0x4e24, 0x1cf, 0x4e21, 0x7, 0xa, 0x20, 0x0, 0x2c, 0x0, r10}, {0x6, 0x7, 0x8, 0x6, 0x1, 0xffffffffffffffff, 0x4, 0x2}, {0x1, 0x8, 0x1f, 0x800}, 0xfffffffa, 0x6e6bbd, 0x2, 0x0, 0x4, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x27}, 0x4d6, 0x33}, 0x0, @in=@empty, 0x0, 0x2, 0x1, 0x12, 0x9, 0x9, 0xa87e}}, 0xe8) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYRESDEC=r9], 0x15) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x1, 0x81, 0x7fffffff, 0x8, r7, 0x2, '\x00', r8, r9, 0x0, 0x3, 0x5}, 0x48) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a8020000", @ANYRES16=r3, @ANYBLOB="000829bd7000ffdbdf2501000000b80002802400018008000100060000000800010008000000080001000700000008000100030000004c000180080001000300000008000100020000000800010085de886e080001000200000008000100080000000800010005000000080001001da426b1080001000400000008000100070000002400018008000100080000000800010003000000080001000100000008000100070000000c00018008000100010000001400018008000100010000000800010000000000040003004000018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="480003000300000008000100", @ANYRES32=r8, @ANYBLOB="14000200766c616e300000000000000000000000040003006401028024000180080001000100000008000100050000000800010008000000080001000400000014000180080001000400000008000100010000002c000180080001000300000008000100000000000800010005dce2eb080001000400000008000100010000002400018008000100040000000800010002000000080001000200000008000100030000004c0001800800010002000000080001000700000008000100060000000800010005000000080001000500000008000100010000000800010007000000080001000200000008000100020000002c000180080001000600000008000100030000000800010003000000080001000200000008000100010000002c000180080001000800000008000100010000000800010006000000080001000500000008000100060000003400018008000100000000000800010004000000080001000b000000080001000300000008000100000000000800010001000000300002802c000180080001000c0000000800010006000000080001000500000008000100070000000800010006000000"], 0x2a8}, 0x1, 0x0, 0x0, 0x10}, 0x44004) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20004840) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 0s ago: executing program 1 (id=431): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x4, 0x8000, 0x1ff, 0x1060, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b74500000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=0x0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000001c0)='mm_lru_activate\x00', r3}, 0x10) r7 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r7, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000080)={@mcast2}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000200)={@mcast1}, 0x14) bind$inet6(r7, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x246, &(0x7f0000000a40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x210, 0x3a, 0x0, @dev, @mcast2, {[@srh={0x2f, 0x0, 0x4, 0x0, 0xca, 0x60, 0xffff}, @srh={0x0, 0x12, 0x4, 0x9, 0x0, 0x50, 0x2, [@ipv4={'\x00', '\xff\xff', @remote}, @private0, @private0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @dev={0xfe, 0x80, '\x00', 0x1e}, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01']}, @dstopts={0x3c, 0xc, '\x00', [@ra={0x5, 0x2, 0xa307}, @calipso={0x7, 0x50, {0x1, 0x12, 0x45, 0x7, [0x80, 0x6, 0x6, 0x6, 0x1, 0x3, 0x80000000, 0x3, 0xfffffffffffff001]}}, @pad1, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, @fragment={0x2c, 0x0, 0x20, 0x0, 0x0, 0x4, 0x67}, @routing={0x33, 0xc, 0x2, 0x3f, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @private1]}, @srh={0x487862af394a0fab, 0x8, 0x4, 0x4, 0x2, 0x20, 0x40, [@private2, @private1, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast2}]}, @dstopts={0x5c, 0x6, '\x00', [@enc_lim={0x4, 0x1, 0x9}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @ra={0x5, 0x2, 0x3f}, @enc_lim={0x4, 0x1, 0x7f}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @pad1]}], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.26' (ED25519) to the list of known hosts. [ 70.345425][ T5073] cgroup: Unknown subsys name 'net' [ 70.482049][ T5073] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.695582][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.702278][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.284809][ T5073] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.175455][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.184208][ T5086] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.200752][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.208777][ T5095] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.217746][ T5095] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.227046][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.232166][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.235648][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.241909][ T5098] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.250625][ T5095] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.256758][ T5097] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.262601][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.278093][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.285635][ T5097] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.296487][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.303822][ T5097] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.307391][ T5095] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.311198][ T5097] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.331430][ T5097] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.333290][ T5095] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.346404][ T4480] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.347785][ T5097] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.354840][ T4480] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.361876][ T5097] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.369176][ T5095] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.375123][ T5097] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.382018][ T4480] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.390135][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.396450][ T5095] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.413012][ T5097] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.978470][ T5087] chnl_net:caif_netlink_parms(): no params data found [ 74.136144][ T5082] chnl_net:caif_netlink_parms(): no params data found [ 74.166550][ T5093] chnl_net:caif_netlink_parms(): no params data found [ 74.309843][ T5087] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.317227][ T5087] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.325437][ T5087] bridge_slave_0: entered allmulticast mode [ 74.333841][ T5087] bridge_slave_0: entered promiscuous mode [ 74.348931][ T5087] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.356528][ T5087] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.364230][ T5087] bridge_slave_1: entered allmulticast mode [ 74.371269][ T5087] bridge_slave_1: entered promiscuous mode [ 74.399729][ T5083] chnl_net:caif_netlink_parms(): no params data found [ 74.436100][ T5085] chnl_net:caif_netlink_parms(): no params data found [ 74.490847][ T5082] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.498395][ T5082] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.506535][ T5082] bridge_slave_0: entered allmulticast mode [ 74.514807][ T5082] bridge_slave_0: entered promiscuous mode [ 74.526908][ T5087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.577211][ T5082] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.584692][ T5082] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.592671][ T5082] bridge_slave_1: entered allmulticast mode [ 74.600320][ T5082] bridge_slave_1: entered promiscuous mode [ 74.609198][ T5087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.631152][ T5093] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.638507][ T5093] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.646009][ T5093] bridge_slave_0: entered allmulticast mode [ 74.653890][ T5093] bridge_slave_0: entered promiscuous mode [ 74.703875][ T5093] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.711086][ T5093] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.719188][ T5093] bridge_slave_1: entered allmulticast mode [ 74.726669][ T5093] bridge_slave_1: entered promiscuous mode [ 74.777470][ T5082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.830092][ T5082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.855667][ T5087] team0: Port device team_slave_0 added [ 74.876862][ T5093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.890195][ T5093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.939789][ T5087] team0: Port device team_slave_1 added [ 74.973861][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.981019][ T5085] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.988549][ T5085] bridge_slave_0: entered allmulticast mode [ 74.996175][ T5085] bridge_slave_0: entered promiscuous mode [ 75.009809][ T5082] team0: Port device team_slave_0 added [ 75.053909][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.061406][ T5085] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.068920][ T5085] bridge_slave_1: entered allmulticast mode [ 75.076566][ T5085] bridge_slave_1: entered promiscuous mode [ 75.085664][ T5082] team0: Port device team_slave_1 added [ 75.107708][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.115250][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.126627][ T5083] bridge_slave_0: entered allmulticast mode [ 75.134336][ T5083] bridge_slave_0: entered promiscuous mode [ 75.143470][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.150619][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.157919][ T5083] bridge_slave_1: entered allmulticast mode [ 75.165207][ T5083] bridge_slave_1: entered promiscuous mode [ 75.177320][ T5093] team0: Port device team_slave_0 added [ 75.222224][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.229195][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.256007][ T5087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.284732][ T5093] team0: Port device team_slave_1 added [ 75.292682][ T5089] Bluetooth: hci0: command tx timeout [ 75.294580][ T5085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.322881][ T5087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.329864][ T5087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.356347][ T5087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.408266][ T5085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.419205][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.426709][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.452461][ T5097] Bluetooth: hci3: command tx timeout [ 75.453300][ T4480] Bluetooth: hci1: command tx timeout [ 75.458490][ T5097] Bluetooth: hci4: command tx timeout [ 75.465352][ T5082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.470195][ T5089] Bluetooth: hci2: command tx timeout [ 75.482807][ T5082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.493832][ T5082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.520140][ T5082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.543605][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.556553][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.566681][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.574121][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.600470][ T5093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.674908][ T5093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.682111][ T5093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.708599][ T5093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.730403][ T5085] team0: Port device team_slave_0 added [ 75.740002][ T5085] team0: Port device team_slave_1 added [ 75.775928][ T5083] team0: Port device team_slave_0 added [ 75.784888][ T5083] team0: Port device team_slave_1 added [ 75.830827][ T5087] hsr_slave_0: entered promiscuous mode [ 75.837708][ T5087] hsr_slave_1: entered promiscuous mode [ 75.887792][ T5082] hsr_slave_0: entered promiscuous mode [ 75.895578][ T5082] hsr_slave_1: entered promiscuous mode [ 75.902221][ T5082] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.910019][ T5082] Cannot create hsr debugfs directory [ 75.945977][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.953271][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.979447][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.992805][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.999793][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.026185][ T5085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.040196][ T5085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.047551][ T5085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.073868][ T5085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.127044][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.134830][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.160966][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.214138][ T5093] hsr_slave_0: entered promiscuous mode [ 76.220974][ T5093] hsr_slave_1: entered promiscuous mode [ 76.227517][ T5093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.235437][ T5093] Cannot create hsr debugfs directory [ 76.328480][ T5085] hsr_slave_0: entered promiscuous mode [ 76.336512][ T5085] hsr_slave_1: entered promiscuous mode [ 76.343465][ T5085] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.351133][ T5085] Cannot create hsr debugfs directory [ 76.386132][ T5083] hsr_slave_0: entered promiscuous mode [ 76.392756][ T5083] hsr_slave_1: entered promiscuous mode [ 76.399079][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.406934][ T5083] Cannot create hsr debugfs directory [ 76.910620][ T5087] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.932015][ T5087] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.954935][ T5087] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.974579][ T5087] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.009826][ T5082] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.047650][ T5082] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.060721][ T5082] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.087443][ T5082] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.146396][ T5093] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.157874][ T5093] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.171593][ T5093] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.182649][ T5093] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.312517][ T5085] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.325352][ T5085] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.340308][ T5085] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.372419][ T5089] Bluetooth: hci0: command tx timeout [ 77.405053][ T5085] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.450535][ T5087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.519731][ T5083] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.532064][ T5089] Bluetooth: hci2: command tx timeout [ 77.537671][ T5089] Bluetooth: hci4: command tx timeout [ 77.544697][ T5097] Bluetooth: hci1: command tx timeout [ 77.544857][ T4480] Bluetooth: hci3: command tx timeout [ 77.587204][ T5083] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.599536][ T5083] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.627454][ T5083] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.644762][ T5087] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.678377][ T5082] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.688801][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.696340][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.735618][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.742827][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.809278][ T5093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.830615][ T5082] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.881401][ T5093] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.903334][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.910455][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.955814][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.963002][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.991163][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.998368][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.016627][ T5085] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.046161][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.053359][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.161590][ T5082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.186181][ T5082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.258311][ T5093] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.286207][ T5093] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.338961][ T5085] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.394074][ T5135] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.401233][ T5135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.545668][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.565808][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.573211][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.635017][ T5083] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.656438][ T5087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.699367][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.706593][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.751438][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.758678][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.836088][ T5082] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.887290][ T5093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.089270][ T5082] veth0_vlan: entered promiscuous mode [ 79.124923][ T5093] veth0_vlan: entered promiscuous mode [ 79.177820][ T5082] veth1_vlan: entered promiscuous mode [ 79.206022][ T5093] veth1_vlan: entered promiscuous mode [ 79.367047][ T5082] veth0_macvtap: entered promiscuous mode [ 79.396135][ T5087] veth0_vlan: entered promiscuous mode [ 79.418128][ T5082] veth1_macvtap: entered promiscuous mode [ 79.438499][ T5087] veth1_vlan: entered promiscuous mode [ 79.452044][ T4480] Bluetooth: hci0: command tx timeout [ 79.473709][ T5093] veth0_macvtap: entered promiscuous mode [ 79.495759][ T5085] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.508569][ T5093] veth1_macvtap: entered promiscuous mode [ 79.521377][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.561303][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.594187][ T5082] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.618091][ T4480] Bluetooth: hci3: command tx timeout [ 79.620205][ T5097] Bluetooth: hci4: command tx timeout [ 79.623897][ T5095] Bluetooth: hci1: command tx timeout [ 79.629579][ T5089] Bluetooth: hci2: command tx timeout [ 79.645474][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.663673][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.676747][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.694865][ T5093] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.705558][ T5093] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.717840][ T5093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.728134][ T5082] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.737278][ T5082] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.746398][ T5082] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.755551][ T5082] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.786864][ T5087] veth0_macvtap: entered promiscuous mode [ 79.807781][ T5093] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.817052][ T5093] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.827442][ T5093] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.836272][ T5093] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.914078][ T5085] veth0_vlan: entered promiscuous mode [ 79.925891][ T5087] veth1_macvtap: entered promiscuous mode [ 79.991629][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.006600][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.017430][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.028423][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.042337][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.053597][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.064275][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.074205][ T5087] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.084811][ T5087] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.096902][ T5087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.110282][ T5085] veth1_vlan: entered promiscuous mode [ 80.134942][ T5087] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.144356][ T5087] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.153370][ T5087] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.162139][ T5087] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.190024][ T5083] veth0_vlan: entered promiscuous mode [ 80.265105][ T5083] veth1_vlan: entered promiscuous mode [ 80.282502][ T2844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.290623][ T2844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.414794][ T2478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.423410][ T2478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.436879][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.448319][ T5083] veth0_macvtap: entered promiscuous mode [ 80.456796][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.467988][ T5083] veth1_macvtap: entered promiscuous mode [ 80.494508][ T5085] veth0_macvtap: entered promiscuous mode [ 80.535246][ T2844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.556838][ T2844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.616909][ T5085] veth1_macvtap: entered promiscuous mode [ 80.669712][ T2478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.678993][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.699293][ T2478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.708034][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.718806][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.731174][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.741953][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.756988][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.770815][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.815328][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.826274][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.837750][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.848455][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.859393][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.870023][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.880241][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.892937][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.919326][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.950433][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.962844][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.980241][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.990847][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.001389][ T5083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.016225][ T5083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.039786][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.065240][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.080411][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.091517][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.102490][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.114370][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.126480][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.137470][ T5085] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.148191][ T5085] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.160704][ T5085] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.170771][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.198537][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.208218][ T5085] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.234197][ T5085] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.277114][ T5085] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.302149][ T5085] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.367738][ T5083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.383926][ T5083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.395198][ T5083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.406729][ T5083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.542181][ T5089] Bluetooth: hci0: command tx timeout [ 81.548117][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.612501][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.622109][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.632092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.726311][ T5089] Bluetooth: hci2: command tx timeout [ 81.726418][ T4480] Bluetooth: hci1: command tx timeout [ 81.731844][ T5097] Bluetooth: hci3: command tx timeout [ 81.742905][ T5095] Bluetooth: hci4: command tx timeout [ 81.772016][ T0] NOHZ tick-stop error: local softirq work is pending, handler #242!!! [ 81.847614][ T5176] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 82.818410][ T5179] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.193839][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.229697][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.487092][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.508979][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.553064][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.561133][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.770538][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.816369][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.318208][ T5203] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 85.512442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.521350][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.530353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.539613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.994707][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 87.272126][ T5223] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.364439][ T45] cfg80211: failed to load regulatory.db [ 87.372463][ T29] audit: type=1326 audit(1719445312.429:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5206 comm="syz.0.1" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7fc00000 [ 90.661497][ T5250] batadv_slave_1: entered promiscuous mode [ 90.769222][ T5249] batadv_slave_1: left promiscuous mode [ 91.062447][ T5256] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13'. [ 91.292552][ T5262] bridge0: entered promiscuous mode [ 91.315567][ T5261] bridge0: left promiscuous mode [ 91.562510][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 92.363791][ T5285] syz.4.34 uses obsolete (PF_INET,SOCK_PACKET) [ 93.077662][ T5299] tipc: Started in network mode [ 93.091910][ T5299] tipc: Node identity 2007ff, cluster identity 4711 [ 93.121928][ T5299] tipc: Node number set to 2099199 [ 93.152293][ T1054] tipc: Subscription rejected, illegal request [ 93.529986][ T5311] batadv_slave_1: entered promiscuous mode [ 93.668508][ T5309] batadv_slave_1: left promiscuous mode [ 93.842150][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.041895][ T45] usb 2-1: Using ep0 maxpacket: 8 [ 94.049734][ T29] audit: type=1326 audit(1719445319.549:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5320 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 94.093623][ T45] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 94.139375][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.159018][ T29] audit: type=1326 audit(1719445319.549:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5320 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 94.192239][ T45] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.211884][ T45] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.231846][ T29] audit: type=1326 audit(1719445319.549:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5320 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=310 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 94.695570][ T29] audit: type=1326 audit(1719445319.549:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5320 comm="syz.3.48" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 95.101731][ T45] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 95.110831][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.370395][ T45] usb 2-1: usb_control_msg returned -32 [ 95.412118][ T45] usbtmc 2-1:16.0: can't read capabilities [ 95.484548][ T5341] tipc: Started in network mode [ 95.489486][ T5341] tipc: Node identity 2007ff, cluster identity 4711 [ 95.523445][ T5341] tipc: Node number set to 2099199 [ 95.557118][ T12] tipc: Subscription rejected, illegal request [ 95.572871][ T5344] syz.2.53[5344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.573033][ T5344] syz.2.53[5344] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.930487][ T5356] block device autoloading is deprecated and will be removed. [ 95.957485][ T5356] syz.2.56: attempt to access beyond end of device [ 95.957485][ T5356] md102: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 97.771606][ T57] usb 2-1: USB disconnect, device number 2 [ 98.126745][ T5392] syz.1.67[5392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.126914][ T5392] syz.1.67[5392] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.978412][ T5415] netlink: 'syz.4.76': attribute type 4 has an invalid length. [ 99.392608][ T5136] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 99.455271][ T5418] netlink: 'syz.4.76': attribute type 4 has an invalid length. [ 99.518174][ T5418] syz.4.76 (5418) used greatest stack depth: 18448 bytes left [ 99.593555][ T5136] usb 4-1: Using ep0 maxpacket: 8 [ 99.626327][ T5136] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 99.658184][ T5136] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.698055][ T5136] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.733478][ T5136] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.786691][ T5136] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.805464][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.061042][ T5136] usb 4-1: usb_control_msg returned -32 [ 100.081813][ T5136] usbtmc 4-1:16.0: can't read capabilities [ 101.399010][ C1] TCP: request_sock_TCP: Possible SYN flooding on port 127.0.0.1:20002. Sending cookies. [ 102.854897][ T45] usb 4-1: USB disconnect, device number 2 [ 103.057990][ T5496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.101'. [ 103.691209][ T5518] vhci_hcd: invalid port number 16 [ 103.710247][ T5518] vhci_hcd: default hub control req: 2300 v0000 i0010 l0 [ 103.782758][ T5521] netlink: 8 bytes leftover after parsing attributes in process `syz.4.113'. [ 103.825707][ T5523] netlink: 'syz.0.107': attribute type 4 has an invalid length. [ 103.920478][ T5523] netlink: 'syz.0.107': attribute type 4 has an invalid length. [ 104.128842][ T4480] Bluetooth: Unknown BR/EDR signaling command 0x6e [ 104.135878][ T4480] Bluetooth: Wrong link type (-22) [ 104.413815][ T5167] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.601868][ T5167] usb 5-1: Using ep0 maxpacket: 32 [ 104.636599][ T5167] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 104.691861][ T5167] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 104.739297][ T5167] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 104.776742][ T5167] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 104.812852][ T5167] usb 5-1: Product: syz [ 104.827397][ T5167] usb 5-1: Manufacturer: syz [ 104.851871][ T5167] usb 5-1: SerialNumber: syz [ 104.877736][ T5167] usb 5-1: config 0 descriptor?? [ 104.900564][ T5167] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 104.960193][ T5167] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 105.317004][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 105.341966][ T5572] vhci_hcd: invalid port number 16 [ 105.347454][ T5572] vhci_hcd: default hub control req: 2300 v0000 i0010 l0 [ 105.529169][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 105.539759][ T25] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 105.551821][ T25] usb 4-1: config 1 has no interface number 1 [ 105.560212][ T25] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 105.586339][ T25] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.622442][ T25] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 105.635328][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.665648][ T25] usb 4-1: Product: syz [ 105.665699][ T25] usb 4-1: Manufacturer: syz [ 105.665719][ T25] usb 4-1: SerialNumber: syz [ 106.963887][ T5563] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 107.169406][ T25] usb 4-1: 2:1 : format type 0 is detected, processed as PCM [ 107.211140][ T25] usb 4-1: 2:1 : sample bitwidth 63 in over sample bytes 0 [ 107.221884][ T25] usb 4-1: 2:1 : unsupported sample bitwidth 63 in 0 bytes [ 107.332070][ T25] usb 4-1: USB disconnect, device number 3 [ 107.866074][ T5239] udevd[5239]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.597112][ T5136] usb 5-1: USB disconnect, device number 2 [ 108.689734][ T5136] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 109.092635][ T5619] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 109.846855][ T29] audit: type=1326 audit(1719445335.359:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.051161][ T29] audit: type=1326 audit(1719445335.389:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.082466][ T29] audit: type=1326 audit(1719445335.389:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.132877][ T29] audit: type=1326 audit(1719445335.389:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.209005][ T29] audit: type=1326 audit(1719445335.389:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.291819][ T29] audit: type=1326 audit(1719445335.409:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.365064][ T5638] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.368200][ T29] audit: type=1326 audit(1719445335.409:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.441798][ T29] audit: type=1326 audit(1719445335.409:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd363b6cb67 code=0x7ffc0000 [ 110.497908][ T29] audit: type=1326 audit(1719445335.439:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd363b11539 code=0x7ffc0000 [ 110.612752][ T29] audit: type=1326 audit(1719445335.439:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5624 comm="syz.2.