last executing test programs: 9.027153275s ago: executing program 2 (id=116): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x8, 0x5, 0xd, 0x2, 0x3, 0x3}}, {0x4}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 8.277891377s ago: executing program 2 (id=120): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x304}, "36a6434088fea58f", "111ed631702ca6fb3f5c4725ca7b6844", "3cbd0155", "559cd81cd03b2248"}, 0x28) writev(r0, &(0x7f0000000d00)=[{&(0x7f00000003c0)="73035a19fc73679438e7709d0c", 0xd}, {&(0x7f0000000580)="f063ee7b9ea6fb8bfcb8aae3dcb4669bdfde7230", 0x14}], 0x2) 7.963852595s ago: executing program 2 (id=123): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000000000010711e0920000000000001090224000100000000090400090103000100092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000140)='g') preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000000180)=""/247, 0xf7}, {&(0x7f0000000080)=""/92, 0x5c}], 0x3, 0x6, 0xc052) 7.229884748s ago: executing program 3 (id=126): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x94173000) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='net/fib_trie\x00') preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000440)=""/192, 0xc0}], 0x1, 0xd6, 0x807) 5.527916145s ago: executing program 0 (id=135): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2, 0x0, 0x0, 0x4004}, 0x48084) 5.472574865s ago: executing program 1 (id=137): r0 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3cc}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r3, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000881}, 0x0) 5.413236563s ago: executing program 2 (id=138): r0 = syz_io_uring_setup(0x5c2, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000004c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x80, 0x2, 0x0, 0x127}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x6ef4, 0x3903, 0x3, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_STATUS(r0, 0x1a, &(0x7f0000000000)={0x5}, 0x1) 4.718858799s ago: executing program 0 (id=139): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x800) shutdown(r0, 0x1) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000040)={r2}, &(0x7f0000000100)=0x8) 4.331111725s ago: executing program 0 (id=140): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r2}) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @loopback={0xfeffffff00000000, 0x1ff0000aa}, @private2}}}}}}, 0x0) 4.229384736s ago: executing program 1 (id=141): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="002212"], 0x0}, 0x0) ioctl$EVIOCRMFF(r0, 0x4004550f, 0x0) 4.099775656s ago: executing program 3 (id=143): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 3.770250806s ago: executing program 0 (id=144): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'io+mem'}, 0xc) io_setup(0x5, &(0x7f0000000540)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) close(0x3) 3.583087102s ago: executing program 4 (id=145): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000380)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r3], 0x20}}, 0x0) 3.029940012s ago: executing program 4 (id=146): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0x50b, 0x8, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x200, 0x5, 0x0, 0x0, 0xf407}, 0xfffffffb, 0x0, 0x0, 0x4, 0x7, 0x4, 0x40, 0x9, 0x0, 0x1ff, {0x0, 0x0, 0x0, 0x6}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.990630977s ago: executing program 0 (id=147): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x6, 0x1, 0x5, 0x7fffffff}]}) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x10, &(0x7f00000002c0)={0xa}) 2.360236083s ago: executing program 4 (id=148): r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0x5) 2.276310919s ago: executing program 3 (id=149): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) 2.132898876s ago: executing program 1 (id=150): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) r1 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r0, 0x0, &(0x7f0000000240)="144024aeae8b2b5d63f7449a372e1406d4de5bdf4a5f2ef4b458f0c3d407000000", 0xffffffffffffffe8, 0x2400c0c7, 0x1}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 2.013778275s ago: executing program 3 (id=151): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={r1, 0x2, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @random="35f31c7ad537"}, 0x10) 1.790486915s ago: executing program 3 (id=152): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x4d, 0x42, 0xd8, 0x20, 0x1ba6, 0x1, 0x4988, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x77, 0xe4, 0xf9}}]}}]}}, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}]}, 0x3c}}, 0x0) 1.738620743s ago: executing program 0 (id=153): r0 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x4885, 0x100, 0x4, 0x1d}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x6, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x12321, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0x3000000, 0x0, 0x0, 0x0) 1.156949453s ago: executing program 4 (id=154): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 947.163749ms ago: executing program 1 (id=155): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/file0/file0\x00', 0x81c0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./file0/file0/file0\x00', 0x0) 670.130625ms ago: executing program 4 (id=156): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000700)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48d2f15b3118abd8fd087f117830209a631f9dfbec5cbbbb2216a2d87dfb0d7dd906c594125a10053c8e288ac4445ff0e999d423cc250e31e8650d248e49ba5fb3be8db01db38acf5a4455630ecb10f753530ada6598a1ff4805370a5cebf05e199368871b2751c242633419d13a6b05a390d21ab1d44be1254385b3d882c646f9762bf3480e05e98c9cc655adb7caa279e66709794e3b93cda0b9a14794e6d020cc68ea70e71a083e1a2b375591203ce218e8d244cf32f5dd7af0ee1ed032d3b59e4d57136639d68b7577553393a9", 0xf1}, {&(0x7f0000000000)="ef7791000dc7777cb951ca638ea0e1b5d280548c882aa59a68cd17c0e7f23d", 0x1f}], 0x2, 0x0, 0x0, 