last executing test programs: 57.757932503s ago: executing program 1 (id=141): syz_open_dev$radio(&(0x7f00000001c0), 0x0, 0x2) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$clear(0x7, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)={0x50, 0x0, 0x9, 0x401, 0x0, 0x0, {0xa}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @multicast2}}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8}}]}, 0x50}}, 0x0) 56.161304329s ago: executing program 1 (id=146): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@RTM_NEWMDB={0x18, 0x54, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x18}, 0x1, 0x0, 0x0, 0x24044015}, 0x800) 54.554596624s ago: executing program 1 (id=149): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) write$binfmt_aout(r5, 0x0, 0xfdef) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x4845, 0x0, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x20040040) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1}, 0x0) close(r1) 54.069592239s ago: executing program 1 (id=150): connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x820040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 51.99379933s ago: executing program 1 (id=155): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = dup2(r0, r0) sendmmsg$unix(r6, &(0x7f0000008380), 0x400000000000174, 0x4008890) 49.865439657s ago: executing program 1 (id=159): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c2300fe) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 34.515972869s ago: executing program 32 (id=159): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, 0x0, 0x0) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c2300fe) pipe(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) 10.791280607s ago: executing program 0 (id=239): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r6, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r6, &(0x7f0000000100), 0x0, 0x4845, 0x0, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1}, 0x0) close(r1) 9.852021904s ago: executing program 0 (id=241): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f00000000c0)=@bpq0, 0x10) 9.622128609s ago: executing program 0 (id=244): setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x40000000000, 0x3, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x7, 0x80000001, 0x3cf2a278, 0x0, 0x0, 0x0, 0x4}) 7.863425681s ago: executing program 4 (id=246): r0 = socket(0x1e, 0x805, 0x0) connect$tipc(r0, &(0x7f0000000600)=@id={0x1e, 0x3, 0x3}, 0x10) 7.788133432s ago: executing program 0 (id=247): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10000000000002, 0x400, 0x0, 0xa, 0x1, 0x1, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780820040000000000000033324dbdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f246eb000200", "b7324536181c208220000000b901000000e5ffffff002db267e6a281befc00", [0x40004]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='qnx6\x00', 0x0) 7.752657496s ago: executing program 3 (id=248): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) 7.476423137s ago: executing program 4 (id=249): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.532821254s ago: executing program 2 (id=250): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x4845, 0x0, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1}, 0x0) close(r1) 6.225672122s ago: executing program 2 (id=251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 6.125909019s ago: executing program 3 (id=252): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file1\x00', 0x1bb) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000280)='./file1\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000180)=ANY=[], 0xfffffecc) 5.075425054s ago: executing program 2 (id=253): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a40)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYBLOB="0100000000000000000003000000140001800d0001007564303a73"], 0x28}}, 0x0) 4.755524302s ago: executing program 2 (id=254): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x1, 0x0, 0x20a}, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='<', 0x1}], 0x1}, 0x8050) 4.313801347s ago: executing program 2 (id=255): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_SUBSCRIBE_EVENT(0xffffffffffffffff, 0x4020565a, 0x0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) sendto$inet(r0, &(0x7f0000000280)="1d", 0x1, 0x200400c5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40000) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 3.277730333s ago: executing program 4 (id=256): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.372152272s ago: executing program 0 (id=257): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsmount(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0c0000000400000004", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) writev(r2, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') 2.343169304s ago: executing program 3 (id=258): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 2.195992106s ago: executing program 3 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) setxattr$incfs_metadata(0x0, &(0x7f00000001c0), 0x0, 0x0, 0x2) shutdown(r3, 0x1) 1.25845461s ago: executing program 3 (id=260): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000180)=@gcm_128={{0x303}, "345aa3593519c7e1", "e8a1056a7c356ba2b862ef93136b1587", "28bc90f4", "790f59276094db31"}, 0x28) sendto$inet6(r5, &(0x7f0000000340)="d1", 0x1, 0x8000, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000100), 0x0, 0x4845, 0x0, 0x0) recvmsg(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)=""/151, 0x97}], 0x1}, 0x0) close(r1) 1.12075843s ago: executing program 3 (id=261): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f0000000980)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x18, &(0x7f0000001840)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x71, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.060496478s ago: executing program 2 (id=262): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') pidfd_getfd(r2, r1, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r4 = dup2(r3, r3) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(r3, 0x1274, 0x0) ioctl$BLKTRACESTOP(r4, 0x1275, 0x0) 895.815277ms ago: executing program 4 (id=263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001a40)=ANY=[@ANYRES16=r1, @ANYBLOB="0100000000000000000003000000140001800d0001007564303a73"], 0x28}}, 0x0) 718.155262ms ago: executing program 4 (id=264): openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r4 = syz_io_uring_setup(0x49e, &(0x7f0000000500)={0x0, 0x69af, 0x1, 0x0, 0x20a}, &(0x7f0000000140)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r4, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r4, 0x627, 0x4c1, 0x43, 0x0, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x12) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='<', 0x1}], 0x1}, 0x8050) 393.217998ms ago: executing program 0 (id=265): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r1, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000001000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r2}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) socket$inet6(0xa, 0x3, 0x3c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) close(r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000ffffff80e500020000000000c500fcff000000007f00feffd100000095"], &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff6f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00', r3}, 0x18) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000380)="1b", 0x1}], 0x1}}], 0x1, 0x0) 0s ago: executing program 4 (id=266): r0 = syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[@ANYRES8=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x10000000000002, 0x400, 0x0, 0xa, 0x1, 0x1, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c6780820040000000000000033324dbdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f246eb000200", "b7324536181c208220000000b901000000e5ffffff002db267e6a281befc00", [0x40004]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000100)='qnx6\x00', 