last executing test programs: 4m47.53764982s ago: executing program 1 (id=31): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6161, 0x4d15, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0) syz_usb_connect(0x2, 0x6d, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xca, 0xb8, 0xd7, 0x8, 0x10c4, 0x82f1, 0x7c9b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5b, 0x2, 0x8, 0xc, 0xd0, 0x7f, [{{0x9, 0x4, 0xe9, 0xf9, 0x0, 0x33, 0xd9, 0xac, 0x6}}, {{0x9, 0x4, 0x1b, 0xd, 0x1, 0x6, 0x6b, 0x5b, 0x8, [], [{{0x9, 0x5, 0x7, 0x3, 0x40, 0x0, 0x3, 0x2, [@generic={0x37, 0x1, "4dc237dc6a23d155eec7df55790efdbbd367d55dbe83a1e58c09ec24bd41fd206136bfbef209013edbe09d8ed40f3638c22c053cdb"}]}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 4m44.411481496s ago: executing program 1 (id=41): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f076bbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x14, 0x3a, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 4m40.784383412s ago: executing program 1 (id=46): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x20000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, 0x0, 0x0) 4m40.379001338s ago: executing program 1 (id=51): openat(0xffffffffffffff9c, 0x0, 0xd40, 0xd2) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000034000)=""/102392, 0x18ff8) 4m29.611893733s ago: executing program 1 (id=66): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x80, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 4m28.294983084s ago: executing program 1 (id=72): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x14, 0x9, 0x7, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e20, 0x788, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}}]}, 0x38}}, 0x4000040) 4m13.147481869s ago: executing program 32 (id=72): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x14, 0x9, 0x7, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e20, 0x788, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}}]}, 0x38}}, 0x4000040) 3m19.94355884s ago: executing program 3 (id=169): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$netlink(0x10, 0x3, 0x0) syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d1, 0x800, 0x1, 0x35c}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0) 3m17.811657966s ago: executing program 3 (id=174): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 3m15.17719493s ago: executing program 3 (id=178): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x14, 0x9, 0x7, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e20, 0x788, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}}]}, 0x38}}, 0x4000040) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) fallocate(r0, 0x11, 0x0, 0x7c000) 3m11.304250357s ago: executing program 3 (id=182): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f0000000080)='./file0\x00', 0x848000, 0x2) r3 = shmget$private(0x0, 0x4000, 0x1, &(0x7f0000558000/0x4000)=nil) shmat(r3, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x14, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @private0}}}}}}, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x80000) recvmsg(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(0xffffffffffffffff, 0xc018643a, &(0x7f0000000280)={0x0, 0x80000000, 0x80000001}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 3m9.8532726s ago: executing program 3 (id=185): r0 = socket$inet6(0xa, 0x2, 0x0) socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r5, &(0x7f0000000840), 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000800)={r6, r6, r6}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}}) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 3m8.348945865s ago: executing program 3 (id=187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m49.02331933s ago: executing program 33 (id=187): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1m52.544225399s ago: executing program 2 (id=287): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r4, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) 1m49.17906849s ago: executing program 2 (id=291): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "8d826a6d"}]}}, 0x0}, 0x0) 1m47.682171763s ago: executing program 2 (id=294): r0 = socket(0x11, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x0, 0x2c1}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={0x0}}, 0x20000000) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5c, 0x10}) setsockopt$SO_J1939_SEND_PRIO(r1, 0x6b, 0x3, &(0x7f0000000080)=0x700, 0x4) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f00000063c0)=""/1024, 0x400) 1m41.848747629s ago: executing program 2 (id=297): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000380)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x4, 0x2, 0x3, 0x8000, 0x1a67cfa1d6fc96dc, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, 0x80, 0x1, 0x2, 0x1}}) fsync(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet(0x2, 0x2, 0x1) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0xc1da, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0xef92, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x3f, &(0x7f0000000100)={0x0, 0x3938700}, 0x0) 1m40.202554293s ago: executing program 2 (id=301): add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) syz_open_dev$sndctrl(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0x2000000}, 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000040), 0x9, 0x0) 1m39.172678924s ago: executing program 2 (id=303): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 1m22.742337584s ago: executing program 34 (id=303): connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000002c0)=""/100, &(0x7f0000000500)=""/74, 0xeeef0000}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000240), 0x2) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f00000009c0)=""/251, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) unshare(0x64000600) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000200)=&(0x7f0000000180)) openat$iommufd(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 10.351172025s ago: executing program 4 (id=382): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070908be0083"], 0x0}, 0x0) 7.773699486s ago: executing program 4 (id=386): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1, 0x0, 0xffffffff007fffff}) 7.550835897s ago: executing program 4 (id=387): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005"], 0x80}}, 0x48800) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 5.685354651s ago: executing program 4 (id=388): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000044082, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/tcp6\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[], 0xf8) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)={0x10, 0x140d, 0xe3263c25d365e57d, 0x70bd2a, 0x25dfdbff}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000500)={0x2, 0x14, 0x9, 0x7, 0x7, 0x0, 0x70bd2a, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x2b, 0x80, 0x0, @in6={0xa, 0x4e20, 0x788, @dev={0xfe, 0x80, '\x00', 0x19}, 0x5}}]}, 0x38}}, 0x4000040) bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 5.684067892s ago: executing program 0 (id=389): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) fsmount(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0xbaebfbc4237eee37, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_pidfd_open(0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) ioctl$sock_SIOCINQ(r4, 0x541b, &(0x7f0000000080)) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000040)={{0x3, 0x1, 0xbf0e, 0x3}}) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(r6, 0x5608, 0x3) setns(r3, 0x24020000) fallocate(0xffffffffffffffff, 0x8, 0x0, 0x10000) setns(0xffffffffffffffff, 0x10000000) 4.302261208s ago: executing program 0 (id=390): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc00", 0xe) r4 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x4048000}], 0x1, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/36, 0x24}, {0x0}], 0x2}, 0xc3}], 0x1, 0x2003, 0x0) 2.956882682s ago: executing program 4 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(0x0, r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet(0x2, 0x1, 0x400) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) read$FUSE(r1, 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000240)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0xffff, 0xffff}, {0xc, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4009c}, 0x4000080) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000280)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) 2.873469486s ago: executing program 0 (id=392): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) 2.63512043s ago: executing program 0 (id=393): mq_open(&(0x7f0000000080)='!selin\xdb\xa1\x02\xbf\xd9l\xd7\xcd\xc0uxse\xee\x0e\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>\xba', 0x6e93ebbbcc088cf2, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000ddc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mkdir(&(0x7f0000000180)='./file0/../file0/file0\x00', 0x0) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x24, 0x0, 0x41046100, 0x0, 0x8, 0xf7, 0x0, 0x0, 0x0, 0x1}}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) pidfd_send_signal(r7, 0x11, 0x0, 0x4) syz_fuse_handle_req(r1, &(0x7f0000004280)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0xe81, {0x6, 0x3, 0x2, 0x800000000400000, 0x81, 0x0, {0x6, 0x7fff, 0x80000000002, 0x80000000004, 0x400000000000, 0x6, 0x200, 0x0, 0x1, 0x5000, 0x7, r3, r4, 0x0, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000100)) syz_open_dev$sndpcmp(0x0, 0x38000000, 0x410c00) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x9, 0x0, 0x0) 1.722812047s ago: executing program 4 (id=394): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a9000070908be0083"], 0x0}, 0x0) 1.721163558s ago: executing program 0 (id=395): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070000001f00001a000000030000a95a6e870200010000e9ff070040000200000000050005"], 0x80}}, 0x48800) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) 0s ago: executing program 0 (id=396): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bea100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001fc0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x1, 0x8, 0x9}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a603f00000000000500000014000500200100000000000000000100000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. [ 83.640268][ T5826] cgroup: Unknown subsys name 'net' [ 83.870775][ T5826] cgroup: Unknown subsys name 'cpuset' [ 83.926291][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.775525][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.779012][ T989] cfg80211: failed to load regulatory.db [ 88.356672][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.369864][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.386006][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.387212][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.388414][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.432065][ T5155] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.433300][ T5155] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.434089][ T5155] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.458909][ T5155] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.459779][ T5155] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.596416][ T5155] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.597840][ T5155] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.598521][ T5155] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.599753][ T5155] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.600589][ T5155] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.673708][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.675493][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.692933][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.704383][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.706280][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.758646][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.760703][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.761339][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.764675][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.800140][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.310172][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.530963][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 89.989694][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 89.997098][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.998125][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.998722][ T5839] bridge_slave_0: entered allmulticast mode [ 90.001774][ T5839] bridge_slave_0: entered promiscuous mode [ 90.008727][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.052623][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.052750][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.052893][ T5839] bridge_slave_1: entered allmulticast mode [ 90.054553][ T5839] bridge_slave_1: entered promiscuous mode [ 90.177765][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 90.466914][ T5837] Bluetooth: hci0: command tx timeout [ 90.535929][ T5837] Bluetooth: hci1: command tx timeout [ 90.598344][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.598443][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.598589][ T5836] bridge_slave_0: entered allmulticast mode [ 90.600391][ T5836] bridge_slave_0: entered promiscuous mode [ 90.659937][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.667940][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.668077][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.668573][ T5836] bridge_slave_1: entered allmulticast mode [ 90.671532][ T5836] bridge_slave_1: entered promiscuous mode [ 90.700884][ T5837] Bluetooth: hci2: command tx timeout [ 90.775854][ T5837] Bluetooth: hci3: command tx timeout [ 90.793530][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.856005][ T5837] Bluetooth: hci4: command tx timeout [ 91.280687][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.359623][ T5839] team0: Port device team_slave_0 added [ 91.445296][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.527587][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.528110][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.528305][ T5842] bridge_slave_0: entered allmulticast mode [ 91.531217][ T5842] bridge_slave_0: entered promiscuous mode [ 91.563200][ T5839] team0: Port device team_slave_1 added [ 91.563873][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.564000][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.564166][ T5844] bridge_slave_0: entered allmulticast mode [ 91.576249][ T5844] bridge_slave_0: entered promiscuous mode [ 91.888045][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.888150][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.888285][ T5842] bridge_slave_1: entered allmulticast mode [ 91.890181][ T5842] bridge_slave_1: entered promiscuous mode [ 91.989840][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.989939][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.990274][ T5844] bridge_slave_1: entered allmulticast mode [ 91.991891][ T5844] bridge_slave_1: entered promiscuous mode [ 92.091892][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.092045][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.092753][ T5847] bridge_slave_0: entered allmulticast mode [ 92.094501][ T5847] bridge_slave_0: entered promiscuous mode [ 92.333189][ T5836] team0: Port device team_slave_0 added [ 92.333714][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.333869][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.334046][ T5847] bridge_slave_1: entered allmulticast mode [ 92.344233][ T5847] bridge_slave_1: entered promiscuous mode [ 92.439295][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.439319][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.439348][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.536905][ T5837] Bluetooth: hci0: command tx timeout [ 92.554472][ T5836] team0: Port device team_slave_1 added [ 92.615943][ T5837] Bluetooth: hci1: command tx timeout [ 92.633255][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.635120][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.635133][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.635157][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.640025][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.786002][ T5837] Bluetooth: hci2: command tx timeout [ 92.837800][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.855075][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.861374][ T5837] Bluetooth: hci3: command tx timeout [ 92.936065][ T5837] Bluetooth: hci4: command tx timeout [ 93.084234][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.264950][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.264962][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.264981][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.272255][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.398596][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.398613][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.398640][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.518452][ T5842] team0: Port device team_slave_0 added [ 93.611407][ T5844] team0: Port device team_slave_0 added [ 93.692924][ T5842] team0: Port device team_slave_1 added [ 93.770772][ T5844] team0: Port device team_slave_1 added [ 93.776397][ T5847] team0: Port device team_slave_0 added [ 93.854977][ T5839] hsr_slave_0: entered promiscuous mode [ 93.856420][ T5839] hsr_slave_1: entered promiscuous mode [ 93.962219][ T5847] team0: Port device team_slave_1 added [ 94.488590][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.488607][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.488645][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.490383][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.490398][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.490427][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.617214][ T5837] Bluetooth: hci0: command tx timeout [ 94.696012][ T5837] Bluetooth: hci1: command tx timeout [ 94.764287][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.764304][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.764333][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.765485][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.765496][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.765515][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.791986][ T5836] hsr_slave_0: entered promiscuous mode [ 94.793457][ T5836] hsr_slave_1: entered promiscuous mode [ 94.794582][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 94.794706][ T5836] Cannot create hsr debugfs directory [ 94.837526][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.837543][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.837574][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.865952][ T5837] Bluetooth: hci2: command tx timeout [ 94.936973][ T5837] Bluetooth: hci3: command tx timeout [ 95.007354][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.007370][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.007389][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.015837][ T5837] Bluetooth: hci4: command tx timeout [ 95.680979][ T5842] hsr_slave_0: entered promiscuous mode [ 95.681856][ T5842] hsr_slave_1: entered promiscuous mode [ 95.682552][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 95.682572][ T5842] Cannot create hsr debugfs directory [ 95.702624][ T5844] hsr_slave_0: entered promiscuous mode [ 95.704082][ T5844] hsr_slave_1: entered promiscuous mode [ 95.705009][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 95.705035][ T5844] Cannot create hsr debugfs directory [ 95.833784][ T5847] hsr_slave_0: entered promiscuous mode [ 95.835098][ T5847] hsr_slave_1: entered promiscuous mode [ 95.840457][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 95.840484][ T5847] Cannot create hsr debugfs directory [ 96.696011][ T5837] Bluetooth: hci0: command tx timeout [ 96.776068][ T5837] Bluetooth: hci1: command tx timeout [ 96.937210][ T5837] Bluetooth: hci2: command tx timeout [ 97.016437][ T5837] Bluetooth: hci3: command tx timeout [ 97.095924][ T5837] Bluetooth: hci4: command tx timeout [ 97.281568][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.306492][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.343642][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.375461][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.512629][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.544975][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.604439][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.643357][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.755679][ T5844] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.794610][ T5844] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.860951][ T5844] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.893717][ T5844] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.021662][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.088583][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.144720][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.203052][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.363020][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.412711][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.460135][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.509603][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.552734][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.662113][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.674267][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.708583][ T1509] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.709235][ T1509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.765816][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.765955][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.817168][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.844108][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.867421][ T1468] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.867550][ T1468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.916876][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.917047][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.980478][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.000014][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.033767][ T1338] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.033903][ T1338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.088687][ T1338] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.088836][ T1338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.178774][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.233070][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.240243][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.240946][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.302686][ T1468] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.315880][ T1468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.419813][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.486544][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.486693][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.523493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.523704][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.690792][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.868196][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.194207][ T5836] veth0_vlan: entered promiscuous mode [ 100.306563][ T5836] veth1_vlan: entered promiscuous mode [ 100.350187][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.524148][ T5836] veth0_macvtap: entered promiscuous mode [ 100.530980][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.562163][ T5836] veth1_macvtap: entered promiscuous mode [ 100.593389][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.649361][ T5844] veth0_vlan: entered promiscuous mode [ 100.684869][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.722547][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.725416][ T5844] veth1_vlan: entered promiscuous mode [ 100.757221][ T5839] veth0_vlan: entered promiscuous mode [ 100.790219][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.793865][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.819662][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.830797][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.854825][ T5839] veth1_vlan: entered promiscuous mode [ 100.866370][ T5842] veth0_vlan: entered promiscuous mode [ 101.005336][ T5847] veth0_vlan: entered promiscuous mode [ 101.028432][ T5842] veth1_vlan: entered promiscuous mode [ 101.122409][ T5844] veth0_macvtap: entered promiscuous mode [ 101.142330][ T5847] veth1_vlan: entered promiscuous mode [ 101.174134][ T5844] veth1_macvtap: entered promiscuous mode [ 101.222606][ T1338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.222629][ T1338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.257089][ T5839] veth0_macvtap: entered promiscuous mode [ 101.304348][ T5839] veth1_macvtap: entered promiscuous mode [ 101.332790][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.371524][ T1338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.371541][ T1338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.393001][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.393584][ T5842] veth0_macvtap: entered promiscuous mode [ 101.454725][ T5842] veth1_macvtap: entered promiscuous mode [ 101.472186][ T3609] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.475318][ T5847] veth0_macvtap: entered promiscuous mode [ 101.477494][ T3609] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.480226][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.484935][ T3609] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.518951][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535831][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.537291][ T5847] veth1_macvtap: entered promiscuous mode [ 101.603640][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.620731][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.663599][ T57] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.702040][ T57] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.717443][ T57] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.808789][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.833402][ T5952] pim6reg: entered allmulticast mode [ 101.918307][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.920162][ T1509] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.933857][ T1509] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.954856][ T1509] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.988628][ T1509] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.008374][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.030398][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.030416][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.160627][ T69] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.201055][ T69] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.208416][ T69] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.285316][ T1180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.313067][ T5958] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.504819][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.504836][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.703061][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.703083][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.879276][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.879297][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.969007][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.969029][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.288160][ T1180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.288176][ T1180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.318694][ T5971] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 103.396064][ T5971] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.543728][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.543749][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.577934][ T5974] ubi31: attaching mtd0 [ 103.617917][ T5974] ubi31: scanning is finished [ 103.617950][ T5974] ubi31: empty MTD device detected [ 103.718370][ T5971] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 104.015342][ T5974] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 104.168953][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.168975][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.531189][ T5992] netlink: 228 bytes leftover after parsing attributes in process `syz.4.13'. [ 104.646049][ T5908] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 105.704047][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 105.704082][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.704121][ T5908] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 105.704144][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.806391][ T5908] usb 3-1: config 0 descriptor?? [ 107.724498][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 107.724688][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 107.780466][ T5908] usb 3-1: USB disconnect, device number 2 [ 107.925756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.934743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.935740][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.945743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.955737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.965727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.975734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.985733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.995729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.005728][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.401470][ T6023] tmpfs: Bad value for 'huge' [ 110.182115][ T6036] pim6reg: entered allmulticast mode [ 114.937463][ T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.089450][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 115.109082][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.109106][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.109134][ T31] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 115.109151][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.191366][ T31] usb 2-1: config 0 descriptor?? [ 115.422102][ T6058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.422889][ T6058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.640430][ T31] hid (null): unknown global tag 0xc [ 115.842603][ T31] usb 2-1: string descriptor 0 read error: -71 [ 115.871277][ T31] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 115.871369][ T31] letsketch 0003:6161:4D15.0001: probe with driver letsketch failed with error -32 [ 116.280654][ T31] usb 2-1: USB disconnect, device number 2 [ 121.448417][ T6106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.47'. [ 122.607651][ T37] audit: type=1800 audit(1757473053.227:2): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.52" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 123.205789][ T6118] tty tty2: ldisc open failed (-12), clearing slot 1 [ 124.393372][ T6136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 128.617102][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 128.999247][ T6163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.60'. [ 129.192184][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.489057][ T6173] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 132.295552][ T6163] bridge_slave_1 (unregistering): left allmulticast mode [ 132.295584][ T6163] bridge_slave_1 (unregistering): left promiscuous mode [ 132.296713][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.283378][ T6184] sd 0:0:1:0: device reset [ 133.939396][ T6192] netlink: 228 bytes leftover after parsing attributes in process `syz.4.69'. [ 135.040929][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.73'. [ 136.162671][ T37] audit: type=1800 audit(1757473066.597:3): pid=6213 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.77" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 136.974839][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.636411][ T5869] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 137.636434][ T5869] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 137.636458][ T5869] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 137.636472][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.720500][ T6220] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.753285][ T5869] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.208709][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.208800][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.673239][ T49] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 139.998059][ T6238] netlink: 228 bytes leftover after parsing attributes in process `syz.2.85'. [ 140.388209][ T49] usb 5-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 140.388242][ T49] usb 5-1: config 0 interface 0 has no altsetting 0 [ 140.388274][ T49] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 140.388295][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.479018][ T6013] usb 1-1: USB disconnect, device number 2 [ 140.720783][ T49] usb 5-1: config 0 descriptor?? [ 140.998231][ T49] usb 5-1: can't set config #0, error -71 [ 141.013254][ T49] usb 5-1: USB disconnect, device number 2 [ 141.440587][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 143.435132][ T37] audit: type=1800 audit(1757473074.567:4): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.91" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 144.724445][ T6273] netlink: 228 bytes leftover after parsing attributes in process `syz.2.98'. [ 144.955345][ T6277] netlink: 24 bytes leftover after parsing attributes in process `syz.4.97'. [ 145.115830][ T1238] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 145.429805][ T1238] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 145.429846][ T1238] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 145.429889][ T1238] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 145.429922][ T1238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.442363][ T6275] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 145.561759][ T1238] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.609918][ T6288] netlink: 'syz.3.102': attribute type 1 has an invalid length. [ 145.609941][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 146.688437][ T6292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.103'. [ 148.400937][ T6300] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 149.130110][ T6307] netlink: 228 bytes leftover after parsing attributes in process `syz.4.109'. [ 151.055919][ T37] audit: type=1800 audit(1757473081.597:5): pid=6320 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.113" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 151.367453][ T989] usb 1-1: USB disconnect, device number 3 [ 152.468902][ T5155] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 152.483566][ T5155] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 152.484565][ T5155] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 152.485895][ T5155] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 152.486686][ T5155] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.003996][ T6345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.117'. [ 153.106420][ T37] audit: type=1326 audit(1757473084.267:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6340 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157ccdeba9 code=0x7ffc0000 [ 153.107006][ T37] audit: type=1326 audit(1757473084.267:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6340 comm="syz.4.119" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f157ccdeba9 code=0x7ffc0000 [ 153.180083][ T6347] Zero length message leads to an empty skb [ 153.314946][ T6348] warning: `syz.3.