0x2}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f00000003c0)=""/203, 0xcb}], 0x2}, 0xc3}, {{0x0, 0x0, &(0x7f0000007940)=[{&(0x7f0000000880)=""/139, 0x8b}], 0x1}, 0xd}], 0x2, 0x12001, 0x0) 620.339541ms ago: executing program 1 (id=157): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000000)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "001a43fe00"}, 0x38) 468.553384ms ago: executing program 2 (id=158): unshare(0x6020400) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x19) 368.22714ms ago: executing program 4 (id=159): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000040)=[@in={0x2, 0x0, @rand_addr=0x64010100}], 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000700)=@assoc_value={0x0}, &(0x7f0000000740)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000680)=@assoc_value={r2, 0x7}, 0x8) 210.314954ms ago: executing program 1 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) chroot(&(0x7f0000000000)='./file0\x00') read$FUSE(r0, &(0x7f0000001740)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r0, &(0x7f0000000380)={0x28, 0x0, r1, {{0x7, 0x7fffffffffffffff, 0x2}}}, 0x28) 162.285151ms ago: executing program 3 (id=161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='i2c_write\x00', r0}, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x7, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 0s ago: executing program 2 (id=162): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x69, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "fb4b144b82b8af00", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 74.428066][ T5823] cgroup: Unknown subsys name 'net' [ 74.685196][ T5823] cgroup: Unknown subsys name 'cpuset' [ 74.741060][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.428194][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.405468][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.411273][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.411841][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.421273][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.421570][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.423892][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.424846][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.427373][ T59] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.428547][ T59] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.429319][ T59] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.487191][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.502836][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.505956][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.507337][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.508133][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.509868][ T59] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.511827][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.513681][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.515123][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.515283][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.515842][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.525636][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.526848][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.545525][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.558311][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.398423][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 81.581687][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 81.610071][ T9] cfg80211: failed to load regulatory.db [ 81.693506][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 81.715259][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 81.731409][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 82.322311][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.322462][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.322974][ T5834] bridge_slave_0: entered allmulticast mode [ 82.326929][ T5834] bridge_slave_0: entered promiscuous mode [ 82.389056][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.389132][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.389306][ T5834] bridge_slave_1: entered allmulticast mode [ 82.392912][ T5834] bridge_slave_1: entered promiscuous mode [ 82.482426][ T5842] Bluetooth: hci0: command tx timeout [ 82.482786][ T5844] Bluetooth: hci1: command tx timeout [ 82.560660][ T5844] Bluetooth: hci4: command tx timeout [ 82.560667][ T5842] Bluetooth: hci3: command tx timeout [ 82.640800][ T5844] Bluetooth: hci2: command tx timeout [ 82.765434][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.765637][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.765818][ T5847] bridge_slave_0: entered allmulticast mode [ 82.767554][ T5847] bridge_slave_0: entered promiscuous mode [ 83.026700][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.026934][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.027084][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.027243][ T5847] bridge_slave_1: entered allmulticast mode [ 83.029960][ T5847] bridge_slave_1: entered promiscuous mode [ 83.316482][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.421346][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.421509][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.421617][ T5833] bridge_slave_0: entered allmulticast mode [ 83.423105][ T5833] bridge_slave_0: entered promiscuous mode [ 83.426532][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.426607][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.426711][ T5848] bridge_slave_0: entered allmulticast mode [ 83.428198][ T5848] bridge_slave_0: entered promiscuous mode [ 83.429573][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.429701][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.429860][ T5843] bridge_slave_0: entered allmulticast mode [ 83.433889][ T5843] bridge_slave_0: entered promiscuous mode [ 83.611539][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.611689][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.611858][ T5833] bridge_slave_1: entered allmulticast mode [ 83.613563][ T5833] bridge_slave_1: entered promiscuous mode [ 83.615759][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.615851][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.616170][ T5848] bridge_slave_1: entered allmulticast mode [ 83.617637][ T5848] bridge_slave_1: entered promiscuous mode [ 83.619174][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.619248][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.619523][ T5843] bridge_slave_1: entered allmulticast mode [ 83.632072][ T5843] bridge_slave_1: entered promiscuous mode [ 83.835395][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.083532][ T5834] team0: Port device team_slave_0 added [ 84.086412][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.345744][ T5834] team0: Port device team_slave_1 added [ 84.434131][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.437539][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.455779][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.560733][ T5844] Bluetooth: hci0: command tx timeout [ 84.560740][ T5842] Bluetooth: hci1: command tx timeout [ 84.597587][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.602785][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.606308][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.640914][ T5844] Bluetooth: hci4: command tx timeout [ 84.641009][ T5842] Bluetooth: hci3: command tx timeout [ 84.705247][ T5847] team0: Port device team_slave_0 added [ 84.720782][ T5842] Bluetooth: hci2: command tx timeout [ 85.165262][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.165279][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.165302][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.168818][ T5847] team0: Port device team_slave_1 added [ 85.508926][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.508936][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.508950][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.512432][ T5833] team0: Port device team_slave_0 added [ 85.514742][ T5848] team0: Port device team_slave_0 added [ 85.548948][ T5843] team0: Port device team_slave_0 added [ 85.656989][ T5848] team0: Port device team_slave_1 added [ 85.658705][ T5833] team0: Port device team_slave_1 added [ 85.660387][ T5843] team0: Port device team_slave_1 added [ 85.664482][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.664495][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.664516][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.872977][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.872991][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.873012][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.392202][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.392215][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.392229][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.393400][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.393413][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.393434][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.396010][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.396022][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.396037][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.543649][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.543664][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.543687][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.547741][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.547749][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.547768][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.549274][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.549281][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.549294][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.578546][ T5834] hsr_slave_0: entered promiscuous mode [ 86.589349][ T5834] hsr_slave_1: entered promiscuous mode [ 86.644209][ T5842] Bluetooth: hci0: command tx timeout [ 86.644238][ T5842] Bluetooth: hci1: command tx timeout [ 86.720689][ T5844] Bluetooth: hci3: command tx timeout [ 86.720718][ T5844] Bluetooth: hci4: command tx timeout [ 86.800750][ T5842] Bluetooth: hci2: command tx timeout [ 86.836335][ T5847] hsr_slave_0: entered promiscuous mode [ 86.837080][ T5847] hsr_slave_1: entered promiscuous mode [ 86.837728][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 86.837813][ T5847] Cannot create hsr debugfs directory [ 87.520860][ T5833] hsr_slave_0: entered promiscuous mode [ 87.522149][ T5833] hsr_slave_1: entered promiscuous mode [ 87.522994][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 87.523017][ T5833] Cannot create hsr debugfs directory [ 87.676397][ T5848] hsr_slave_0: entered promiscuous mode [ 87.677182][ T5848] hsr_slave_1: entered promiscuous mode [ 87.677716][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 87.677735][ T5848] Cannot create hsr debugfs directory [ 87.695397][ T5843] hsr_slave_0: entered promiscuous mode [ 87.696634][ T5843] hsr_slave_1: entered promiscuous mode [ 87.697405][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 87.697424][ T5843] Cannot create hsr debugfs directory [ 88.720805][ T5844] Bluetooth: hci0: command tx timeout [ 88.720841][ T5842] Bluetooth: hci1: command tx timeout [ 88.800728][ T5842] Bluetooth: hci3: command tx timeout [ 88.816251][ T5842] Bluetooth: hci4: command tx timeout [ 88.880736][ T5842] Bluetooth: hci2: command tx timeout [ 89.102065][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.150188][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.175685][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.228255][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.338145][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.371940][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.407937][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.467159][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.627052][ T5833] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.662593][ T5833] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.697393][ T5833] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.739165][ T5833] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.895824][ T5843] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.939511][ T5843] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.987173][ T5843] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.038188][ T5843] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.204993][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.220291][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.275298][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.310993][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.359067][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.449912][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.479611][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.509796][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.510274][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.558835][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.559044][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.615813][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.646287][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.667449][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.667659][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.709312][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.709441][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.779131][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.825508][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.839507][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.839712][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.902773][ T3565] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.902921][ T3565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.012747][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.080253][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.080481][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.118203][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.180316][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.180457][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.328734][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.377181][ T3510] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.377395][ T3510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.432746][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.432970][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.471465][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.643178][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.888400][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.913780][ T5834] veth0_vlan: entered promiscuous mode [ 92.002930][ T5834] veth1_vlan: entered promiscuous mode [ 92.074167][ T5847] veth0_vlan: entered promiscuous mode [ 92.113217][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.139975][ T5847] veth1_vlan: entered promiscuous mode [ 92.317857][ T5834] veth0_macvtap: entered promiscuous mode [ 92.374151][ T5834] veth1_macvtap: entered promiscuous mode [ 92.425299][ T5847] veth0_macvtap: entered promiscuous mode [ 92.480141][ T5847] veth1_macvtap: entered promiscuous mode [ 92.492853][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.493186][ T5843] veth0_vlan: entered promiscuous mode [ 92.528727][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.558708][ T5843] veth1_vlan: entered promiscuous mode [ 92.579979][ T1310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.595973][ T1310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.611711][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.615360][ T1310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.640150][ T1310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.649545][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.720788][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.793773][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.813237][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.887028][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.916498][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.947784][ T5833] veth0_vlan: entered promiscuous mode [ 93.009122][ T5843] veth0_macvtap: entered promiscuous mode [ 93.102809][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.102836][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.106792][ T5843] veth1_macvtap: entered promiscuous mode [ 93.123911][ T5833] veth1_vlan: entered promiscuous mode [ 93.252190][ T5848] veth0_vlan: entered promiscuous mode [ 93.298630][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.298646][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.314777][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.358771][ T5848] veth1_vlan: entered promiscuous mode [ 93.412220][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.435574][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.435591][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.494305][ T162] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.509781][ T162] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.529868][ T162] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.549043][ T162] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.554715][ T5833] veth0_macvtap: entered promiscuous mode [ 93.603907][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.603922][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.624075][ T5833] veth1_macvtap: entered promiscuous mode [ 93.879539][ T5848] veth0_macvtap: entered promiscuous mode [ 93.977012][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.978612][ T5848] veth1_macvtap: entered promiscuous mode [ 93.998849][ T5957] netlink: 752 bytes leftover after parsing