last executing test programs: 3m49.842314855s ago: executing program 0 (id=151): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, r1, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1b) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 3m44.13157405s ago: executing program 0 (id=160): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x6a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c) syz_open_dev$radio(0x0, 0x1, 0x2) ioperm(0x0, 0xbcf5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc2", 0x10}, {0x0}], 0x2, &(0x7f00000015c0)}], 0x1, 0x0) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a40)}, {&(0x7f0000000140)}], 0x2) 2m46.817548515s ago: executing program 3 (id=251): socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x0, 0x308, 0x308, 0x220, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) fsopen(&(0x7f0000000000)='devpts\x00', 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000001c0)='./file0\x00', 0x0) socket(0x10, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x950, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2m46.442808309s ago: executing program 3 (id=253): syz_emit_ethernet(0x3a, &(0x7f0000000400)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@end, @noop]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@uprobe_multi={0x0, &(0x7f0000000040)=[0x400, 0x0, 0x4, 0x16bf, 0x1, 0x3], &(0x7f0000000080)=[0x3], 0x3, 0x6, 0x1, 0xffffffffffffffff}}, 0x40) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4020, 0x0, 0x0, 0x0, 0x2) 2m43.058342864s ago: executing program 3 (id=259): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x6a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x90) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c) syz_open_dev$radio(0x0, 0x1, 0x2) ioperm(0x0, 0xbcf5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000007140)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="4a7a5ac44bc48337607985e55fbfbcc2", 0x10}, {0x0}], 0x2, &(0x7f00000015c0)}], 0x1, 0x0) memfd_create(&(0x7f0000000040)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xa1\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?$^\xe1Ob\xe1YV\xeb\x91\x83;\xeb\xf1\xd0\xce\xe5\x19T\xff\x01\x00\x00\xe2\xb8\xd9\xae\xcf>/\x05\x00\x00\x00\x15\x00\xbe`\'\xcb\xb6\xaf\xe4h\xfc\x14\x06\xb5\x03\x8a\xc40\xbe\xe3\x93A\x15\xec\xdb\xaa\t9\x11A\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfc\x00\xe3\xde\x00\x00\xa8\xcbo\x90\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x16\xdf\xb9q\xb6^r\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3U\xe6\xa9B\n\xc9%\x82\xed#?\xab\x1c\x11\x00\xc5\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\x00\x00\x00D~\xc9=\x95\xd4\x18\x97J\x1d\xb7\x11\xcbcE\x0eAU\xe6\x19*\x98}!\xde\xf1\xd3\xf7\x84\x9c\xb4\xf1\x17\xf9-\xc6\xba\xe3\xa8oz\b\xfe\xbc\x1b\xff$\xac=\xf2V**\x8f\x84Oq\xe3\xa16\x1d{f\x91\xbbBORJ\xbcm\xfb\xb0Q\x1c\xd9\x1bg\xf5\xc9p\xc5lo\x90\xb0\xd5\x90\x86\x19\xafC\xee7\x91O)\xf1\xf0\x00\x00\x00\x00\x00\x00\x00\x05t\v\x12\x03\xf5hRQ\b\x97\xc3d-\xfb\x12\x1e\xb2\xce\x9br*M\x10\xd5g\fwx\xb8\xa9\t\xc5\xf9W\x9b\x06\xcc\xa0\x1a\x03\v\x14n7\x92{\x8bH\x9d\x95\xe31\xf4hy\xf6%\xcdC\x9cT\xec57\xbd\xd5\x81\xd9\x13\xee\xdf\xef\xf3\x17H\xd2\xe3k\xe0\xe3^y\xe3\xbb(fEt\x15\xeb/\x90\xca\xde\x189\xdfN 7}|\xa8 2\xd9;\xfa\xeayZS\x10.\x8b,\xd0\x02J\xf8>\xe9\xf0\r\xc2A\xc8q\x89\"+\xa6\xa9^E94\x01\xb5\xba]\xa8\xe9\x86\xea\xe5\xbaH\x11\x8fLLJ(\xfb\x96\x15\xbb\a\xcbj\x1b\xfdL\x88\xbf\xd7\x00\x00\x00\x00\x00t\xdd\xe7z\x87N\x9a\xd1\xe8\xe6\xe5\xa5\rz\\ljD\x19|\x84\x90\xaa\x91\x93\xc7\xdf\xd2\xe9h', 0x0) recvmmsg(r4, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002940)=[{&(0x7f0000001600)=""/137, 0x89}], 0x1}}], 0x40000a4, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f2f8db0049d90491ceaebfd26d4eef232", 0x28}, {&(0x7f0000000140)}], 0x2) 59.595579559s ago: executing program 3 (id=263): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0xff}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x487, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x2}, 0x90) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x401eb94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x400) ioctl$SNDCTL_DSP_SPEED(r6, 0x5008, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 58.159945463s ago: executing program 3 (id=272): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) io_uring_setup(0x76d0, &(0x7f0000000480)={0x0, 0xf06c, 0x200, 0x3}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000500)="6b8ab7e6d61d55c6065fbd783a9ff5c44ff2f19d7571b70ac0f7179e6959618d193e39b75c08f6de11b79c3c27903c85f21f6b6bf6f86b3f000096dee718882185344a92f0863d37082be57c99fb3467e33850a9aa39581e1459459744c40f09faaf3e1a49d475185530049489cea9a13431b836fbed1db10f83354cebed4277b6054ea1694f8844efdc6e64395fb9077eb3ca7f40c020d0bbd120dff1f4d738c7062a8dbe499c82573bc0f8e092617fdff53ec04b8001193018697b672e4df4aaec94a4f8fc88f027ccbecff06d4448a0be60473b836396991565ef8ccc9b4666a03e6c16d653", 0xe7, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r3, r3}, &(0x7f00000002c0)=""/38, 0x26, &(0x7f0000000340)={&(0x7f0000000080)={'sha256-avx2\x00'}, &(0x7f0000000040)="6b10b7d46200005248", 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) 56.860944536s ago: executing program 0 (id=169): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) io_uring_setup(0x76d0, &(0x7f0000000480)={0x0, 0xf06c, 0x200, 0x3}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000500)="6b8ab7e6d61d55c6065fbd783a9ff5c44ff2f19d7571b70ac0f7179e6959618d193e39b75c08f6de11b79c3c27903c85f21f6b6bf6f86b3f000096dee718882185344a92f0863d37082be57c99fb3467e33850a9aa39581e1459459744c40f09faaf3e1a49d475185530049489cea9a13431b836fbed1db10f83354cebed4277b6054ea1694f8844efdc6e64395fb9077eb3ca7f40c020d0bbd120dff1f4d738c7062a8dbe499c82573bc0f8e092617fdff53ec04b8001193018697b672e4df4aaec94a4f8fc88f027ccbecff06d4448a0be60473b836396991565ef8ccc9b4666a03e6c16d653", 0xe7, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r3, r3}, &(0x7f00000002c0)=""/38, 0x26, &(0x7f0000000340)={&(0x7f0000000080)={'sha256-avx2\x00'}, &(0x7f0000000040)="6b10b7d46200005248", 0x9}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) 20.239381079s ago: executing program 1 (id=320): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0xe803}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) unshare(0x2020400) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, 0x0, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r8}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x58, &(0x7f0000001c80)}, 0x10) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x38, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x20000000, {0xe, 0x48, 0x3ff, 0x9a24}}}]}, 0x38}}, 0x0) 18.966945402s ago: executing program 1 (id=321): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100007856bb40da0b53813de201020301090212000100000000090400"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="000004000000228b155e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000022000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$RTC_ALM_READ(0xffffffffffffffff, 0x80247008, &(0x7f0000000080)) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/ip_vs_stats_percpu\x00') lseek(r2, 0x9, 0x0) ioctl$sock_inet_SIOCRTMSG(0xffffffffffffffff, 0x890d, &(0x7f0000000140)={0x0, {0x2, 0x4e23, @loopback}, {0x2, 0x4e24, @multicast2}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x250, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x5}) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0xfffffffb, @remote, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='devpts\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) getdents(r3, &(0x7f0000000080)=""/37, 0x25) getdents(r3, 0x0, 0x66) syz_emit_ethernet(0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="9c6166f169bbbbbbbbbbbb0000000000000800450000240000000000119078ac141400e000000100204e20001090780200000000000000889e896e9f66816c4947c05ea4a6e72993b4db69ce9d29f8a1bafe745782e3c7d32cdbe0f258a230e0aa5ec61d8cf84b065532001f19f5e0ea5b6227e6"], 0x0) 18.055519407s ago: executing program 4 (id=323): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_uring_setup(0x79af, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_pressure(r4, &(0x7f0000000300)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r6 = openat$cgroup_pressure(r4, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'full', 0x20, 0x7, 0x20, 0xffff4}, 0x2f) close(r5) close(r6) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 16.538195349s ago: executing program 4 (id=324): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000010c0)={0x2, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000002640)={0x2, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xdc, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x1b, 0x76, 0x7f, 0x20, 0x451, 0x5152, 0xc0b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x52, 0x6f, 0x59, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') read$FUSE(r6, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004840) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000100)) 15.876159678s ago: executing program 1 (id=326): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x18, 0x1, 0x9, 0x3, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFCTH_TUPLE={0x4}]}, 0x18}}, 0x4000001) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) unshare(0x8000000) unshare(0x8040080) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb5}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x5) listen(r3, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) r4 = creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) acct(&(0x7f0000000100)='./file0/bus\x00') close(r4) umount2(&(0x7f0000000280)='./file0\x00', 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000080)}], 0x1) sendmmsg$inet(r5, &(0x7f0000007fc0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000001c0)="1967", 0x2}, {&(0x7f0000001c40)="0349d3ebf0f42db97b402ad21b8e8d0837c5e7a1154ae82f2ff3a122149f3ba9bcd1fca0facd6531d732cab4218edf6e74ae59db75359c223a2de22d10e3dee7dc7c36ebd5dc6e9d4fce6ed3f347d11f90f011bd0b55902dd932d3fda50f3a1e62df2fc0723156dd85a1cc0472ba48d8732c9cf3439b8ac3e5ee8ecd950085", 0x7f}], 0x2, 0xfffffffffffffffc}}], 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}], 0x1}}], 0x1, 0x0, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4) unshare(0x6a040000) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r6, 0xc0405519, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, '\x00', 0x100}) 14.201491446s ago: executing program 4 (id=328): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x0, '\x00', 0x0, 0x6}, 0x90) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x5b, 0xa2, 0x41, 0x20, 0x93a, 0x2476, 0x7af3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xac, 0xe6, 0x3c, 0x40}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) dup(r5) readv(r5, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) getrlimit(0x8, &(0x7f0000000180)) 10.910159156s ago: executing program 4 (id=329): syz_clone3(&(0x7f0000000180)={0x4000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/48, 0x30, &(0x7f0000000100)=""/23, &(0x7f0000000140)=[0x0], 0x1}, 0x58) preadv(r0, &(0x7f0000001600)=[{&(0x7f0000000200)=""/3, 0x3}, {&(0x7f0000000240)=""/110, 0x6e}, {&(0x7f00000002c0)=""/102, 0x66}, {&(0x7f0000000340)=""/149, 0x95}, {&(0x7f0000000400)=""/217, 0xd9}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000000600)=""/4096, 0x1000}], 0x8, 0xa2a5, 0x4) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001680), 0x50080, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r2, 0x0, 0x3, &(0x7f00000016c0)=0xc, 0x4) r3 = accept$unix(r2, &(0x7f0000001700)=@abs, &(0x7f0000001780)=0x6e) bind$unix(r3, &(0x7f00000017c0)=@file={0x0, './file0\x00'}, 0x6e) r4 = memfd_secret(0x0) ioctl$HIDIOCGREPORTINFO(r4, 0xc00c4809, &(0x7f0000001840)={0x1, 0x2, 0x9}) r5 = socket$kcm(0x29, 0x2, 0x0) fcntl$setown(r3, 0x8, r1) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xa, 0x110, r4, 0x8478e000) r6 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000001880), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r6, 0xc02c563a, &(0x7f00000018c0)={0xc, {0xdcb, 0x7, 0x80000000, 0x7}, {0x2, 0x1b507ed8, 0x1, 0x7}, {0x7ff, 0x9}}) getdents(r4, &(0x7f0000001900)=""/61, 0x3d) syz_genetlink_get_family_id$l2tp(&(0x7f0000001940), r4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000001980)=0x8044, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f00000019c0), 0x800, 0x0) faccessat(r4, &(0x7f0000001a00)='./file0\x00', 0x0) timer_create(0x0, &(0x7f0000001a40)={0x0, 0x26, 0x0, @tid=r1}, &(0x7f0000001a80)) openat$ppp(0xffffffffffffff9c, &(0x7f0000001ac0), 0x400000, 0x0) ioctl$TIOCSISO7816(r4, 0xc0285443, &(0x7f0000001b00)={0x100, 0x9d00000, 0x8, 0x1d, 0x101}) ioctl$sock_qrtr_TIOCOUTQ(r5, 0x5411, &(0x7f0000001b40)) ioctl$SCSI_IOCTL_SEND_COMMAND(r4, 0x1, &(0x7f0000001b80)={0x3d, 0x9, 0x6, "b0d6d32f3b2701f446bc061ce8919d49c88737d1d17aa01f8c05ff96d2d4aa7b4d636815e05867af57cba304eafbbd689fdb0f9919b342c7d6d8de9994"}) syz_clone(0x1000, &(0x7f0000001c00)="473304480c071d904c688df9966cfedc44733976bd145aa99d45f3c39c35da028696242d267ed7c1694b8e49af6958bcf9e0b13acbfb0cf1d74a7ccdc96cccba31f88f32e09b1af56d54a7a190db4fd09e4c5ad4a3f751987c5c8bed6fbf1924", 0x60, &(0x7f0000001c80), &(0x7f0000001cc0), &(0x7f0000001d00)="41e05eede40265bea5b7a9a7741396e2fa7a256386ff842a9d109a5e066aa4792d4cf3722e4daa965b4ffce316daaa8e4e361cd516fc8ace435a02e481e6250dd06f23c952f94a9b6348c4d0708de5a19c20a60c140b9ab4216999920581405bed0e6ae4a2bf6449b13a41d23d5ef05039b8bbaeea0e9dc31a889f1a15bcbc2a7a47cbf4af65bb071e63e3f2aefd6302c5cd898279a40265d69fa9e3f2ec392af2b0c96eb545a52d37da3842ea6fa9e05fe8bf0e66bd24669dfe64d2b9b9bcc5bda7a5e13559da9d1851f5e45d5959487fb314403b352bfeeb97413f0b02fe78b5") pivot_root(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)='./file0\x00') ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000001e80)={@remote, @multicast1}, 0xc) recvmsg$can_bcm(r4, &(0x7f0000002080)={&(0x7f0000001ec0)=@un=@abs, 0x80, &(0x7f0000001f40), 0x0, &(0x7f0000001f80)=""/251, 0xfb}, 0x20) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x401, 0x100, &(0x7f00000020c0)=0x1) 9.106338222s ago: executing program 1 (id=331): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x404200, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) close(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r2, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = socket(0x2c, 0x3, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6(0xa, 0x4, 0x0) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) close(r4) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x22, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0xe9, 0x0, 0x0, [], [{{0x9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [@generic={0x7, 0x5, "d77b5d2898"}]}}]}}]}}]}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x2}, [@NHA_ID={0x8}]}, 0x20}}, 0x0) acct(&(0x7f0000000140)='./file0\x00') openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x5}}}, &(0x7f00000001c0)=0x9c) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 8.022228439s ago: executing program 4 (id=332): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.515867398s ago: executing program 2 (id=333): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000000c0)=0xfffffffe, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000080)=[@window, @sack_perm, @window, @window, @sack_perm, @mss, @timestamp, @timestamp], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000680)="49bbe4121f35be052595bd4892ad64d5c5d7f7a0c4527f09933c2e0d24eedb408968", 0x22}, {&(0x7f0000001780)="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", 0xff}], 0x2}}], 0x1, 0x4008095) 7.305619224s ago: executing program 2 (id=334): bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x9, @loopback, 0xdf}, 0x1c) r0 = socket(0x2, 0x3, 0xff) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x2}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=[@rights={{0x10}}], 0x10}}], 0x2, 0x0) r1 = semget$private(0x0, 0x6, 0x0) semtimedop(r1, &(0x7f0000000340), 0x92, 0x0) semctl$SETALL(r1, 0x0, 0x11, &(0x7f0000000100)=[0x7]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) 7.146014889s ago: executing program 2 (id=335): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="8a96d75f7c8cadd1726ab91a85c8ac6664066dd55c40d7be4a74e8e1cbd61d", @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = socket$nl_rdma(0x10, 0x3, 0x14) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)) socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r3, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000005142106"], 0x20}}, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 6.367943656s ago: executing program 3 (id=282): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0xff}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x487, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x2}, 0x90) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000000)=0x400) 5.889368387s ago: executing program 1 (id=336): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) sendmsg$netlink(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{0x0}], 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, &(0x7f00000010c0)={0x2, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, &(0x7f0000002640)={0x2, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000180)={0xdc, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(r0, &(0x7f00000003c0)=[{&(0x7f00000000c0)}], 