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 80.135579][ T5785] cgroup: Unknown subsys name 'net' [ 80.396295][ T5785] cgroup: Unknown subsys name 'cpuset' [ 80.451781][ T5785] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.298791][ T5785] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.843010][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.847593][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.865703][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.891364][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.901508][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.982239][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.991951][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.005764][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.007459][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.008535][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.148482][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.159558][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.168701][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.183725][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.185427][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.222953][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.226145][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.227251][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.228343][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.230430][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.252728][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.254163][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.258186][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.327440][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.328325][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.899680][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 86.089277][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 86.563785][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 86.575727][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.575866][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.576363][ T5797] bridge_slave_0: entered allmulticast mode [ 86.579194][ T5797] bridge_slave_0: entered promiscuous mode [ 86.587957][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 86.615849][ T5807] chnl_net:caif_netlink_parms(): no params data found [ 86.620374][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.622037][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.622222][ T5797] bridge_slave_1: entered allmulticast mode [ 86.624756][ T5797] bridge_slave_1: entered promiscuous mode [ 86.874798][ T982] cfg80211: failed to load regulatory.db [ 86.954538][ T5116] Bluetooth: hci0: command tx timeout [ 87.031454][ T5116] Bluetooth: hci1: command tx timeout [ 87.164955][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.165117][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.165295][ T5801] bridge_slave_0: entered allmulticast mode [ 87.167213][ T5801] bridge_slave_0: entered promiscuous mode [ 87.271429][ T5116] Bluetooth: hci2: command tx timeout [ 87.296858][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.315262][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.315602][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.315831][ T5801] bridge_slave_1: entered allmulticast mode [ 87.318290][ T5801] bridge_slave_1: entered promiscuous mode [ 87.351220][ T5116] Bluetooth: hci4: command tx timeout [ 87.351403][ T5116] Bluetooth: hci3: command tx timeout [ 87.360386][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.834886][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.954087][ T5797] team0: Port device team_slave_0 added [ 88.034766][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.035019][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.035136][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.035285][ T5804] bridge_slave_0: entered allmulticast mode [ 88.036773][ T5804] bridge_slave_0: entered promiscuous mode [ 88.125529][ T5797] team0: Port device team_slave_1 added [ 88.126180][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.126301][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.127119][ T5805] bridge_slave_0: entered allmulticast mode [ 88.129048][ T5805] bridge_slave_0: entered promiscuous mode [ 88.222336][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.222431][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.222539][ T5804] bridge_slave_1: entered allmulticast mode [ 88.224023][ T5804] bridge_slave_1: entered promiscuous mode [ 88.452935][ T5807] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.453058][ T5807] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.453214][ T5807] bridge_slave_0: entered allmulticast mode [ 88.454746][ T5807] bridge_slave_0: entered promiscuous mode [ 88.532258][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.532366][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.532473][ T5805] bridge_slave_1: entered allmulticast mode [ 88.533987][ T5805] bridge_slave_1: entered promiscuous mode [ 88.722269][ T5807] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.722363][ T5807] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.722649][ T5807] bridge_slave_1: entered allmulticast mode [ 88.724474][ T5807] bridge_slave_1: entered promiscuous mode [ 88.933581][ T5801] team0: Port device team_slave_0 added [ 89.031409][ T5799] Bluetooth: hci0: command tx timeout [ 89.084128][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.084143][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.084157][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.111347][ T5799] Bluetooth: hci1: command tx timeout [ 89.164258][ T5801] team0: Port device team_slave_1 added [ 89.167191][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.232908][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.232925][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.232948][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.237534][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.314186][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.317111][ T5807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.339615][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.351500][ T5799] Bluetooth: hci2: command tx timeout [ 89.431448][ T5799] Bluetooth: hci3: command tx timeout [ 89.431481][ T5799] Bluetooth: hci4: command tx timeout [ 89.645819][ T5807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.723253][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.723266][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.723280][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.932845][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.932861][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.932885][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.934965][ T5804] team0: Port device team_slave_0 added [ 90.074119][ T5805] team0: Port device team_slave_0 added [ 90.084749][ T5804] team0: Port device team_slave_1 added [ 90.087907][ T5807] team0: Port device team_slave_0 added [ 90.155960][ T5805] team0: Port device team_slave_1 added [ 90.233541][ T5807] team0: Port device team_slave_1 added [ 90.239038][ T5797] hsr_slave_0: entered promiscuous mode [ 90.240500][ T5797] hsr_slave_1: entered promiscuous mode [ 90.823401][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.823415][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.823430][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.923758][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.923774][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.923787][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.012819][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.012836][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.012858][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.016344][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.016358][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.016375][ T5807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.111307][ T5799] Bluetooth: hci0: command tx timeout [ 91.143386][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.143401][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.143415][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.149029][ T5801] hsr_slave_0: entered promiscuous mode [ 91.149854][ T5801] hsr_slave_1: entered promiscuous mode [ 91.150574][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 91.150661][ T5801] Cannot create hsr debugfs directory [ 91.165679][ T5807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.165700][ T5807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.165724][ T5807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.211162][ T5799] Bluetooth: hci1: command tx timeout [ 91.431458][ T5799] Bluetooth: hci2: command tx timeout [ 91.511468][ T5799] Bluetooth: hci3: command tx timeout [ 91.511504][ T5799] Bluetooth: hci4: command tx timeout [ 91.727606][ T5804] hsr_slave_0: entered promiscuous mode [ 91.728495][ T5804] hsr_slave_1: entered promiscuous mode [ 91.729103][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 91.729123][ T5804] Cannot create hsr debugfs directory [ 91.895050][ T5805] hsr_slave_0: entered promiscuous mode [ 91.895968][ T5805] hsr_slave_1: entered promiscuous mode [ 91.896546][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 91.896568][ T5805] Cannot create hsr debugfs directory [ 91.904233][ T5807] hsr_slave_0: entered promiscuous mode [ 91.905656][ T5807] hsr_slave_1: entered promiscuous mode [ 91.906555][ T5807] debugfs: 'hsr0' already exists in 'hsr' [ 91.906578][ T5807] Cannot create hsr debugfs directory [ 93.108616][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.138315][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.175463][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.191492][ T5799] Bluetooth: hci0: command tx timeout [ 93.226708][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.271208][ T5799] Bluetooth: hci1: command tx timeout [ 93.340243][ T5801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.389061][ T5801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.427278][ T5801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.483466][ T5801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.511457][ T5799] Bluetooth: hci2: command tx timeout [ 93.591479][ T5799] Bluetooth: hci4: command tx timeout [ 93.600571][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.601387][ T5799] Bluetooth: hci3: command tx timeout [ 93.649746][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.689545][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.719790][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.843765][ T5807] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.899599][ T5807] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.940698][ T5807] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.990690][ T5807] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.068085][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.118361][ T5805] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.150933][ T5805] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.188383][ T5805] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.235369][ T5805] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.282390][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.317837][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.318283][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.360025][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.360285][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.388707][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.468963][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.497879][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.537457][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.537602][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.576443][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.576566][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.619527][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.669836][ T5807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.675146][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.675512][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.716219][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.716447][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.794284][ T5807] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.829608][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.867476][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.867645][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.916284][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.916398][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.963077][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.018486][ T1347] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.018719][ T1347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.048090][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.048434][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.073438][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.369337][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.424416][ T5797] veth0_vlan: entered promiscuous mode [ 95.476107][ T5797] veth1_vlan: entered promiscuous mode [ 95.538786][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.633594][ T5801] veth0_vlan: entered promiscuous mode [ 95.674047][ T5797] veth0_macvtap: entered promiscuous mode [ 95.688939][ T5801] veth1_vlan: entered promiscuous mode [ 95.707146][ T5797] veth1_macvtap: entered promiscuous mode [ 95.773142][ T5807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.795911][ T5804] veth0_vlan: entered promiscuous mode [ 95.804524][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.837531][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.853408][ T5804] veth1_vlan: entered promiscuous mode [ 95.895257][ T1310] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.899628][ T5801] veth0_macvtap: entered promiscuous mode [ 95.916119][ T1310] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.933606][ T1310] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.956448][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.960071][ T1310] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.982359][ T5801] veth1_macvtap: entered promiscuous mode [ 96.204207][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.230103][ T5804] veth0_macvtap: entered promiscuous mode [ 96.263983][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.283961][ T5804] veth1_macvtap: entered promiscuous mode [ 96.305329][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.305351][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.320939][ T1310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.344234][ T1310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.350186][ T1310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369768][ T1310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.463295][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.463661][ T5805] veth0_vlan: entered promiscuous mode [ 96.465487][ T4330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.465502][ T4330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.566899][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.590190][ T5807] veth0_vlan: entered promiscuous mode [ 96.646785][ T5805] veth1_vlan: entered promiscuous mode [ 96.649362][ T4330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.670442][ T4330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.684903][ T4330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.707752][ T4330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.748190][ T5807] veth1_vlan: entered promiscuous mode [ 