attributes in process `syz.3.4'. [ 94.026964][ T3565] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.026981][ T3565] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.031668][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.070816][ T5953] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.117595][ T162] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.139738][ T162] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.174848][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.175779][ T162] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.211085][ T162] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.238329][ T787] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.238346][ T787] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.278356][ T5953] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 94.278383][ T5953] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.278402][ T5953] usb 2-1: Product: syz [ 94.278415][ T5953] usb 2-1: Manufacturer: syz [ 94.278427][ T5953] usb 2-1: SerialNumber: syz [ 94.288411][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.351981][ T5953] usb 2-1: config 0 descriptor?? [ 94.425470][ T3510] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.428216][ T3510] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.474566][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.513586][ T3510] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.534860][ T3510] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.637600][ T5836] usb 2-1: USB disconnect, device number 2 [ 94.833580][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.838701][ T5967] use of bytesused == 0 is deprecated and will be removed in the future, [ 94.838712][ T5967] use the actual size instead. [ 95.157130][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.157149][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.368637][ T3565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.368654][ T3565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.455503][ T162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.455520][ T162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.585904][ T162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.585922][ T162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.126042][ T5985] overlay: filesystem on ./bus not supported as upperdir [ 96.824552][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18'. [ 96.871002][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 97.041818][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 97.050712][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.050739][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.050758][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 97.050793][ T31] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 97.050820][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.057497][ T31] usb 3-1: config 0 descriptor?? [ 97.577341][ T31] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.577377][ T31] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.577402][ T31] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.577426][ T31] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.577451][ T31] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 97.616142][ T31] input: HID 0955:7214 Haptics as /devices/virtual/input/input5 [ 97.733310][ T5998] random: crng reseeded on system resumption [ 97.950322][ T31] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 98.022667][ T31] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 98.350122][ T5926] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 98.350649][ T5926] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 98.351036][ T5926] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 98.374217][ T10] usb 3-1: USB disconnect, device number 2 [ 99.566164][ T6041] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 99.620279][ T6042] netlink: 'syz.4.34': attribute type 10 has an invalid length. [ 99.712691][ T6041] team0: Port device dummy0 added [ 99.740666][ T5904] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.808808][ T6042] team0: Port device dummy0 removed [ 99.848087][ T6042] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 99.890729][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 99.891628][ T5904] usb 2-1: too many configurations: 123, using maximum allowed: 8 [ 99.894607][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.896024][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.897468][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.899490][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.956806][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.972810][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.975806][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.010397][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.035276][ T5904] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 100.035300][ T5904] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 100.035318][ T5904] usb 2-1: SerialNumber: syz [ 100.044315][ T5904] usb 2-1: config 0 descriptor?? [ 100.089616][ T5904] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 100.335132][ T5190] bcm5974 2-1:0.0: could not read from device [ 100.414950][ T5904] usb 2-1: USB disconnect, device number 3 [ 100.470822][ T5836] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.621325][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 100.623921][ T5836] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 100.623945][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.687595][ T5836] usb 3-1: config 0 descriptor?? [ 100.748154][ T5836] as10x_usb: device has been detected [ 100.749253][ T5836] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 100.790133][ T5836] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 100.872238][ T5836] as10x_usb: error during firmware upload part1 [ 100.875292][ T5836] Registered device nBox DVB-T Dongle [ 