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)={{0x12, 0x1, 0x0, 0x1b, 0x76, 0x7f, 0x20, 0x451, 0x5152, 0xc0b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x52, 0x6f, 0x59, 0x0, [], [{{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') read$FUSE(r6, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4004840) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000000100)) 5.538130481s ago: executing program 2 (id=337): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed0000"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = io_uring_setup(0x2a0c, &(0x7f0000000380)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) listen(r2, 0xfffffffa) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7f}, 0x4c) socket$inet6_udplite(0xa, 0x2, 0x88) sendfile(r3, r4, 0x0, 0x10007) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000400000000000000000000850000005000000085000000d0"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r9}, 0x10) setrlimit(0x7, &(0x7f00000000c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r8}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0x102, 0x0, 0x0, 0xc1, &(0x7f0000000000), &(0x7f00000004c0)="98cfd9b3d95735bb254c825d70dfc3f05fda1ad8121ad3951407df24c66d5df5b246f57e2cbc76488a7cefe4e07fda4416772890a9a840ffb5026bb5af5eac95ee6507c5389031180dae4cf819010a0285abc18370c933ec7bd00d3c7403c954d6f362bb1d2b181736232b174e56920a032b5c67c3ead036e9bcedf6c66c4fe21ed2f301fb378aba3f1d36acc1c97ba27f703538c8dbdc04975f8b006f9ae8a8d92c9177f311387a9baa1baade83c9653ab05f6a421d6a4c4c9a0e2d71c872892a"}, 0x4c) close_range(r1, 0xffffffffffffffff, 0x0) 5.283479001s ago: executing program 0 (id=286): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendto$llc(r1, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x1a, 0x0, 0x0, 0xff}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x487, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x70, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x2}, 0x90) connect$inet(0xffffffffffffffff, &(0x7f0000000540)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x401eb94) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000000)=0x400) ioctl$SNDCTL_DSP_SPEED(r6, 0x5008, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) 4.128920408s ago: executing program 4 (id=338): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) io_uring_setup(0x76d0, &(0x7f0000000480)={0x0, 0xf06c, 0x200, 0x3}) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x38) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440)={'syz', 0x1}, &(0x7f0000000500)="6b8ab7e6d61d55c6065fbd783a9ff5c44ff2f19d7571b70ac0f7179e6959618d193e39b75c08f6de11b79c3c27903c85f21f6b6bf6f86b3f000096dee718882185344a92f0863d37082be57c99fb3467e33850a9aa39581e1459459744c40f09faaf3e1a49d475185530049489cea9a13431b836fbed1db10f83354cebed4277b6054ea1694f8844efdc6e64395fb9077eb3ca7f40c020d0bbd120dff1f4d738c7062a8dbe499c82573bc0f8e092617fdff53ec04b8001193018697b672e4df4aaec94a4f8fc88f027ccbecff06d4448a0be60473b836396991565ef8ccc9b4666a03e6c16d653", 0xe7, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000400)={r3, r3, r3}, &(0x7f00000002c0)=""/38, 0x26, &(0x7f0000000340)={&(0x7f0000000080)={'sha256-avx2\x00'}, &(0x7f0000000040)="6b10b7d46200005248", 0x9}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) 4.122754229s ago: executing program 2 (id=339): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r0, 0x26}, 0x20) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private1, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x0, 0x2b}, 0xa, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x4}}, 0xe8) sendmmsg$inet6(r5, &(0x7f00000090c0)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000100)=0x4, 0x8) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401}, 0x48) socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000340)=ANY=[@ANYRES64=r6, @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xdd, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setaffinity(0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f0000000300), 0x7, 0x0) 3.734611234s ago: executing program 0 (id=340): r0 = socket$netlink(0x10, 0x3, 0x0) io_setup(0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x0, 0x2003) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) r2 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0xc, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000ac0)={0x0, 0x0, {}, {}, {0x0, @struct}}) r4 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6000000000020104000000000000000002000000240002801400018008000100e000000108000200ac1414000c0002800300010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000040001"], 0x60}}, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f0000000440)={r6, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r7}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 1.162106546s ago: executing program 2 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r3, &(0x7f0000000340), 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc1, &(0x7f000000cf3d)=""/193, 0x41100, 0x0, '\x00', 0x0, 0x6}, 0x90) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x5b, 0xa2, 0x41, 0x20, 0x93a, 0x2476, 0x7af3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xac, 0xe6, 0x3c, 0x40}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, &(0x7f0000000240)={0x14, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4}, 0x48) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r5, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x7b, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) getrlimit(0x8, &(0x7f0000000180)) 978.058076ms ago: executing program 0 (id=342): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbff, 0x1000000}, 0xc) socket(0xb, 0x80000, 0x600) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffb) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x20000000) syz_open_procfs(0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="2400000066001f03fcffffff0000000008000000ffffffff"], 0x24}], 0x1, 0x0, 0x0, 0x4004}, 0x0) socket(0xa, 0x6, 0x80000000) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="2e000400010002", 0x7) r4 = socket$kcm(0x29, 0x5, 0x0) close(r4) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r5) 0s ago: executing program 1 (id=343): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) timer_delete(0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000980), 0xffffffffffffffff) socket$can_bcm(0x1d, 0x2, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000008000c3a000000100000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x97, &(0x7f0000002240)=""/151, 0x0, 0x4}, 0x90) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010880000000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="28005080110001004abee339084eeef16f162471f40000000800030006ac0f000500020004000000"], 0x44}}, 0x0) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001b40)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffd}}}}]}, 0x78}}, 0x0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000180)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, "f85c00000000000000ff03000000000000000022e3d6bc3e8ec600000000000000243245011505195b9058b48900a60300003f00000000000800", "140dfa4105000005692e648ae93879f3932320e1947864f84839f1d1bd9469481e8f269c5000000000732e1dd40a54db190000008000", "49a0b73ad4030cca9b8c6c89ec2f03af3dc76b0b1700090000000000008000"}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="040028bd4d7063690011000200303030293a30303a31302e300000000008000100707822ff070000000000001765636900110002000000000000000000000000000000000000a8b885cf72e4e5d245d9505bd2bee24c64f26e28a1ec6f8c72555e12410e43d81063e767355b866a3df1e34debb0aef57ff2eda7"], 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0xc0) dup(0xffffffffffffffff) kernel console output (not intermixed with test programs): using dummy_hcd [ 170.868046][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.916341][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.978877][ T12] bond0 (unregistering): Released all slaves [ 170.996662][ T25] usb 4-1: device descriptor read/8, error -71 [ 171.094217][ T5923] warning: `syz.1.106' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 171.179043][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.193745][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.203919][ T5843] bridge_slave_0: entered allmulticast mode [ 171.220367][ T5843] bridge_slave_0: entered promiscuous mode [ 171.260160][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.278008][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.285357][ T5843] bridge_slave_1: entered allmulticast mode [ 171.291911][ T25] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 171.303556][ T5843] bridge_slave_1: entered promiscuous mode [ 171.327547][ T25] usb 4-1: device descriptor read/8, error -71 [ 171.346685][ T5244] Bluetooth: hci5: command tx timeout [ 171.382813][ T12] hsr_slave_0: left promiscuous mode [ 171.393226][ T12] hsr_slave_1: left promiscuous mode [ 171.399680][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.412418][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.451637][ T25] usb usb4-port1: unable to enumerate USB device [ 171.770893][ T12] team0 (unregistering): Port device team_slave_1 removed [ 171.873167][ T12] team0 (unregistering): Port device team_slave_0 removed [ 173.446299][ T5244] Bluetooth: hci5: command tx timeout [ 173.796420][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.590344][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.841780][ T5843] team0: Port device team_slave_0 added [ 174.892354][ T5843] team0: Port device team_slave_1 added [ 174.937534][ T5886] chnl_net:caif_netlink_parms(): no params data found [ 175.178198][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.185203][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.242122][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.357603][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.364926][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.432725][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.506345][ T5244] Bluetooth: hci5: command tx timeout [ 175.650507][ T5718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.008906][ T5886] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.025843][ T5886] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.033642][ T5886] bridge_slave_0: entered allmulticast mode [ 176.048379][ T5886] bridge_slave_0: entered promiscuous mode [ 177.338535][ T5843] hsr_slave_0: entered promiscuous mode [ 177.919301][ T5843] hsr_slave_1: entered promiscuous mode [ 178.224787][ T5886] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.235317][ T5886] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.256618][ T1569] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 178.283526][ T5886] bridge_slave_1: entered allmulticast mode [ 178.623642][ T5886] bridge_slave_1: entered promiscuous mode [ 179.149284][ T5982] netlink: 'syz.1.115': attribute type 12 has an invalid length. [ 179.186646][ T5982] netlink: 'syz.1.115': attribute type 11 has an invalid length. [ 179.222343][ T5982] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.115'. [ 179.448779][ T5718] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.578893][ T5886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.593741][ T5886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.621111][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.628347][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.836147][ T1569] usb 2-1: Using ep0 maxpacket: 32 [ 179.854130][ T1569] usb 2-1: device descriptor read/all, error -61 [ 180.157721][ T1569] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 180.370939][ T1569] usb 2-1: device descriptor read/64, error -71 [ 180.533838][ T1569] usb usb2-port1: attempt power cycle [ 180.550527][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.557849][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.659743][ T5886] team0: Port device team_slave_0 added [ 180.697229][ T5886] team0: Port device team_slave_1 added [ 180.943821][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.955133][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.984848][ T5886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.995850][ T1569] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 181.015335][ T5886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.024039][ T5886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.068434][ T1569] usb 2-1: device descriptor read/8, error -71 [ 181.072975][ T5886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.367896][ T1569] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 181.461753][ T1569] usb 2-1: device descriptor read/8, error -71 [ 181.526345][ T5345] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 181.656902][ T1569] usb usb2-port1: unable to enumerate USB device [ 181.785909][ T5345] usb 4-1: Using ep0 maxpacket: 32 [ 181.839649][ T5345] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 181.913690][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.974562][ T5345] usb 4-1: Product: syz [ 182.010907][ T5345] usb 4-1: Manufacturer: syz [ 182.057602][ T5345] usb 4-1: SerialNumber: syz [ 182.169958][ T5345] usb 4-1: config 0 descriptor?? [ 184.031337][ T5886] hsr_slave_0: entered promiscuous mode [ 184.081756][ T5345] gspca_main: pac207-2.14.0 probing 093a:2476 [ 184.101753][ T5886] hsr_slave_1: entered promiscuous mode [ 184.122691][ T5345] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 184.144108][ T5886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.176187][ T5886] Cannot create hsr debugfs directory [ 184.205995][ T5345] usb 4-1: USB disconnect, device number 8 [ 185.524717][ T12] bridge_slave_1: left allmulticast mode [ 185.533080][ T12] bridge_slave_1: left promiscuous mode [ 185.554563][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.576695][ T12] bridge_slave_0: left allmulticast mode [ 185.596393][ T12] bridge_slave_0: left promiscuous mode [ 185.616481][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.675794][ T5345] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 187.876898][ T5345] usb 4-1: Using ep0 maxpacket: 32 [ 187.909568][ T5345] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 187.932816][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.955489][ T5345] usb 4-1: Product: syz [ 188.121338][ T5345] usb 4-1: Manufacturer: syz [ 188.148401][ T5345] usb 4-1: SerialNumber: syz [ 188.170484][ T5345] usb 4-1: config 0 descriptor?? [ 189.463883][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.512605][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.542483][ T12] bond0 (unregistering): Released all slaves [ 190.715488][ T5345] gspca_main: pac207-2.14.0 probing 093a:2476 [ 190.739169][ T5345] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 190.795910][ T5345] usb 4-1: USB disconnect, device number 9 [ 190.937176][ T6079] netlink: 'syz.1.126': attribute type 12 has an invalid length. [ 190.976264][ T6079] netlink: 'syz.1.126': attribute type 11 has an invalid length. [ 191.146439][ T6079] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.126'. [ 191.372260][ T6081] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 191.556237][ T5229] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 191.879814][ T12] hsr_slave_0: left promiscuous mode [ 191.935745][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 191.945296][ T12] hsr_slave_1: left promiscuous mode [ 191.980731][ T5229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.022979][ T5229] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 192.042768][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.095738][ T5229] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 192.104854][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.129776][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.140797][ T5229] usb 2-1: config 0 descriptor?? [ 192.785030][ T12] team0 (unregistering): Port device team_slave_1 removed [ 192.878548][ T12] team0 (unregistering): Port device team_slave_0 removed [ 194.564984][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.571559][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.908997][ T5229] usb 2-1: USB disconnect, device number 9 [ 194.955318][ T5345] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 195.327573][ T5345] usb 4-1: Using ep0 maxpacket: 32 [ 195.420535][ T5345] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 195.571145][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.682257][ T5345] usb 4-1: Product: syz [ 195.738910][ T5345] usb 4-1: Manufacturer: syz [ 195.770168][ T5345] usb 4-1: SerialNumber: syz [ 195.888280][ T5345] usb 4-1: config 0 descriptor?? [ 196.343718][ T5718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.628951][ T4613] Bluetooth: hci1: command 0x0406 tx timeout [ 196.635629][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 197.743478][ T5843] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.868870][ T5843] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 198.002423][ T5843] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 198.038370][ T5843] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 198.158701][ T5718] veth0_vlan: entered promiscuous mode [ 198.248978][ T5718] veth1_vlan: entered promiscuous mode [ 198.256698][ T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 