96.798042][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.798063][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.140776][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.140798][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.206496][ T5914] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 97.328826][ T5805] veth0_macvtap: entered promiscuous mode [ 97.363178][ T1347] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.363195][ T1347] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.423568][ T5805] veth1_macvtap: entered promiscuous mode [ 97.446199][ T5807] veth0_macvtap: entered promiscuous mode [ 97.512487][ T5807] veth1_macvtap: entered promiscuous mode [ 97.643473][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.643494][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.659549][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.794675][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.815150][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.859757][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.866944][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.897264][ T5807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.898163][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.908324][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.934528][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.942515][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947734][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.667167][ T5918] tty tty1: ldisc open failed (-12), clearing slot 0 [ 98.839260][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.701541][ C1] vkms_vblank_simulate: vblank timer overrun [ 99.857028][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.113263][ C1] vkms_vblank_simulate: vblank timer overrun [ 100.961155][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.299945][ C1] vkms_vblank_simulate: vblank timer overrun [ 101.341433][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.341454][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.511048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.555518][ T5920] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.555536][ T5920] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.647259][ T5920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.647279][ T5920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.706678][ T5860] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 101.783066][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.783571][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 101.982681][ T5860] usb 1-1: Using ep0 maxpacket: 8 [ 102.021208][ T5920] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.021228][ T5920] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.033922][ T5860] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 102.033953][ T5860] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 102.033976][ T5860] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 102.033999][ T5860] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.034041][ T5860] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.034059][ T5860] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.590474][ T5955] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 103.077419][ T5860] usb 1-1: usb_control_msg returned -32 [ 103.077461][ T5860] usbtmc 1-1:16.0: can't read capabilities [ 103.141312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.141823][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.713991][ T5962] vivid-007: disconnect [ 104.296560][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.474840][ T5960] vivid-007: reconnect [ 104.594829][ T5860] usb 1-1: USB disconnect, device number 2 [ 104.972585][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 105.142942][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 105.147333][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.147415][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.147440][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.147551][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.147591][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.147613][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.551150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.723324][ T9] usb 4-1: usb_control_msg returned -32 [ 105.723352][ T9] usbtmc 4-1:16.0: can't read capabilities [ 105.942776][ T9] usb 4-1: USB disconnect, device number 2 [ 107.016263][ T5985] tipc: Started in network mode [ 107.016281][ T5985] tipc: Node identity 4, cluster identity 4711 [ 107.016296][ T5985] tipc: Node number set to 4 [ 107.224461][ T1228] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.303835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.395895][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 107.408990][ T1228] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 107.409023][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 107.409047][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.409070][ T1228] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.409109][ T1228] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.409130][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.803716][ T1228] usb 4-1: usb_control_msg returned -32 [ 107.803763][ T1228] usbtmc 4-1:16.0: can't read capabilities [ 109.144676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 109.146832][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 111.288159][ T5787] usb 4-1: USB disconnect, device number 3 [ 111.577187][ T1228] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 111.749590][ T1228] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 111.749620][ T1228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.749639][ T1228] usb 1-1: Product: syz [ 111.749653][ T1228] usb 1-1: Manufacturer: syz [ 111.749666][ T1228] usb 1-1: SerialNumber: syz [ 111.810867][ T1228] usb 1-1: config 0 descriptor?? [ 111.842787][ T1228] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 003 [ 112.972128][ T1228] (null): failure reading functionality [ 113.001598][ T1228] i2c i2c-1: failure reading functionality [ 113.025169][ T6005] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.025276][ T1228] i2c i2c-1: connected i2c-tiny-usb device [ 113.153016][ T982] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 113.205564][ T9] usb 1-1: USB disconnect, device number 3 [ 113.311372][ T982] usb 3-1: Using ep0 maxpacket: 8 [ 113.338688][ T982] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 113.338721][ T982] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.338735][ T982] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.338748][ T982] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.338774][ T982] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.338786][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.641895][ T982] usb 3-1: usb_control_msg returned -32 [ 113.641923][ T982] usbtmc 3-1:16.0: can't read capabilities [ 113.648385][ T982] usb 3-1: USB disconnect, device number 2 [ 113.848983][ T6031] openvswitch: netlink: Missing valid actions attribute. [ 113.849006][ T6031] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.363262][ T6037] capability: warning: `syz.3.38' uses 32-bit capabilities (legacy support in use) [ 114.574018][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.902624][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.022045][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.093580][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.449831][ C0] vkms_vblank_simulate: vblank timer overrun [ 115.551258][ T1228] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.116362][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.628910][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.731230][ T1228] usb 3-1: Using ep0 maxpacket: 8 [ 116.734145][ T1228] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 116.734178][ T1228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 