100.902930][ T5836] usb 3-1: USB disconnect, device number 3 [ 100.948895][ T6061] netlink: 'syz.4.41': attribute type 21 has an invalid length. [ 100.948915][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 101.038076][ T5836] Unregistered device nBox DVB-T Dongle [ 101.045394][ T5836] as10x_usb: device has been disconnected [ 101.107531][ T6061] netlink: 'syz.4.41': attribute type 21 has an invalid length. [ 101.107549][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41'. [ 101.107595][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.112613][ T6061] Zero length message leads to an empty skb [ 101.113169][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.113208][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.113240][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 101.272184][ T6063] netlink: 104 bytes leftover after parsing attributes in process `syz.1.42'. [ 101.660710][ T1666] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 101.812607][ T1666] usb 3-1: Using ep0 maxpacket: 32 [ 101.821264][ T1666] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 101.821288][ T1666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.848552][ T1666] usb 3-1: config 0 descriptor?? [ 101.960292][ T1666] as10x_usb: device has been detected [ 101.973081][ T1666] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 102.137633][ T1666] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 102.218232][ T1666] as10x_usb: error during firmware upload part1 [ 102.218934][ T1666] Registered device nBox DVB-T Dongle [ 102.290722][ T1666] usb 3-1: USB disconnect, device number 4 [ 102.384725][ T1666] Unregistered device nBox DVB-T Dongle [ 102.406345][ T1666] as10x_usb: device has been disconnected [ 103.302615][ T6093] bridge0: port 3(ipvlan2) entered blocking state [ 103.304462][ T6093] bridge0: port 3(ipvlan2) entered disabled state [ 103.305311][ T6093] ipvlan2: entered allmulticast mode [ 103.305327][ T6093] bridge0: entered allmulticast mode [ 103.326514][ T6093] ipvlan2: left allmulticast mode [ 103.326537][ T6093] bridge0: left allmulticast mode [ 103.740703][ T5904] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.898993][ T5904] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 103.899020][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.933789][ T5904] usb 5-1: config 0 descriptor?? [ 105.236502][ T6126] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 105.284242][ T5904] pegasus 5-1:0.0: can't reset MAC [ 105.284947][ T5904] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 105.328547][ T5904] usb 5-1: USB disconnect, device number 2 [ 105.330683][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 105.486756][ T31] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 105.486783][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.486800][ T31] usb 2-1: Product: syz [ 105.486811][ T31] usb 2-1: Manufacturer: syz [ 105.486824][ T31] usb 2-1: SerialNumber: syz [ 105.515323][ T31] usb 2-1: config 0 descriptor?? [ 105.881478][ T1666] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 106.047718][ T1666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.047747][ T1666] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.047824][ T1666] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.047863][ T1666] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.047883][ T1666] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.102154][ T1666] usb 1-1: config 0 descriptor?? [ 106.563017][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 106.708620][ T6151] Bluetooth: MGMT ver 1.23 [ 106.781873][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 106.781901][ T31] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 106.782312][ T31] asix 2-1:0.0: probe with driver asix failed with error -71 [ 106.809555][ T31] usb 2-1: USB disconnect, device number 4 [ 106.818115][ T1666] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 106.839140][ T5963] udevd[5963]: setting mode of /dev/bus/usb/002/004 to 020664 failed: No such file or directory [ 106.839325][ T5963] udevd[5963]: setting owner of /dev/bus/usb/002/004 to uid=0, gid=0 failed: No such file or directory [ 108.637468][ T31] usb 1-1: USB disconnect, device number 2 [ 109.274239][ T6177] capability: warning: `syz.0.84' uses 32-bit capabilities (legacy support in use) [ 109.302307][ T5953] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.451405][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 109.453889][ T5953] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 109.453912][ T5953] usb 3-1: config 226 has an invalid descriptor of length 0, skipping remainder of the config [ 109.453929][ T5953] usb 3-1: config 226 has 0 interfaces, different from the descriptor's value: 2 [ 109.456976][ T5953] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 109.456999][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.457016][ T5953] usb 3-1: Product: syz [ 109.457028][ T5953] usb 3-1: Manufacturer: syz [ 109.457040][ T5953] usb 3-1: SerialNumber: syz [ 110.015833][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 110.016244][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 110.103041][ T5953] usb 3-1: USB disconnect, device number 5 [ 112.970654][ T5836] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 113.124491][ T5836] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 113.124515][ T5836] usb 3-1: config 0 has no interface number 0 [ 113.124560][ T5836] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 113.124582][ T5836] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 113.127795][ T5836] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 113.127818][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.127836][ T5836] usb 3-1: Product: syz [ 113.127848][ T5836] usb 3-1: Manufacturer: syz [ 113.127860][ T5836] usb 3-1: SerialNumber: syz [ 113.206230][ T5836] usb 3-1: config 0 descriptor?? [ 113.206950][ T6240] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 