198.380862][ T5718] veth0_macvtap: entered promiscuous mode [ 198.395237][ T5886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 198.423725][ T5718] veth1_macvtap: entered promiscuous mode [ 198.434791][ T5886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.445894][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 198.451887][ T5886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.467100][ T5886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.475822][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 198.485791][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.495871][ T9] usb 2-1: Product: syz [ 198.500621][ T9] usb 2-1: Manufacturer: syz [ 198.505249][ T9] usb 2-1: SerialNumber: syz [ 198.521152][ T9] usb 2-1: config 0 descriptor?? [ 198.602522][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.640469][ T5345] gspca_main: pac207-2.14.0 probing 093a:2476 [ 198.657039][ T5345] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 198.684743][ T5345] usb 4-1: USB disconnect, device number 10 [ 198.725162][ T5718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.736582][ T5718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.763998][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 198.764119][ T5718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.796695][ T5718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.811318][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.844328][ T5718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.866705][ T5718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.976506][ T5718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.989043][ T5718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.001249][ T5718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.040858][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.191690][ T5718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.265023][ T6126] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 199.343690][ T5718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.414501][ T5718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.495236][ T5718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.731505][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.738817][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.787781][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.795034][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.081944][ T5886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.457602][ T5886] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.533400][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.540687][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.697501][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.704775][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.118277][ T5236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.128285][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.137462][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.147222][ T5236] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.155081][ T5236] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.178672][ T5236] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.441290][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.648482][ T1832] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.750362][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 201.812417][ T9] usb 2-1: USB disconnect, device number 10 [ 201.850964][ T1832] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.992466][ T1832] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.163118][ T1832] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.250147][ T5886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.331820][ T6138] chnl_net:caif_netlink_parms(): no params data found [ 202.711119][ T6168] netlink: 'syz.3.142': attribute type 12 has an invalid length. [ 202.724731][ T5843] veth0_vlan: entered promiscuous mode [ 202.732308][ T6168] netlink: 'syz.3.142': attribute type 11 has an invalid length. [ 202.740930][ T6168] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.142'. [ 202.854296][ T1832] bridge_slave_1: left allmulticast mode [ 202.863929][ T1832] bridge_slave_1: left promiscuous mode [ 202.874951][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.066787][ T1832] bridge_slave_0: left allmulticast mode [ 203.073560][ T1832] bridge_slave_0: left promiscuous mode [ 203.080673][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.424377][ T5236] Bluetooth: hci3: command tx timeout [ 203.433539][ T58] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 203.805927][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 203.849991][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.927529][ T58] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 203.937661][ T58] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 203.950064][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.978816][ T58] usb 4-1: config 0 descriptor?? [ 204.525801][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.544617][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.565224][ T1832] bond0 (unregistering): Released all slaves [ 204.609988][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.617852][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.626333][ T6138] bridge_slave_0: entered allmulticast mode [ 204.648514][ T6138] bridge_slave_0: entered promiscuous mode [ 204.666368][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.673715][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.705936][ T6138] bridge_slave_1: entered allmulticast mode [ 204.717171][ T6138] bridge_slave_1: entered promiscuous mode [ 204.728450][ T5843] veth1_vlan: entered promiscuous mode [ 204.782306][ T1832] hsr_slave_0: left promiscuous mode [ 204.794543][ T1832] hsr_slave_1: left promiscuous mode [ 204.825411][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.838568][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.851634][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.862719][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.920307][ T1832] veth1_macvtap: left promiscuous mode [ 204.931362][ T1832] veth0_macvtap: left promiscuous mode [ 204.941129][ T1832] veth1_vlan: left promiscuous mode [ 204.952746][ T1832] veth0_vlan: left promiscuous mode [ 205.506731][ T5236] Bluetooth: hci3: command tx timeout [ 205.775817][ T58] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 205.920310][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 205.972815][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.974478][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 205.993025][ T58] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 206.002992][ T58] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 206.012484][ T58] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.024870][ T58] usb 2-1: config 0 descriptor?? [ 206.577699][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.618447][ T5245] usb 4-1: USB disconnect, device number 11 [ 206.619878][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.795295][ T6138] team0: Port device team_slave_0 added [ 206.845001][ T5886] veth0_vlan: entered promiscuous mode [ 206.893248][ T6138] team0: Port device team_slave_1 added [ 206.956278][ T5843] veth0_macvtap: entered promiscuous mode [ 206.993039][ T5886] veth1_vlan: entered promiscuous mode [ 207.032260][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.045039][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.126485][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.183989][ T5843] veth1_macvtap: entered promiscuous mode [ 207.199512][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.210224][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.236472][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.318748][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.337002][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.354026][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.365014][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.382872][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.397794][ T58] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 207.423756][ T5886] veth0_macvtap: entered promiscuous mode [ 207.465466][ T6138] hsr_slave_0: entered promiscuous mode [ 207.487917][ T6138] hsr_slave_1: entered promiscuous mode [ 207.513972][ T6138] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.522859][ T6138] Cannot create hsr debugfs directory [ 207.537496][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.551998][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.562439][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.577593][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.585976][ T5236] Bluetooth: hci3: command tx timeout [ 207.593594][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.604417][ T5886] veth1_macvtap: entered promiscuous mode [ 207.605785][ T58] usb 4-1: Using ep0 maxpacket: 8 [ 207.622104][ T58] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 207.641591][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.651402][ T58] usb 4-1: Product: syz [ 207.656175][ T58] usb 4-1: Manufacturer: syz [ 207.661112][ T58] usb 4-1: SerialNumber: syz [ 207.682551][ T58] usb 4-1: config 0 descriptor?? [ 207.728624][ T5843] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.739018][ T5843] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.748711][ T5843] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.758016][ T5843] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.829568][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.840634][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.851342][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.862980][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.873176][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.884134][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.899376][ T58] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.902648][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.976946][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.994366][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.004965][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.018698][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.032342][ T5886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.043230][ T5886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.057279][ T5886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.093666][ T5886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.104814][ T5886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.115416][ T5886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.128619][ T5886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.478415][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.497963][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.529096][ T5307] usb 2-1: USB disconnect, device number 11 [ 208.848955][ T3012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.896055][ T3012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.932629][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.959560][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.076327][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.084304][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.190660][ T6223] netlink: 'syz.4.16': attribute type 12 has an invalid length. [ 209.216093][ T6223] netlink: 'syz.4.16': attribute type 11 has an invalid length. [ 209.223901][ T6223] netlink: 190580 bytes leftover after parsing attributes in process `syz.4.16'. [ 209.603308][ T6138] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.647001][ T6138] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.666131][ T5236] Bluetooth: hci3: command tx timeout [ 209.682130][ T6138] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.704527][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 209.927825][ T6138] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.556590][ T58] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 210.616092][ T58] usb 4-1: USB disconnect, device number 12 [ 210.745244][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.980707][ T6138] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.035985][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.043290][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.204067][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.211428][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.642453][ T6138] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.713188][ T6258] netlink: 'syz.3.153': attribute type 12 has an invalid length. [ 211.755919][ T6258] netlink: 'syz.3.153': attribute type 11 has an invalid length. [ 211.774142][ T6258] netlink: 190580 bytes leftover after parsing attributes in process `syz.3.153'. [ 212.086733][ T58] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 212.638363][ T5229] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 212.979827][ T5229] usb 5-1: Using ep0 maxpacket: 32 [ 213.021958][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.090324][ T5229] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 213.197531][ T5229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.318169][ T5229] usb 5-1: Product: syz [ 213.380000][ T5229] usb 5-1: Manufacturer: syz [ 213.444106][ T5229] usb 5-1: SerialNumber: syz [ 213.708039][ T5229] usb 5-1: config 0 descriptor?? [ 214.238437][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 215.368933][ T6138] veth0_vlan: entered promiscuous mode [ 215.443408][ T5229] gspca_main: pac207-2.14.0 probing 093a:2476 [ 215.452402][ T58] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 215.460898][ T58] usb 4-1: can't read configurations, error -71 [ 215.491712][ T6138] veth1_vlan: entered promiscuous mode [ 215.531657][ T5229] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 215.549863][ T5229] usb 5-1: USB disconnect, device number 2 [ 215.732580][ T6138] veth0_macvtap: entered promiscuous mode [ 215.766790][ T6138] veth1_macvtap: entered promiscuous mode [ 215.837253][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.885709][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.925682][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.973796][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.985730][ T5229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 216.010960][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.024080][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.034948][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.046795][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.300168][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.323913][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.355855][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.400657][ T5229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.441363][ T5229] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 216.441501][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.483685][ T5229] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 216.523811][ T5229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.596623][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.622241][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.668432][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.705088][ T6138] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.740811][ T6138] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.771559][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.843454][ T5229] usb 5-1: config 0 descriptor?? [ 216.932339][ T6138] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.987920][ T6138] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.025424][ T6138] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.067491][ T6138] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.325925][ T5229] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 217.358591][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.394541][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.539714][ T1832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.592268][ T1832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.600591][ T5229] usb 4-1: Using ep0 maxpacket: 8 [ 217.617497][ T5229] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 217.662283][ T5229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.699682][ T5229] usb 4-1: Product: syz [ 217.706167][ T5229] usb 4-1: Manufacturer: syz [ 217.714227][ T5229] usb 4-1: SerialNumber: syz [ 217.747462][ T5229] usb 4-1: config 0 descriptor?? [ 218.022049][ T5229] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 223.344196][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 223.355631][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 223.364563][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 223.372498][ T5229] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 223.444116][ T5229] usb 4-1: USB disconnect, device number 15 [ 223.522808][ T5278] usb 5-1: USB disconnect, device number 3 [ 224.355944][ T6340] netlink: 'syz.1.166': attribute type 12 has an invalid length. [ 224.409080][ T6340] netlink: 'syz.1.166': attribute type 11 has an invalid length. [ 224.459633][ T6340] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.166'. [ 225.176992][ T5345] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 226.975707][ T5345] usb 2-1: Using ep0 maxpacket: 16 [ 226.991787][ T5345] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.035792][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 227.063431][ T5345] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 227.085760][ T5345] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.116513][ T5345] usb 2-1: config 0 descriptor?? [ 227.145537][ T5345] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 227.265940][ T5245] usb 2-1: USB disconnect, device number 12 [ 231.196017][ T29] audit: type=1326 audit(1725429158.137:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6371 comm="syz.1.