116.734198][ T1228] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 116.734220][ T1228] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 116.734261][ T1228] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 116.734281][ T1228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.072215][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.217521][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.110801][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.114437][ T1228] usb 3-1: usb_control_msg returned -32 [ 118.114484][ T1228] usbtmc 3-1:16.0: can't read capabilities [ 118.511503][ T5787] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.999826][ T5787] usb 4-1: Using ep0 maxpacket: 8 [ 119.075841][ C0] vkms_vblank_simulate: vblank timer overrun [ 119.098142][ T5787] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 119.098174][ T5787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 119.098198][ T5787] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.098220][ T5787] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.098262][ T5787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.098284][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.409710][ T5787] usb 4-1: usb_control_msg returned -32 [ 119.409759][ T5787] usbtmc 4-1:16.0: can't read capabilities [ 119.485754][ T1228] usb 3-1: USB disconnect, device number 3 [ 119.576102][ C0] vkms_vblank_simulate: vblank timer overrun [ 121.497011][ T6083] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 121.600466][ T5868] usb 4-1: USB disconnect, device number 4 [ 124.054830][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.55'. [ 124.881408][ T6107] netlink: 'syz.0.57': attribute type 1 has an invalid length. [ 128.325690][ T1228] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.512863][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 128.533218][ T1228] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 128.533255][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.533279][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.533439][ T1228] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.533691][ T1228] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.533756][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.710325][ T1228] usb 4-1: usb_control_msg returned -32 [ 129.710381][ T1228] usbtmc 4-1:16.0: can't read capabilities [ 130.165823][ T1228] usb 4-1: USB disconnect, device number 5 [ 130.271198][ T982] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.425063][ T982] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 130.425081][ T982] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.425090][ T982] usb 1-1: Product: syz [ 130.425097][ T982] usb 1-1: Manufacturer: syz [ 130.425105][ T982] usb 1-1: SerialNumber: syz [ 130.486841][ T982] usb 1-1: config 0 descriptor?? [ 130.529803][ T982] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 004 [ 130.938440][ T982] (null): failure reading functionality [ 131.073226][ T982] i2c i2c-1: failure reading functionality [ 131.171324][ T982] i2c i2c-1: connected i2c-tiny-usb device [ 131.210722][ T6151] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 131.265629][ T982] usb 1-1: USB disconnect, device number 4 [ 131.282146][ T6152] syz.3.70 uses obsolete (PF_INET,SOCK_PACKET) [ 131.805694][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.3.70'. [ 132.808359][ T6174] netlink: 'syz.0.76': attribute type 1 has an invalid length. [ 133.353789][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.355778][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.661674][ T44] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 134.915992][ T44] usb 1-1: Using ep0 maxpacket: 8 [ 134.982301][ T44] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 134.982360][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 134.982433][ T44] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 134.982481][ T44] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 134.982823][ T44] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 134.982871][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.631290][ T44] usb 1-1: usb_control_msg returned -32 [ 135.631337][ T44] usbtmc 1-1:16.0: can't read capabilities [ 135.698155][ T44] usb 1-1: USB disconnect, device number 5 [ 136.851926][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.037390][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 137.121689][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 138.065258][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.065309][ T44] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 138.065337][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.118128][ T44] usb 3-1: config 0 descriptor?? [ 138.217910][ T5869] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 138.217929][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.217939][ T5869] usb 2-1: Product: syz [ 138.217947][ T5869] usb 2-1: Manufacturer: syz [ 138.217954][ T5869] usb 2-1: SerialNumber: syz [ 138.268332][ T5869] usb 2-1: config 0 descriptor?? [ 138.289277][ T5869] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 138.333465][ T44] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.421221][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 138.571286][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 138.574181][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 138.574213][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 138.574237][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 138.574259][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.574300][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.574312][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.685248][ T5869] (null): failure reading functionality [ 138.705597][ T5869] i2c i2c-1: failure reading functionality [ 138.785128][ T5869] i2c i2c-1: connected i2c-tiny-usb device [ 138.838237][ T5869] usb 2-1: USB disconnect, device number 2 [ 138.937322][ T9] usb 1-1: usb_control_msg returned -32 [ 138.937425][ T9] usbtmc 1-1:16.0: can't read capabilities [ 138.947339][ T10] usb 3-1: USB disconnect, device number 4 [ 138.947439][ C0] iowarrior 3-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 139.183489][ T44] usb 1-1: USB disconnect, device number 6 [ 139.574945][ T5116] Bluetooth: hci5: command 0x1003 tx timeout [ 139.575256][ T5799] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 143.669671][ T6227] netlink: 'syz.2.94': attribute type 10 has an invalid length. [ 143.675378][ T6227] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 144.499602][ T44] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.551242][ T5869] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 144.661259][ T44] usb 4-1: Using ep0 maxpacket: 8 [ 144.663743][ T44] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 144.663775][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 144.663799][ T44] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.663822][ T44] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.663863][ T44] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.663886][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.762358][ T5869] usb 5-1: no configurations [ 144.762377][ T5869] usb 5-1: can't read configurations, error -22 [ 144.911252][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 145.041212][ T44] usb 4-1: usb_control_msg returned -32 [ 145.041258][ T44] usbtmc 4-1:16.0: can't read capabilities [ 145.093579][ T44] usb 4-1: USB disconnect, device number 6 [ 145.607332][ T5869] usb 5-1: no configurations [ 145.607351][ T5869] usb 5-1: can't read configurations, error -22 [ 145.607684][ T5869] usb usb5-port1: attempt power cycle [ 146.660978][ T5869] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 146.684803][ T5799] Bluetooth: hci2: ACL packet too small [ 146.805506][ T5869] usb 5-1: no configurations [ 146.805527][ T5869] usb 5-1: can't read configurations, error -22 [ 146.963645][ T5869] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 