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 155.352633][ T5155] Bluetooth: hci5: command tx timeout [ 157.418799][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.4.120'. [ 157.418853][ T5155] Bluetooth: hci5: command tx timeout [ 157.904353][ T6357] netlink: 228 bytes leftover after parsing attributes in process `syz.3.122'. [ 165.118506][ T5155] Bluetooth: hci5: command tx timeout [ 165.537527][ T6053] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 165.738916][ T6053] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.738950][ T6053] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.739006][ T6053] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.739040][ T6053] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.861201][ T6370] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 165.941212][ T6053] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 167.430827][ T5155] Bluetooth: hci5: command tx timeout [ 168.851066][ T57] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.372453][ T6053] usb 5-1: USB disconnect, device number 3 [ 169.661822][ T6419] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 172.366238][ T57] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.555590][ T6460] netlink: 24 bytes leftover after parsing attributes in process `syz.4.137'. [ 176.686688][ T57] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.226737][ T57] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.013494][ T6327] chnl_net:caif_netlink_parms(): no params data found [ 179.148457][ T6482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.142'. [ 180.627253][ T6013] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 180.873139][ T6013] usb 1-1: Using ep0 maxpacket: 32 [ 180.915422][ T6013] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 180.915476][ T6013] usb 1-1: config 0 has no interface number 0 [ 180.933365][ T6013] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.043332][ T6013] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 181.043370][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.043417][ T6013] usb 1-1: Product: syz [ 181.043432][ T6013] usb 1-1: Manufacturer: syz [ 181.043482][ T6013] usb 1-1: SerialNumber: syz [ 181.385361][ T6013] usb 1-1: config 0 descriptor?? [ 181.502598][ T6013] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 181.502641][ T6013] em28xx 1-1:0.132: Video interface 132 found: [ 181.856721][ T6013] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 182.955845][ T6013] em28xx 1-1:0.132: failed to read eeprom (err=-110) [ 182.955899][ T6013] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110] [ 183.416373][ T6013] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 183.416399][ T6013] em28xx 1-1:0.132: analog set to bulk mode. [ 183.419338][ T10] em28xx 1-1:0.132: Registering V4L2 extension [ 183.460327][ T6013] usb 1-1: USB disconnect, device number 4 [ 183.462810][ T6013] em28xx 1-1:0.132: Disconnecting em28xx [ 183.519720][ T6327] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.519823][ T6327] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.519982][ T6327] bridge_slave_0: entered allmulticast mode [ 183.521886][ T6327] bridge_slave_0: entered promiscuous mode [ 183.670669][ T6327] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.670813][ T6327] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.671006][ T6327] bridge_slave_1: entered allmulticast mode [ 183.727038][ T6327] bridge_slave_1: entered promiscuous mode [ 184.043106][ T10] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 184.043125][ T10] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 184.043134][ T10] em28xx 1-1:0.132: No AC97 audio processor [ 184.107105][ T10] usb 1-1: Decoder not found [ 184.107124][ T10] em28xx 1-1:0.132: failed to create media graph [ 184.107181][ T10] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 184.207544][ T10] em28xx 1-1:0.132: Remote control support is not available for this card. [ 184.245607][ T6013] em28xx 1-1:0.132: Closing input extension [ 184.752448][ T6013] em28xx 1-1:0.132: Freeing device [ 184.994860][ T6327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.995513][ T57] bridge_slave_1: left allmulticast mode [ 184.995591][ T57] bridge_slave_1: left promiscuous mode [ 184.996803][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.216942][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 188.306967][ T57] bridge_slave_0: left allmulticast mode [ 188.306997][ T57] bridge_slave_0: left promiscuous mode [ 188.308383][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.548350][ T6531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.153'. [ 191.820015][ T6537] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 194.206067][ T6554] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 194.206093][ T6554] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 194.246011][ T6554] vhci_hcd vhci_hcd.0: Device attached [ 194.437122][ T49] vhci_hcd: vhci_device speed not set [ 194.495861][ T49] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 194.515832][ T9] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 194.666724][ T9] usb 5-1: no configurations [ 194.666742][ T9] usb 5-1: can't read configurations, error -22 [ 194.885878][ T9] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 195.049477][ T9] usb 5-1: no configurations [ 195.049491][ T9] usb 5-1: can't read configurations, error -22 [ 195.050873][ T9] usb usb5-port1: attempt power cycle [ 195.395874][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 195.431521][ T9] usb 5-1: no configurations [ 195.431538][ T9] usb 5-1: can't read configurations, error -22 [ 195.565828][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 195.583758][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.597046][ T9] usb 5-1: no configurations [ 195.597063][ T9] usb 5-1: can't read configurations, error -22 [ 195.597424][ T9] usb usb5-port1: unable to enumerate USB device [ 195.646407][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.706287][ T57] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 195.741570][ T57] bond0 (unregistering): Released all slaves [ 195.900816][ T6327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.485821][ T6013] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 196.672679][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.166'. [ 198.953810][ T6013] usb 3-1: Using ep0 maxpacket: 32 [ 199.110060][ T6013] usb 3-1: config index 0 descriptor too short (expected 2084, got 36) [ 199.110127][ T6013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.451179][ T6013] usb 3-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 199.451207][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.451226][ T6013] usb 3-1: Product: syz [ 199.451239][ T6013] usb 3-1: Manufacturer: syz [ 199.451252][ T6013] usb 3-1: SerialNumber: syz [ 199.456902][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.456970][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.458513][ T6013] usb 3-1: config 0 descriptor?? [ 201.169786][ T6555] vhci_hcd: connection reset by peer [ 201.182556][ T5909] usb 3-1: USB disconnect, device number 3 [ 201.188832][ T6327] team0: Port device team_slave_0 added [ 201.236651][ T1509] vhci_hcd: stop threads [ 201.237704][ T1509] vhci_hcd: release socket [ 201.261859][ T1509] vhci_hcd: disconnect device [ 201.272620][ T6327] team0: Port device team_slave_1 added [ 201.344145][ T49] vhci_hcd: vhci_device speed not set [ 202.407412][ T6582] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 202.407461][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.407556][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 202.422021][ T6582] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 202.422043][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 202.422106][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 203.278125][ T6591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.281091][ T6591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.337250][ T6591] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 203.348888][ T6582] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(11) [ 203.348915][ T6582] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 203.349007][ T6582] vhci_hcd vhci_hcd.0: Device attached [ 203.358432][ T6587] vhci_hcd: connection closed [ 203.363333][ T6585] vhci_hcd: connection closed [ 203.410012][ T6423] vhci_hcd: stop threads [ 203.410031][ T6423] vhci_hcd: release socket [ 203.410066][ T6423] vhci_hcd: disconnect device [ 203.445773][ T6423] vhci_hcd: stop threads [ 203.445788][ T6423] vhci_hcd: release socket [ 203.447643][ T6423] vhci_hcd: disconnect device [ 203.515893][ T5924] vhci_hcd: vhci_device speed not set [ 203.631851][ T6589] vhci_hcd: connection closed [ 203.654150][ T6430] vhci_hcd: stop threads [ 203.654161][ T6430] vhci_hcd: release socket [ 203.654220][ T6430] vhci_hcd: disconnect device [ 205.145907][ T6604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 205.145935][ T6604] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 205.146031][ T6604] vhci_hcd vhci_hcd.0: Device attached [ 205.504068][ T5923] vhci_hcd: vhci_device speed not set [ 206.475016][ T5923] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 206.535994][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 206.687461][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.687479][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.687504][ T6327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.725872][ T9] usb 3-1: no configurations [ 206.725890][ T9] usb 3-1: can't read configurations, error -22 [ 206.737463][ T6327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.737480][ T6327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.737511][ T6327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.945854][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 207.156810][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 207.306849][ T57] hsr_slave_0: left promiscuous mode [ 207.433485][ T57] hsr_slave_1: left promiscuous mode [ 