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa32337cef9 code=0x0 [ 231.472546][ T6375] xt_CT: You must specify a L4 protocol and not use inversions on it [ 234.083152][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.110494][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.122556][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.143198][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.158473][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 234.171651][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.460657][ T6410] netlink: 40 bytes leftover after parsing attributes in process `syz.1.178'. [ 236.190596][ T6395] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.237170][ T5244] Bluetooth: hci0: command tx timeout [ 236.440864][ T6395] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.562703][ T6422] netlink: 'syz.1.183': attribute type 12 has an invalid length. [ 236.655702][ T6422] netlink: 'syz.1.183': attribute type 11 has an invalid length. [ 236.684912][ T6422] netlink: 190580 bytes leftover after parsing attributes in process `syz.1.183'. [ 236.752318][ T6395] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.958263][ T6434] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 237.372135][ T29] audit: type=1326 audit(1725429165.277:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6423 comm="syz.4.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df037cef9 code=0x0 [ 237.552894][ T5345] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 237.625689][ T1569] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 237.753945][ T6395] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.213075][ T1569] usb 2-1: Using ep0 maxpacket: 16 [ 238.305505][ T1569] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.319101][ T5244] Bluetooth: hci0: command tx timeout [ 238.342098][ T5345] usb 4-1: New USB device found, idVendor=0547, idProduct=6801, bcdDevice=43.6f [ 238.433784][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.462902][ T1569] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.555158][ T5345] usb 4-1: Product: syz [ 238.612140][ T1569] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 238.612184][ T5345] usb 4-1: Manufacturer: syz [ 238.636443][ T1569] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.785094][ T5345] usb 4-1: SerialNumber: syz [ 238.805395][ T1569] usb 2-1: config 0 descriptor?? [ 239.012830][ T5345] usb 4-1: config 0 descriptor?? [ 239.173974][ T1569] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 239.243879][ T5345] gspca_main: touptek-2.14.0 probing 0547:6801 [ 240.167581][ T6429] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 240.396945][ T5244] Bluetooth: hci0: command tx timeout [ 240.467698][ T6395] bridge_slave_1: left allmulticast mode [ 240.815805][ T6395] bridge_slave_1: left promiscuous mode [ 241.247269][ T6395] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.329863][ T6395] bridge_slave_0: left allmulticast mode [ 241.364877][ T6395] bridge_slave_0: left promiscuous mode [ 241.408236][ T6395] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.426285][ T5345] usb 4-1: USB disconnect, device number 16 [ 241.553828][ T6458] netlink: 248 bytes leftover after parsing attributes in process `syz.3.190'. [ 241.579158][ T5324] usb 2-1: USB disconnect, device number 13 [ 242.496021][ T5244] Bluetooth: hci0: command tx timeout [ 243.390159][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.1.192'. [ 244.299154][ T6489] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 244.668792][ T29] audit: type=1326 audit(1725429172.577:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6481 comm="syz.1.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa32337cef9 code=0x0 [ 246.531439][ T5345] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 246.825866][ T5345] usb 4-1: Using ep0 maxpacket: 32 [ 246.943513][ T5345] usb 4-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 247.059005][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.143711][ T5345] usb 4-1: Product: syz [ 247.165771][ T5345] usb 4-1: Manufacturer: syz [ 247.190700][ T5345] usb 4-1: SerialNumber: syz [ 247.620316][ T5345] usb 4-1: config 0 descriptor?? [ 247.699964][ T5345] usb 4-1: can't set config #0, error -71 [ 247.775332][ T5345] usb 4-1: USB disconnect, device number 17 [ 248.741441][ T6507] netlink: 'syz.2.202': attribute type 12 has an invalid length. [ 248.825723][ T6507] netlink: 'syz.2.202': attribute type 11 has an invalid length. [ 248.840415][ T6507] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.202'. [ 249.155734][ T5279] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 249.427401][ T5278] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 249.808101][ T6514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.206'. [ 249.930026][ T5278] usb 5-1: device descriptor read/64, error -71 [ 249.945279][ T6395] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.969356][ T5279] usb 3-1: Using ep0 maxpacket: 16 [ 249.984752][ T5279] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.996330][ T6395] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.005114][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.057640][ T5279] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 250.083224][ T6395] bond0 (unregistering): Released all slaves [ 250.122507][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.147036][ T5279] usb 3-1: config 0 descriptor?? [ 250.162249][ T5279] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 250.205883][ T5278] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 250.486019][ T5278] usb 5-1: device descriptor read/64, error -71 [ 250.507300][ T25] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.875323][ T5278] usb usb5-port1: attempt power cycle [ 251.123073][ T6531] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 251.261710][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 251.536340][ T5278] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 251.625853][ T5278] usb 5-1: device descriptor read/8, error -71 [ 251.698092][ T6395] hsr_slave_0: left promiscuous mode [ 251.718908][ T6395] hsr_slave_1: left promiscuous mode [ 251.725876][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 251.733827][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.739273][ T25] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 251.749043][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.770632][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.773723][ T6395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.779307][ T25] usb 2-1: Product: syz [ 251.790993][ T25] usb 2-1: Manufacturer: syz [ 251.794437][ T6395] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.802371][ T25] usb 2-1: SerialNumber: syz [ 251.810774][ T25] usb 2-1: config 0 descriptor?? [ 251.861790][ T6395] veth1_macvtap: left promiscuous mode [ 251.873048][ T6395] veth0_macvtap: left promiscuous mode [ 251.883412][ T6395] veth1_vlan: left promiscuous mode [ 251.892954][ T6395] veth0_vlan: left promiscuous mode [ 251.919424][ T5278] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 251.956798][ T5278] usb 5-1: device descriptor read/8, error -71 [ 251.985967][ T5279] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 252.067611][ T25] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 252.094992][ T5278] usb usb5-port1: unable to enumerate USB device [ 252.185716][ T5279] usb 4-1: Using ep0 maxpacket: 8 [ 252.194891][ T5279] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 252.223620][ T5279] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.243560][ T5279] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.254140][ T5279] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.285706][ T5279] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.340619][ T5279] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.381259][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.384339][ T5324] usb 3-1: USB disconnect, device number 2 [ 252.612545][ T5279] usb 4-1: usb_control_msg returned -32 [ 252.633482][ T5279] usbtmc 4-1:16.0: can't read capabilities [ 252.709213][ T5279] usb 4-1: USB disconnect, device number 18 [ 252.812643][ T6562] input: syz1 as /devices/virtual/input/input6 [ 253.716673][ T6395] team0 (unregistering): Port device team_slave_1 removed [ 254.088709][ T6395] team0 (unregistering): Port device team_slave_0 removed [ 254.789377][ T6571] netlink: 248 bytes leftover after parsing attributes in process `syz.3.214'. [ 254.949807][ T25] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 254.983371][ T25] usb 2-1: USB disconnect, device number 14 [ 255.032880][ T6575] overlay: Unknown parameter 'audit' [ 255.434812][ T5279] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 255.489242][ T6582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.218'. [ 255.587513][ T5279] usb 4-1: device descriptor read/64, error -71 [ 255.672646][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.212'. [ 255.818186][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.866957][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.889033][ T6398] bridge_slave_0: entered allmulticast mode [ 255.916058][ T6398] bridge_slave_0: entered promiscuous mode [ 255.918747][ T5279] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 255.981636][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.996810][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003929][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.077410][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.100934][ T5279] usb 4-1: device descriptor read/64, error -71 [ 256.120251][ T6398] bridge_slave_1: entered allmulticast mode [ 256.158694][ T6398] bridge_slave_1: entered promiscuous mode [ 256.326094][ T5279] usb usb4-port1: attempt power cycle [ 256.960991][ T6599] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 257.076120][ T29] audit: type=1326 audit(1725429185.017:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6597 comm="syz.4.220" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5df037cef9 code=0x0 [ 257.495237][ T6603] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 258.039566][ T5279] usb 4-1: new low-speed USB device number 21 using dummy_hcd [ 258.076936][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.151725][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.377068][ T5279] usb 4-1: device not accepting address 21, error -71 [ 259.216487][ T6620] netlink: 248 bytes leftover after parsing attributes in process `syz.3.224'. [ 259.369206][ T6398] team0: Port device team_slave_0 added [ 259.473363][ T6398] team0: Port device team_slave_1 added [ 259.627519][ T5245] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 259.936101][ T5245] usb 2-1: Using ep0 maxpacket: 32 [ 259.970603][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.183751][ T5245] usb 2-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 260.207206][ T5245] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.230229][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.339692][ T5245] usb 2-1: Product: syz [ 260.439329][ T5245] usb 2-1: Manufacturer: syz [ 260.481501][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.500014][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.520724][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.810437][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.035261][ T5245] usb 2-1: SerialNumber: syz [ 261.076304][ T5245] usb 2-1: config 0 descriptor?? [ 261.274479][ T6398] hsr_slave_0: entered promiscuous mode [ 261.346310][ T6398] hsr_slave_1: entered promiscuous mode [ 261.434794][ T6398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 261.458263][ T6398] Cannot create hsr debugfs directory [ 261.699408][ T6656] Process accounting resumed [ 262.577129][ T6666] Process accounting resumed [ 263.334015][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'. [ 264.053536][ T5245] usb 2-1: can't set config #0, error -71 [ 264.115000][ T5245] usb 2-1: USB disconnect, device number 15 [ 264.210155][ T6684] netlink: 256 bytes leftover after parsing attributes in process `syz.4.234'. [ 266.247375][ T6696] FAULT_INJECTION: forcing a failure. [ 266.247375][ T6696] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 266.263072][ T6696] CPU: 1 UID: 0 PID: 6696 Comm: syz.4.237 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 266.273803][ T6696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 266.283996][ T6696] Call Trace: [ 266.287300][ T6696] [ 266.290249][ T6696] dump_stack_lvl+0x241/0x360 [ 266.295000][ T6696] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.300333][ T6696] ? __pfx__printk+0x10/0x10 [ 266.304951][ T6696] ? __pfx_lock_release+0x10/0x10 [ 266.310010][ T6696] should_fail_ex+0x3b0/0x4e0 [ 266.314705][ T6696] _copy_from_iter+0x1f6/0x1960 [ 266.319575][ T6696] ? __virt_addr_valid+0x183/0x530 [ 266.324700][ T6696] ? __pfx_lock_release+0x10/0x10 [ 266.329750][ T6696] ? __alloc_skb+0x28f/0x440 [ 266.334355][ T6696] ? __pfx__copy_from_iter+0x10/0x10 [ 266.339654][ T6696] ? __virt_addr_valid+0x183/0x530 [ 266.344886][ T6696] ? __virt_addr_valid+0x183/0x530 [ 266.350007][ T6696] ? __virt_addr_valid+0x45f/0x530 [ 266.355141][ T6696] ? __check_object_size+0x49c/0x900 [ 266.360535][ T6696] netlink_sendmsg+0x73d/0xcb0 [ 266.365328][ T6696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.370632][ T6696] ? __import_iovec+0x536/0x820 [ 266.375506][ T6696] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 266.380811][ T6696] ? security_socket_sendmsg+0x87/0xb0 [ 266.386286][ T6696] ? __pfx_netlink_sendmsg+0x10/0x10 [ 266.391586][ T6696] __sock_sendmsg+0x221/0x270 [ 266.396289][ T6696] ____sys_sendmsg+0x525/0x7d0 [ 266.401083][ T6696] ? __pfx_____sys_sendmsg+0x10/0x10 [ 266.406404][ T6696] __sys_sendmsg+0x2b0/0x3a0 [ 266.411017][ T6696] ? __pfx___sys_sendmsg+0x10/0x10 [ 266.416142][ T6696] ? vfs_write+0x7c4/0xc90 [ 266.420619][ T6696] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.426967][ T6696] ? do_syscall_64+0x100/0x230 [ 266.431747][ T6696] ? do_syscall_64+0xb6/0x230 [ 266.436441][ T6696] do_syscall_64+0xf3/0x230 [ 266.440959][ T6696] ? clear_bhb_loop+0x35/0x90 [ 266.445670][ T6696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.451600][ T6696] RIP: 0033:0x7f5df037cef9 [ 266.456035][ T6696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.475669][ T6696] RSP: 002b:00007f5defdff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 266.484113][ T6696] RAX: ffffffffffffffda RBX: 00007f5df0535f80 RCX: 00007f5df037cef9 [ 266.492099][ T6696] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 266.500084][ T6696] RBP: 00007f5defdff090 R08: 0000000000000000 R09: 0000000000000000 [ 266.508069][ T6696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.516051][ T6696] R13: 0000000000000000 R14: 00007f5df0535f80 R15: 00007ffca3449468 [ 266.524048][ T6696] [ 266.527209][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.516855][ T6713] evm: overlay not supported [ 269.603396][ T6723] Process accounting resumed [ 271.793004][ T6398] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 271.892109][ T6743] netlink: 256 bytes leftover after parsing attributes in process `syz.3.246'. [ 271.970475][ T6398] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.009934][ T6398] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.065799][ T6398] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.184660][ T6746] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.247'. [ 272.204815][ T6746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 272.722866][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.915468][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.973110][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.980405][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.061696][ T1832] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.068979][ T1832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.128603][ T5345] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 274.401277][ T5345] usb 2-1: Using ep0 maxpacket: 16 [ 274.808296][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 274.829579][ T5345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 274.867341][ T5345] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 274.967218][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.027681][ T5345] usb 2-1: Product: syz [ 275.032145][ T5345] usb 2-1: Manufacturer: syz [ 275.036994][ T5345] usb 2-1: SerialNumber: syz [ 275.173577][ T5345] usb 2-1: config 0 descriptor?? [ 275.221039][ T5345] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 275.231653][ T5345] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 275.614068][ T6398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.662190][ T6788] netlink: 256 bytes leftover after parsing attributes in process `syz.2.256'. [ 276.141285][ T5345] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 276.162204][ T5345] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 276.641984][ T6398] veth0_vlan: entered promiscuous mode [ 276.832239][ T6796] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 277.258496][ T6398] veth1_vlan: entered promiscuous mode [ 277.302479][ T5345] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 277.315247][ T6806] netlink: 4096 bytes leftover after parsing attributes in process `syz.2.258'. [ 277.331194][ T6806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 277.364715][ T5345] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 277.384181][ T5345] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 277.416633][ T5345] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 277.967094][ T5345] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 278.159869][ T5345] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 278.324310][ T5345] usb 2-1: USB disconnect, device number 16 [ 283.671020][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 317.446894][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.453862][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.639729][ T5244] Bluetooth: hci3: command 0x0406 tx timeout [ 331.648402][ T6813] support for the xor transformation has been removed. [ 346.827413][ T6398] veth0_macvtap: entered promiscuous mode [ 346.850185][ T6398] veth1_macvtap: entered promiscuous mode [ 348.442695][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 348.490951][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 348.500928][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 348.522957][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 348.545785][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 348.564104][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 348.591263][ T4613] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 348.622583][ T4613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.636330][ T4613] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 348.645017][ T4613] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.655104][ T4613] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 348.662669][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.671863][ T4613] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.680783][ T4613] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 348.685811][ T5244] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 348.695411][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.705829][ T4613] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 348.724901][ T4613] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 348.786562][ T4613] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.800088][ T4613] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.808731][ T4613] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.817888][ T4613] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.828126][ T4613] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.835771][ T4613] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 349.043916][ T4613] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.063069][ T4613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.074969][ T4613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.130122][ T4613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.141375][ T4613] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.152378][ T4613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.354010][ T1832] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.607728][ T1832] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.715474][ T1832] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.844960][ T1832] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.626417][ T54] Bluetooth: hci0: command tx timeout [ 350.651576][ T6836] chnl_net:caif_netlink_parms(): no params data found [ 350.786913][ T54] Bluetooth: hci3: command tx timeout [ 350.786949][ T4613] Bluetooth: hci1: command tx timeout [ 350.807088][ T6843] chnl_net:caif_netlink_parms(): no params data found [ 350.836712][ T1832] bridge_slave_1: left allmulticast mode [ 350.842447][ T1832] bridge_slave_1: left promiscuous mode [ 350.849454][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.862337][ T1832] bridge_slave_0: left allmulticast mode [ 350.875915][ T54] Bluetooth: hci4: command tx timeout [ 350.883320][ T1832] bridge_slave_0: left promiscuous mode [ 350.890580][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.186095][ T54] Bluetooth: hci2: command tx timeout [ 351.353924][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.368910][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.386480][ T1832] bond0 (unregistering): Released all slaves [ 351.515036][ T6834] chnl_net:caif_netlink_parms(): no params data found [ 351.588796][ T6832] chnl_net:caif_netlink_parms(): no params data found [ 351.684511][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 351.778467][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.794375][ T6836] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.802138][ T6836] bridge_slave_0: entered allmulticast mode [ 351.817210][ T6836] bridge_slave_0: entered promiscuous mode [ 351.903909][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.911304][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.920090][ T6843] bridge_slave_0: entered allmulticast mode [ 351.929059][ T6843] bridge_slave_0: entered promiscuous mode [ 351.937422][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.944662][ T6836] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.953248][ T6836] bridge_slave_1: entered allmulticast mode [ 351.960536][ T6836] bridge_slave_1: entered promiscuous mode [ 352.059104][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.070180][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.082412][ T6834] bridge_slave_0: entered allmulticast mode [ 352.100028][ T6834] bridge_slave_0: entered promiscuous mode [ 352.117920][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.125238][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.144985][ T6843] bridge_slave_1: entered allmulticast mode [ 352.157440][ T6843] bridge_slave_1: entered promiscuous mode [ 352.223272][ T6836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.319010][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.328210][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.346311][ T6834] bridge_slave_1: entered allmulticast mode [ 352.367978][ T6834] bridge_slave_1: entered promiscuous mode [ 352.459364][ T6843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.481265][ T6836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.608671][ T6843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.634027][ T6832] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.642685][ T6832] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.650876][ T6832] bridge_slave_0: entered allmulticast mode [ 352.662340][ T6832] bridge_slave_0: entered promiscuous mode [ 352.705882][ T54] Bluetooth: hci0: command tx timeout [ 352.719404][ T6834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.750559][ T6834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.788762][ T6832] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.796285][ T6832] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.803606][ T6832] bridge_slave_1: entered allmulticast mode [ 352.816959][ T6832] bridge_slave_1: entered promiscuous mode [ 352.870545][ T54] Bluetooth: hci3: command tx timeout [ 352.876123][ T54] Bluetooth: hci1: command tx timeout [ 352.924288][ T6836] team0: Port device team_slave_0 added [ 352.946177][ T54] Bluetooth: hci4: command tx timeout [ 353.045442][ T6834] team0: Port device team_slave_0 added [ 353.082377][ T6843] team0: Port device team_slave_0 added [ 353.107416][ T6843] team0: Port device team_slave_1 added [ 353.124124][ T6836] team0: Port device team_slave_1 added [ 353.213421][ T6832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.235068][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.245752][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.253245][ T6829] bridge_slave_0: entered allmulticast mode [ 353.267735][ T54] Bluetooth: hci2: command tx timeout [ 353.283237][ T6829] bridge_slave_0: entered promiscuous mode [ 353.292316][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.300092][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.307521][ T6829] bridge_slave_1: entered allmulticast mode [ 353.315223][ T6829] bridge_slave_1: entered promiscuous mode [ 353.325404][ T6834] team0: Port device team_slave_1 added [ 353.415000][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.429920][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.475163][ T6836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.504167][ T6832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.647039][ T6836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.654610][ T6836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.688173][ T6836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.773217][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.780678][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.808390][ T6843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.821852][ T6843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.829074][ T6843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.859838][ T6843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.909972][ T6832] team0: Port device team_slave_0 added [ 353.921133][ T6832] team0: Port device team_slave_1 added [ 353.931427][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.949077][ T1832] hsr_slave_0: left promiscuous mode [ 353.955485][ T1832] hsr_slave_1: left promiscuous mode [ 353.964999][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.972815][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 353.980878][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.988535][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.012305][ T1832] veth1_macvtap: left promiscuous mode [ 354.018196][ T1832] veth0_macvtap: left promiscuous mode [ 354.023931][ T1832] veth1_vlan: left promiscuous mode [ 354.029467][ T1832] veth0_vlan: left promiscuous mode [ 354.712037][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 354.770150][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 354.790186][ T54] Bluetooth: hci0: command tx timeout [ 354.954714][ T54] Bluetooth: hci3: command tx timeout [ 354.954782][ T4613] Bluetooth: hci1: command tx timeout [ 355.047103][ T4613] Bluetooth: hci4: command tx timeout [ 355.355761][ T4613] Bluetooth: hci2: command tx timeout [ 355.426554][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.433575][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.462287][ T6834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.476247][ T6834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.485006][ T6834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.511121][ T6834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.589149][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.675819][ T6843] hsr_slave_0: entered promiscuous mode [ 355.683675][ T6843] hsr_slave_1: entered promiscuous mode [ 355.693397][ T6843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.701634][ T6843] Cannot create hsr debugfs directory [ 355.708297][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.715295][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.741591][ T6832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.756882][ T6832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.763884][ T6832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.790354][ T6832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.853362][ T6829] team0: Port device team_slave_0 added [ 355.863446][ T6829] team0: Port device team_slave_1 added [ 355.873975][ T6836] hsr_slave_0: entered promiscuous mode [ 355.881079][ T6836] hsr_slave_1: entered promiscuous mode [ 355.889327][ T6836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 355.897136][ T6836] Cannot create hsr debugfs directory [ 356.030328][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.038932][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.065459][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.099409][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.112484][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.147183][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.213271][ T6834] hsr_slave_0: entered promiscuous mode [ 356.221025][ T6834] hsr_slave_1: entered promiscuous mode [ 356.228416][ T6834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.236131][ T6834] Cannot create hsr debugfs directory [ 356.315050][ T6832] hsr_slave_0: entered promiscuous mode [ 356.322568][ T6832] hsr_slave_1: entered promiscuous mode [ 356.329133][ T6832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.337160][ T6832] Cannot create hsr debugfs directory [ 356.637008][ T6829] hsr_slave_0: entered promiscuous mode [ 356.644126][ T6829] hsr_slave_1: entered promiscuous mode [ 356.656772][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.664411][ T6829] Cannot create hsr debugfs directory [ 356.865949][ T4613] Bluetooth: hci0: command tx timeout [ 357.027965][ T54] Bluetooth: hci3: command tx timeout [ 357.033687][ T4613] Bluetooth: hci1: command tx timeout [ 357.105865][ T54] Bluetooth: hci4: command tx timeout [ 357.271694][ T6836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.419258][ T6836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.432525][ T4613] Bluetooth: hci2: command tx timeout [ 357.509743][ T6836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.580328][ T6836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.720814][ T1832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.812535][ T1832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.929820][ T1832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.038817][ T1832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.270750][ T1832] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.380002][ T1832] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.461658][ T1832] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.538394][ T1832] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.328285][ T1832] bridge_slave_1: left allmulticast mode [ 359.342834][ T1832] bridge_slave_1: left promiscuous mode [ 359.356120][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.369818][ T1832] bridge_slave_0: left allmulticast mode [ 359.386348][ T1832] bridge_slave_0: left promiscuous mode [ 359.392220][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.419906][ T1832] bridge_slave_1: left allmulticast mode [ 359.425958][ T1832] bridge_slave_1: left promiscuous mode [ 359.431778][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.454424][ T1832] bridge_slave_0: left allmulticast mode [ 359.460692][ T1832] bridge_slave_0: left promiscuous mode [ 359.466988][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.481842][ T1832] bridge_slave_1: left allmulticast mode [ 359.488716][ T1832] bridge_slave_1: left promiscuous mode [ 359.494529][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.504782][ T1832] bridge_slave_0: left allmulticast mode [ 359.511153][ T1832] bridge_slave_0: left promiscuous mode [ 359.517650][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.529714][ T1832] bridge_slave_1: left allmulticast mode [ 359.535436][ T1832] bridge_slave_1: left promiscuous mode [ 359.546742][ T1832] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.559312][ T1832] bridge_slave_0: left allmulticast mode [ 359.565043][ T1832] bridge_slave_0: left promiscuous mode [ 359.573065][ T1832] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.052349][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.064730][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.076770][ T1832] bond0 (unregistering): Released all slaves [ 361.245176][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.266797][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.285114][ T1832] bond0 (unregistering): Released all slaves [ 361.468582][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.481022][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.493455][ T1832] bond0 (unregistering): Released all slaves [ 361.672187][ T1832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.684888][ T1832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.700946][ T1832] bond0 (unregistering): Released all slaves [ 362.174983][ T6834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.197572][ T6834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.341769][ T6834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.375105][ T6834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 363.083614][ T6834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.320099][ T6834] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.340713][ T6832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 363.366921][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.374124][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.451080][ T6832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 