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7fd363b75ae9 code=0x7ffc0000 [ 110.981921][ T57] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.044031][ T4480] Bluetooth: Wrong link type (-22) [ 111.193230][ T57] usb 5-1: Using ep0 maxpacket: 16 [ 111.214537][ T57] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 111.241904][ T57] usb 5-1: config 1 has no interface number 1 [ 111.248117][ T57] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 111.282034][ T57] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.305671][ T57] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 111.318271][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.332579][ T57] usb 5-1: Product: syz [ 111.341877][ T57] usb 5-1: Manufacturer: syz [ 111.347579][ T57] usb 5-1: SerialNumber: syz [ 111.789725][ T5651] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 9 (only 8 groups) [ 111.926543][ T57] usb 5-1: 2:1 : format type 0 is detected, processed as PCM [ 111.951838][ T57] usb 5-1: 2:1 : sample bitwidth 63 in over sample bytes 0 [ 111.981254][ T57] usb 5-1: 2:1 : unsupported sample bitwidth 63 in 0 bytes [ 112.035452][ T57] usb 5-1: USB disconnect, device number 3 [ 112.066335][ T5678] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 113.031952][ T5136] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 113.233032][ T5136] usb 4-1: Using ep0 maxpacket: 8 [ 113.247821][ T5136] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 113.290800][ T5136] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.324946][ T5136] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.338604][ T5136] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.365511][ T5136] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.391976][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.654545][ T5136] usb 4-1: usb_control_msg returned -32 [ 113.703315][ T5136] usbtmc 4-1:16.0: can't read capabilities [ 115.775496][ T25] usb 4-1: USB disconnect, device number 4 [ 115.844318][ T5136] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 116.851802][ T5136] usb 3-1: Using ep0 maxpacket: 16 [ 116.859435][ T5136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.870281][ T5136] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 116.888145][ T5136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.900001][ T5136] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 116.923272][ T5136] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.938259][ T5136] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22 [ 116.969002][ T5136] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.987529][ T5136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 116.996347][ T5136] usb 3-1: SerialNumber: syz [ 117.019131][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 117.019152][ T29] audit: type=1326 audit(1719445342.529:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.052355][ T29] audit: type=1326 audit(1719445342.559:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.073937][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.080664][ T29] audit: type=1326 audit(1719445342.559:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.103513][ T29] audit: type=1326 audit(1719445342.559:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.124977][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.177379][ T29] audit: type=1326 audit(1719445342.559:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.242768][ T29] audit: type=1326 audit(1719445342.579:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.639503][ T29] audit: type=1326 audit(1719445342.579:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 117.758803][ T29] audit: type=1326 audit(1719445342.579:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5766 comm="syz.0.200" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07f2f75ae9 code=0x7ffc0000 [ 119.682530][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.882961][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 119.898826][ T8] usb 1-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 119.921814][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.955018][ T8] usb 1-1: New USB device found, idVendor=0001, idProduct=8000, bcdDevice= 0.00 [ 119.976784][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 119.995569][ T8] usb 1-1: SerialNumber: syz [ 120.015603][ T8] hub 1-1:1.0: bad descriptor, ignoring hub [ 120.027605][ T8] hub 1-1:1.0: probe with driver hub failed with error -5 [ 120.050407][ T8] usb 1-1: bad CDC descriptors [ 120.309508][ T8] usb 3-1: USB disconnect, device number 2 [ 120.370586][ T29] audit: type=1326 audit(1719445345.879:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5791 comm="syz.4.207" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x0 [ 120.372943][ T5145] usb 1-1: USB disconnect, device number 2 [ 120.391391][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.709142][ T29] audit: type=1326 audit(1719445346.219:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5800 comm="syz.1.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ed75ae9 code=0x7ffc0000 [ 120.811923][ T8] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.001787][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 121.041780][ T8] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.055251][ T8] usb 3-1: config 179 has no interface number 0 [ 121.070129][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 121.101137][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 121.134400][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.158278][ T8] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 121.184218][ T8] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.228873][ T8] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.248057][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.288606][ T5794] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 121.427680][ T5810] syz.4.215 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.757718][ T5794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.784004][ T5794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.060416][ T5136] usb 3-1: USB disconnect, device number 3 [ 122.060562][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 122.075261][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 122.099074][ T5145] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.031650][ C1] sched: RT throttling activated [ 124.434208][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.452279][ T5145] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.481981][ T5145] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 124.491384][ T5145] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.542191][ T5145] usb 2-1: config 0 descriptor?? [ 124.585490][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 124.585515][ T29] audit: type=1326 audit(1719445350.089:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.637018][ T29] audit: type=1326 audit(1719445350.089:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.662107][ T29] audit: type=1326 audit(1719445350.129:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.691137][ T29] audit: type=1326 audit(1719445350.129:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.715138][ T29] audit: type=1326 audit(1719445350.129:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.763877][ T5145] usbhid 2-1:0.0: can't add hid device: -71 [ 124.769961][ T5145] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 124.788663][ T29] audit: type=1326 audit(1719445350.129:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.819780][ T5145] usb 2-1: USB disconnect, device number 3 [ 124.877013][ T29] audit: type=1326 audit(1719445350.129:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 124.967334][ T29] audit: type=1326 audit(1719445350.129:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5827 comm="syz.3.222" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ef2775ae9 code=0x7ffc0000 [ 126.087168][ T5145] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 126.256748][ T29] audit: type=1326 audit(1719445351.769:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5861 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ed75ae9 code=0x7ffc0000 [ 126.306005][ T29] audit: type=1326 audit(1719445351.789:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=5861 comm="syz.1.235" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4ed75ae9 code=0x7ffc0000 [ 126.352024][ T5145] usb 5-1: Using ep0 maxpacket: 8 [ 126.369011][ T5145] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 126.401809][ T5145] usb 5-1: config 179 has no interface