207.565054][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.566539][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.776457][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.776565][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.032395][ T9] usb 3-1: no configurations [ 208.032415][ T9] usb 3-1: can't read configurations, error -22 [ 208.049390][ T9] usb usb3-port1: attempt power cycle [ 209.343516][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 210.192716][ T9] usb 3-1: device descriptor read/8, error -71 [ 210.205760][ T6605] vhci_hcd: connection reset by peer [ 210.286099][ T3609] vhci_hcd: stop threads [ 210.286117][ T3609] vhci_hcd: release socket [ 210.286189][ T3609] vhci_hcd: disconnect device [ 210.566905][ T57] veth1_macvtap: left promiscuous mode [ 210.567137][ T57] veth0_macvtap: left promiscuous mode [ 210.567445][ T57] veth1_vlan: left promiscuous mode [ 210.567749][ T57] veth0_vlan: left promiscuous mode [ 211.007341][ T37] audit: type=1800 audit(1757473142.157:8): pid=6635 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.181" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 211.170600][ T37] audit: type=1800 audit(1757473142.287:9): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.182" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 211.642863][ T5923] vhci_hcd: vhci_device speed not set [ 211.735745][ T6638] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 211.735772][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.735852][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 211.966658][ T6625] Bluetooth: hci4: command 0x0406 tx timeout [ 211.975840][ T6638] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 211.975861][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.975923][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 211.990329][ T6638] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 211.990355][ T6638] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 211.990414][ T6638] vhci_hcd vhci_hcd.0: Device attached [ 211.991676][ T6638] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 211.992687][ T6638] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.006776][ T6638] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 212.047469][ T6641] vhci_hcd: connection closed [ 212.047918][ T6643] vhci_hcd: connection closed [ 212.088844][ T1041] vhci_hcd: stop threads [ 212.088860][ T1041] vhci_hcd: release socket [ 212.088889][ T1041] vhci_hcd: disconnect device [ 212.093567][ T1041] vhci_hcd: stop threads [ 212.093577][ T1041] vhci_hcd: release socket [ 212.093610][ T1041] vhci_hcd: disconnect device [ 212.216450][ T6625] Bluetooth: hci0: command 0x0406 tx timeout [ 212.216491][ T6625] Bluetooth: hci2: command 0x0406 tx timeout [ 212.216513][ T6625] Bluetooth: hci1: command 0x0406 tx timeout [ 212.389766][ T6646] vhci_hcd: connection closed [ 212.390337][ T6081] vhci_hcd: stop threads [ 212.390353][ T6081] vhci_hcd: release socket [ 212.391069][ T6081] vhci_hcd: disconnect device [ 214.376961][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.395197][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.405637][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.412398][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.414715][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 216.778272][ T59] Bluetooth: hci3: command tx timeout [ 217.284088][ T6678] ceph: No mds server is up or the cluster is laggy [ 217.302881][ T6013] libceph: connect (1)[c::]:6789 error -101 [ 217.303385][ T6013] libceph: mon0 (1)[c::]:6789 connect error [ 217.856385][ T6687] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 217.856411][ T6687] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 217.856502][ T6687] vhci_hcd vhci_hcd.0: Device attached [ 218.127634][ T5909] vhci_hcd: vhci_device speed not set [ 218.186511][ T5909] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 218.215872][ T6013] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 218.416519][ T6013] usb 1-1: no configurations [ 218.416532][ T6013] usb 1-1: can't read configurations, error -22 [ 218.555309][ T6013] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 218.726849][ T6013] usb 1-1: no configurations [ 218.726868][ T6013] usb 1-1: can't read configurations, error -22 [ 218.729104][ T6013] usb usb1-port1: attempt power cycle [ 218.866064][ T59] Bluetooth: hci3: command tx timeout [ 219.067623][ T6013] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 219.100842][ T6013] usb 1-1: no configurations [ 219.100855][ T6013] usb 1-1: can't read configurations, error -22 [ 219.235888][ T6013] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 219.274786][ T6013] usb 1-1: no configurations [ 219.274803][ T6013] usb 1-1: can't read configurations, error -22 [ 219.275182][ T6013] usb usb1-port1: unable to enumerate USB device [ 219.465931][ T6699] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 219.465949][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.466031][ T6699] vhci_hcd vhci_hcd.0: Device attached [ 219.472993][ T6699] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 219.474899][ T6699] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 219.475544][ T6699] vhci_hcd vhci_hcd.0: Device attached [ 219.532616][ T6704] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(12) [ 219.532638][ T6704] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 219.532689][ T6704] vhci_hcd vhci_hcd.0: Device attached [ 219.533766][ T6699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 219.537554][ T6699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 219.538816][ T6699] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 219.636682][ T6705] vhci_hcd: connection closed [ 219.637112][ T6700] vhci_hcd: connection closed [ 219.639147][ T6702] vhci_hcd: connection closed [ 219.661575][ T6426] vhci_hcd: stop threads [ 219.661590][ T6426] vhci_hcd: release socket [ 219.661659][ T6426] vhci_hcd: disconnect device [ 219.662018][ T6426] vhci_hcd: stop threads [ 219.662025][ T6426] vhci_hcd: release socket [ 219.662086][ T6426] vhci_hcd: disconnect device [ 219.662403][ T6426] vhci_hcd: stop threads [ 219.662410][ T6426] vhci_hcd: release socket [ 219.662470][ T6426] vhci_hcd: disconnect device [ 219.706813][ T49] usb 41-1: new low-speed USB device number 3 using vhci_hcd [ 219.706878][ T49] usb 41-1: enqueue for inactive port 0 [ 219.785856][ T49] vhci_hcd: vhci_device speed not set [ 219.946929][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 220.935823][ T59] Bluetooth: hci3: command tx timeout [ 221.333826][ T6689] vhci_hcd: connection reset by peer [ 221.334055][ T6422] vhci_hcd: stop threads [ 221.334068][ T6422] vhci_hcd: release socket [ 221.334128][ T6422] vhci_hcd: disconnect device [ 223.082178][ T59] Bluetooth: hci3: command tx timeout [ 223.356417][ T6727] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 223.625974][ T5909] vhci_hcd: vhci_device speed not set [ 224.330128][ T6739] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 224.330157][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.333184][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 224.375521][ T6739] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(9) [ 224.375546][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 224.375593][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 224.379094][ T6739] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(11) [ 224.379119][ T6739] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 224.385744][ T6739] vhci_hcd vhci_hcd.0: Device attached [ 224.387889][ T6739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.390012][ T6739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.391715][ T6739] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 224.434670][ T6747] vhci_hcd: connection closed [ 224.435005][ T6742] vhci_hcd: connection closed [ 224.437496][ T6744] vhci_hcd: connection closed [ 224.437763][ T6426] vhci_hcd: stop threads [ 224.437778][ T6426] vhci_hcd: release socket [ 224.437849][ T6426] vhci_hcd: disconnect device [ 224.438829][ T6426] vhci_hcd: stop threads [ 224.438838][ T6426] vhci_hcd: release socket [ 224.438907][ T6426] vhci_hcd: disconnect device [ 224.441106][ T6426] vhci_hcd: stop threads [ 224.441117][ T6426] vhci_hcd: release socket [ 224.441337][ T6426] vhci_hcd: disconnect device [ 224.515821][ T6013] vhci_hcd: vhci_device speed not set [ 224.918610][ T6750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 224.918636][ T6750] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 224.918722][ T6750] vhci_hcd vhci_hcd.0: Device attached [ 225.005290][ T57] team0 (unregistering): Port device team_slave_1 removed [ 225.097181][ T5923] vhci_hcd: vhci_device speed not set [ 225.155881][ T5923] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 225.186021][ T6659] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 225.366650][ T6659] usb 3-1: no configurations [ 225.366668][ T6659] usb 3-1: can't read configurations, error -22 [ 225.686115][ T6659] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 225.727720][ T6758] netlink: 4 bytes leftover after parsing attributes in process `syz.4.210'. [ 225.766793][ T57] team0 (unregistering): Port device team_slave_0 removed [ 232.429327][ T6751] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 3 [ 232.456652][ T6659] usb 3-1: device descriptor read/all, error -110 [ 232.699675][ T6659] usb usb3-port1: attempt power cycle [ 232.715218][ T6434] vhci_hcd: stop threads [ 232.715245][ T6434] vhci_hcd: release socket [ 232.716406][ T6434] vhci_hcd: disconnect device [ 232.787094][ T5923] vhci_hcd: vhci_device speed not set [ 234.088724][ T6771] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 234.326799][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 234.356528][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 234.360183][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 234.361486][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 234.362683][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 236.427291][ T5840] Bluetooth: hci6: command tx timeout [ 236.764863][ T37] audit: type=1800 audit(1757473167.887:10): pid=6792 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.219" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 237.522504][ T6797] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 237.522530][ T6797] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 237.523449][ T6797] vhci_hcd vhci_hcd.0: Device attached [ 237.796133][ T5923] vhci_hcd: vhci_device speed not set [ 237.871214][ T5923] usb 41-1: new low-speed USB device number 5 using vhci_hcd [ 238.015741][ T5908] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 238.457122][ T5840] Bluetooth: hci6: command tx timeout [ 239.080789][ T5908] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 239.080825][ T5908] usb 5-1: can't read configurations, error -61 [ 239.439540][ T5908] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 241.414375][ T59] Bluetooth: hci6: command tx timeout [ 241.485775][ T6813] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 241.557004][ T5908] usb 5-1: device descriptor read/all, error -71 [ 241.586785][ T5908] usb usb5-port1: attempt power cycle [ 241.602255][ T6800] vhci_hcd: connection reset by peer [ 241.603430][ T6422] vhci_hcd: stop threads [ 241.603444][ T6422] vhci_hcd: release socket [ 241.603512][ T6422] vhci_hcd: disconnect device [ 242.456078][ T59] Bluetooth: hci0: command 0x0406 tx timeout [ 243.145944][ T5923] vhci_hcd: vhci_device speed not set [ 243.416953][ T59] Bluetooth: hci6: command tx timeout [ 