363.481699][ T6832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 363.503572][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.510857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.610307][ T6832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 364.203617][ T1832] hsr_slave_0: left promiscuous mode [ 364.212607][ T1832] hsr_slave_1: left promiscuous mode [ 364.221456][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.230437][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.239215][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.247476][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.269836][ T1832] hsr_slave_0: left promiscuous mode [ 364.276761][ T1832] hsr_slave_1: left promiscuous mode [ 364.292938][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.304951][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.322985][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.331032][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.355494][ T1832] hsr_slave_0: left promiscuous mode [ 364.362117][ T1832] hsr_slave_1: left promiscuous mode [ 364.378997][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.394496][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.403366][ T1832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.412828][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.436594][ T1832] hsr_slave_0: left promiscuous mode [ 364.452864][ T1832] hsr_slave_1: left promiscuous mode [ 364.463082][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.483149][ T1832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.601927][ T1832] veth1_macvtap: left promiscuous mode [ 364.609153][ T1832] veth0_macvtap: left promiscuous mode [ 364.614880][ T1832] veth1_vlan: left promiscuous mode [ 364.620564][ T1832] veth0_vlan: left promiscuous mode [ 364.632308][ T1832] veth1_macvtap: left promiscuous mode [ 364.638050][ T1832] veth0_macvtap: left promiscuous mode [ 364.643710][ T1832] veth1_vlan: left promiscuous mode [ 364.649739][ T1832] veth0_vlan: left promiscuous mode [ 364.659351][ T1832] veth1_macvtap: left promiscuous mode [ 364.664946][ T1832] veth0_macvtap: left promiscuous mode [ 364.670756][ T1832] veth1_vlan: left promiscuous mode [ 364.676623][ T1832] veth0_vlan: left promiscuous mode [ 364.683166][ T1832] veth1_macvtap: left promiscuous mode [ 364.688916][ T1832] veth0_macvtap: left promiscuous mode [ 364.694561][ T1832] veth1_vlan: left promiscuous mode [ 364.700233][ T1832] veth0_vlan: left promiscuous mode [ 365.684525][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 365.754423][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 366.842431][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 366.902570][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 368.003222][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 368.061361][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 369.116752][ T1832] team0 (unregistering): Port device team_slave_1 removed [ 369.177457][ T1832] team0 (unregistering): Port device team_slave_0 removed [ 369.812676][ T6832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 369.883583][ T6836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 369.937994][ T6836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 369.977535][ T6836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.054249][ T6836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.119412][ T6834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.159959][ T6832] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.220564][ T6843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 370.257585][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.264814][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.299230][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.306519][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.323627][ T6843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 370.334256][ T6843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 370.369678][ T6843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 370.574092][ T6834] veth0_vlan: entered promiscuous mode [ 370.660344][ T6834] veth1_vlan: entered promiscuous mode [ 370.703307][ T6829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 370.838899][ T6829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 370.882196][ T6829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 370.970421][ T6834] veth0_macvtap: entered promiscuous mode [ 370.993306][ T6829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 371.112907][ T6834] veth1_macvtap: entered promiscuous mode [ 371.211544][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.251992][ T6836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.301730][ T6834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.391072][ T6834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.401607][ T6834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.411415][ T6834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.420934][ T6834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.453492][ T6836] 8021q: adding VLAN 0 to HW filter on device team0 [ 371.540699][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.547958][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 371.592728][ T6832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.683619][ T6843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 371.758715][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.765963][ T6492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 371.824917][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 371.844470][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.001217][ T6843] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.059671][ T6832] veth0_vlan: entered promiscuous mode [ 372.075865][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.080531][ T5412] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.083723][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.090889][ T5412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.130152][ T6832] veth1_vlan: entered promiscuous mode [ 372.175325][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.243885][ T5412] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.251293][ T5412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.510090][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.569550][ T3027] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.576844][ T3027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.834841][ T3027] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.842099][ T3027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.174477][ T6832] veth0_macvtap: entered promiscuous mode [ 373.205292][ T7090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.266'. [ 373.226171][ T7090] ip6tnl0: entered promiscuous mode [ 373.231532][ T7090] ip6tnl0: entered allmulticast mode [ 373.244069][ T7090] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 373.264109][ T6832] veth1_macvtap: entered promiscuous mode [ 373.303485][ T6836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.380307][ T6843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.406804][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 373.455628][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.482603][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.529328][ T6832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 373.563687][ T6832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 373.581890][ T6832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.621226][ T6832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.682021][ T6832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.823900][ T6832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.930182][ T6832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 374.005768][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 374.325865][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 376.644973][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 376.653040][ T25] usb 3-1: can't read configurations, error -71 [ 377.614324][ T7133] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 377.760091][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.918483][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.963280][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.053161][ T6843] veth0_vlan: entered promiscuous mode [ 378.117070][ T7142] netlink: 'syz.2.269': attribute type 12 has an invalid length. [ 378.132202][ T7142] netlink: 'syz.2.269': attribute type 11 has an invalid length. [ 378.163882][ T7142] netlink: 190580 bytes leftover after parsing attributes in process `syz.2.269'. [ 378.213954][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.222401][ T6843] veth1_vlan: entered promiscuous mode [ 378.233683][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.374944][ T6836] veth0_vlan: entered promiscuous mode [ 378.398327][ T6829] veth0_vlan: entered promiscuous mode [ 378.429055][ T5307] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 378.502687][ T6843] veth0_macvtap: entered promiscuous mode [ 378.544475][ T6829] veth1_vlan: entered promiscuous mode [ 378.625894][ T5307] usb 3-1: Using ep0 maxpacket: 16 [ 378.642965][ T5307] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.682476][ T5307] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 378.717260][ T6836] veth1_vlan: entered promiscuous mode [ 378.780569][ T6843] veth1_macvtap: entered promiscuous mode [ 378.788368][ T5307] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 378.837286][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.868644][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.875236][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.932774][ T5307] usb 3-1: config 0 descriptor?? [ 379.011815][ T5307] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 379.040459][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.051825][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.078001][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.100213][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.124136][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.150716][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.163774][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.176777][ T6843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.200086][ T6843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.229643][ T6843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.274200][ T6843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.288003][ T6843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.296978][ T6843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.309388][ T6843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.330633][ T7143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.269'. [ 379.413464][ T6829] veth0_macvtap: entered promiscuous mode [ 379.470050][ T6829] veth1_macvtap: entered promiscuous mode [ 379.520947][ T6836] veth0_macvtap: entered promiscuous mode [ 379.570546][ T6836] veth1_macvtap: entered promiscuous mode [ 379.636430][ T3027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.653521][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.668591][ T3027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.677127][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.687175][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.697986][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.707976][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.718833][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.731425][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.747184][ T5324] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 379.755986][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.776739][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.792330][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.803413][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.821411][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.836357][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.855724][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.871681][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.893667][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.937891][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.958552][ T5324] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.973977][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.984196][ T5324] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.993661][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.014300][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.026092][ T6836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.038580][ T6836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.051208][ T5324] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 380.063847][ T6836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.074527][ T5324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.087593][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.095699][ T5324] usb 2-1: Product: syz [ 380.102347][ T5324] usb 2-1: Manufacturer: syz [ 380.107578][ T5324] usb 2-1: SerialNumber: syz [ 380.115144][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.128740][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.140379][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.151738][ T5324] r8152-cfgselector 2-1: Unknown version 0x0000 [ 380.165580][ T5324] r8152-cfgselector 2-1: config 0 descriptor?? [ 380.177602][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.189102][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.205590][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.225979][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.244527][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.321815][ T6829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.339597][ T6829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.352474][ T6829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.362439][ T6829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.391474][ T6836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.408961][ T6836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.418516][ T6836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.428340][ T6836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.458569][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.491095][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.722920][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.743497][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.825339][ T6395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.859185][ T6395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.158977][ T7139] usb 3-1: USB disconnect, device number 5 [ 381.460017][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.541888][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.829777][ T3027] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 381.891960][ T3027] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.388513][ T5229] r8152-cfgselector 2-1: USB disconnect, device number 17 [ 387.093738][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'. [ 387.976070][ T5324] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 388.356895][ T5324] usb 3-1: Using ep0 maxpacket: 32 [ 388.383475][ T5324] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 388.406681][ T5324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.915918][ T5324] usb 3-1: Product: syz [ 389.920168][ T5324] usb 3-1: Manufacturer: syz [ 390.671915][ T7247] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 390.996146][ T5324] usb 3-1: SerialNumber: syz [ 391.023163][ T5324] usb 3-1: config 0 descriptor?? [ 391.054830][ T5324] usb 3-1: can't set config #0, error -71 [ 391.074472][ T7255] process 'syz.2.279' launched './file1' with NULL argv: empty string added [ 391.107743][ T5324] usb 3-1: USB disconnect, device number 6 [ 392.882902][ T7274] FAULT_INJECTION: forcing a failure. [ 392.882902][ T7274] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.944713][ T7274] CPU: 1 UID: 0 PID: 7274 Comm: syz.2.284 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 392.957674][ T7274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 392.967779][ T7274] Call Trace: [ 392.971096][ T7274] [ 392.974227][ T7274] dump_stack_lvl+0x241/0x360 [ 392.978960][ T7274] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.984209][ T7274] ? __pfx__printk+0x10/0x10 [ 392.988851][ T7274] ? __pfx_lock_release+0x10/0x10 [ 392.993944][ T7274] should_fail_ex+0x3b0/0x4e0 [ 392.998678][ T7274] _copy_from_user+0x2f/0xe0 [ 393.003329][ T7274] copy_msghdr_from_user+0xae/0x680 [ 393.008589][ T7274] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 393.014550][ T7274] __sys_sendmsg+0x23d/0x3a0 [ 393.019204][ T7274] ? __pfx___sys_sendmsg+0x10/0x10 [ 393.024359][ T7274] ? vfs_write+0x7c4/0xc90 [ 393.028868][ T7274] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 393.035252][ T7274] ? do_syscall_64+0x100/0x230 [ 393.040073][ T7274] ? do_syscall_64+0xb6/0x230 [ 393.044800][ T7274] do_syscall_64+0xf3/0x230 [ 393.049999][ T7274] ? clear_bhb_loop+0x35/0x90 [ 393.054839][ T7274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.060977][ T7274] RIP: 