146.983872][ T5869] usb 5-1: no configurations [ 146.983891][ T5869] usb 5-1: can't read configurations, error -22 [ 146.984230][ T5869] usb usb5-port1: unable to enumerate USB device [ 151.511911][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.708083][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 152.795826][ T1228] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.092217][ T44] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 153.092431][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.099217][ T44] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.099398][ T44] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.100989][ T44] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.101787][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.396890][ T1228] usb 2-1: no configurations [ 153.396909][ T1228] usb 2-1: can't read configurations, error -22 [ 153.398645][ T44] usb 5-1: can't set config #16, error -71 [ 153.424495][ T44] usb 5-1: USB disconnect, device number 6 [ 153.521226][ T1228] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 153.672148][ T1228] usb 2-1: no configurations [ 153.672167][ T1228] usb 2-1: can't read configurations, error -22 [ 153.672546][ T1228] usb usb2-port1: attempt power cycle [ 154.731190][ T1228] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.339395][ T1228] usb 2-1: device descriptor read/8, error -71 [ 155.740919][ T6349] netlink: 'syz.2.129': attribute type 2 has an invalid length. [ 155.740988][ T6349] netlink: 'syz.2.129': attribute type 1 has an invalid length. [ 158.431596][ T1228] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 159.531288][ T1228] usb 2-1: Using ep0 maxpacket: 8 [ 159.537252][ T1228] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 159.537272][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 159.537284][ T1228] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.537296][ T1228] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.537319][ T1228] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 159.537330][ T1228] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.672590][ T1228] usb 2-1: usb_control_msg returned -32 [ 160.672639][ T1228] usbtmc 2-1:16.0: can't read capabilities [ 160.765488][ T1228] usb 2-1: USB disconnect, device number 7 [ 161.462470][ T5884] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 161.661358][ T5884] usb 3-1: no configurations [ 161.661376][ T5884] usb 3-1: can't read configurations, error -22 [ 161.812274][ T5884] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 162.436350][ T6409] netlink: 'syz.1.141': attribute type 2 has an invalid length. [ 162.436494][ T6409] netlink: 'syz.1.141': attribute type 1 has an invalid length. [ 163.002318][ T5884] usb 3-1: no configurations [ 163.002337][ T5884] usb 3-1: can't read configurations, error -22 [ 163.007433][ T5884] usb usb3-port1: attempt power cycle [ 164.361378][ T6424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.364957][ T6424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.571200][ T5884] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.624329][ T5884] usb 3-1: no configurations [ 164.624342][ T5884] usb 3-1: can't read configurations, error -22 [ 164.697444][ T6429] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.748585][ T6429] netlink: 12 bytes leftover after parsing attributes in process `syz.0.147'. [ 164.778053][ T5884] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 164.801305][ T5884] usb 3-1: no configurations [ 164.801324][ T5884] usb 3-1: can't read configurations, error -22 [ 164.811732][ T5884] usb usb3-port1: unable to enumerate USB device [ 168.262790][ T1228] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 168.831434][ T1228] usb 4-1: Using ep0 maxpacket: 8 [ 169.180857][ T6465] netlink: 'syz.0.156': attribute type 2 has an invalid length. [ 169.180878][ T6465] netlink: 'syz.0.156': attribute type 1 has an invalid length. [ 169.868586][ T1228] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.868726][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.868801][ T1228] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.868849][ T1228] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.869068][ T1228] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.869125][ T1228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.262043][ T1228] usb 4-1: can't set config #16, error -71 [ 170.318741][ T1228] usb 4-1: USB disconnect, device number 7 [ 170.351759][ T5861] udevd[5861]: setting mode of /dev/bus/usb/004/007 to 020664 failed: No such file or directory [ 170.351951][ T5861] udevd[5861]: setting owner of /dev/bus/usb/004/007 to uid=0, gid=0 failed: No such file or directory [ 171.681397][ T982] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 173.035641][ T982] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.035670][ T982] usb 1-1: config 0 has no interfaces? [ 173.036389][ T982] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 173.036566][ T982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.088788][ T982] usb 1-1: config 0 descriptor?? [ 174.723162][ T6507] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.736147][ T6507] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.004421][ T37] audit: type=1326 audit(1761197407.832:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6508 comm="syz.2.170" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f093437efc9 code=0x0 [ 176.191289][ T5869] usb 1-1: USB disconnect, device number 7 [ 177.995848][ T6527] serio: Serial port ptm0 [ 178.764822][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.883136][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.747450][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.863582][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.095308][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.267273][ C1] vkms_vblank_simulate: vblank timer overrun [ 180.881902][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.721359][ T5787] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.786304][ C1] vkms_vblank_simulate: vblank timer overrun [ 182.954029][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.241381][ C1] vkms_vblank_simulate: vblank timer overrun [ 183.911726][ T5787] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.911752][ T5787] usb 4-1: config 0 has no interfaces? [ 183.911782][ T5787] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 183.911793][ T5787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.599270][ T5787] usb 4-1: config 0 descriptor?? [ 186.103071][ T5860] usb 4-1: USB disconnect, device number 8 [ 186.177003][ T6583] Zero length message leads to an empty skb [ 191.585427][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.598628][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.615733][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.632560][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.701630][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.041170][ T982] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 193.264838][ T5860] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 193.673045][ T982] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.673071][ T982] usb 4-1: config 0 has no interfaces? [ 193.673101][ T982] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 193.673123][ T982] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.828369][ T5860] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 193.828396][ T5860] usb 3-1: config 0 has no interface number 0 [ 193.828590][ T5860] usb 3-1: config 0 interface 255 altsetting 0 endpoint 0x82 has invalid maxpacket 13042, setting to 1024 [ 193.828616][ T5860] usb 3-1: config 0 interface 255 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 193.832444][ T982] usb 4-1: config 0 descriptor?? [ 193.879084][ T5860] usb 3-1: New USB device found, idVendor=10cf, idProduct=8065, bcdDevice=91.79 [ 193.879114][ T5860] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.879131][ T5860] usb 3-1: Product: syz [ 193.879139][ T5860] usb 3-1: Manufacturer: syz [ 193.879146][ T5860] usb 3-1: SerialNumber: syz [ 193.951993][ T5860] usb 3-1: config 0 descriptor?? [ 193.960254][ T6636] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 194.011604][ T5860] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 194.620644][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.620689][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.637082][ T982] usb 3-1: USB disconnect, device number 9 [ 194.770143][ T6642] binder: 6641:6642 ioctl c0306201 0 returned -14 [ 194.881209][ T5799] Bluetooth: hci5: command tx timeout [ 195.134568][ T6647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.146344][ T6647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.895049][ T5860] usb 4-1: USB disconnect, device number 9 [ 196.962391][ T5799] Bluetooth: hci5: command tx timeout [ 196.966585][ T6656] input: syz1 as /devices/virtual/input/input5 [ 198.384087][ T58] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.613975][ T6674] mmap: syz.0.215 (6674) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 199.723049][ T5799] Bluetooth: hci5: command tx timeout [ 201.067494][ T58] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.482325][ T6620] chnl_net:caif_netlink_parms(): no params data found [ 201.751801][ T5799] Bluetooth: hci5: command tx timeout [ 202.345186][ T58] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.517820][ T58] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.275371][ T6620] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.275503][ T6620] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.275696][ T6620] bridge_slave_0: entered allmulticast mode [ 204.313951][ T6620] bridge_slave_0: entered promiscuous mode [ 204.339682][ T6620] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.340942][ T6620] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.350156][ T6620] bridge_slave_1: entered allmulticast mode [ 204.375293][ T6620] bridge_slave_1: entered promiscuous mode [ 204.701700][ T6726] input: syz0 as /devices/virtual/input/input6 [ 204.891427][ T6620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.978445][ T6720] udevd[6720]: setting mode of /dev/input/event4 to 020660 failed: No such file or directory [ 204.978643][ T6720] udevd[6720]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 205.489451][ T6620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.802036][ T5956] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 208.259519][ T5956] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 208.259550][ T5956] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.259570][ T5956] usb 5-1: Product: syz [ 208.259584][ T5956] usb 5-1: Manufacturer: syz [ 208.259599][ T5956] usb 5-1: SerialNumber: syz [ 208.297716][ T6748] syz.0.237 (6748) used greatest stack depth: 17648 bytes left [ 208.441957][ T5956] usb 5-1: config 0 descriptor?? [ 208.547107][ T5956] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 007 [ 208.550889][ T6620] team0: Port device team_slave_0 added [ 208.585610][ T6620] team0: Port device team_slave_1 added [ 209.229609][ T5956] (null): failure reading functionality [ 209.322137][ T5956] i2c i2c-1: failure reading functionality [ 209.362957][ T5956] i2c i2c-1: connected i2c-tiny-usb device [ 209.474945][ T5956] usb 5-1: USB disconnect, device number 7 [ 211.122743][ T58] bridge_slave_1: left allmulticast mode [ 211.122930][ T58] bridge_slave_1: left promiscuous mode [ 211.123793][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.498974][ T58] bridge_slave_0: left allmulticast mode [ 211.499004][ T58] bridge_slave_0: left promiscuous mode [ 211.499250][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.865154][ T6769] Bluetooth: hci0: command 0x0406 tx timeout [ 211.865197][ T6769] Bluetooth: hci1: command 0x0406 tx timeout [ 211.912421][ T6769] Bluetooth: hci2: command 0x0406 tx timeout [ 212.570429][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 212.800474][ T5860] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 212.991107][ T5860] usb 5-1: Using ep0 maxpacket: 32 [ 212.997925][ T5860] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 212.998010][ T5860] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.998030][ T5860] usb 5-1: Product: syz [ 212.998044][ T5860] usb 5-1: Manufacturer: syz [ 212.998058][ T5860] usb 5-1: SerialNumber: syz [ 213.187850][ T5860] usb 5-1: config 0 descriptor?? [ 213.209241][ T5860] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 214.839521][ T5860] gspca_ov534_9: reg_r err -71 [ 215.989229][ T5860] gspca_ov534_9: Unknown sensor 0000 [ 215.989336][ T5860] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 215.996836][ T5860] usb 5-1: USB disconnect, device number 8 [ 217.318164][ T5869] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 217.734892][ T5869] usb 1-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 217.734926][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.734945][ T5869] usb 1-1: Product: syz [ 217.734957][ T5869] usb 1-1: Manufacturer: syz [ 217.734966][ T5869] usb 1-1: SerialNumber: syz [ 217.769910][ T5869] usb 1-1: config 0 descriptor?? [ 217.783657][ T5869] i2c-tiny-usb 1-1:0.0: version 6d.cc found at bus 001 address 008 [ 217.878453][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.023438][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.061027][ T58] bond0 (unregistering): Released all slaves [ 218.216156][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.216171][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.216185][ T6620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.218087][ T5869] (null): failure reading functionality [ 218.221915][ T5869] i2c i2c-1: failure reading functionality [ 218.232999][ T5869] i2c i2c-1: connected i2c-tiny-usb device [ 218.235973][ T5869] usb 1-1: USB disconnect, device number 8 [ 218.303220][ T6620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.303236][ T6620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.303260][ T6620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.697637][ T5956] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 218.857296][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 218.860963][ T5956] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 218.860995][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 218.861019][ T5956] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.861042][ T5956] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.861083][ T5956] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.861104][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.262813][ T5956] usb 4-1: GET_CAPABILITIES returned 0 [ 219.262864][ T5956] usbtmc 4-1:16.0: can't read capabilities [ 220.029283][ T6847] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 220.029306][ T6847] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 6847, name: syz.0.265 [ 220.029324][ T6847] preempt_count: 1, expected: 0 [ 220.029334][ T6847] RCU nest depth: 2, expected: 2 [ 220.029350][ T6847] 5 locks held by syz.0.265/6847: [ 220.029363][ T6847] #0: ffff888039fd0358 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connectible_sendmsg+0x189/0x1040 [ 220.029440][ T6847] #1: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run9+0x1ec/0x500 [ 220.029495][ T6847] #2: ffff8880b8832c88 ((stream_local_lock)){+.+.}-{3:3}, at: __bpf_stream_push_str+0x211/0xbe0 [ 220.029544][ T6847] #3: ffffffff8d5aa4c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10d/0x2b0 [ 220.029589][ T6847] #4: ffff8880b883f6e8 (&s->lock_key#5){+.+.