last executing test programs: 3m18.646596643s ago: executing program 3 (id=4): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023892) 3m12.794918493s ago: executing program 3 (id=10): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000080)={0x84, @private=0xa010101, 0x15, 0x3, 'nq\x00', 0x1, 0x4, 0x8}, 0x2c) socket$kcm(0xa, 0x2, 0x0) socket(0x200000000000011, 0x3, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x1, 0x100, 0x5, 0x130, 0x6}, &(0x7f0000000100)=0x14) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={r1, 0x3}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001300)='memory.events.local\x00', 0x275a, 0x0) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) accept$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000001340)) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) read$dsp(r4, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r3, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0) 3m12.567856907s ago: executing program 0 (id=1): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f000001b040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[], 0x2c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/vlan/config\x00') preadv(r2, &(0x7f00000001c0)=[{&(0x7f0000000000)=""/186, 0xba}], 0x1, 0x5, 0x0) 3m11.379425731s ago: executing program 4 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT]) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000040)="3b000000010006", 0x7) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000dc00000000000000000000000000009c3c5b554082671e14dab35cc9c4413bfce5380bb794ec100e8701662649a9ba885a32fe52b5fe71070ac88111010b347864c2fe99eec11c14ed5e9bcbea4abcf579e441172251ca6e85cd44a5aab72adbb4001e4202f1b454"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r1 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x560c, {0x803, 0x9}, {0x806, 0x2}, @period={0x7, 0x2, 0x4, 0x6d, 0x9ee, {0x2, 0x7, 0xfffb, 0x6}, 0x0, 0x0}}) 3m11.180655782s ago: executing program 0 (id=11): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f00000000c0)) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ptrace$setopts(0x4206, r1, 0x3fd, 0x100042) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|B\xe2ar\x04R%[k\x0f\xfdV\xacL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dI\xbd\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x86P\x8d\x12\\\xf9\x00T\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93vw\x85\r|\xf0\xa6\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b\"\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}9q\x92~}M\xceA\xe1)\a\xf0p\xa3\x8dkCvo\x85N(\xdd%DP\x88FW\xb5\x97\xe7\xb8}\xb6/\x95\xb0\xb9\xc9\xb1=\ac\x91\x1d,\xd2\xf5g\xfd\x97X\x1e[\x84\x7f\bO\x16\x84\xefa\xd1\xb3\xf7\\g`\x026\x1f\x89/\x01l\xc1%\xda\xa1:\x99\xf1,\x86f\xe1\xb6\x83\x06\xdd\x91{x\xa1P\xd7\x1d\xa9c\xde\x7f\x8fJ\xae\xf1\xc3\x81@\x1e\x93\xaed-X\xd2\xa7e\xa0\xb3\x16*\xa5\xb1\xd3\x8d\xa4\xf2\xe5\xa2\xe7A\x19\xf4\xa92ok\xf2\xd2\xc74\t*\xb67{#J\x1b\'\xbb\x9b\x99\xda^\x1e\xf6\x03\x9316\xb5T\xbb\xb2\x93\x1b\xfaj\x00\xe8i\x85\xd2\x05!\x87Q\xe5\xbdZ\xcc\x98\xcbY]0\xf7\fl!\x00<', 0x0) r4 = memfd_create(&(0x7f0000000080)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r6, &(0x7f0000000480)="dc", 0x1) splice(r5, 0x0, r4, &(0x7f0000000140)=0x8008, 0x4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730112000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14}, 0x94) 3m9.613415826s ago: executing program 0 (id=13): r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000300)=0x0) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0x48) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) r7 = accept4(r0, 0x0, 0x0, 0x0) write(r7, &(0x7f0000000000)="ea", 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) close(r7) 3m7.274296022s ago: executing program 0 (id=16): socket$inet(0x2, 0x3, 0x4) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x3, 0x3, 0x3, 0x1c10a1, 0x0, 0x98}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x139, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x48) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x31, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x10, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xe8e, 0xff, 0xffffff48, 0x8000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xf]}, 0x45c) write$uinput_user_dev(r0, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r4, 0x0) modify_ldt$read(0x0, 0x0, 0x0) 3m6.877688423s ago: executing program 3 (id=18): socket$nl_route(0x10, 0x3, 0x0) close(0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 3m4.388467201s ago: executing program 4 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000080)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x26) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 3m2.799516197s ago: executing program 0 (id=20): syz_init_net_socket$ax25(0x3, 0x3, 0xcd) socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000200000400000000000000000200000000000000000000000200000000000000"], 0x0, 0x4e}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r6, 0x1, 0x1}, 0x48) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x803, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0) write$tcp_mem(r7, &(0x7f0000000280)={0x7, 0x2d, 0xffffffffffffffff, 0x3a, 0x0, 0x2c}, 0x48) 3m2.731164465s ago: executing program 3 (id=22): socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x8e82, 0x100, 0x14, 0x2ac}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x2, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffd) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x8}, {}, {}, {}, {0x7, 0x0, 0x5, 0x4}, {0x85, 0x0, 0x0, 0x1c}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r6, r7, 0x0, 0x20000023892) 2m57.760019766s ago: executing program 0 (id=25): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x30000000) 2m57.629572846s ago: executing program 3 (id=27): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 2m47.50945609s ago: executing program 32 (id=19): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000440)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x98, 0x0, 0x0, 0x260, 0x260, 0x330, 0x330, 0x330, 0x330, 0x330, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@ip={@private=0xa010100, @local, 0x7fffff80, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x6, 0x0, 0x5a}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0x0, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 0xff, 0x2, [0x1a, 0x36, 0x1d, 0x1c, 0x23, 0x1e, 0x2c, 0x7, 0x1e, 0x7, 0x2d, 0x37, 0x30, 0x9, 0x3b, 0x16], 0x0, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r4 = socket$inet6(0xa, 0x3, 0x3c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) connect$inet6(r4, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ff07000000ffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r7, &(0x7f0000000080)={@void, @void, @eth={@multicast, @empty, @val={@void, {0x8100, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x9, 0x14, 0x67, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x26) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r10, 0x0, 0x0) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x80, 0x3502, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffeff}]}, 0x140}}, 0x844) 2m39.798257019s ago: executing program 33 (id=25): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r5, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r5, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) sendmmsg$inet6(r3, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x7ffff000}], 0x11}}], 0x2, 0x30000000) 2m39.519928832s ago: executing program 34 (id=27): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) 6.411351517s ago: executing program 1 (id=205): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r0) syz_genetlink_get_family_id$ieee802154(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{}, &(0x7f0000000400), &(0x7f0000000440)}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2a, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="189eca7b4320cc0c07834e0e6d7c7a54b0ce2afe3a7c44e4c8808ef3667b5e0ab9711dfcbced0608b80cf9856105df027f84f720df1031ef", @ANYBLOB, @ANYRES32=r4, @ANYBLOB, @ANYRES32=r5, @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) acct(&(0x7f00000001c0)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 6.409316067s ago: executing program 2 (id=206): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) getpid() write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000440), 0x12) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000040)='lp', 0x2) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r5, &(0x7f0000000700)=[{0x0}], 0x1, 0x4782, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) 5.053721847s ago: executing program 2 (id=207): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x40000) 4.971232006s ago: executing program 2 (id=208): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x1, 0x0, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x2) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) 4.852547731s ago: executing program 1 (id=209): openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0xdddd1000, 0xeeee0000, 0xc, 0x1, 0x81, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0xdddd1000, 0xa, 0xfc, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x4, 0xfc}, {0x3000, 0x8080000, 0x0, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, 0x4}, {0x80a0000, 0xffff1000, 0xf, 0x0, 0x0, 0x8, 0x0, 0x7, 0x0, 0x8}, {0x5000, 0xffff1000, 0xb, 0x2, 0xfe, 0x10, 0x3, 0xc, 0x58, 0x8, 0x4}, {0x6000, 0x5000, 0xb, 0x0, 0x0, 0xfd, 0xfc, 0x0, 0x0, 0xbc, 0xc0}, {0x2, 0x4, 0x10, 0x8, 0x7, 0xfb, 0x0, 0x7, 0x1a, 0x2, 0x0, 0x2}, {0x0, 0x3000, 0x10, 0x2, 0x2, 0x54, 0x7, 0xfd, 0x0, 0x9, 0x7, 0x5}, {0x2000, 0x1}, {}, 0x9df9ffdf, 0x0, 0x0, 0x0, 0x8, 0x8000, 0x2000, [0xdd41, 0x0, 0x800000000000003]}) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x1c, 0x50}) 4.715225667s ago: executing program 1 (id=210): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, 0x2}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) syz_open_procfs(0x0, 0x0) 3.357551888s ago: executing program 1 (id=211): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000240)="ed9815e1dcada78176de151105d9589fc2cee8986306ff4dd0664ae2a844400f2c7ebdb83725525567bb874088a8decb9e38e72c13bf5750aacb2ec8e645ee81b759722aaa451b54a6b87cf26dd5ffb1"}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) 2.417265151s ago: executing program 2 (id=212): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000340)='./file1\x00', 0x8) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x4000054) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000000), 0x4) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) 2.398182226s ago: executing program 1 (id=213): r0 = socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) pivot_root(&(0x7f00000001c0)='.