113.234944][ T5836] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 113.287416][ T5836] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 113.695224][ T31] usb 3-1: USB disconnect, device number 6 [ 113.756875][ T31] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 113.793839][ T31] cyberjack 3-1:0.69: device disconnected [ 114.215274][ T6246] input: syz0 as /devices/virtual/input/input7 [ 115.730780][ T1666] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 115.830691][ T31] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 115.964960][ T1666] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.964987][ T1666] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.002244][ T1666] usb 5-1: config 0 descriptor?? [ 116.036329][ T1666] cp210x 5-1:0.0: cp210x converter detected [ 116.070120][ T31] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 116.070145][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.070162][ T31] usb 1-1: Product: syz [ 116.070174][ T31] usb 1-1: Manufacturer: syz [ 116.070186][ T31] usb 1-1: SerialNumber: syz [ 116.210052][ T31] usb 1-1: config 0 descriptor?? [ 116.428272][ T1666] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 116.539502][ T1666] usb 5-1: cp210x converter now attached to ttyUSB0 [ 116.665509][ T5918] usb 5-1: USB disconnect, device number 3 [ 116.718373][ T5918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.787557][ T31] usb 1-1: Firmware: major: 213, minor: 124, hardware type: UNKNOWN (48) [ 116.896116][ T5918] cp210x 5-1:0.0: device disconnected [ 116.991110][ T31] usb 1-1: Read permanent extended address 78:d9:cf:80:c4:56:f3:e4 from device [ 116.991133][ T31] usb 1-1: atusb_probe: initialization failed, error = -524 [ 116.991700][ T31] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 117.007292][ T1666] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.160656][ T1666] usb 3-1: Using ep0 maxpacket: 16 [ 117.163143][ T1666] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.163176][ T1666] usb 3-1: config 0 interface 0 has no altsetting 0 [ 117.163207][ T1666] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 117.163227][ T1666] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.182790][ T1666] usb 3-1: config 0 descriptor?? [ 117.200663][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.222536][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.222563][ T5836] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 117.357045][ T31] usb 1-1: USB disconnect, device number 3 [ 117.810440][ T1666] nzxt-smart2 0003:1E71:2009.0003: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 118.114604][ T9] usb 3-1: USB disconnect, device number 7 [ 119.840809][ T5836] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 119.840831][ T5836] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 119.842790][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.636041][ T6370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 120.644829][ T49] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 120.767116][ T6370] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 120.803109][ T49] usb 2-1: Using ep0 maxpacket: 16 [ 120.806226][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.806268][ T49] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.806289][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.818997][ T49] usb 2-1: config 0 descriptor?? [ 121.245632][ T49] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 121.245664][ T49] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 121.245689][ T49] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 121.245712][ T49] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 121.245736][ T49] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 121.246718][ T49] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 122.257589][ T6406] veth1_to_bond: entered allmulticast mode [ 122.259088][ T6406] veth1_to_bond: entered promiscuous mode [ 122.273702][ T6405] veth1_to_bond: left promiscuous mode [ 122.274180][ T6405] veth1_to_bond: left allmulticast mode [ 122.320711][ T5836] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 122.320730][ T5836] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 122.323886][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.456598][ T49] usb 2-1: USB disconnect, device number 5 [ 122.771940][ T1666] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.940684][ T1666] usb 4-1: Using ep0 maxpacket: 32 [ 122.950228][ T1666] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice=49.88 [ 122.950251][ T1666] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.950268][ T1666] usb 4-1: Product: syz [ 122.950279][ T1666] usb 4-1: Manufacturer: syz [ 122.950292][ T1666] usb 4-1: SerialNumber: syz [ 122.976161][ T1666] usb 4-1: config 0 descriptor?? [ 122.996490][ T1666] as10x_usb: device has been detected [ 122.997437][ T1666] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 123.095732][ T1666] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 123.143436][ T1666] as10x_usb: error during firmware upload part1 [ 123.144131][ T1666] Registered device Abilis Systems DVB-Titan [ 123.273477][ T5904] usb 4-1: USB disconnect, device number 2 [ 123.341997][ T5904] Unregistered device Abilis Systems DVB-Titan [ 123.354157][ T5904] as10x_usb: device has been disconnected [ 124.410691][ T49] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 124.571875][ T49] usb 4-1: Using ep0 maxpacket: 32 [ 124.586579][ T49] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 124.586603][ T49] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.606959][ T49] usb 4-1: config 0 descriptor?? [ 124.720619][ T5836] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 124.720641][ T5836] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 124.720796][ C1] ------------[ cut here ]------------ [ 124.720805][ C1] workqueue: cannot queue hci_cmd_timeout on wq hci3 [ 124.720892][ C1] WARNING: CPU: 1 PID: 29 at kernel/workqueue.c:2256 __queue_work+0x2e5/0x1010 [ 124.720927][ C1] Modules linked in: [ 124.720969][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.720990][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.721003][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 124.721029][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 124.721046][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 124.721063][ C1] RAX: 7df2fb0566bbc100 RBX: 0000000000000000 RCX: ffff88801c6b1dc0 [ 124.721078][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 124.721090][ C1] RBP: ffff8880273dc998 R08: 0000000000000000 R09: 0000000000000100 [ 124.721102][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 124.721117][ C1] R13: dffffc0000000000 R14: ffff8880365d0168 R15: ffff88801c6b28cc [ 124.721132][ C1] FS: 0000000000000000(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 124.721148][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 124.721162][ C1] CR2: 00007f2b4d4404e8 CR3: 000000003572c000 CR4: 00000000003526f0 [ 124.721180][ C1] Call Trace: [ 124.721186][ C1] [ 124.721210][ C1] call_timer_fn+0x17b/0x5f0 [ 124.721237][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 124.721262][ C1] ? call_timer_fn+0xbe/0x5f0 [ 124.721286][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 124.721320][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 124.721339][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 124.721366][ C1] __run_timer_base+0x709/0x970 [ 124.721408][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 124.721459][ C1] run_timer_softirq+0xb7/0x180 [ 124.721484][ C1] handle_softirqs+0x22c/0x710 [ 124.721523][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 124.721562][ C1] run_ktimerd+0xcf/0x190 [ 124.721590][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 124.721615][ C1] ? schedule+0x91/0x360 [ 124.721649][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 124.721673][ C1] smpboot_thread_fn+0x542/0xa60 [ 124.721701][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 124.721738][ C1] kthread+0x711/0x8a0 [ 124.721772][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 124.721797][ C1] ? __pfx_kthread+0x10/0x10 [ 124.721834][ C1] ? __pfx_kthread+0x10/0x10 [ 124.721865][ C1] ret_from_fork+0x3fc/0x770 [ 124.721895][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 124.721930][ C1] ? __switch_to_asm+0x39/0x70 [ 124.721949][ C1] ? __switch_to_asm+0x33/0x70 [ 124.721967][ C1] ? __pfx_kthread+0x10/0x10 [ 124.721998][ C1] ret_from_fork_asm+0x1a/0x30 [ 124.722039][ C1] [ 124.722050][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 124.722065][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 124.722090][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 124.722101][ C1] Call Trace: [ 124.722109][ C1] [ 124.722118][ C1] dump_stack_lvl+0x99/0x250 [ 124.722149][ C1] ? __asan_memcpy+0x40/0x70 [ 124.722172][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.722201][ C1] ? __pfx__printk+0x10/0x10 [ 124.722241][ C1] vpanic+0x281/0x750 [ 124.722270][ C1] ? __pfx__printk+0x10/0x10 [ 124.722291][ C1] ? __pfx_vpanic+0x10/0x10 [ 124.722320][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 124.722360][ C1] panic+0xb9/0xc0 [ 124.722388][ C1] ? __pfx_panic+0x10/0x10 [ 124.722445][ C1] __warn+0x31b/0x4b0 [ 124.722472][ C1] ? __queue_work+0x2e5/0x1010 [ 124.722502][ C1] ? __queue_work+0x2e5/0x1010 [ 124.722528][ C1] report_bug+0x2be/0x4f0 [ 124.722553][ C1] ? __queue_work+0x2e5/0x1010 [ 124.722580][ C1] ? __queue_work+0x2e5/0x1010 [ 124.722606][ C1] ? __queue_work+0x2e7/0x1010 [ 124.722632][ C1] handle_bug+0x84/0x160 [ 124.722663][ C1] exc_invalid_op+0x1a/0x50 [ 124.722691][ C1] asm_exc_invalid_op+0x1a/0x20 [ 124.722710][ C1] RIP: 0010:__queue_work+0x2e5/0x1010 [ 124.722735][ C1] Code: 42 80 3c 28 00 74 08 48 89 ef e8 16 a1 93 00 48 8b 75 00 49 81 c6 68 01 00 00 48 c7 c7 60 ed 09 8b 4c 89 f2 e8 ac 3c f9 ff 90 <0f> 0b 90 90 e9 f2 fe ff ff e8 0d 6a 34 00 eb 2e e8 06 6a 34 00 e9 [ 124.722767][ C1] RSP: 0018:ffffc90000a3f828 EFLAGS: 00010046 [ 124.722786][ C1] RAX: 7df2fb0566bbc100 RBX: 0000000000000000 RCX: ffff88801c6b1dc0 [ 124.722802][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 124.722816][ C1] RBP: ffff8880273dc998 R08: 0000000000000000 R09: 0000000000000100 [ 124.722830][ C1] R10: dffffc0000000000 R11: ffffed1017124863 R12: dffffc0000000000 [ 124.722846][ C1] R13: dffffc0000000000 R14: ffff8880365d0168 R15: ffff88801c6b28cc [ 124.722884][ C1] ? __queue_work+0x2e4/0x1010 [ 124.722927][ C1] call_timer_fn+0x17b/0x5f0 [ 124.722954][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 124.722981][ C1] ? call_timer_fn+0xbe/0x5f0 [ 124.723007][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 124.723047][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 124.723072][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 124.723102][ C1] __run_timer_base+0x709/0x970 [ 124.723147][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 124.723193][ C1] run_timer_softirq+0xb7/0x180 [ 124.723220][ C1] handle_softirqs+0x22c/0x710 [ 124.723259][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 124.723299][ C1] run_ktimerd+0xcf/0x190 [ 124.723327][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 124.723352][ C1] ? schedule+0x91/0x360 [ 124.723387][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 124.723409][ C1] smpboot_thread_fn+0x542/0xa60 [ 124.723442][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 124.723478][ C1] kthread+0x711/0x8a0 [ 124.723512][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 124.723537][ C1] ? __pfx_kthread+0x10/0x10 [ 124.723574][ C1] ? __pfx_kthread+0x10/0x10 [ 124.723606][ C1] ret_from_fork+0x3fc/0x770 [ 124.723636][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 124.723671][ C1] ? __switch_to_asm+0x39/0x70 [ 124.723690][ C1] ? __switch_to_asm+0x33/0x70 [ 124.723709][ C1] ? __pfx_kthread+0x10/0x10 [ 124.723740][ C1] ret_from_fork_asm+0x1a/0x30 [ 124.723781][ C1] [ 124.723999][ C1] Kernel Offset: disabled