0033:0x7f48b677cef9 [ 393.065436][ T7274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.085268][ T7274] RSP: 002b:00007f48b74a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.093740][ T7274] RAX: ffffffffffffffda RBX: 00007f48b6935f80 RCX: 00007f48b677cef9 [ 393.101762][ T7274] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000005 [ 393.109884][ T7274] RBP: 00007f48b74a9090 R08: 0000000000000000 R09: 0000000000000000 [ 393.117901][ T7274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.125922][ T7274] R13: 0000000000000000 R14: 00007f48b6935f80 R15: 00007ffe8665d7e8 [ 393.133954][ T7274] [ 393.606698][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 393.638291][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 393.680229][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 393.697763][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 393.722047][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 393.746908][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 395.057811][ T5412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.079573][ T4613] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 395.089348][ T4613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 395.100778][ T4613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 395.111411][ T4613] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 395.119639][ T4613] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 395.127213][ T4613] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 395.361486][ T5412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.866745][ T4613] Bluetooth: hci5: command tx timeout [ 396.428601][ T5412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.655645][ T1569] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 396.824537][ T5412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.878711][ T1569] usb 3-1: Using ep0 maxpacket: 32 [ 396.899135][ T7276] chnl_net:caif_netlink_parms(): no params data found [ 396.910775][ T1569] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 396.940163][ T1569] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.963946][ T1569] usb 3-1: Product: syz [ 396.985656][ T1569] usb 3-1: Manufacturer: syz [ 396.990648][ T1569] usb 3-1: SerialNumber: syz [ 397.022885][ T1569] usb 3-1: config 0 descriptor?? [ 397.195855][ T4613] Bluetooth: hci0: command tx timeout [ 397.905604][ T4613] Bluetooth: hci5: command tx timeout [ 398.654884][ T7276] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.674396][ T7276] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.696293][ T7276] bridge_slave_0: entered allmulticast mode [ 398.705448][ T7276] bridge_slave_0: entered promiscuous mode [ 398.737956][ T7276] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.747921][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.756833][ T7276] bridge_slave_1: entered allmulticast mode [ 398.766453][ T7276] bridge_slave_1: entered promiscuous mode [ 398.773836][ T5412] bridge_slave_1: left allmulticast mode [ 398.780046][ T5412] bridge_slave_1: left promiscuous mode [ 398.786021][ T7139] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 398.796521][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.836729][ T5412] bridge_slave_0: left allmulticast mode [ 398.848078][ T5412] bridge_slave_0: left promiscuous mode [ 398.862386][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.978782][ T1569] gspca_main: pac207-2.14.0 probing 093a:2476 [ 399.016263][ T1569] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 399.058801][ T7139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 399.066036][ T1569] usb 3-1: USB disconnect, device number 7 [ 399.078889][ T7139] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 399.115125][ T7139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 399.137296][ T7139] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 399.167272][ T7139] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 399.195411][ T7139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.417401][ T4613] Bluetooth: hci0: command tx timeout [ 399.447310][ T7139] usb 5-1: config 0 descriptor?? [ 399.987783][ T4613] Bluetooth: hci5: command tx timeout [ 400.351469][ T7331] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 401.070378][ T7139] hdpvr 5-1:0.0: unexpected answer of status request, len -32 [ 401.136606][ T7139] hdpvr 5-1:0.0: device init failed [ 401.142054][ T7139] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 401.211657][ T7139] usb 5-1: USB disconnect, device number 8 [ 401.438144][ T4613] Bluetooth: hci0: command tx timeout [ 402.032127][ T5412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.193012][ T5412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.219430][ T5412] bond0 (unregistering): Released all slaves [ 402.226218][ T4613] Bluetooth: hci5: command tx timeout [ 402.877256][ T7291] chnl_net:caif_netlink_parms(): no params data found [ 403.509843][ T4613] Bluetooth: hci0: command tx timeout [ 404.524258][ T7276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.222477][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 405.457015][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 405.552693][ T25] usb 5-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 405.562521][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.574186][ T7276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.583788][ T25] usb 5-1: Product: syz [ 405.590050][ T25] usb 5-1: Manufacturer: syz [ 405.594853][ T25] usb 5-1: SerialNumber: syz [ 405.604092][ T25] usb 5-1: config 0 descriptor?? [ 406.616243][ T5412] hsr_slave_0: left promiscuous mode [ 406.652266][ T5412] hsr_slave_1: left promiscuous mode [ 406.690790][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.703485][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.712419][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.732738][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.784610][ T5412] veth1_macvtap: left promiscuous mode [ 406.795200][ T5412] veth0_macvtap: left promiscuous mode [ 406.808273][ T5412] veth1_vlan: left promiscuous mode [ 406.823207][ T5412] veth0_vlan: left promiscuous mode [ 406.907817][ T7388] UBIFS error (pid: 7388): cannot open "./file0", error -22 [ 406.917042][ T1569] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.131110][ T1569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 407.173624][ T1569] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 407.187164][ T1569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 407.209010][ T1569] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 407.224368][ T1569] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 407.244205][ T1569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.297133][ T1569] usb 3-1: config 0 descriptor?? [ 407.568023][ T1569] hdpvr 3-1:0.0: unexpected answer of status request, len -32 [ 407.575785][ T1569] hdpvr 3-1:0.0: device init failed [ 407.581096][ T1569] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 407.616433][ T25] gspca_main: pac207-2.14.0 probing 093a:2476 [ 407.633270][ T25] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 407.650304][ T1569] usb 3-1: USB disconnect, device number 8 [ 407.677438][ T25] usb 5-1: USB disconnect, device number 9 [ 407.729979][ T7043] udevd[7043]: setting owner of /dev/bus/usb/005/009 to uid=0, gid=0 failed: No such file or directory [ 408.139371][ T5412] team0 (unregistering): Port device team_slave_1 removed [ 408.261291][ T5412] team0 (unregistering): Port device team_slave_0 removed [ 411.010984][ T7276] team0: Port device team_slave_0 added [ 411.063338][ T7276] team0: Port device team_slave_1 added [ 411.128663][ T7421] Zero length message leads to an empty skb [ 411.211756][ T5278] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 411.282067][ T7291] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.291257][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.298654][ T7291] bridge_slave_0: entered allmulticast mode [ 411.309285][ T7291] bridge_slave_0: entered promiscuous mode [ 411.318435][ T7291] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.353209][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.370801][ T7291] bridge_slave_1: entered allmulticast mode [ 411.382578][ T7291] bridge_slave_1: entered promiscuous mode [ 411.403851][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.411475][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.439872][ T7276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 411.474768][ T5278] usb 5-1: Using ep0 maxpacket: 16 [ 411.483607][ T7276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 411.494457][ T7276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 411.527553][ T5307] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 411.539175][ T7276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 411.560072][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.571749][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.591817][ T5278] usb 5-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice= 0.00 [ 411.603639][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.616927][ T5278] usb 5-1: config 0 descriptor?? [ 411.710864][ T7291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.758303][ T5307] usb 2-1: Using ep0 maxpacket: 32 [ 411.781041][ T5307] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 411.799449][ T5307] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 411.803098][ T7291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.827182][ T5307] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice= 0.00 [ 411.837035][ T5307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 411.845160][ T5307] usb 2-1: SerialNumber: syz [ 411.866727][ T5307] usb 2-1: config 0 descriptor?? [ 411.890975][ T5307] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 411.952225][ T7276] hsr_slave_0: entered promiscuous mode [ 411.959773][ T5307] usb 2-1: Direct firmware load for ti_usb-v0451-p5152.fw failed with error -2 [ 411.983453][ T7276] hsr_slave_1: entered promiscuous mode [ 411.989692][ T5307] usb 2-1: Falling back to sysfs fallback for: ti_usb-v0451-p5152.fw [ 412.045728][ T5278] apple 0003:05AC:0274.0001: unknown main item tag 0x0 [ 412.098605][ T5278] apple 0003:05AC:0274.0001: hidraw0: USB HID v0.02 Device [HID 05ac:0274] on usb-dummy_hcd.4-1/input0 [ 412.203615][ T7291] team0: Port device team_slave_0 added [ 412.220639][ T7291] team0: Port device team_slave_1 added [ 412.323796][ T5278] usb 5-1: USB disconnect, device number 10 [ 412.506840][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 412.516219][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.543411][ T7291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.602157][ T7291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.612522][ T7291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.649666][ T7291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.748406][ T1569] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 412.808409][ T5412] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.941030][ T7291] hsr_slave_0: entered promiscuous mode [ 412.955716][ T1569] usb 3-1: Using ep0 maxpacket: 32 [ 412.967733][ T1569] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 412.990219][ T7291] hsr_slave_1: entered promiscuous mode [ 412.997956][ T1569] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice= 0.00 [ 413.015782][ T7291] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 413.023404][ T7291] Cannot create hsr debugfs directory [ 413.033563][ T1569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 413.061787][ T1569] usb 3-1: SerialNumber: syz [ 413.069952][ T1569] usb 3-1: config 0 descriptor?? [ 413.079938][ T1569] ti_usb_3410_5052 3-1:0.0: required endpoints missing [ 413.133204][ T5412] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.630964][ T25] usb 3-1: USB disconnect, device number 9 [ 418.982269][ T5412] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.127001][ T7458] mmap: syz.2.318 (7458) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 419.415103][ T5412] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.566641][ T25] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 419.775850][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 419.813007][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.857552][ T25] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 419.904248][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 419.947485][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 419.995719][ T25] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.038266][ T25] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 420.066117][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.077414][ T25] usb 5-1: Product: syz [ 420.081642][ T25] usb 5-1: Manufacturer: syz [ 420.105715][ T25] usb 5-1: SerialNumber: syz [ 420.124426][ T25] usb 5-1: config 0 descriptor?? [ 420.431763][ T25] appledisplay 5-1:0.0: Error while getting initial brightness: -110 [ 420.462139][ C1] usb 5-1: appledisplay_complete - usb_submit_urb failed with result -1 [ 420.783763][ T25] appledisplay 5-1:0.0: probe with driver appledisplay failed with error -110 [ 421.249406][ T5412] bridge_slave_1: left allmulticast mode [ 421.269031][ T5412] bridge_slave_1: left promiscuous mode [ 421.306456][ T5412] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.346678][ T5412] bridge_slave_0: left allmulticast mode [ 421.355824][ T5412] bridge_slave_0: left promiscuous mode [ 421.361792][ T5412] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.084583][ T5412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.104150][ T5412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.147908][ T5412] bond0 (unregistering): Released all slaves [ 422.178737][ T1569] usb 5-1: USB disconnect, device number 11 [ 422.312098][ T7276] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 422.421149][ T7276] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 422.694362][ T7276] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 422.754862][ T7276] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 422.982920][ T7496] Bluetooth: MGMT ver 1.23 [ 424.073313][ T5412] hsr_slave_0: left promiscuous mode [ 424.094559][ T5412] hsr_slave_1: left promiscuous mode [ 424.113135][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 424.121189][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 424.135193][ T5412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 424.154183][ T5412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 424.196829][ T5280] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 424.211223][ T5412] veth1_macvtap: left promiscuous mode [ 424.226743][ T5412] veth0_macvtap: left promiscuous mode [ 424.236410][ T5412] veth1_vlan: left promiscuous mode [ 424.241826][ T5412] veth0_vlan: left promiscuous mode [ 424.415641][ T5280] usb 5-1: Using ep0 maxpacket: 32 [ 424.430472][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 424.447228][ T5280] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 424.481299][ T5280] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice= 0.00 [ 424.501279][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 424.520069][ T5280] usb 5-1: SerialNumber: syz [ 424.537220][ T5280] usb 5-1: config 0 descriptor?? [ 424.555315][ T5280] ti_usb_3410_5052 5-1:0.0: TI USB 5052 2 port adapter converter detected [ 424.676970][ T7515] Process accounting resumed [ 426.980530][ T5412] team0 (unregistering): Port device team_slave_1 removed [ 427.362969][ T5412] team0 (unregistering): Port device team_slave_0 removed [ 430.087391][ T5278] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 430.317564][ T5278] usb 3-1: Using ep0 maxpacket: 32 [ 430.349362][ T5278] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 430.380200][ T5278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.406747][ T5278] usb 3-1: Product: syz [ 430.426946][ T5278] usb 3-1: Manufacturer: syz [ 430.431615][ T5278] usb 3-1: SerialNumber: syz [ 430.450337][ T5278] usb 3-1: config 0 descriptor?? [ 430.558298][ T7291] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 430.635405][ T7291] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 430.668453][ T7276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.696152][ T7291] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 430.747448][ T7291] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 430.813272][ T7276] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.930948][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.938304][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.988234][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.995560][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.730166][ T7291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.872659][ T7291] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.937722][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.945144][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.011929][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.019250][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.271982][ T7276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.516181][ T7276] veth0_vlan: entered promiscuous mode [ 432.563961][ T7276] veth1_vlan: entered promiscuous mode [ 432.721197][ T5278] gspca_main: pac207-2.14.0 probing 093a:2476 [ 432.742016][ T5278] gspca_pac207: Failed to read a register (index 0x0000, error -71) [ 432.762000][ T7276] veth0_macvtap: entered promiscuous mode [ 432.775122][ T5278] usb 3-1: USB disconnect, device number 10 [ 432.839258][ T7276] veth1_macvtap: entered promiscuous mode [ 432.904935][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.936120][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.955766][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 432.975949][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.000351][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.015064][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.046088][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.058781][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.079329][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.105938][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.128989][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.140355][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.152844][ T7276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.163977][ T7276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.197014][ T7276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.221453][ T7276] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.236101][ T7276] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.244874][ T7276] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.275584][ T7276] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.435443][ T7291] veth0_vlan: entered promiscuous mode [ 433.489351][ T7291] veth1_vlan: entered promiscuous mode [ 433.567007][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.576179][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.634335][ T7291] veth0_macvtap: entered promiscuous mode [ 433.654220][ T7291] veth1_macvtap: entered promiscuous mode [ 433.664800][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.677745][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.700487][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.714586][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.730958][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.742310][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.760002][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.784354][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.789901][ T7584] netlink: 16 bytes leftover after parsing attributes in process `syz.2.335'. [ 433.794297][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 433.826132][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.847151][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.864503][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.883431][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.893538][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.919839][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.936000][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.951974][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.967851][ T7291] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.978532][ T7582] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.984984][ T7582] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 433.993166][ T7291] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.014310][ T7582] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 434.021884][ T7291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.044806][ T7582] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.051074][ T7582] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 434.087616][ T7582] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 434.117705][ T7291] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.134495][ T7291] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.145442][ T7291] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.174529][ T7291] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.192905][ T7582] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 434.202702][ T7582] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 434.249003][ T7582] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 434.306578][ T7582] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 434.312666][ T7582] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 434.322248][ T7582] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 434.407379][ T7582] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 434.453128][ T7582] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 434.514334][ T7582] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 434.693736][ T5412] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.724840][ T5412] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.785115][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.836570][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.827126][ T4613] Bluetooth: hci1: command 0x0c1a tx timeout [ 436.145756][ T4613] Bluetooth: hci3: command 0x0c1a tx timeout [ 436.226080][ T4613] Bluetooth: hci4: command 0x0c1a tx timeout [ 436.386857][ T4613] Bluetooth: hci5: command 0x0c1a tx timeout [ 436.468800][ T4613] Bluetooth: hci0: command 0x0c1a tx timeout [ 437.907629][ T4613] Bluetooth: hci1: command 0x0c1a tx timeout [ 438.228093][ T4613] Bluetooth: hci3: command 0x0c1a tx timeout [ 438.306301][ T4613] Bluetooth: hci4: command 0x0c1a tx timeout [ 438.465703][ T4613] Bluetooth: hci5: command 0x0c1a tx timeout [ 438.545624][ T4613] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.034496][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 439.887314][ T5245] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 439.987769][ T4613] Bluetooth: hci1: command 0x0c1a tx timeout [ 440.215620][ T5245] usb 3-1: Using ep0 maxpacket: 32 [ 440.245840][ T5245] usb 3-1: New USB device found, idVendor=093a, idProduct=2476, bcdDevice=7a.f3 [ 440.275653][ T5245] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.284017][ T5245] usb 3-1: Product: syz [ 440.292359][ T5245] usb 3-1: Manufacturer: syz [ 440.309164][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.315770][ T4613] Bluetooth: hci3: command 0x0c1a tx timeout [ 440.322014][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.336168][ T5245] usb 3-1: SerialNumber: syz [ 440.344516][ T5245] usb 3-1: config 0 descriptor?? [ 440.395885][ T4613] Bluetooth: hci4: command 0x0c1a tx timeout [ 545.535480][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 545.542517][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7587/1:b..l [ 545.550986][ C1] rcu: (detected by 1, t=10502 jiffies, g=41557, q=586 ncpus=2) [ 545.558739][ C1] task:syz.3.282 state:R running task stack:25168 pid:7587 tgid:7585 ppid:7276 flags:0x00004002 [ 545.571739][ C1] Call Trace: [ 545.575059][ C1] [ 545.578025][ C1] __schedule+0x17ae/0x4a10 [ 545.582596][ C1] ? is_bpf_text_address+0x285/0x2a0 [ 545.587936][ C1] ? __pfx___schedule+0x10/0x10 [ 545.592841][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 545.598887][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 545.604222][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 545.609472][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 545.615262][ C1] irqentry_exit+0x5e/0x90 [ 545.619714][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 545.625731][ C1] RIP: 0010:unwind_get_return_address+0x2c/0xc0 [ 545.632108][ C1] Code: 1e fa 55 41 57 41 56 53 48 89 fb 49 be 00 00 00 00 00 fc ff df e8 b4 66 52 00 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 75 72 <8b> 2b 31 ff 89 ee e8 d9 6a 52 00 85 ed 74 4a 48 83 c3 48 49 89 df [ 545.651941][ C1] RSP: 0018:ffffc900035eed18 EFLAGS: 00000246 [ 545.658066][ C1] RAX: 0000000000000000 RBX: ffffc900035eed40 RCX: ffff888020350000 [ 545.666083][ C1] RDX: 0000000000000000 RSI: 0000000080000000 RDI: ffffc900035eed40 [ 545.674091][ C1] RBP: ffffc900035eedd0 R08: ffffffff814145c5 R09: ffffffff814140bf [ 545.682131][ C1] R10: 0000000000000003 R11: ffff888020350000 R12: ffff888020350000 [ 545.690254][ C1] R13: ffffffff817f2f30 R14: dffffc0000000000 R15: ffffc900035eed40 [ 545.698268][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 545.704485][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 545.709820][ C1] ? unwind_next_frame+0x1e75/0x2a00 [ 545.715158][ C1] ? unwind_get_return_address+0x1c/0xc0 [ 545.720834][ C1] ? __dentry_kill+0x20d/0x630 [ 545.725638][ C1] arch_stack_walk+0x125/0x1b0 [ 545.730440][ C1] ? dput+0x19f/0x2b0 [ 545.734466][ C1] stack_trace_save+0x118/0x1d0 [ 545.739389][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 545.744840][ C1] save_stack+0xfb/0x1f0 [ 545.749124][ C1] ? __pfx_save_stack+0x10/0x10 [ 545.754012][ C1] ? free_unref_folios+0x100f/0x1ac0 [ 545.759332][ C1] ? folios_put_refs+0x76e/0x860 [ 545.764317][ C1] ? shmem_undo_range+0x6de/0x1df0 [ 545.769476][ C1] ? shmem_evict_inode+0x29b/0xa80 [ 545.774623][ C1] ? evict+0x532/0x950 [ 545.778754][ C1] ? __dentry_kill+0x20d/0x630 [ 545.783588][ C1] ? page_ext_get+0x20/0x2a0 [ 545.788225][ C1] __reset_page_owner+0x76/0x430 [ 545.793200][ C1] ? page_ext_get+0x1d6/0x2a0 [ 545.797926][ C1] free_unref_folios+0x100f/0x1ac0 [ 545.803094][ C1] folios_put_refs+0x76e/0x860 [ 545.807914][ C1] ? __pfx_folios_put_refs+0x10/0x10 [ 545.813247][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.818500][ C1] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 545.824870][ C1] shmem_undo_range+0x6de/0x1df0 [ 545.829872][ C1] ? __pfx_shmem_undo_range+0x10/0x10 [ 545.835360][ C1] ? inode_wait_for_writeback+0x224/0x290 [ 545.841119][ C1] ? __pfx_lock_release+0x10/0x10 [ 545.846187][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 545.851252][ C1] ? percpu_counter_add_batch+0xff/0x1f0 [ 545.856945][ C1] shmem_evict_inode+0x29b/0xa80 [ 545.861940][ C1] ? inode_wait_for_writeback+0x224/0x290 [ 545.867707][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 545.873200][ C1] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 545.879308][ C1] ? __pfx_wake_bit_function+0x10/0x10 [ 545.884810][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 545.890064][ C1] ? __pfx_shmem_evict_inode+0x10/0x10 [ 545.895557][ C1] evict+0x532/0x950 [ 545.899504][ C1] ? __pfx_evict+0x10/0x10 [ 545.903966][ C1] ? _raw_spin_unlock+0x28/0x50 [ 545.908860][ C1] ? iput+0x6ed/0x930 [ 545.912889][ C1] __dentry_kill+0x20d/0x630 [ 545.917604][ C1] ? dput+0x37/0x2b0 [ 545.921716][ C1] dput+0x19f/0x2b0 [ 545.925567][ C1] __fput+0x5f8/0x8a0 [ 545.929603][ C1] task_work_run+0x24f/0x310 [ 545.934325][ C1] ? __pfx_task_work_run+0x10/0x10 [ 545.939482][ C1] ? switch_task_namespaces+0xe4/0x110 [ 545.945079][ C1] do_exit+0xa2f/0x27f0 [ 545.949310][ C1] ? __pfx_do_exit+0x10/0x10 [ 545.953945][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 545.959364][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 545.965395][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.971771][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 545.976952][ C1] do_group_exit+0x207/0x2c0 [ 545.981572][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 545.986814][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 545.992051][ C1] get_signal+0x16a1/0x1740 [ 545.996612][ C1] ? __pfx_get_signal+0x10/0x10 [ 546.001511][ C1] arch_do_signal_or_restart+0x96/0x860 [ 546.007101][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 546.013293][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 546.019342][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 546.025101][ C1] syscall_exit_to_user_mode+0xc9/0x370 [ 546.030686][ C1] do_syscall_64+0x100/0x230 [ 546.035311][ C1] ? clear_bhb_loop+0x35/0x90 [ 546.040034][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.045969][ C1] RIP: 0033:0x7fede4f7cef9 [ 546.050412][ C1] RSP: 002b:00007fede5c8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 546.058877][ C1] RAX: 0000000000010106 RBX: 00007fede5136058 RCX: 00007fede4f7cef9 [ 546.066887][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000007 [ 546.074887][ C1] RBP: 00007fede4fef01e R08: 0000000000000000 R09: 0000000000000000 [ 546.082887][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 546.090896][ C1] R13: 0000000000000000 R14: 00007fede5136058 R15: 00007fffb6f7e218 [ 546.098920][ C1] [ 546.101964][ C1] rcu: rcu_preempt kthread starved for 10556 jiffies! g41557 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 546.113278][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 546.123278][ C1] rcu: RCU grace-period kthread stack dump: [ 546.129185][ C1] task:rcu_preempt state:R running task stack:25328 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 546.141055][ C1] Call Trace: [ 546.144365][ C1] [ 546.147331][ C1] __schedule+0x17ae/0x4a10 [ 546.151993][ C1] ? __pfx___schedule+0x10/0x10 [ 546.156892][ C1] ? __pfx_lock_release+0x10/0x10 [ 546.161960][ C1] ? __asan_memset+0x23/0x50 [ 546.166589][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 546.172448][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 546.178831][ C1] ? schedule+0x90/0x320 [ 546.183114][ C1] schedule+0x14b/0x320 [ 546.187320][ C1] schedule_timeout+0x1be/0x310 [ 546.192227][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 546.197639][ C1] ? __pfx_process_timeout+0x10/0x10 [ 546.202979][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 546.208575][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 546.213554][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 546.218795][ C1] ? rcu_gp_init+0x1256/0x1630 [ 546.223604][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 546.228584][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 546.235145][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 546.240475][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 546.246421][ C1] ? finish_swait+0xd4/0x1e0 [ 546.251105][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 546.255746][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.260985][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 546.266927][ C1] ? __kthread_parkme+0x169/0x1d0 [ 546.272001][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.277241][ C1] kthread+0x2f0/0x390 [ 546.281355][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 546.286600][ C1] ? __pfx_kthread+0x10/0x10 [ 546.291234][ C1] ret_from_fork+0x4b/0x80 [ 546.295696][ C1] ? __pfx_kthread+0x10/0x10 [ 546.300342][ C1] ret_from_fork_asm+0x1a/0x30 [ 546.305168][ C1] [ 546.308209][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 546.314554][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 546.324911][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 546.334994][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 546.340322][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 c0 d6 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 85 2d 98 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 546.359966][ C1] RSP: 0000:ffffc900001a7d08 EFLAGS: 00000246 [ 546.366085][ C1] RAX: ffff88801cef0000 RBX: ffff888022698864 RCX: 0000000001419be9 [ 546.374088][ C1] RDX: 0000000000000001 RSI: ffff888022698800 RDI: ffff888022698864 [ 546.382134][ C1] RBP: 000000000003a638 R08: ffff8880b8937c7b R09: 1ffff11017126f8f [ 546.390140][ C1] R10: dffffc0000000000 R11: ffffffff8bb13cf0 R12: ffff8880213aa000 [ 546.398151][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eed1c40 [ 546.406155][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 546.415120][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 546.421732][ C1] CR2: 00007fff2352ff40 CR3: 0000000061b3c000 CR4: 00000000003506f0 [ 546.429744][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 546.437741][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 546.445829][ C1] Call Trace: [ 546.449134][ C1] [ 546.452002][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 546.458392][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 546.464088][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 546.469937][ C1] ? __pfx_lock_release+0x10/0x10 [ 546.475022][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 546.481306][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 546.486745][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 546.492434][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 546.497687][ C1] ? update_process_times+0x1ce/0x230 [ 546.503116][ C1] ? tick_nohz_handler+0x37c/0x500 [ 546.508269][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 546.513769][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 546.519204][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 546.525249][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 546.531023][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 546.537144][ C1] ? hrtimer_interrupt+0x396/0x990 [ 546.542319][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 546.548528][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 546.554380][ C1] [ 546.557356][ C1] [ 546.560317][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 546.566519][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 546.571853][ C1] ? acpi_safe_halt+0x21/0x30 [ 546.576574][ C1] acpi_idle_enter+0xe4/0x140 [ 546.581289][ C1] cpuidle_enter_state+0x112/0x480 [ 546.586436][ C1] ? __pfx_menu_select+0x10/0x10 [ 546.591418][ C1] cpuidle_enter+0x5d/0xa0 [ 546.595876][ C1] do_idle+0x375/0x5d0 [ 546.599991][ C1] ? __pfx_do_idle+0x10/0x10 [ 546.604642][ C1] cpu_startup_entry+0x42/0x60 [ 546.609443][ C1] start_secondary+0x100/0x100 [ 546.614265][ C1] common_startup_64+0x13e/0x147 [ 546.619279][ C1]