\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r5 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x0, 0x44a}) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) 915.47778ms ago: executing program 1 (id=214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f00000000c0)=0x1) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x6, @pix={0x0, 0x20000, 0x9de86b73b1dd5744, 0x3, 0x4, 0x0, 0x5, 0x3, 0x1, 0x3, 0x0, 0x6}}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x1000000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000001c0)="0094", 0x2) sendto$unix(r4, 0x0, 0x0, 0x800, 0x0, 0x0) recvfrom(r4, 0x0, 0x0, 0x1, 0x0, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001440)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x15}, 0x4000) r5 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$setperm(0x5, r5, 0x52b242d) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xd, 0x200cc, 0x6, 0x5}, 0x48) fcntl$lock(r6, 0x25, 0x0) ioctl$RTC_VL_CLR(0xffffffffffffffff, 0x7014) 717.429502ms ago: executing program 2 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x44, 0x0, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x5}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x15}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}]}, 0x44}}, 0x40000) 0s ago: executing program 2 (id=216): r0 = openat$smackfs_netlabel(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$smackfs_netlabel(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='-0000000000000062410.00000000000000000003.00000000000800028916.000/0)'], 0x6f) write$smackfs_netlabel(r0, 0x0, 0x0) write$smackfs_netlabel(r0, &(0x7f00000005c0)=@l2={{0x5, 0x2e, 0x8, 0x2e, 0x1, 0x2e, 0x7}, 0x2f, 0xc, 0x20, '\xa7'}, 0x6c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.209' (ED25519) to the list of known hosts. [ 86.715776][ T5788] cgroup: Unknown subsys name 'net' [ 86.957055][ T5788] cgroup: Unknown subsys name 'cpuset' [ 87.022610][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.084727][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.213699][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.217344][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.218226][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.220333][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.220884][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.221759][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.223675][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.224473][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.225133][ T1247] cfg80211: failed to load regulatory.db [ 92.272350][ T5808] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.275774][ T5808] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.276736][ T5808] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.278146][ T5808] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.279005][ T5808] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.369758][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.378337][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.438704][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.454378][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.455180][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.456646][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.457484][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.499288][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 92.509841][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 92.519552][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 92.530759][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 92.539653][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.436829][ T5800] chnl_net:caif_netlink_parms(): no params data found [ 93.515873][ T5809] chnl_net:caif_netlink_parms(): no params data found [ 93.673944][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 93.680182][ T5811] chnl_net:caif_netlink_parms(): no params data found [ 93.894464][ T5813] chnl_net:caif_netlink_parms(): no params data found [ 94.332853][ T5119] Bluetooth: hci2: command tx timeout [ 94.411279][ T5808] Bluetooth: hci0: command tx timeout [ 94.411541][ T5119] Bluetooth: hci1: command tx timeout [ 94.491303][ T5119] Bluetooth: hci3: command tx timeout [ 94.512551][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.513999][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.514442][ T5800] bridge_slave_0: entered allmulticast mode [ 94.516572][ T5800] bridge_slave_0: entered promiscuous mode [ 94.571390][ T5119] Bluetooth: hci4: command tx timeout [ 94.635358][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.635451][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.635587][ T5800] bridge_slave_1: entered allmulticast mode [ 94.637507][ T5800] bridge_slave_1: entered promiscuous mode [ 94.638731][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.638869][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.638993][ T5809] bridge_slave_0: entered allmulticast mode [ 94.640907][ T5809] bridge_slave_0: entered promiscuous mode [ 94.952248][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.952353][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.952489][ T5809] bridge_slave_1: entered allmulticast mode [ 94.954444][ T5809] bridge_slave_1: entered promiscuous mode [ 95.292319][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.292483][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.292624][ T5803] bridge_slave_0: entered allmulticast mode [ 95.294511][ T5803] bridge_slave_0: entered promiscuous mode [ 95.298105][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.298242][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.298419][ T5811] bridge_slave_0: entered allmulticast mode [ 95.300583][ T5811] bridge_slave_0: entered promiscuous mode [ 95.386078][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.502276][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.502409][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.502681][ T5803] bridge_slave_1: entered allmulticast mode [ 95.504852][ T5803] bridge_slave_1: entered promiscuous mode [ 95.507943][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.508049][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.508184][ T5811] bridge_slave_1: entered allmulticast mode [ 95.510137][ T5811] bridge_slave_1: entered promiscuous mode [ 95.586437][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.592753][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.752539][ T5813] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.752682][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.752817][ T5813] bridge_slave_0: entered allmulticast mode [ 95.754730][ T5813] bridge_slave_0: entered promiscuous mode [ 95.847731][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.022535][ T5813] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.022667][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.022900][ T5813] bridge_slave_1: entered allmulticast mode [ 96.025027][ T5813] bridge_slave_1: entered promiscuous mode [ 96.236642][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.240186][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.335815][ T5800] team0: Port device team_slave_0 added [ 96.404973][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.407594][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.411454][ T5119] Bluetooth: hci2: command tx timeout [ 96.491548][ T5119] Bluetooth: hci1: command tx timeout [ 96.491562][ T5808] Bluetooth: hci0: command tx timeout [ 96.515149][ T5800] team0: Port device team_slave_1 added [ 96.517332][ T5809] team0: Port device team_slave_0 added [ 96.571546][ T5808] Bluetooth: hci3: command tx timeout [ 96.662534][ T5808] Bluetooth: hci4: command tx timeout [ 96.937210][ T5813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.014017][ T5809] team0: Port device team_slave_1 added [ 97.165203][ T5813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.313842][ T5803] team0: Port device team_slave_0 added [ 97.316199][ T5811] team0: Port device team_slave_0 added [ 97.393714][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.393727][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.393746][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.494442][ T5803] team0: Port device team_slave_1 added [ 97.496574][ T5811] team0: Port device team_slave_1 added [ 97.593067][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.593085][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.593112][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.594285][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.594296][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.594315][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.784074][ T5813] team0: Port device team_slave_0 added [ 97.797809][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.797825][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.797847][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.053984][ T5813] team0: Port device team_slave_1 added [ 98.068230][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.068243][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.068262][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.069502][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.069517][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.069544][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.195784][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.195798][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.195817][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.196909][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.196920][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.196939][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.358209][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.358226][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.358255][ T5813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.491679][ T5808] Bluetooth: hci2: command tx timeout [ 98.515498][ T5813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.515513][ T5813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.515531][ T5813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.524422][ T5800] hsr_slave_0: entered promiscuous mode [ 98.526179][ T5800] hsr_slave_1: entered promiscuous mode [ 98.571300][ T5808] Bluetooth: hci1: command tx timeout [ 98.581593][ T5808] Bluetooth: hci0: command tx timeout [ 98.639993][ T5809] hsr_slave_0: entered promiscuous mode [ 98.641028][ T5809] hsr_slave_1: entered promiscuous mode [ 98.642475][ T5809] debugfs: 'hsr0' already exists in 'hsr' [ 98.642568][ T5809] Cannot create hsr debugfs directory [ 98.652539][ T5808] Bluetooth: hci3: command tx timeout [ 98.731439][ T5808] Bluetooth: hci4: command tx timeout [ 99.130661][ T5803] hsr_slave_0: entered promiscuous mode [ 99.134997][ T5803] hsr_slave_1: entered promiscuous mode [ 99.136166][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 99.136194][ T5803] Cannot create hsr debugfs directory [ 99.148718][ T5811] hsr_slave_0: entered promiscuous mode [ 99.150491][ T5811] hsr_slave_1: entered promiscuous mode [ 99.152483][ T5811] debugfs: 'hsr0' already exists in 'hsr' [ 99.152513][ T5811] Cannot create hsr debugfs directory [ 99.468355][ T5813] hsr_slave_0: entered promiscuous mode [ 99.469307][ T5813] hsr_slave_1: entered promiscuous mode [ 99.470304][ T5813] debugfs: 'hsr0' already exists in 'hsr' [ 99.470322][ T5813] Cannot create hsr debugfs directory [ 100.571377][ T5808] Bluetooth: hci2: command tx timeout [ 100.661255][ T5808] Bluetooth: hci0: command tx timeout [ 100.661297][ T5808] Bluetooth: hci1: command tx timeout [ 100.731398][ T5119] Bluetooth: hci3: command tx timeout [ 100.811509][ T5119] Bluetooth: hci4: command tx timeout [ 100.863522][ T5800] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.899915][ T5800] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.935494][ T5800] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.002116][ T5800] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.112810][ T5809] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.137949][ T5809] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.179805][ T5809] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.233003][ T5809] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.352939][ T5803] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 101.407523][ T5803] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 101.440232][ T5803] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 101.494802][ T5803] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.642246][ T5811] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.681313][ T5811] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.713308][ T5811] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.760950][ T5811] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 101.897824][ T5813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.936944][ T5813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.971787][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.974141][ T5813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.037216][ T5813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.141301][ T5800] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.145355][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.189578][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.190940][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.239311][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.239461][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.272490][ T5809] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.309717][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.309912][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.329451][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.357763][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.357880][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.431857][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.440097][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.477937][ T3575] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.478117][ T3575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.518360][ T3575] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.518477][ T3575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.578090][ T5811] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.631790][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.631938][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.655891][ T5813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.685455][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.685582][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.806594][ T5813] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.875362][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.875542][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.914441][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.914557][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.095990][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.284622][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.406244][ T5800] veth0_vlan: entered promiscuous mode [ 103.430624][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.479582][ T5800] veth1_vlan: entered promiscuous mode [ 103.601397][ T5809] veth0_vlan: entered promiscuous mode [ 103.626801][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.683785][ T5809] veth1_vlan: entered promiscuous mode [ 103.745474][ T5800] veth0_macvtap: entered promiscuous mode [ 103.750838][ T5803] veth0_vlan: entered promiscuous mode [ 103.773657][ T5800] veth1_macvtap: entered promiscuous mode [ 103.793176][ T5813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.818407][ T5803] veth1_vlan: entered promiscuous mode [ 103.897519][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.955123][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.956359][ T5809] veth0_macvtap: entered promiscuous mode [ 104.014749][ T5809] veth1_macvtap: entered promiscuous mode [ 104.019545][ T3547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.040802][ T3547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.054149][ T3547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.065089][ T3547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.094253][ T5803] veth0_macvtap: entered promiscuous mode [ 104.152862][ T5813] veth0_vlan: entered promiscuous mode [ 104.153945][ T5803] veth1_macvtap: entered promiscuous mode [ 104.218101][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.300603][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.320194][ T5813] veth1_vlan: entered promiscuous mode [ 104.379934][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.386980][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.408475][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.419801][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.444700][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.448140][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.469173][ T3547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.469199][ T3547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.528841][ T5811] veth0_vlan: entered promiscuous mode [ 104.550339][ T3575] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.572054][ T3575] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.606047][ T3575] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.630169][ T3575] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.647107][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.647130][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.685286][ T5811] veth1_vlan: entered promiscuous mode [ 104.758949][ T5813] veth0_macvtap: entered promiscuous mode [ 104.835659][ T5813] veth1_macvtap: entered promiscuous mode [ 104.942055][ T3575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.942076][ T3575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.072716][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.072739][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.078021][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.125215][ T5811] veth0_macvtap: entered promiscuous mode [ 105.149303][ T5813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.251474][ T3614] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.251496][ T3614] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.253759][ T5811] veth1_macvtap: entered promiscuous mode [ 105.344810][ T3614] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.367274][ T3614] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.369471][ T3614] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.370171][ T3614] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.417150][ T3547] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.417172][ T3547] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.523132][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.597147][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.720419][ T3614] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.737282][ T3614] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.755350][ T3614] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.803102][ T3614] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.071767][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.071791][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.171237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.171516][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.171578][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.261684][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.610432][ T5940] syzkaller1: entered promiscuous mode [ 109.610460][ T5940] syzkaller1: entered allmulticast mode [ 110.936032][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.936056][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.074053][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.074077][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.703967][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.703990][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.016501][ T1247] IPVS: starting estimator thread 0... [ 112.131725][ T5949] IPVS: using max 8 ests per chain, 19200 per kthread [ 112.921665][ T5867] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 113.154141][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.154170][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.157274][ T5867] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 113.157314][ T5867] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 113.157330][ T5867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.430189][ T5948] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 113.486428][ T5867] hub 4-1:1.0: bad descriptor, ignoring hub [ 113.486472][ T5867] hub 4-1:1.0: probe with driver hub failed with error -5 [ 113.487669][ T5867] cdc_wdm 4-1:1.0: skipping garbage [ 113.487684][ T5867] cdc_wdm 4-1:1.0: skipping garbage [ 113.597687][ T5867] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 113.597726][ T5867] cdc_wdm 4-1:1.0: Unknown control protocol [ 113.701749][ T5956] tmpfs: Unknown parameter '01777777777777777777777' [ 114.199076][ C0] vkms_vblank_simulate: vblank timer overrun [ 114.851282][ T1247] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.041708][ T1247] usb 5-1: Using ep0 maxpacket: 8 [ 115.046724][ T1247] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 115.046753][ T1247] usb 5-1: config 179 has no interface number 0 [ 115.046807][ T1247] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 115.046843][ T1247] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 115.046873][ T1247] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 115.046900][ T1247] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 115.046926][ T1247] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 115.046969][ T1247] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 115.046991][ T1247] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.164414][ T5956] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 115.642350][ T1247] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input6 [ 115.788718][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.975933][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.020186][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.161957][ T5791] usb 4-1: USB disconnect, device number 2 [ 117.271514][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.647817][ T5791] usb 5-1: USB disconnect, device number 2 [ 117.647904][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 117.648353][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 117.756658][ C0] vkms_vblank_simulate: vblank timer overrun [ 117.811598][ T5955] IPVS: starting estimator thread 0... [ 117.901293][ T5988] IPVS: using max 7 ests per chain, 16800 per kthread [ 121.255929][ T5996] netlink: 'syz.3.18': attribute type 10 has an invalid length. [ 121.264976][ T5996] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.277587][ T5996] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.301723][ T5996] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.301840][ T5996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.303972][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.304093][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.308566][ T5996] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 125.464239][ T6016] kernel profiling enabled (shift: 7) [ 126.752954][ T6013] syzkaller1: entered promiscuous mode [ 126.752982][ T6013] syzkaller1: entered allmulticast mode [ 138.258453][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.258519][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 148.191321][ T6072] binder: 6071:6072 unknown command 0 [ 148.191343][ T6072] binder: 6071:6072 ioctl c0306201 200000000080 returned -22 [ 150.252823][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 150.271444][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 150.273341][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 150.301828][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 150.302570][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.586575][ T6081] Bluetooth: MGMT ver 1.23 [ 150.741714][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 150.799132][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 150.800257][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 150.818147][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 150.853013][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.001304][ T978] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 151.037019][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 151.041810][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 151.046267][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 151.049861][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 151.050811][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 151.173846][ T978] usb 2-1: Using ep0 maxpacket: 8 [ 151.175742][ T978] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 151.175763][ T978] usb 2-1: config 179 has no interface number 0 [ 151.175796][ T978] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 151.175816][ T978] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 151.175835][ T978] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 151.175853][ T978] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 151.175872][ T978] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 151.175902][ T978] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 151.175918][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.306462][ T6081] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 151.768840][ T978] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 152.028023][ T5887] usb 2-1: USB disconnect, device number 2 [ 152.028091][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 152.028232][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 152.411382][ T5119] Bluetooth: hci5: command tx timeout [ 152.791284][ T978] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 152.891320][ T5119] Bluetooth: hci1: command tx timeout [ 152.928210][ T75] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.946855][ T978] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 152.946891][ T978] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 152.946920][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 152.949526][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.949554][ T978] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.949574][ T978] usb 3-1: Product: syz [ 152.949586][ T978] usb 3-1: Manufacturer: syz [ 152.949596][ T978] usb 3-1: SerialNumber: syz [ 152.974761][ T978] usb 3-1: config 0 descriptor?? [ 153.059485][ T978] usb 3-1: selecting invalid altsetting 0 [ 153.218136][ T5119] Bluetooth: hci4: command tx timeout [ 153.248575][ T978] usb 3-1: USB disconnect, device number 2 [ 153.267286][ T75] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.265582][ T75] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.648707][ T5119] Bluetooth: hci5: command tx timeout [ 155.081497][ T5119] Bluetooth: hci1: command tx timeout [ 155.291258][ T5119] Bluetooth: hci4: command tx timeout [ 156.782561][ T5119] Bluetooth: hci5: command tx timeout [ 157.121903][ T5888] IPVS: starting estimator thread 0... [ 157.211565][ T5119] Bluetooth: hci1: command tx timeout [ 157.245610][ T6111] IPVS: using max 1 ests per chain, 2400 per kthread [ 157.279962][ T75] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.373890][ T5119] Bluetooth: hci4: command tx timeout [ 158.812211][ T5119] Bluetooth: hci5: command tx timeout [ 159.291734][ T5119] Bluetooth: hci1: command tx timeout [ 159.484975][ T5119] Bluetooth: hci4: command tx timeout [ 160.747827][ T75] bridge_slave_1: left allmulticast mode [ 160.748026][ T75] bridge_slave_1: left promiscuous mode [ 160.750474][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.723344][ T75] bridge_slave_0: left allmulticast mode [ 161.723376][ T75] bridge_slave_0: left promiscuous mode [ 161.724044][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.791558][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 162.963437][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.963465][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 162.963519][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 162.963551][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 162.963567][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.002748][ T6151] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.036198][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 163.036233][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 163.065548][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 163.065574][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 163.074325][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 163.074351][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 163.343731][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.344409][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.346323][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.346346][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.346596][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.346616][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.349196][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 163.509649][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.509679][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.509950][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 163.509973][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 163.696002][ T5887] usb 3-1: USB disconnect, device number 3 [ 163.761790][ T75] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 164.562402][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.622310][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.645676][ T75] bond0 (unregistering): Released all slaves [ 165.167774][ T6082] chnl_net:caif_netlink_parms(): no params data found [ 166.062934][ T6078] chnl_net:caif_netlink_parms(): no params data found [ 168.072435][ T6084] chnl_net:caif_netlink_parms(): no params data found [ 170.664464][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.66'. [ 170.669458][ T6215] netlink: 32 bytes leftover after parsing attributes in process `syz.2.66'. [ 171.576908][ T6215] Process accounting resumed [ 172.327310][ T6223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 173.627086][ T75] hsr_slave_0: left promiscuous mode [ 173.860266][ T75] hsr_slave_1: left promiscuous mode [ 173.874930][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.875201][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.395552][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.395591][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.581919][ T75] veth1_macvtap: left promiscuous mode [ 175.582094][ T75] veth0_macvtap: left promiscuous mode [ 175.582301][ T75] veth1_vlan: left promiscuous mode [ 175.582528][ T75] veth0_vlan: left promiscuous mode [ 177.762887][ T75] team0 (unregistering): Port device team_slave_1 removed [ 177.972088][ T75] team0 (unregistering): Port device team_slave_0 removed [ 180.137680][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.149942][ T6082] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.150205][ T6082] bridge_slave_0: entered allmulticast mode [ 180.172207][ T6082] bridge_slave_0: entered promiscuous mode [ 180.386563][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.386733][ T6082] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.386979][ T6082] bridge_slave_1: entered allmulticast mode [ 180.419419][ T6082] bridge_slave_1: entered promiscuous mode [ 180.554979][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.555120][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.555338][ T6078] bridge_slave_0: entered allmulticast mode [ 180.558476][ T6078] bridge_slave_0: entered promiscuous mode [ 181.032397][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.032539][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.032788][ T6078] bridge_slave_1: entered allmulticast mode [ 181.035785][ T6078] bridge_slave_1: entered promiscuous mode [ 181.354808][ T6084] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.354971][ T6084] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.355158][ T6084] bridge_slave_0: entered allmulticast mode [ 181.377402][ T6084] bridge_slave_0: entered promiscuous mode [ 181.500236][ T6082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.501602][ T6084] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.501751][ T6084] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.501994][ T6084] bridge_slave_1: entered allmulticast mode [ 181.506210][ T6084] bridge_slave_1: entered promiscuous mode [ 181.603991][ T6259] tmpfs: Unknown parameter '01777777777777777777777' [ 181.851332][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.014329][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 182.017228][ T10] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 182.017249][ T10] usb 3-1: config 179 has no interface number 0 [ 182.017282][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 182.017301][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 182.017321][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 182.017339][ T10] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 182.017358][ T10] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 182.017388][ T10] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 182.017404][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.026817][ T6259] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.036363][ T6082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.254289][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.374939][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input13 [ 182.564256][ T5888] usb 3-1: USB disconnect, device number 4 [ 182.564369][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 182.564431][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 183.436022][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.449556][ T6084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.765757][ T6084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.769472][ T6082] team0: Port device team_slave_0 added [ 186.956670][ T6082] team0: Port device team_slave_1 added [ 186.960937][ T6078] team0: Port device team_slave_0 added [ 186.991335][ T5887] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 187.060294][ T75] IPVS: stop unused estimator thread 0... [ 187.227074][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 187.632981][ T6078] team0: Port device team_slave_1 added [ 187.795409][ T6084] team0: Port device team_slave_0 added [ 187.796272][ T5887] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 187.796300][ T5887] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 187.796320][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 187.796392][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 187.796414][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 187.796439][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 187.796482][ T5887] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 187.796505][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.814620][ T5887] usb 2-1: config 0 descriptor?? [ 188.066798][ T5887] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 188.111479][ T5887] usb 2-1: USB disconnect, device number 3 [ 188.155682][ T5887] usblp0: removed [ 188.749391][ T6084] team0: Port device team_slave_1 added [ 188.757715][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.757733][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.757763][ T6082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.981180][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 189.003259][ T6082] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.003277][ T6082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.003303][ T6082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.012473][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.012493][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.012525][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.141228][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 189.143827][ T5887] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 189.143855][ T5887] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 189.143877][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 189.143940][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 189.143962][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 189.143986][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 189.144030][ T5887] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 189.144054][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.163554][ T5887] usb 2-1: config 0 descriptor?? [ 189.406372][ T6282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.432293][ T6282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.542533][ T5887] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 189.740482][ T6300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.751726][ T6300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.943102][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.943121][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 189.943149][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.019606][ C1] usblp0: nonzero read bulk status received: -71 [ 190.038588][ T5887] usb 2-1: USB disconnect, device number 4 [ 190.098391][ T6282] usblp0: error -71 reading from printer [ 190.496100][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.496119][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.496148][ T6084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.522946][ T6084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.522967][ T6084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 190.523000][ T6084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.601259][ T5887] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 190.766229][ T5887] usb 2-1: Using ep0 maxpacket: 32 [ 190.768795][ T5887] usb 2-1: config index 0 descriptor too short (expected 29220, got 227) [ 190.768821][ T5887] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 190.768843][ T5887] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.768862][ T5887] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 190.768917][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 190.768939][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 190.768963][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 190.769022][ T5887] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 190.769044][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.783128][ T5887] usb 2-1: config 0 descriptor?? [ 190.940363][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.825021][ T5887] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 191.836037][ T6281] usblp0: removed [ 191.854267][ T5887] usb 2-1: USB disconnect, device number 5 [ 191.995088][ T5887] usblp0: removed [ 192.532691][ T5888] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 192.744087][ T5888] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.744119][ T5888] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.761669][ T5888] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.761701][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.761721][ T5888] usb 3-1: Product: syz [ 192.761736][ T5888] usb 3-1: Manufacturer: syz [ 192.761750][ T5888] usb 3-1: SerialNumber: syz [ 192.857396][ T5888] usb 3-1: config 0 descriptor?? [ 192.869463][ T5888] usb 3-1: selecting invalid altsetting 0 [ 193.110683][ T978] usb 3-1: USB disconnect, device number 5 [ 193.251705][ T6261] udevd[6261]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.326628][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.408636][ T6082] hsr_slave_0: entered promiscuous mode [ 193.409644][ T6082] hsr_slave_1: entered promiscuous mode [ 193.417405][ T6082] debugfs: 'hsr0' already exists in 'hsr' [ 193.417438][ T6082] Cannot create hsr debugfs directory [ 193.434139][ T6319] syzkaller1: entered promiscuous mode [ 193.434166][ T6319] syzkaller1: entered allmulticast mode [ 193.840996][ T6078] hsr_slave_0: entered promiscuous mode [ 193.843994][ T6078] hsr_slave_1: entered promiscuous mode [ 193.847232][ T6078] debugfs: 'hsr0' already exists in 'hsr' [ 193.847265][ T6078] Cannot create hsr debugfs directory [ 194.431727][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.617867][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'. [ 194.618550][ T6339] netlink: 32 bytes leftover after parsing attributes in process `syz.2.90'. [ 195.560228][ T6339] Process accounting resumed [ 195.678992][ T6084] hsr_slave_0: entered promiscuous mode [ 195.680660][ T6084] hsr_slave_1: entered promiscuous mode [ 195.683206][ T6084] debugfs: 'hsr0' already exists in 'hsr' [ 195.683238][ T6084] Cannot create hsr debugfs directory [ 197.747605][ T6359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.94'. [ 197.748222][ T6359] netlink: 32 bytes leftover after parsing attributes in process `syz.2.94'. [ 198.782698][ T6359] Process accounting resumed [ 198.884568][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.482202][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 199.506341][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 199.549453][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 199.560291][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 199.577429][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 199.697490][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.697563][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.903688][ T6379] netlink: 'syz.1.99': attribute type 1 has an invalid length. [ 201.300739][ T6381] bond1: (slave bridge1): making interface the new active one [ 201.303024][ T6381] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 201.611658][ T5119] Bluetooth: hci3: command tx timeout [ 201.769290][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.704874][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.558162][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.641249][ T6082] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 203.691515][ T5119] Bluetooth: hci3: command tx timeout [ 203.780538][ T6397] syzkaller1: entered promiscuous mode [ 203.780564][ T6397] syzkaller1: entered allmulticast mode [ 203.807571][ T6082] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 204.289939][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.587602][ T6082] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 205.771285][ T5119] Bluetooth: hci3: command tx timeout [ 206.922841][ T6415] syzkaller1: entered promiscuous mode [ 206.922870][ T6415] syzkaller1: entered allmulticast mode [ 207.142602][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 207.146339][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 207.166181][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.167528][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.168478][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 207.530797][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.547985][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.562989][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.576156][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.591360][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.781345][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 207.851733][ T5808] Bluetooth: hci3: command tx timeout [ 207.943804][ T44] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.943828][ T44] usb 3-1: config 0 interface 0 has no altsetting 0 [ 207.946616][ T44] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.946637][ T44] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.946652][ T44] usb 3-1: Product: syz [ 207.946662][ T44] usb 3-1: Manufacturer: syz [ 207.946672][ T44] usb 3-1: SerialNumber: syz [ 207.955132][ T44] usb 3-1: config 0 descriptor?? [ 208.095941][ T44] usb 3-1: selecting invalid altsetting 0 [ 208.221302][ T5884] usb 3-1: USB disconnect, device number 6 [ 208.280557][ T6371] chnl_net:caif_netlink_parms(): no params data found [ 209.211338][ T5808] Bluetooth: hci5: command tx timeout [ 209.535124][ T6452] tmpfs: Unknown parameter '01777777777777777777777' [ 209.691447][ T5808] Bluetooth: hci1: command tx timeout [ 209.707897][ T13] bridge_slave_1: left allmulticast mode [ 209.707927][ T13] bridge_slave_1: left promiscuous mode [ 209.708187][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.731244][ T978] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 209.778337][ T13] bridge_slave_0: left allmulticast mode [ 209.778369][ T13] bridge_slave_0: left promiscuous mode [ 209.778661][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.786644][ T5884] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 209.865716][ T13] bridge_slave_1: left allmulticast mode [ 209.865739][ T13] bridge_slave_1: left promiscuous mode [ 209.866218][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.894368][ T978] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 209.894401][ T978] usb 3-1: config 0 interface 0 has no altsetting 0 [ 209.897285][ T978] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 209.897318][ T978] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 209.897335][ T978] usb 3-1: Product: syz [ 209.897345][ T978] usb 3-1: Manufacturer: syz [ 209.897356][ T978] usb 3-1: SerialNumber: syz [ 209.912900][ T978] usb 3-1: config 0 descriptor?? [ 209.951438][ T5884] usb 2-1: Using ep0 maxpacket: 8 [ 209.963251][ T5884] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 209.963284][ T5884] usb 2-1: config 179 has no interface number 0 [ 209.963346][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 209.963379][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 209.963413][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 209.963443][ T5884] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 209.963474][ T5884] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 209.963536][ T5884] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 209.963561][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.972584][ T6452] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.090781][ T978] usb 3-1: selecting invalid altsetting 0 [ 210.170451][ T13] bridge_slave_0: left allmulticast mode [ 210.170605][ T13] bridge_slave_0: left promiscuous mode [ 210.176343][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.364776][ T978] usb 3-1: USB disconnect, device number 7 [ 210.435146][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input14 [ 210.523149][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 210.523224][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 210.523303][ T5884] usb 2-1: USB disconnect, device number 6 [ 210.637509][ T6245] udevd[6245]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 211.535484][ T5808] Bluetooth: hci5: command tx timeout [ 213.938975][ T5808] Bluetooth: hci1: command tx timeout [ 213.939009][ T5808] Bluetooth: hci5: command tx timeout [ 214.802321][ T6480] fuse: Unknown parameter 'fd00000000000000000000' [ 215.893416][ T6487] tmpfs: Unknown parameter '01777777777777777777777' [ 216.011898][ T5119] Bluetooth: hci5: command tx timeout [ 216.011931][ T5119] Bluetooth: hci1: command tx timeout [ 216.131260][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 216.281394][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 216.284703][ T9] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 216.284732][ T9] usb 2-1: config 179 has no interface number 0 [ 216.284781][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 216.284800][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 216.284819][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 216.284838][ T9] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 216.284856][ T9] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 216.284888][ T9] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 216.284904][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.318822][ T6487] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 216.355411][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.455541][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.505643][ T13] bond0 (unregistering): Released all slaves [ 216.562617][ T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input15 [ 216.874480][ T5867] usb 2-1: USB disconnect, device number 7 [ 216.874899][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 216.874971][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 217.133439][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 217.141381][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 218.092520][ T5802] Bluetooth: hci1: command tx timeout [ 218.182067][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.256359][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.274807][ T13] bond0 (unregistering): Released all slaves [ 218.551692][ T6371] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.551852][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.552078][ T6371] bridge_slave_0: entered allmulticast mode [ 218.554349][ T6371] bridge_slave_0: entered promiscuous mode [ 218.569091][ T6480] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 218.719172][ T6371] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.719376][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.719624][ T6371] bridge_slave_1: entered allmulticast mode [ 218.758150][ T6371] bridge_slave_1: entered promiscuous mode [ 219.703656][ T6502] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 220.640752][ T6506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 223.801577][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 224.652062][ T6511] syzkaller1: entered promiscuous mode [ 224.652097][ T6511] syzkaller1: entered allmulticast mode [ 224.725151][ T6526] tmpfs: Unknown parameter '01777777777777777777777' [ 224.940356][ T6371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.971619][ T5867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 225.121183][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 225.127029][ T5867] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 225.127049][ T5867] usb 2-1: config 179 has no interface number 0 [ 225.127086][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 225.127104][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 225.127124][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 225.127142][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 225.127161][ T5867] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 225.127200][ T5867] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 225.127216][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.233730][ T6526] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 225.427087][ T6371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.493400][ T5867] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input16 [ 225.801827][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 225.801899][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 225.801967][ T5867] usb 2-1: USB disconnect, device number 8 [ 227.140824][ T6371] team0: Port device team_slave_0 added [ 228.110104][ T6371] team0: Port device team_slave_1 added [ 228.522569][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.522587][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.522618][ T6371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.620583][ T6371] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.620602][ T6371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 228.620632][ T6371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.961233][ T13] hsr_slave_0: left promiscuous mode [ 229.001245][ T13] hsr_slave_1: left promiscuous mode [ 229.002324][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.002351][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.052419][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.052449][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.231776][ T13] hsr_slave_0: left promiscuous mode [ 229.273372][ T13] hsr_slave_1: left promiscuous mode [ 229.277194][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.277333][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.291234][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 229.322617][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 229.322687][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 229.323065][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 229.323099][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 229.441456][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 229.443896][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 229.443925][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 229.443950][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 229.443975][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.444018][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 229.444041][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.483282][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 229.483605][ T6550] netlink: 32 bytes leftover after parsing attributes in process `syz.2.134'. [ 229.680726][ T9] usb 2-1: GET_CAPABILITIES returned 0 [ 229.680783][ T9] usbtmc 2-1:16.0: can't read capabilities [ 229.700628][ T13] veth1_macvtap: left promiscuous mode [ 229.700769][ T13] veth0_macvtap: left promiscuous mode [ 229.711384][ T13] veth1_vlan: left promiscuous mode [ 229.711619][ T13] veth0_vlan: left promiscuous mode [ 229.871649][ T13] veth1_macvtap: left promiscuous mode [ 229.871768][ T13] veth0_macvtap: left promiscuous mode [ 229.872567][ T13] veth1_vlan: left promiscuous mode [ 229.872767][ T13] veth0_vlan: left promiscuous mode [ 229.931301][ T5867] usb 2-1: USB disconnect, device number 9 [ 230.279621][ T6549] Process accounting resumed [ 230.631968][ T6558] tmpfs: Unknown parameter '01777777777777777777777' [ 230.924882][ T6560] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.136'. [ 231.007827][ T5867] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 231.991449][ T5867] usb 2-1: Using ep0 maxpacket: 8 [ 231.998357][ T5867] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 231.998387][ T5867] usb 2-1: config 179 has no interface number 0 [ 231.998438][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 231.998467][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 231.998497][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.998523][ T5867] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 231.998564][ T5867] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 231.998610][ T5867] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 231.998634][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.204669][ T6558] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 235.248517][ T5888] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input17 [ 236.541474][ T5867] usb 2-1: USB disconnect, device number 10 [ 236.550900][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 237.203400][ T6575] binder: 6574:6575 unknown command 0 [ 237.203418][ T6575] binder: 6574:6575 ioctl c0306201 200000000080 returned -22 [ 239.062347][ T13] team0 (unregistering): Port device team_slave_1 removed [ 239.161860][ T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 239.311341][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 239.312942][ T13] team0 (unregistering): Port device team_slave_0 removed [ 239.316755][ T9] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 239.316784][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.353601][ T9] usb 3-1: config 0 descriptor?? [ 239.371682][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 239.769172][ T9] gspca_nw80x: reg_r err -71 [ 239.769285][ T9] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 239.821250][ T9] usb 3-1: USB disconnect, device number 8 [ 241.802372][ T6591] tmpfs: Unknown parameter '01777777777777777777777' [ 242.052737][ T5887] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 242.201303][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 242.204111][ T5887] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.204140][ T5887] usb 3-1: config 179 has no interface number 0 [ 242.204189][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 242.204208][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 242.204227][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 242.204245][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 242.204264][ T5887] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.204294][ T5887] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.204310][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.212121][ T6591] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 242.436711][ T5887] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input18 [ 242.694735][ T5867] usb 3-1: USB disconnect, device number 9 [ 242.694804][ C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.694870][ C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.841401][ T5867] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 244.991302][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 244.993736][ T5867] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 244.993770][ T5867] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.996220][ T5867] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 244.996247][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.996261][ T5867] usb 3-1: Product: syz [ 244.996271][ T5867] usb 3-1: Manufacturer: syz [ 244.996281][ T5867] usb 3-1: SerialNumber: syz [ 245.000229][ T5867] usb 3-1: config 0 descriptor?? [ 245.071572][ T5867] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 245.071606][ T5867] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 245.691721][ T5867] em28xx 3-1:0.0: chip ID is em2874 [ 246.162036][ T13] team0 (unregistering): Port device team_slave_1 removed [ 246.361965][ T13] team0 (unregistering): Port device team_slave_0 removed [ 250.293829][ T10] usb 3-1: USB disconnect, device number 10 [ 250.295421][ T10] em28xx 3-1:0.0: Disconnecting em28xx [ 250.347936][ T10] em28xx 3-1:0.0: Freeing device [ 250.351175][ T5867] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 250.393680][ T6425] chnl_net:caif_netlink_parms(): no params data found [ 250.422467][ T6371] hsr_slave_0: entered promiscuous mode [ 250.423520][ T6371] hsr_slave_1: entered promiscuous mode [ 250.424371][ T6371] debugfs: 'hsr0' already exists in 'hsr' [ 250.424389][ T6371] Cannot create hsr debugfs directory [ 250.424984][ T6423] chnl_net:caif_netlink_parms(): no params data found [ 250.523587][ T5867] usb 2-1: config 0 interface 0 altsetting 251 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.523622][ T5867] usb 2-1: config 0 interface 0 has no altsetting 0 [ 250.527720][ T5867] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.527752][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.527773][ T5867] usb 2-1: Product: syz [ 250.527788][ T5867] usb 2-1: Manufacturer: syz [ 250.527802][ T5867] usb 2-1: SerialNumber: syz [ 250.558425][ T5867] usb 2-1: config 0 descriptor?? [ 250.966779][ T5867] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 251.005454][ T5867] usb 2-1: USB disconnect, device number 11 [ 251.113407][ T6260] udevd[6260]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.302771][ T6617] syzkaller1: entered promiscuous mode [ 252.302802][ T6617] syzkaller1: entered allmulticast mode [ 252.801381][ T5867] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 252.968735][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.968763][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 252.968818][ T5867] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 252.968864][ T5867] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 252.968887][ T5867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.979807][ T6638] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 252.984010][ T5867] hub 2-1:1.0: bad descriptor, ignoring hub [ 252.984056][ T5867] hub 2-1:1.0: probe with driver hub failed with error -5 [ 252.985128][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 252.985146][ T5867] cdc_wdm 2-1:1.0: skipping garbage [ 253.070107][ T5867] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 253.070129][ T5867] cdc_wdm 2-1:1.0: Unknown control protocol [ 253.269481][ T6649] netlink: 256 bytes leftover after parsing attributes in process `syz.2.155'. [ 253.302167][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 253.302197][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 253.302438][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 253.302459][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 253.302702][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 253.302723][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 