}-{3:3}, at: ___slab_alloc+0x12f/0x13f0 [ 220.029638][ T6847] Preemption disabled at: [ 220.029643][ T6847] [<0000000000000000>] 0x0 [ 220.029687][ T6847] CPU: 0 UID: 0 PID: 6847 Comm: syz.0.265 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 220.029710][ T6847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.029736][ T6847] Call Trace: [ 220.029747][ T6847] [ 220.029757][ T6847] dump_stack_lvl+0x189/0x250 [ 220.029797][ T6847] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.029827][ T6847] ? __pfx__printk+0x10/0x10 [ 220.029855][ T6847] ? print_lock_name+0xde/0x100 [ 220.029885][ T6847] __might_resched+0x44b/0x5d0 [ 220.029916][ T6847] ? __pfx___might_resched+0x10/0x10 [ 220.029938][ T6847] ? ___slab_alloc+0x12f/0x13f0 [ 220.029962][ T6847] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 220.029988][ T6847] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.030017][ T6847] rt_spin_lock+0xc7/0x3e0 [ 220.030040][ T6847] ? __pfx_rt_spin_lock+0x10/0x10 [ 220.030059][ T6847] ? __lock_acquire+0xab9/0xd20 [ 220.030095][ T6847] ___slab_alloc+0x12f/0x13f0 [ 220.030120][ T6847] ? __set_page_owner+0x25c/0x490 [ 220.030152][ T6847] __slab_alloc+0xc6/0x1f0 [ 220.030170][ T6847] ? __set_page_owner+0x25c/0x490 [ 220.030196][ T6847] __kmalloc_cache_noprof+0xec/0x6c0 [ 220.030223][ T6847] ? __set_page_owner+0x25c/0x490 [ 220.030253][ T6847] __set_page_owner+0x25c/0x490 [ 220.030281][ T6847] ? __pfx___set_page_owner+0x10/0x10 [ 220.030306][ T6847] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 220.030336][ T6847] post_alloc_hook+0x240/0x2a0 [ 220.030367][ T6847] get_page_from_freelist+0x28c0/0x2960 [ 220.030416][ T6847] ? lockdep_unlock+0x89/0x120 [ 220.030446][ T6847] ? __lock_acquire+0xab9/0xd20 [ 220.030494][ T6847] alloc_frozen_pages_nolock_noprof+0xbc/0x150 [ 220.030527][ T6847] alloc_pages_nolock_noprof+0xa/0x30 [ 220.030548][ T6847] bpf_stream_page_replace+0x19/0x1e0 [ 220.030571][ T6847] __bpf_stream_push_str+0x35c/0xbe0 [ 220.030600][ T6847] ? __pfx___bpf_stream_push_str+0x10/0x10 [ 220.030633][ T6847] bpf_stream_stage_printk+0x14e/0x1c0 [ 220.030652][ T6847] ? __pfx_find_from_stack_cb+0x10/0x10 [ 220.030678][ T6847] ? arch_bpf_stack_walk+0x112/0x170 [ 220.030701][ T6847] ? __pfx_bpf_stream_stage_printk+0x10/0x10 [ 220.030736][ T6847] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.030770][ T6847] bpf_prog_report_may_goto_violation+0xc4/0x190 [ 220.030796][ T6847] ? __pfx_bpf_prog_report_may_goto_violation+0x10/0x10 [ 220.030820][ T6847] ? irqentry_exit+0x74/0x90 [ 220.030847][ T6847] ? read_tsc+0x9/0x20 [ 220.030868][ T6847] bpf_check_timed_may_goto+0xaa/0xb0 [ 220.030890][ T6847] arch_bpf_timed_may_goto+0x21/0x40 [ 220.030914][ T6847] bpf_prog_262a74d054ad2993+0x53/0x5f [ 220.030931][ T6847] bpf_trace_run9+0x2de/0x500 [ 220.030957][ T6847] ? bpf_trace_run9+0x1ec/0x500 [ 220.030979][ T6847] ? __pfx_bpf_trace_run9+0x10/0x10 [ 220.031026][ T6847] __bpf_trace_virtio_transport_alloc_pkt+0x2d7/0x340 [ 220.031066][ T6847] ? __pfx___bpf_trace_virtio_transport_alloc_pkt+0x10/0x10 [ 220.031092][ T6847] ? kmem_cache_alloc_node_noprof+0x291/0x6e0 [ 220.031135][ T6847] ? skb_copy_datagram_from_iter_full+0x122/0x170 [ 220.031181][ T6847] virtio_transport_alloc_skb+0x10cc/0x1130 [ 220.031224][ T6847] ? __pfx_virtio_transport_alloc_skb+0x10/0x10 [ 220.031245][ T6847] ? rt_spin_unlock+0x150/0x200 [ 220.031276][ T6847] virtio_transport_send_pkt_info+0x6be/0x1100 [ 220.031309][ T6847] ? rt_spin_unlock+0x150/0x200 [ 220.031336][ T6847] ? virtio_transport_seqpacket_enqueue+0xba/0x1f0 [ 220.031368][ T6847] virtio_transport_seqpacket_enqueue+0x166/0x1f0 [ 220.031398][ T6847] ? rt_spin_lock+0x1c1/0x3e0 [ 220.031419][ T6847] ? __pfx_virtio_transport_seqpacket_enqueue+0x10/0x10 [ 220.031455][ T6847] ? rt_spin_unlock+0x150/0x200 [ 220.031480][ T6847] ? rt_spin_unlock+0x161/0x200 [ 220.031502][ T6847] vsock_connectible_sendmsg+0xabf/0x1040 [ 220.031551][ T6847] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 220.031581][ T6847] ? __pfx_woken_wake_function+0x10/0x10 [ 220.031617][ T6847] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.031644][ T6847] ? __pfx_vsock_connectible_sendmsg+0x10/0x10 [ 220.031670][ T6847] __sock_sendmsg+0x21c/0x270 [ 220.031701][ T6847] ____sys_sendmsg+0x534/0x820 [ 220.031739][ T6847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.031773][ T6847] ? import_iovec+0x74/0xa0 [ 220.031800][ T6847] ___sys_sendmsg+0x21f/0x2a0 [ 220.031827][ T6847] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.031893][ T6847] ? __fget_files+0x2a/0x420 [ 220.031920][ T6847] ? __fget_files+0x3a6/0x420 [ 220.031958][ T6847] __sys_sendmmsg+0x22d/0x430 [ 220.031987][ T6847] ? __pfx___sys_sendmmsg+0x10/0x10 [ 220.032021][ T6847] ? __pfx_do_futex+0x10/0x10 [ 220.032081][ T6847] __x64_sys_sendmmsg+0xa0/0xc0 [ 220.032105][ T6847] do_syscall_64+0xfa/0xfa0 [ 220.032128][ T6847] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.032151][ T6847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.032169][ T6847] ? clear_bhb_loop+0x60/0xb0 [ 220.032193][ T6847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.032212][ T6847] RIP: 0033:0x7feb7b69efc9 [ 220.032229][ T6847] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.032246][ T6847] RSP: 002b:00007feb798fe038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 220.032266][ T6847] RAX: ffffffffffffffda RBX: 00007feb7b8f5fa0 RCX: 00007feb7b69efc9 [ 220.032280][ T6847] RDX: 0000000000000001 RSI: 0000200000000b40 RDI: 0000000000000004 [ 220.032293][ T6847] RBP: 00007feb7b721f91 R08: 0000000000000000 R09: 0000000000000000 [ 220.032305][ T6847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.032316][ T6847] R13: 00007feb7b8f6038 R14: 00007feb7b8f5fa0 R15: 00007ffc31004798 [ 220.032351][ T6847] [ 220.041984][ T982] usb 4-1: USB disconnect, device number 10 [ 221.721258][ T6620] hsr_slave_0: entered promiscuous mode [ 221.722599][ T6620] hsr_slave_1: entered promiscuous mode [ 221.723567][ T6620] debugfs: 'hsr0' already exists in 'hsr' [ 221.723590][ T6620] Cannot create hsr debugfs directory [ 222.785528][ T58] hsr_slave_0: left promiscuous mode [ 222.805594][ T58] hsr_slave_1: left promiscuous mode [ 222.808270][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.808365][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.873618][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.873647][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.938052][ T58] veth1_macvtap: left promiscuous mode [ 222.938419][ T58] veth0_macvtap: left promiscuous mode [ 222.938633][ T58] veth1_vlan: left promiscuous mode [ 222.938911][ T58] veth0_vlan: left promiscuous mode [ 225.144992][ T58] team0 (unregistering): Port device team_slave_1 removed [ 225.364640][ T58] team0 (unregistering): Port device team_slave_0 removed [ 227.901978][ T6620] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 227.940920][ T6620] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 227.978381][ T6620] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 228.024631][ T6620] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 228.309413][ T6620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.377205][ T6620] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.427899][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.428029][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.450447][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.450532][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.871439][ T6620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.271175][ T6620] veth0_vlan: entered promiscuous mode [ 229.293740][ T6620] veth1_vlan: entered promiscuous mode [ 229.348702][ T6620] veth0_macvtap: entered promiscuous mode [ 229.360485][ T6620] veth1_macvtap: entered promiscuous mode [ 229.394442][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.419486][ T6620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.445339][ T58] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.445958][ T58] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.446203][ T58] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.446239][ T58] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.729687][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.729707][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.820435][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.820455][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50