245.973238][ T37] audit: type=1800 audit(1757473177.067:11): pid=6839 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.231" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 248.327597][ T6851] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 248.327623][ T6851] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 248.327825][ T6851] vhci_hcd vhci_hcd.0: Device attached [ 249.196864][ T5924] vhci_hcd: vhci_device speed not set [ 249.939371][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 250.295695][ T6860] ceph: No mds server is up or the cluster is laggy [ 250.624534][ T6013] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 250.624760][ T5924] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 250.652953][ T5923] libceph: connect (1)[c::]:6789 error -101 [ 250.653348][ T5923] libceph: mon0 (1)[c::]:6789 connect error [ 250.911618][ T6868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 252.480611][ T6013] usb 1-1: device descriptor read/all, error -71 [ 253.582552][ T6852] vhci_hcd: connection reset by peer [ 253.616021][ T6426] vhci_hcd: stop threads [ 253.616038][ T6426] vhci_hcd: release socket [ 253.616121][ T6426] vhci_hcd: disconnect device [ 255.458924][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 255.746025][ T5924] vhci_hcd: vhci_device speed not set [ 258.123022][ T37] audit: type=1800 audit(1757473189.167:12): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.242" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 258.861474][ T5840] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 261.686286][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.686371][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.753149][ T6902] ceph: No mds server is up or the cluster is laggy [ 261.777590][ T5924] libceph: connect (1)[c::]:6789 error -101 [ 261.777785][ T5924] libceph: mon0 (1)[c::]:6789 connect error [ 264.025803][ T5924] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 264.197689][ T5924] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 264.197723][ T5924] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 264.197759][ T5924] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 264.197780][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.479858][ T59] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 265.050641][ T6922] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 265.114738][ T5924] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.365268][ T37] audit: type=1800 audit(1757473196.517:13): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.255" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 270.173688][ T5924] usb 5-1: USB disconnect, device number 11 [ 271.236100][ T6981] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 271.236124][ T6981] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 271.236210][ T6981] vhci_hcd vhci_hcd.0: Device attached [ 271.505850][ T1238] vhci_hcd: vhci_device speed not set [ 271.575839][ T1238] usb 37-1: new full-speed USB device number 4 using vhci_hcd [ 271.687169][ T5909] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 272.279712][ T37] audit: type=1800 audit(1757473203.327:14): pid=6997 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.265" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 272.475295][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 272.475334][ T5909] usb 3-1: can't read configurations, error -61 [ 272.525874][ T5840] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 272.676952][ T5909] usb 3-1: new low-speed USB device number 12 using dummy_hcd [ 272.870690][ T5909] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 272.870725][ T5909] usb 3-1: can't read configurations, error -61 [ 272.873059][ T5909] usb usb3-port1: attempt power cycle [ 273.062491][ T6770] chnl_net:caif_netlink_parms(): no params data found [ 273.265748][ T5909] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 273.559954][ T5909] usb 3-1: device descriptor read/8, error -71 [ 273.566273][ T6982] vhci_hcd: connection reset by peer [ 273.572621][ T6422] vhci_hcd: stop threads [ 273.572640][ T6422] vhci_hcd: release socket [ 273.572881][ T6422] vhci_hcd: disconnect device [ 274.777288][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.976969][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.982984][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.007219][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.026393][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.725725][ T5924] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 276.886130][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 277.397658][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.397690][ T5924] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.397712][ T5924] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.397752][ T5924] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 277.397774][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.414973][ T5924] usb 3-1: config 0 descriptor?? [ 277.546655][ T1238] vhci_hcd: vhci_device speed not set [ 277.961427][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 277.961816][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 277.964801][ T5924] usbhid 3-1:0.0: can't add hid device: -71 [ 277.964918][ T5924] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 277.969955][ T5924] usb 3-1: USB disconnect, device number 15 [ 278.177280][ T5909] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 278.579626][ T5840] Bluetooth: hci3: command tx timeout [ 279.089762][ T5909] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 279.089803][ T5909] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 279.089846][ T5909] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 279.089873][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.495186][ T7039] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 279.520014][ T5909] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.628171][ T37] audit: type=1800 audit(1757473210.757:15): pid=7047 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.274" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 280.640552][ T5840] Bluetooth: hci3: command tx timeout [ 281.405362][ T7052] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 281.405390][ T7052] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 281.423063][ T7052] vhci_hcd vhci_hcd.0: Device attached [ 281.625815][ T6659] vhci_hcd: vhci_device speed not set [ 281.765895][ T49] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 281.897000][ T6659] usb 41-1: new full-speed USB device number 6 using vhci_hcd [ 281.938392][ T49] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 281.938427][ T49] usb 5-1: can't read configurations, error -61 [ 282.065989][ T49] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 282.218785][ T49] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 282.218822][ T49] usb 5-1: can't read configurations, error -61 [ 282.219509][ T49] usb usb5-port1: attempt power cycle [ 282.922173][ T5840] Bluetooth: hci3: command tx timeout [ 282.959901][ T5907] usb 1-1: USB disconnect, device number 11 [ 282.972342][ T49] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 283.020445][ T49] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 283.020479][ T49] usb 5-1: can't read configurations, error -61 [ 283.145834][ T49] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 283.173269][ T49] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 283.173303][ T49] usb 5-1: can't read configurations, error -61 [ 283.173703][ T49] usb usb5-port1: unable to enumerate USB device [ 284.056180][ T7058] vhci_hcd: connection reset by peer [ 284.071780][ T1509] vhci_hcd: stop threads [ 284.071797][ T1509] vhci_hcd: release socket [ 284.071871][ T1509] vhci_hcd: disconnect device [ 284.924656][ T5840] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 284.945123][ T59] Bluetooth: hci3: command tx timeout [ 286.254278][ T57] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.555042][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.556139][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.556404][ T6770] bridge_slave_0: entered allmulticast mode [ 287.534731][ T6770] bridge_slave_0: entered promiscuous mode [ 287.554844][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.555972][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.556177][ T6770] bridge_slave_1: entered allmulticast mode [ 287.561965][ T6770] bridge_slave_1: entered promiscuous mode [ 289.115932][ T6659] vhci_hcd: vhci_device speed not set [ 289.582692][ T57] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.605832][ T5920] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 289.672782][ T6770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.707684][ T6770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.758261][ T5920] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 289.758298][ T5920] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 289.758338][ T5920] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 289.758363][ T5920] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.814703][ T7095] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 289.848320][ T5920] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 291.758117][ T57] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.243311][ T6013] usb 3-1: USB disconnect, device number 16 [ 293.329472][ T6770] team0: Port device team_slave_0 added [ 293.426902][ T6770] team0: Port device team_slave_1 added [ 294.943701][ T59] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 295.702536][ T7140] overlayfs: failed to resolve './bus': -2 [ 300.155240][ T57] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.533855][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 302.566734][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 302.582290][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 302.616908][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 302.620090][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 302.715822][ T49] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 302.772776][ T7019] chnl_net:caif_netlink_parms(): no params data found [ 302.877989][ T49] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 302.878021][ T49] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 302.878060][ T49] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 302.878081][ T49] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.937961][ T7164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 302.997499][ T49] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 304.715827][ T59] Bluetooth: hci4: command tx timeout [ 305.780939][ T59] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 306.016234][ T5923] usb 5-1: USB disconnect, device number 16 [ 307.084912][ T5840] Bluetooth: hci4: command tx timeout [ 307.619711][ T7189] overlayfs: failed to resolve './bus': -2 [ 308.249831][ T7019] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.249985][ T7019] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.250201][ T7019] bridge_slave_0: entered allmulticast mode [ 308.296325][ T7019] bridge_slave_0: entered promiscuous mode [ 308.330987][ T7019] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.331134][ T7019] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.331356][ T7019] bridge_slave_1: entered allmulticast mode [ 308.334957][ T7019] bridge_slave_1: entered promiscuous mode [ 309.095868][ T5840] Bluetooth: hci4: command tx timeout [ 311.175803][ T5840] Bluetooth: hci4: command tx timeout [ 311.680032][ T7019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.709448][ T7019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.023599][ T57] bridge_slave_1: left allmulticast mode [ 313.023636][ T57] bridge_slave_1: left promiscuous mode [ 313.025755][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.110244][ T57] bridge_slave_0: left allmulticast mode [ 313.110280][ T57] bridge_slave_0: left promiscuous mode [ 313.110589][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.307082][ T57] bridge_slave_1: left allmulticast mode [ 313.307109][ T57] bridge_slave_1: left promiscuous mode [ 313.307335][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.452138][ T57] bridge_slave_0: left allmulticast mode [ 313.452174][ T57] bridge_slave_0: left promiscuous mode [ 313.452406][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.335791][ T5909] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 314.488097][ T5909] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.488122][ T5909] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.488148][ T5909] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.488162][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.513001][ T7221] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 314.533870][ T5909] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 316.946524][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.026651][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.050454][ T57] bond0 (unregistering): Released all slaves [ 317.202045][ T5909] usb 5-1: USB disconnect, device number 17 [ 317.420246][ T7231] overlayfs: failed to resolve './bus': -2 [ 319.081378][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.156372][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.212228][ T57] bond0 (unregistering): Released all slaves [ 319.653859][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.672743][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.674362][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.690916][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.692179][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 321.735742][ T59] Bluetooth: hci5: command tx timeout [ 322.302300][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.302417][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.571997][ T7019] team0: Port device team_slave_0 added [ 323.721651][ T7019] team0: Port device team_slave_1 added [ 323.818031][ T59] Bluetooth: hci5: command tx timeout [ 325.896271][ T59] Bluetooth: hci5: command tx timeout [ 326.134596][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.134609][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.134626][ T7019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.225387][ T7019] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.225398][ T7019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.225415][ T7019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.557855][ T7268] overlayfs: failed to resolve './bus': -2 [ 328.134669][ T59] Bluetooth: hci5: command tx timeout [ 329.081388][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.326'. [ 336.752406][ T57] hsr_slave_0: left promiscuous mode [ 336.991772][ T57] hsr_slave_1: left promiscuous mode [ 336.992817][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.992846][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.046683][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.046710][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.268098][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 337.270601][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 337.271660][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 337.272725][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 337.273723][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.361904][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.410622][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.554913][ T57] veth1_macvtap: left promiscuous mode [ 337.555030][ T57] veth0_macvtap: left promiscuous mode [ 337.555305][ T57] veth1_vlan: left promiscuous mode [ 337.555489][ T57] veth0_vlan: left promiscuous mode [ 339.415837][ T5840] Bluetooth: hci6: command tx timeout [ 339.467634][ T7300] netlink: 28 bytes leftover after parsing attributes in process `syz.0.333'. [ 340.066399][ T37] audit: type=1800 audit(1757473271.027:16): pid=7304 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.332" name="SYSV00000000" dev="tmpfs" ino=4 res=0 errno=0 [ 340.764695][ T7307] overlayfs: failed to resolve './bus': -2 [ 341.498207][ T5840] Bluetooth: hci6: command tx timeout [ 342.925954][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.008283][ C0] vkms_vblank_simulate: vblank timer overrun [ 343.575718][ T5840] Bluetooth: hci6: command tx timeout [ 344.418528][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.437190][ T57] team0 (unregistering): Port device team_slave_1 removed [ 344.647757][ T57] team0 (unregistering): Port device team_slave_0 removed [ 345.106680][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.655972][ T5840] Bluetooth: hci6: command tx timeout [ 347.844872][ T7336] overlayfs: failed to resolve './bus': -2 [ 350.606046][ T57] team0 (unregistering): Port device team_slave_1 removed [ 350.866260][ T57] team0 (unregistering): Port device team_slave_0 removed [ 351.582174][ T7161] chnl_net:caif_netlink_parms(): no params data found [ 357.786414][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 357.814194][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 357.831065][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 357.840741][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 357.845281][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 361.495787][ T5840] Bluetooth: hci2: command tx timeout [ 361.637318][ T7408] netlink: 24 bytes leftover after parsing attributes in process `syz.0.358'. [ 362.517112][ T7241] chnl_net:caif_netlink_parms(): no params data found [ 363.575808][ T5840] Bluetooth: hci2: command tx timeout [ 364.074573][ T7284] chnl_net:caif_netlink_parms(): no params data found [ 364.758998][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.759249][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.759411][ T7241] bridge_slave_0: entered allmulticast mode [ 364.782231][ T7241] bridge_slave_0: entered promiscuous mode [ 365.655807][ T5840] Bluetooth: hci2: command tx timeout [ 365.704402][ T7241] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.704544][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.704727][ T7241] bridge_slave_1: entered allmulticast mode [ 365.710294][ T7241] bridge_slave_1: entered promiscuous mode [ 366.799637][ T7241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.735751][ T5840] Bluetooth: hci2: command tx timeout [ 369.909189][ T7241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.721233][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.721519][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.722375][ T7284] bridge_slave_0: entered allmulticast mode [ 381.837853][ T7284] bridge_slave_0: entered promiscuous mode [ 381.899769][ T7381] chnl_net:caif_netlink_parms(): no params data found [ 383.752959][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.753055][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.989841][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.989990][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.990286][ T7284] bridge_slave_1: entered allmulticast mode [ 387.992730][ T7284] bridge_slave_1: entered promiscuous mode [ 388.024768][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.036379][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.043761][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.065857][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.069264][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.353928][ T7523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'. [ 389.990477][ T57] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.135862][ T5840] Bluetooth: hci3: command tx timeout [ 391.826026][ T31] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 391.975792][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 391.978446][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 391.978475][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 391.978497][ T31] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 391.978549][ T31] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 391.978571][ T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.273261][ T59] Bluetooth: hci3: command tx timeout [ 392.320105][ T31] usb 5-1: config 0 descriptor?? [ 393.269790][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.269831][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.269860][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.269889][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.269918][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.269947][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.269975][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.270004][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.270032][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.270061][ T31] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 393.374035][ T31] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input5 [ 393.447670][ T31] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 393.486131][ T31] usb 5-1: USB disconnect, device number 18 [ 393.691855][ T7548] fido_id[7548]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 393.795699][ T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 393.949069][ T57] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.951103][ T10] usb 1-1: config 0 interface 0 altsetting 185 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 393.951132][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.951180][ T10] usb 1-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 393.951202][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.963912][ T10] usb 1-1: config 0 descriptor?? [ 394.038812][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.118529][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.306070][ T59] Bluetooth: hci3: command tx timeout [ 394.621503][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 394.621621][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 394.627355][ T10] usb 1-1: USB disconnect, device number 12 [ 395.700717][ T57] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.373857][ T7566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.388'. [ 396.512149][ T59] Bluetooth: hci3: command tx timeout [ 397.561169][ T57] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.902599][ T7381] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.902731][ T7381] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.902918][ T7381] bridge_slave_0: entered allmulticast mode [ 398.908299][ T7381] bridge_slave_0: entered promiscuous mode [ 398.976727][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 398.986475][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 398.995948][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 399.006917][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 399.012643][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 399.170342][ T7585] binder: BINDER_SET_CONTEXT_MGR already set [ 399.170357][ T7585] binder: 7583:7585 ioctl 4018620d 200000000040 returned -16 [ 399.170868][ T7585] binder: 7583:7585 ioctl c0306201 0 returned -14 [ 399.420391][ T7381] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.420517][ T7381] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.420705][ T7381] bridge_slave_1: entered allmulticast mode [ 399.423230][ T7381] bridge_slave_1: entered promiscuous mode [ 400.161930][ T7381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.212120][ T7381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.495768][ T5924] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 400.646300][ T5924] usb 5-1: Using ep0 maxpacket: 16 [ 400.648997][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 400.649026][ T5924] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.649047][ T5924] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 400.649110][ T5924] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 400.649137][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.678712][ T5840] Bluetooth: hci4: command tx timeout [ 401.694493][ T5924] usb 5-1: config 0 descriptor?? [ 401.941654][ T7605] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.943840][ T7605] IPv6: NLM_F_CREATE should be set when creating new route [ 401.943874][ T7605] IPv6: NLM_F_CREATE should be set when creating new route [ 401.944880][ T7605] ------------[ cut here ]------------ [ 401.944896][ T7605] WARNING: CPU: 0 PID: 7605 at drivers/net/netdevsim/fib.c:831 nsim_fib_event_nb+0xf02/0x10b0 [ 401.944939][ T7605] Modules linked in: [ 401.944979][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.945002][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.945020][ T7605] RIP: 0010:nsim_fib_event_nb+0xf02/0x10b0 [ 401.945040][ T7605] Code: 94 0e 29 fb be 01 00 00 00 4c 89 f7 e8 b7 67 22 fe 4c 8b 3c 24 49 bc 00 00 00 00 00 fc ff df e9 6c f4 ff ff e8 6f 0e 29 fb 90 <0f> 0b 90 e9 40 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0d [ 401.945057][ T7605] RSP: 0018:ffffc9000403efe8 EFLAGS: 00010287 [ 401.945073][ T7605] RAX: ffffffff86955131 RBX: 0000000000000002 RCX: 0000000000080000 [ 401.945087][ T7605] RDX: ffffc90005e39000 RSI: 0000000000000ac4 RDI: 0000000000000ac5 [ 401.945101][ T7605] RBP: ffff8880363c7418 R08: 0000000000000000 R09: 0000000000000000 [ 401.945113][ T7605] R10: dffffc0000000000 R11: ffffed1006c78f86 R12: dffffc0000000000 [ 401.945128][ T7605] R13: ffffc9000403f160 R14: 0000000000000001 R15: ffff88801a30b000 [ 401.945143][ T7605] FS: 00007fb3b410e6c0(0000) GS:ffff8881268bf000(0000) knlGS:0000000000000000 [ 401.945160][ T7605] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 401.945173][ T7605] CR2: 0000001b31723ffc CR3: 000000006486a000 CR4: 00000000003526f0 [ 401.945190][ T7605] Call Trace: [ 401.945198][ T7605] [ 401.945217][ T7605] notifier_call_chain+0x1b3/0x3e0 [ 401.945249][ T7605] ? atomic_notifier_call_chain+0x26/0x180 [ 401.945279][ T7605] atomic_notifier_call_chain+0xda/0x180 [ 401.945309][ T7605] call_fib_notifiers+0x31/0x60 [ 401.945341][ T7605] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 401.945369][ T7605] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 401.945400][ T7605] ? inet6_rtm_newroute+0xe4c/0x1830 [ 401.945424][ T7605] inet6_rtm_newroute+0x125c/0x1830 [ 401.945444][ T7605] ? reacquire_held_locks+0x127/0x1d0 [ 401.945476][ T7605] ? inet6_rtm_newroute+0xa65/0x1830 [ 401.945507][ T7605] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 401.945550][ T7605] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 401.945644][ T7605] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 401.945666][ T7605] rtnetlink_rcv_msg+0x7cf/0xb70 [ 401.945698][ T7605] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 401.945725][ T7605] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 401.945759][ T7605] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 401.945795][ T7605] netlink_rcv_skb+0x205/0x470 [ 401.945821][ T7605] ? rcu_is_watching+0x15/0xb0 [ 401.945855][ T7605] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 401.945885][ T7605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.945924][ T7605] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.945968][ T7605] netlink_unicast+0x843/0xa10 [ 401.946001][ T7605] ? __pfx_netlink_unicast+0x10/0x10 [ 401.946028][ T7605] ? netlink_sendmsg+0x642/0xb30 [ 401.946053][ T7605] ? skb_put+0x11b/0x210 [ 401.946087][ T7605] netlink_sendmsg+0x805/0xb30 [ 401.946124][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.946161][ T7605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.946182][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.946212][ T7605] __sock_sendmsg+0x219/0x270 [ 401.946240][ T7605] ____sys_sendmsg+0x508/0x820 [ 401.946265][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.946294][ T7605] ? import_iovec+0x74/0xa0 [ 401.946323][ T7605] ___sys_sendmsg+0x21f/0x2a0 [ 401.946344][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.946400][ T7605] ? __fget_files+0x2a/0x420 [ 401.946428][ T7605] ? __fget_files+0x3a6/0x420 [ 401.946468][ T7605] __x64_sys_sendmsg+0x1a1/0x260 [ 401.946491][ T7605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.946522][ T7605] ? rcu_is_watching+0x15/0xb0 [ 401.946557][ T7605] ? do_syscall_64+0xbe/0x3b0 [ 401.946580][ T7605] do_syscall_64+0xfa/0x3b0 [ 401.946597][ T7605] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.946627][ T7605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.946647][ T7605] ? clear_bhb_loop+0x60/0xb0 [ 401.946671][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.946690][ T7605] RIP: 0033:0x7fb3b5eaeba9 [ 401.946713][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.946730][ T7605] RSP: 002b:00007fb3b410e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.946750][ T7605] RAX: ffffffffffffffda RBX: 00007fb3b60f5fa0 RCX: 00007fb3b5eaeba9 [ 401.946765][ T7605] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 401.946777][ T7605] RBP: 00007fb3b5f31e19 R08: 0000000000000000 R09: 0000000000000000 [ 401.946790][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.946802][ T7605] R13: 00007fb3b60f6038 R14: 00007fb3b60f5fa0 R15: 00007fffe7cfcb58 [ 401.946833][ T7605] [ 401.946847][ T7605] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 401.946861][ T7605] CPU: 0 UID: 0 PID: 7605 Comm: syz.0.396 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 401.946883][ T7605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 401.946895][ T7605] Call Trace: [ 401.946902][ T7605] [ 401.946910][ T7605] dump_stack_lvl+0x99/0x250 [ 401.946946][ T7605] ? __asan_memcpy+0x40/0x70 [ 401.946968][ T7605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 401.946998][ T7605] ? __pfx__printk+0x10/0x10 [ 401.947034][ T7605] vpanic+0x281/0x750 [ 401.947064][ T7605] ? __pfx__printk+0x10/0x10 [ 401.947085][ T7605] ? __pfx_vpanic+0x10/0x10 [ 401.947115][ T7605] ? is_bpf_text_address+0x26/0x2b0 [ 401.947156][ T7605] panic+0xb9/0xc0 [ 401.947185][ T7605] ? __pfx_panic+0x10/0x10 [ 401.947230][ T7605] __warn+0x31b/0x4b0 [ 401.947258][ T7605] ? nsim_fib_event_nb+0xf02/0x10b0 [ 401.947280][ T7605] ? nsim_fib_event_nb+0xf02/0x10b0 [ 401.947299][ T7605] report_bug+0x2be/0x4f0 [ 401.947327][ T7605] ? nsim_fib_event_nb+0xf02/0x10b0 [ 401.947346][ T7605] ? nsim_fib_event_nb+0xf02/0x10b0 [ 401.947365][ T7605] ? nsim_fib_event_nb+0xf04/0x10b0 [ 401.947384][ T7605] handle_bug+0x84/0x160 [ 401.947406][ T7605] exc_invalid_op+0x1a/0x50 [ 401.947426][ T7605] asm_exc_invalid_op+0x1a/0x20 [ 401.947445][ T7605] RIP: 0010:nsim_fib_event_nb+0xf02/0x10b0 [ 401.947463][ T7605] Code: 94 0e 29 fb be 01 00 00 00 4c 89 f7 e8 b7 67 22 fe 4c 8b 3c 24 49 bc 00 00 00 00 00 fc ff df e9 6c f4 ff ff e8 6f 0e 29 fb 90 <0f> 0b 90 e9 40 fb ff ff 44 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 0d [ 401.947480][ T7605] RSP: 0018:ffffc9000403efe8 EFLAGS: 00010287 [ 401.947496][ T7605] RAX: ffffffff86955131 RBX: 0000000000000002 RCX: 0000000000080000 [ 401.947509][ T7605] RDX: ffffc90005e39000 RSI: 0000000000000ac4 RDI: 0000000000000ac5 [ 401.947523][ T7605] RBP: ffff8880363c7418 R08: 0000000000000000 R09: 0000000000000000 [ 401.947535][ T7605] R10: dffffc0000000000 R11: ffffed1006c78f86 R12: dffffc0000000000 [ 401.947551][ T7605] R13: ffffc9000403f160 R14: 0000000000000001 R15: ffff88801a30b000 [ 401.947573][ T7605] ? nsim_fib_event_nb+0xf01/0x10b0 [ 401.947598][ T7605] ? nsim_fib_event_nb+0xf01/0x10b0 [ 401.947627][ T7605] notifier_call_chain+0x1b3/0x3e0 [ 401.947657][ T7605] ? atomic_notifier_call_chain+0x26/0x180 [ 401.947688][ T7605] atomic_notifier_call_chain+0xda/0x180 [ 401.947717][ T7605] call_fib_notifiers+0x31/0x60 [ 401.947748][ T7605] call_fib6_multipath_entry_notifiers+0xe6/0x150 [ 401.947776][ T7605] ? __pfx_call_fib6_multipath_entry_notifiers+0x10/0x10 [ 401.947807][ T7605] ? inet6_rtm_newroute+0xe4c/0x1830 [ 401.947832][ T7605] inet6_rtm_newroute+0x125c/0x1830 [ 401.947851][ T7605] ? reacquire_held_locks+0x127/0x1d0 [ 401.947882][ T7605] ? inet6_rtm_newroute+0xa65/0x1830 [ 401.947913][ T7605] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 401.947962][ T7605] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 401.948016][ T7605] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 401.948035][ T7605] rtnetlink_rcv_msg+0x7cf/0xb70 [ 401.948067][ T7605] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 401.948094][ T7605] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 401.948128][ T7605] ? __pfx_rcu_preempt_deferred_qs_irqrestore+0x10/0x10 [ 401.948163][ T7605] netlink_rcv_skb+0x205/0x470 [ 401.948189][ T7605] ? rcu_is_watching+0x15/0xb0 [ 401.948219][ T7605] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 401.948249][ T7605] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 401.948288][ T7605] ? netlink_deliver_tap+0x2e/0x1b0 [ 401.948324][ T7605] netlink_unicast+0x843/0xa10 [ 401.948357][ T7605] ? __pfx_netlink_unicast+0x10/0x10 [ 401.948384][ T7605] ? netlink_sendmsg+0x642/0xb30 [ 401.948410][ T7605] ? skb_put+0x11b/0x210 [ 401.948444][ T7605] netlink_sendmsg+0x805/0xb30 [ 401.948482][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.948518][ T7605] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 401.948538][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 401.948569][ T7605] __sock_sendmsg+0x219/0x270 [ 401.948597][ T7605] ____sys_sendmsg+0x508/0x820 [ 401.948622][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 401.948651][ T7605] ? import_iovec+0x74/0xa0 [ 401.948680][ T7605] ___sys_sendmsg+0x21f/0x2a0 [ 401.948702][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 401.948757][ T7605] ? __fget_files+0x2a/0x420 [ 401.948784][ T7605] ? __fget_files+0x3a6/0x420 [ 401.948824][ T7605] __x64_sys_sendmsg+0x1a1/0x260 [ 401.948847][ T7605] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 401.948877][ T7605] ? rcu_is_watching+0x15/0xb0 [ 401.948914][ T7605] ? do_syscall_64+0xbe/0x3b0 [ 401.948941][ T7605] do_syscall_64+0xfa/0x3b0 [ 401.948958][ T7605] ? lockdep_hardirqs_on+0x9c/0x150 [ 401.948987][ T7605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.949007][ T7605] ? clear_bhb_loop+0x60/0xb0 [ 401.949032][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.949051][ T7605] RIP: 0033:0x7fb3b5eaeba9 [ 401.949086][ T7605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.949105][ T7605] RSP: 002b:00007fb3b410e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 401.949127][ T7605] RAX: ffffffffffffffda RBX: 00007fb3b60f5fa0 RCX: 00007fb3b5eaeba9 [ 401.949144][ T7605] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 401.949159][ T7605] RBP: 00007fb3b5f31e19 R08: 0000000000000000 R09: 0000000000000000 [ 401.949174][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.949188][ T7605] R13: 00007fb3b60f6038 R14: 00007fb3b60f5fa0 R15: 00007fffe7cfcb58 [ 401.949224][ T7605] [ 401.949541][ T7605] Kernel Offset: disabled