253.302961][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 253.302982][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 253.303217][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 253.303239][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 253.979790][ T6655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.902229][ T5888] usb 2-1: USB disconnect, device number 12 [ 255.057565][ T5867] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 255.073618][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.073810][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.074017][ T6425] bridge_slave_0: entered allmulticast mode [ 255.076438][ T6425] bridge_slave_0: entered promiscuous mode [ 255.078684][ T6423] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.078829][ T6423] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.079026][ T6423] bridge_slave_0: entered allmulticast mode [ 255.088198][ T6423] bridge_slave_0: entered promiscuous mode [ 255.138918][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.139111][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.139310][ T6425] bridge_slave_1: entered allmulticast mode [ 255.143195][ T6425] bridge_slave_1: entered promiscuous mode [ 255.145590][ T6423] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.145815][ T6423] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.146062][ T6423] bridge_slave_1: entered allmulticast mode [ 255.149339][ T6423] bridge_slave_1: entered promiscuous mode [ 255.211439][ T5867] usb 3-1: Using ep0 maxpacket: 32 [ 255.215813][ T5867] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 255.215844][ T5867] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.223875][ T5867] usb 3-1: config 0 descriptor?? [ 255.248072][ T5867] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 255.970218][ T5867] gspca_nw80x: reg_r err -110 [ 255.976996][ T5867] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 256.667554][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.754794][ T6423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.800670][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.825310][ T6423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.416635][ T6425] team0: Port device team_slave_0 added [ 257.436891][ T6423] team0: Port device team_slave_0 added [ 257.446227][ T6425] team0: Port device team_slave_1 added [ 257.472967][ T6423] team0: Port device team_slave_1 added [ 258.192058][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.214091][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.215676][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.217220][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.218242][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.654702][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 258.654715][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 258.654735][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.008123][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.008141][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.008177][ T6423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.017704][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.017724][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.017757][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.090573][ T6423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.090593][ T6423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 259.090626][ T6423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.358302][ T10] usb 3-1: USB disconnect, device number 11 [ 260.497495][ T5808] Bluetooth: hci4: command tx timeout [ 261.139098][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.741621][ T6425] hsr_slave_0: entered promiscuous mode [ 261.743184][ T6425] hsr_slave_1: entered promiscuous mode [ 261.744233][ T6425] debugfs: 'hsr0' already exists in 'hsr' [ 261.744258][ T6425] Cannot create hsr debugfs directory [ 262.178234][ T6423] hsr_slave_0: entered promiscuous mode [ 262.179701][ T6423] hsr_slave_1: entered promiscuous mode [ 262.180695][ T6423] debugfs: 'hsr0' already exists in 'hsr' [ 262.180719][ T6423] Cannot create hsr debugfs directory [ 262.220886][ T44] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 262.395806][ T44] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 262.395830][ T44] usb 2-1: config 0 interface 0 has no altsetting 0 [ 262.398338][ T44] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.398365][ T44] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 262.398380][ T44] usb 2-1: Product: syz [ 262.398390][ T44] usb 2-1: Manufacturer: syz [ 262.398406][ T44] usb 2-1: SerialNumber: syz [ 262.479827][ T44] usb 2-1: config 0 descriptor?? [ 262.496616][ T44] usb 2-1: selecting invalid altsetting 0 [ 262.571411][ T5808] Bluetooth: hci4: command tx timeout [ 262.802595][ T44] usb 2-1: USB disconnect, device number 13 [ 264.654048][ T5808] Bluetooth: hci4: command tx timeout [ 266.731404][ T5808] Bluetooth: hci4: command tx timeout [ 267.563576][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 267.610619][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 267.642056][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 267.650793][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 267.664682][ T5802] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 267.677776][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 267.711240][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 267.747238][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 267.747269][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.803601][ T10] usb 2-1: config 0 descriptor?? [ 267.832861][ T10] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 267.836358][ T6670] chnl_net:caif_netlink_parms(): no params data found [ 268.264046][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 268.268143][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 268.269415][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 268.358737][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 268.370716][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 268.541512][ T10] gspca_nw80x: reg_r err -110 [ 268.541614][ T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -110 [ 270.623310][ T5802] Bluetooth: hci3: command tx timeout [ 270.667559][ T5802] Bluetooth: hci6: command tx timeout [ 272.263768][ T5884] usb 2-1: USB disconnect, device number 14 [ 272.456221][ T6772] netlink: 'syz.2.180': attribute type 2 has an invalid length. [ 272.456244][ T6772] netlink: 244 bytes leftover after parsing attributes in process `syz.2.180'. [ 272.651330][ T5802] Bluetooth: hci3: command tx timeout [ 272.731301][ T5802] Bluetooth: hci6: command tx timeout [ 274.731283][ T5802] Bluetooth: hci3: command tx timeout [ 274.886046][ T6792] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.183'. [ 275.913246][ T5802] Bluetooth: hci6: command tx timeout [ 276.975257][ T5802] Bluetooth: hci3: command tx timeout [ 277.191302][ T6787] netlink: 'syz.1.182': attribute type 2 has an invalid length. [ 277.965812][ T5802] Bluetooth: hci6: command tx timeout [ 278.440176][ T6807] netlink: 'syz.1.186': attribute type 2 has an invalid length. [ 278.471160][ T5888] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 278.662067][ T5888] usb 3-1: Using ep0 maxpacket: 16 [ 278.691540][ T5888] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 278.691574][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 278.709458][ T5888] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 278.709496][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.709522][ T5888] usb 3-1: Product: syz [ 278.709538][ T5888] usb 3-1: Manufacturer: syz [ 278.709556][ T5888] usb 3-1: SerialNumber: syz [ 278.889920][ T5888] usb 3-1: config 0 descriptor?? [ 278.898861][ T5888] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 278.898894][ T5888] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 279.712953][ T6670] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.713083][ T6670] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.713315][ T6670] bridge_slave_0: entered allmulticast mode [ 279.718779][ T6670] bridge_slave_0: entered promiscuous mode [ 279.729443][ T5888] em28xx 3-1:0.0: chip ID is em2874 [ 279.932144][ T6670] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.932291][ T6670] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.932554][ T6670] bridge_slave_1: entered allmulticast mode [ 279.935532][ T6670] bridge_slave_1: entered promiscuous mode [ 280.547770][ T6670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.609169][ T6670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.306476][ T6816] syz.1.188 (6816) used greatest stack depth: 18376 bytes left [ 281.307046][ T6814] syz.1.188 (6814) used greatest stack depth: 15560 bytes left [ 281.742750][ T5888] usb 3-1: USB disconnect, device number 12 [ 281.744936][ T5888] em28xx 3-1:0.0: Disconnecting em28xx [ 281.765528][ T5888] em28xx 3-1:0.0: Freeing device [ 282.588101][ T6828] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.191'. [ 285.593546][ T6670] team0: Port device team_slave_0 added [ 285.604153][ T6670] team0: Port device team_slave_1 added [ 285.727462][ T13] bridge_slave_1: left allmulticast mode [ 285.727490][ T13] bridge_slave_1: left promiscuous mode [ 285.727721][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.782588][ T13] bridge_slave_0: left allmulticast mode [ 285.782613][ T13] bridge_slave_0: left promiscuous mode [ 285.782832][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.791372][ T978] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 285.866575][ T13] bridge_slave_1: left allmulticast mode [ 285.866600][ T13] bridge_slave_1: left promiscuous mode [ 285.866779][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.932452][ T13] bridge_slave_0: left allmulticast mode [ 285.932475][ T13] bridge_slave_0: left promiscuous mode [ 285.932674][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.958891][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 285.958930][ T978] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 285.958962][ T978] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 285.966700][ T978] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 285.966734][ T978] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.966758][ T978] usb 2-1: Product: syz [ 285.966777][ T978] usb 2-1: Manufacturer: syz [ 285.966914][ T978] usb 2-1: SerialNumber: syz [ 285.976727][ T978] usb 2-1: config 0 descriptor?? [ 285.978238][ T6841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.981884][ T6841] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 285.994801][ T978] usb 2-1: ucan: probing device on interface #0 [ 286.189430][ T13] bridge_slave_1: left allmulticast mode [ 286.189463][ T13] bridge_slave_1: left promiscuous mode [ 286.189713][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.463218][ T978] usb 2-1: ucan: could not read protocol version, ret=-110 [ 287.463246][ T978] usb 2-1: ucan: probe failed; try to update the device firmware [ 287.503566][ T13] bridge_slave_0: left allmulticast mode [ 287.503596][ T13] bridge_slave_0: left promiscuous mode [ 287.503861][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.295012][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.434649][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.505570][ T13] bond0 (unregistering): Released all slaves [ 288.706307][ T978] usb 2-1: USB disconnect, device number 15 [ 289.173285][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.197'. [ 289.942066][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.397663][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.546294][ T13] bond0 (unregistering): Released all slaves [ 290.762136][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 290.892118][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 290.953390][ T13] bond0 (unregistering): Released all slaves [ 292.619489][ T6845] syzkaller1: entered