number 0 [ 126.412321][ T5145] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 126.434435][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.471799][ T5145] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 126.497103][ T5145] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 126.512264][ T5145] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 126.535547][ T5145] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 126.556665][ T5145] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 126.568643][ T5145] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.589274][ T5852] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 126.655549][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.681379][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.710803][ T45] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.742128][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.777330][ T45] usb 3-1: config 0 descriptor?? [ 126.832213][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 126.926171][ T5145] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input5 [ 127.046317][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.069599][ T8] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 127.095189][ T8] usb 1-1: config 1 has no interface number 1 [ 127.117821][ T8] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 209, using maximum allowed: 30 [ 127.142587][ T5852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.157345][ T8] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 209 [ 127.171107][ T5852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.200555][ T45] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 127.223429][ T8] usb 1-1: string descriptor 0 read error: -22 [ 127.230909][ T8] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 127.267386][ T5201] usb 5-1: USB disconnect, device number 4 [ 127.267386][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 127.267597][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 127.273762][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.319641][ T45] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 127.320169][ T5201] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 127.399022][ T8] hub 1-1:1.2: bad descriptor, ignoring hub [ 127.408232][ T8] hub 1-1:1.2: probe with driver hub failed with error -5 [ 127.505940][ T45] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 127.547522][ T45] usb 3-1: USB disconnect, device number 4 [ 127.742765][ T8] usb 1-1: USB disconnect, device number 3 [ 128.184920][ T5884] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 128.222024][ T5884] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 129.438861][ T5904] fuse: Bad value for 'fd' [ 130.174439][ T5907] fuse: Bad value for 'fd' [ 131.462382][ T5201] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.758663][ T5201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.781918][ T5201] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.811925][ T5201] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 131.831946][ T5201] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.864194][ T5201] usb 3-1: config 0 descriptor?? [ 132.132429][ T5913] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 132.252071][ T5925] netlink: 'syz.2.256': attribute type 4 has an invalid length. [ 132.569802][ T5201] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 132.599510][ T5201] arvo 0003:1E7D:30D4.0002: unknown main item tag 0x0 [ 132.628634][ T5201] arvo 0003:1E7D:30D4.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 132.768418][ T5201] arvo 0003:1E7D:30D4.0002: couldn't init struct arvo_device [ 132.799274][ T5201] arvo 0003:1E7D:30D4.0002: couldn't install keyboard [ 132.834248][ T5201] arvo 0003:1E7D:30D4.0002: probe with driver arvo failed with error -71 [ 132.891866][ T5201] usb 3-1: USB disconnect, device number 5 [ 133.093972][ T4480] Bluetooth: Wrong link type (-22) [ 133.099404][ T4480] Bluetooth: hci3: link tx timeout [ 133.106850][ T4480] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 133.144987][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.151357][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.198648][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 133.198669][ T29] audit: type=1800 audit(1719445358.699:108): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.265" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 133.281864][ T29] audit: type=1800 audit(1719445358.709:109): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.265" name="bus" dev="sda1" ino=1969 res=0 errno=0 [ 133.344925][ T5945] wg2: entered promiscuous mode [ 133.349865][ T5945] wg2: entered allmulticast mode [ 134.722728][ T5965] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.030239][ T5167] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 135.133852][ T4480] Bluetooth: hci3: command 0x0406 tx timeout [ 135.241894][ T5167] usb 3-1: Using ep0 maxpacket: 16 [ 135.266702][ T5167] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 135.311704][ T5167] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 135.342502][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.370843][ T5167] usb 3-1: config 0 descriptor?? [ 136.021830][ T5167] usbhid 3-1:0.0: can't add hid device: -71 [ 136.029897][ T5167] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 136.092113][ T5167] usb 3-1: USB disconnect, device number 6 [ 136.402826][ T4480] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.441288][ T4480] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.454435][ T4480] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.468067][ T4480] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.478845][ T4480] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 136.486838][ T4480] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.653962][ T1096] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.585442][ T1096] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.752961][ T1096] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.878840][ T1096] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.051157][ T5095] Bluetooth: Wrong link type (-22) [ 138.311844][ T5167] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.329310][ T1096] bridge_slave_1: left allmulticast mode [ 138.354227][ T1096] bridge_slave_1: left promiscuous mode [ 138.362103][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.429277][ T1096] bridge_slave_0: left allmulticast mode [ 138.442220][ T1096] bridge_slave_0: left promiscuous mode [ 138.453347][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.521967][ T5167] usb 4-1: Using ep0 maxpacket: 8 [ 138.529178][ T5167] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 138.550211][ T5167] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 138.577474][ T5095] Bluetooth: hci1: command tx timeout [ 138.587687][ T5167] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.628402][ T5167] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 138.671817][ T5167] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.694189][ T5167] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.716324][ T5167] usbtmc 4-1:16.0: bulk endpoints not found [ 140.334502][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.374190][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.387944][ T1096] bond0 (unregistering): Released all slaves [ 140.420019][ T5987] chnl_net:caif_netlink_parms(): no params data found [ 140.653548][ T5095] Bluetooth: hci1: command tx timeout [ 140.691422][ T5987] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.711260][ T5987] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.719475][ T5987] bridge_slave_0: entered allmulticast mode [ 140.727435][ T5987] bridge_slave_0: entered promiscuous mode [ 140.736807][ T5987] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.744570][ T5987] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.752506][ T5987] bridge_slave_1: entered allmulticast mode [ 140.762866][ T5987] bridge_slave_1: entered promiscuous mode [ 140.842003][ T5167] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.033996][ T5167] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 141.047035][ T5167] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.052323][ T785] usb 4-1: USB disconnect, device number 5 [ 141.508429][ T5987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.646972][ T5987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.769480][ T1096] hsr_slave_0: left promiscuous mode [ 141.800073][ T1096] hsr_slave_1: left promiscuous mode [ 141.823206][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.837978][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.873300][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.883367][ T5167] usb 3-1: config 0 descriptor?? [ 141.903598][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.978084][ T1096] veth1_macvtap: left promiscuous mode [ 142.003557][ T1096] veth0_macvtap: left promiscuous mode [ 142.012665][ T785] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 142.030726][ T1096] veth1_vlan: left promiscuous mode [ 142.047974][ T1096] veth0_vlan: left promiscuous mode [ 142.215488][ T785] usb 4-1: Using ep0 maxpacket: 16 [ 142.225902][ T785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 142.246473][ T785] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 142.258263][ T785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.279595][ T785] usb 4-1: config 0 descriptor?? [ 142.705536][ T6075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.723737][ T6075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.734222][ T5095] Bluetooth: hci1: command tx timeout [ 142.765081][ T785] hid (null): invalid report_size 24429 [ 142.799024][ T785] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1 [ 142.833052][ T785] hid-generic 0003:0158:0100.0003: unexpected long global item [ 142.856249][ T785] hid-generic 0003:0158:0100.0003: probe with driver hid-generic failed with error -22 [ 142.973256][ T8] usb 4-1: USB disconnect, device number 6 [ 143.152978][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 143.162813][ T5167] usb 3-1: Cannot set autoneg [ 143.170130][ T5167] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 143.198798][ T5167] usb 3-1: USB disconnect, device number 7 [ 143.243890][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 143.550646][ T6110] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 144.449872][ T4480] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 144.466696][ T4480] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 144.476651][ T4480] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 144.497281][ T4480] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 144.505612][ T4480] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 144.514511][ T4480] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 144.570354][ T5987] team0: Port device team_slave_0 added [ 144.690962][ T6116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.722516][ T6116] team0: Port device bond0 added [ 144.812773][ T4480] Bluetooth: hci1: command tx timeout [ 144.848236][ T5987] team0: Port device team_slave_1 added [ 145.041192][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.064774][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.121287][ T5987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.143072][ T6132] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 145.160789][ T5987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.183980][ T5987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.234693][ T5987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.577114][ T5987] hsr_slave_0: entered promiscuous mode [ 145.612308][ T5987] hsr_slave_1: entered promiscuous mode [ 145.626726][ T5987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.634486][ T5987] Cannot create hsr debugfs directory [ 146.573893][ T4480] Bluetooth: hci2: command tx timeout [ 146.788829][ T1096] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.003806][ T1096] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.127056][ T1096] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.265642][ T1096] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.334298][ T6123] chnl_net:caif_netlink_parms(): no params data found [ 147.770493][ T6123] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.785129][ T6123] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.802796][ T6123] bridge_slave_0: entered allmulticast mode [ 147.816783][ T6123] bridge_slave_0: entered promiscuous mode [ 147.920985][ T6123] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.941095][ T6123] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.949818][ T6123] bridge_slave_1: entered allmulticast mode [ 147.991759][ T6123] bridge_slave_1: entered promiscuous mode [ 148.060178][ T5987] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.190754][ T6123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.212681][ T5987] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.261899][ T1096] bridge_slave_1: left allmulticast mode [ 148.267623][ T1096] bridge_slave_1: left promiscuous mode [ 148.285874][ T1096] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.316839][ T1096] bridge_slave_0: left allmulticast mode [ 148.333052][ T1096] bridge_slave_0: left promiscuous mode [ 148.338887][ T1096] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.651915][ T4480] Bluetooth: hci2: command tx timeout [ 149.861353][ T1096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.874705][ T1096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.890245][ T1096] bond0 (unregistering): Released all slaves [ 149.926298][ T6123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.940997][ T5987] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 149.953834][ T5987] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 150.015023][ T1096] tipc: Left network mode [ 150.211600][ T6123] team0: Port device team_slave_0 added [ 150.226641][ T6123] team0: Port device team_slave_1 added [ 150.232400][ T785] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 150.363293][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.370501][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.407194][ T6123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.434024][ T6123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.441018][ T6123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.467454][ T785] usb 5-1: Using ep0 maxpacket: 32 [ 150.473095][ T6123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.503115][ T785] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.521905][ T785] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.542668][ T785] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 150.557403][ T785] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.577323][ T1096] hsr_slave_0: left promiscuous mode [ 150.580929][ T785] hub 5-1:4.0: USB hub found [ 150.594372][ T1096] hsr_slave_1: left promiscuous mode [ 150.603791][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.612449][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.629195][ T1096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.639986][ T1096] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.693457][ T6229] Zero length message leads to an empty skb [ 150.699416][ T1096] veth1_macvtap: left promiscuous mode [ 150.705488][ T1096] veth0_macvtap: left promiscuous mode [ 150.711286][ T1096] veth1_vlan: left promiscuous mode [ 150.724084][ T1096] veth0_vlan: left promiscuous mode [ 150.743118][ T4480] Bluetooth: hci2: command tx timeout [ 150.807899][ T785] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 151.864216][ T45] usb 5-1: USB disconnect, device number 5 [ 152.187277][ T1096] team0 (unregistering): Port device team_slave_1 removed [ 152.191840][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 152.250853][ T1096] team0 (unregistering): Port device team_slave_0 removed [ 152.310384][ T29] audit: type=1326 audit(1719445377.819:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.343176][ T29] audit: type=1326 audit(1719445377.849:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.377404][ T29] audit: type=1326 audit(1719445377.849:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.406828][ T29] audit: type=1326 audit(1719445377.849:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.435755][ T45] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 152.454607][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.460539][ T29] audit: type=1326 audit(1719445377.849:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.489715][ T45] usb 2-1: config 0 descriptor?? [ 152.506259][ T29] audit: type=1326 audit(1719445377.849:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.544492][ T29] audit: type=1326 audit(1719445377.849:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.566361][ T29] audit: type=1326 audit(1719445377.849:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.588013][ T29] audit: type=1326 audit(1719445377.849:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.616184][ T29] audit: type=1326 audit(1719445377.849:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6246 comm="syz.4.373" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2df75ae9 code=0x7ffc0000 [ 152.812522][ T4480] Bluetooth: hci2: command tx timeout [ 153.016661][ T6123] hsr_slave_0: entered promiscuous mode [ 153.026508][ T6123] hsr_slave_1: entered promiscuous mode [ 153.038597][ T6123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.050704][ T6123] Cannot create hsr debugfs directory [ 154.274249][ T5987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.333150][ T45] usb 2-1: Cannot set autoneg [ 154.384944][ T45] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 154.431539][ T45] usb 2-1: USB disconnect, device number 4 [ 154.562852][ T5987] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.596652][ T5136] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.603962][ T5136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.660421][ T5136] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.667720][ T5136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.756097][ T6273] Driver unsupported XDP return value 0 on prog (id 109) dev N/A, expect packet loss! [ 155.779216][ T6123] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.798929][ T6123] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.816923][ T6123] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.838018][ T6123] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.946408][ T5987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.090470][ T5987] veth0_vlan: entered promiscuous mode [ 156.135607][ T5987] veth1_vlan: entered promiscuous mode [ 156.183832][ T6123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.238083][ T6123] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.264684][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.272034][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.312823][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.320049][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.350452][ T5987] veth0_macvtap: entered promiscuous mode [ 156.383161][ T5987] veth1_macvtap: entered promiscuous mode [ 156.435916][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.448391][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.458852][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.469572][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.490219][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 156.501100][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.524138][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.546752][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.568483][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.589803][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.600488][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.610415][ T5987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 156.621453][ T5987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.635256][ T5987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.655337][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 156.687150][ T5987] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.696231][ T5987] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.709114][ T5987] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.722941][ T5987] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.952872][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.981528][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.107316][ T2844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.152500][ T2844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.252937][ T6338] capability: warning: `syz.2.406' uses deprecated v2 capabilities in a way that may be insecure [ 157.331871][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 157.331892][ T29] audit: type=1800 audit(1719445382.839:125): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.281" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 157.350373][ T6123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.388955][ T29] audit: type=1800 audit(1719445382.889:126): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.281" name="bus" dev="sda1" ino=1958 res=0 errno=0 [ 157.466475][ T6341] wg2: entered promiscuous mode [ 157.471398][ T6341] wg2: entered allmulticast mode [ 157.626824][ T6123] veth0_vlan: entered promiscuous mode [ 157.686416][ T6123] veth1_vlan: entered promiscuous mode [ 157.820110][ T6123] veth0_macvtap: entered promiscuous mode [ 157.849586][ T6123] veth1_macvtap: entered promiscuous mode [ 157.924860][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.963302][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.988349][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.030593][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.058830][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.084038][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.100382][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.111577][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.172225][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.239978][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.285314][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.310533][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.338292][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.386096][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.420456][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.447775][ T6123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.485289][ T6123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.514246][ T6123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.569999][ T6123] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.621712][ T6123] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.644563][ T6123] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.667005][ T6123] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.928018][ T2453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.952111][ T2453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.067677][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.076491][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.380387][ T4480] Bluetooth: Wrong link type (-22) [ 160.848577][ T6405] kernel profiling enabled (shift: 0) [ 160.891640][ C1] ================================================================== [ 160.899759][ C1] BUG: KASAN: stack-out-of-bounds in profile_pc+0xd2/0x170 [ 160.907036][ C1] Read of size 8 at addr ffffc90004067a80 by task syz.2.427/6400 [ 160.914784][ C1] [ 160.917136][ C1] CPU: 1 PID: 6400 Comm: syz.2.427 Not tainted 6.10.0-rc5-syzkaller-00018-g55027e689933 #0 [ 160.927138][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 160.937231][ C1] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 160.940538][ C1] [ 160.943405][ C1] dump_stack_lvl+0x241/0x360 [ 160.948138][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.953383][ C1] ? __pfx__printk+0x10/0x10 [ 160.958014][ C1] ? _printk+0xd5/0x120 [ 160.962216][ C1] print_report+0x169/0x550 [ 160.966764][ C1] ? __virt_addr_valid+0xbd/0x520 [ 160.971828][ C1] ? profile_pc+0xd2/0x170 [ 160.976285][ C1] kasan_report+0x143/0x180 [ 160.980843][ C1] ? profile_pc+0xd2/0x170 [ 160.985311][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 160.991261][ C1] profile_pc+0xd2/0x170 [ 160.995549][ C1] profile_tick+0xd7/0x150 [ 161.000102][ C1] tick_nohz_handler+0x386/0x500 [ 161.005092][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 161.010601][ C1] __hrtimer_run_queues+0x551/0xd50 [ 161.015844][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 161.021913][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 161.028034][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 161.034184][ C1] hrtimer_interrupt+0x396/0x990 [ 161.039181][ C1] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 161.045207][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 161.050880][ C1] [ 161.053846][ C1] [ 161.056816][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 161.062873][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 161.069428][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 9e 9b 70 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 c3 ad dd f5 65 8b 05 e4 e7 7b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 161.089081][ C1] RSP: 0018:ffffc90004067a80 EFLAGS: 00000206 [ 161.095210][ C1] RAX: 67d39fd94b587100 RBX: 1ffff9200080cf54 RCX: ffffffff94769603 [ 161.103215][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb80 RDI: 0000000000000001 [ 161.111226][ C1] RBP: ffffc90004067b10 R08: ffffffff8fac216f R09: 1ffffffff1f5842d [ 161.119236][ C1] R10: dffffc0000000000 R11: fffffbfff1f5842e R12: dffffc0000000000 [ 161.127253][ C1] R13: 1ffff9200080cf50 R14: ffffc90004067aa0 R15: 0000000000000246 [ 161.135272][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 161.141649]