promiscuous mode [ 292.619512][ T6845] syzkaller1: entered allmulticast mode [ 293.808224][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.808242][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.808272][ T6670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.911446][ T6670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.911467][ T6670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.911500][ T6670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.408692][ T6897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.205'. [ 298.408781][ T6897] netlink: 32 bytes leftover after parsing attributes in process `syz.1.205'. [ 299.448940][ T6897] Process accounting resumed [ 300.013042][ T6670] hsr_slave_0: entered promiscuous mode [ 300.014798][ T6670] hsr_slave_1: entered promiscuous mode [ 300.015881][ T6670] debugfs: 'hsr0' already exists in 'hsr' [ 300.015907][ T6670] Cannot create hsr debugfs directory [ 301.280691][ T13] hsr_slave_0: left promiscuous mode [ 301.311301][ T13] hsr_slave_1: left promiscuous mode [ 301.313377][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.334780][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.681855][ T13] hsr_slave_0: left promiscuous mode [ 301.705202][ T13] hsr_slave_1: left promiscuous mode [ 301.706375][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.742162][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.801240][ T13] hsr_slave_0: left promiscuous mode [ 301.841211][ T13] hsr_slave_1: left promiscuous mode [ 301.845596][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.892215][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.511447][ T38] audit: type=1400 audit(1763927121.754:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 304.511506][ T38] audit: type=1400 audit(1763927121.754:3): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 304.583521][ T38] audit: type=1400 audit(1763927121.814:4): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 304.583584][ T38] audit: type=1400 audit(1763927121.824:5): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 304.742529][ T38] audit: type=1400 audit(1763927121.994:6): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 304.783336][ T38] audit: type=1400 audit(1763927122.034:7): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 304.852066][ T13] team0 (unregistering): Port device team_slave_1 removed [ 304.885491][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 304.911326][ T978] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 304.992553][ T13] team0 (unregistering): Port device team_slave_0 removed [ 304.999447][ T38] audit: type=1400 audit(1763927122.244:8): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 305.061193][ T978] usb 3-1: Using ep0 maxpacket: 8 [ 305.062838][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 305.065537][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 305.065568][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.066196][ T978] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 305.066222][ T978] usb 3-1: config 179 has no interface number 0 [ 305.066271][ T978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 305.066298][ T978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 305.066328][ T978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 305.066356][ T978] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 305.066383][ T978] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 305.066427][ T978] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 305.066451][ T978] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.075789][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 305.075824][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.075849][ T9] usb 2-1: Product: syz [ 305.075867][ T9] usb 2-1: Manufacturer: syz [ 305.075882][ T9] usb 2-1: SerialNumber: syz [ 305.175129][ T38] audit: type=1400 audit(1763927122.424:9): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 305.256568][ T6944] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 305.259901][ T9] usb 2-1: config 0 descriptor?? [ 305.323440][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 305.323476][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 305.439700][ T38] audit: type=1400 audit(1763927122.684:10): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 305.534938][ T978] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input19 [ 305.765079][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 305.765085][ T10] usb 3-1: USB disconnect, device number 13 [ 305.765155][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 305.882757][ T9] em28xx 2-1:0.0: chip ID is em2874 [ 306.091878][ T38] audit: type=1400 audit(1763927123.344:11): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 306.512212][ T10] usb 2-1: USB disconnect, device number 16 [ 306.514869][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 306.527241][ T10] em28xx 2-1:0.0: Freeing device [ 306.892658][ T13] team0 (unregistering): Port device team_slave_1 removed [ 307.229447][ T13] team0 (unregistering): Port device team_slave_0 removed [ 310.738372][ T13] team0 (unregistering): Port device team_slave_1 removed [ 310.851962][ T13] team0 (unregistering): Port device team_slave_0 removed [ 311.291843][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 311.291862][ T38] audit: type=1400 audit(1763927128.544:15): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 311.515925][ T6745] chnl_net:caif_netlink_parms(): no params data found [ 311.583609][ T38] audit: type=1400 audit(1763927128.834:16): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 311.598425][ T6753] chnl_net:caif_netlink_parms(): no params data found [ 312.789559][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.789708][ T6745] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.789863][ T6745] bridge_slave_0: entered allmulticast mode [ 312.792614][ T6745] bridge_slave_0: entered promiscuous mode [ 312.879704][ T6745] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.879821][ T6745] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.879969][ T6745] bridge_slave_1: entered allmulticast mode [ 312.883789][ T6745] bridge_slave_1: entered promiscuous mode [ 312.885656][ T6753] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.885811][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.886053][ T6753] bridge_slave_0: entered allmulticast mode [ 312.889358][ T6753] bridge_slave_0: entered promiscuous mode [ 313.092263][ T6753] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.092376][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.092531][ T6753] bridge_slave_1: entered allmulticast mode [ 313.094487][ T6753] bridge_slave_1: entered promiscuous mode [ 313.312585][ T6745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.432262][ T6745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.435952][ T6753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.557911][ T6753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.738554][ T6745] team0: Port device team_slave_0 added [ 313.878285][ T6745] team0: Port device team_slave_1 added [ 313.884369][ T6753] team0: Port device team_slave_0 added [ 314.168130][ T6753] team0: Port device team_slave_1 added [ 314.336945][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.336962][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.336990][ T6745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.509938][ T6745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.509956][ T6745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.509985][ T6745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.513711][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.513729][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.513763][ T6753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.542263][ T6753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.542283][ T6753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 314.542316][ T6753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.703810][ T6670] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 314.837496][ T6670] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 314.889337][ T6745] hsr_slave_0: entered promiscuous mode [ 314.890927][ T6745] hsr_slave_1: entered promiscuous mode [ 314.893578][ T6745] debugfs: 'hsr0' already exists in 'hsr' [ 314.893611][ T6745] Cannot create hsr debugfs directory [ 314.992639][ T6670] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 315.171775][ T6670] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.223639][ T6753] hsr_slave_0: entered promiscuous mode [ 315.224800][ T6753] hsr_slave_1: entered promiscuous mode [ 315.225561][ T6753] debugfs: 'hsr0' already exists in 'hsr' [ 315.225580][ T6753] Cannot create hsr debugfs directory [ 316.293425][ T13] bridge_slave_1: left allmulticast mode [ 316.293456][ T13] bridge_slave_1: left promiscuous mode [ 316.293722][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.352856][ T13] bridge_slave_0: left allmulticast mode [ 316.352881][ T13] bridge_slave_0: left promiscuous mode [ 316.353096][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.417255][ T13] bridge_slave_1: left allmulticast mode [ 316.417281][ T13] bridge_slave_1: left promiscuous mode [ 316.417457][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.493089][ T13] bridge_slave_0: left allmulticast mode [ 316.493122][ T13] bridge_slave_0: left promiscuous mode [ 316.493445][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.575750][ T13] bridge_slave_1: left allmulticast mode [ 316.575775][ T13] bridge_slave_1: left promiscuous mode [ 316.575957][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.632975][ T13] bridge_slave_0: left allmulticast mode [ 316.632998][ T13] bridge_slave_0: left promiscuous mode [ 316.633229][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.943173][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.032207][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.103589][ T13] bond0 (unregistering): Released all slaves [ 317.322489][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.401980][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.464528][ T13] bond0 (unregistering): Released all slaves [ 317.672905][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.752058][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.826495][ T13] bond0 (unregistering): Released all slaves [ 318.104408][ T38] audit: type=1400 audit(1763927135.344:17): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 318.268571][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 318.289503][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 318.300616][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 318.320595][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 318.331313][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 318.365295][ T6745] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 318.441276][ T6745] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 318.513369][ T38] audit: type=1400 audit(1763927135.744:18): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 318.521169][ T6745] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 318.802531][ T13] hsr_slave_0: left promiscuous mode [ 318.842325][ T13] hsr_slave_1: left promiscuous mode [ 318.843348][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.887442][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.101396][ T13] hsr_slave_0: left promiscuous mode [ 319.141408][ T13] hsr_slave_1: left promiscuous mode [ 319.142443][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.182178][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.351266][ T13] hsr_slave_0: left promiscuous mode [ 319.371244][ T13] hsr_slave_1: left promiscuous mode [ 319.372079][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.411981][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.094845][ T13] team0 (unregistering): Port device team_slave_1 removed [ 320.232697][ T13] team0 (unregistering): Port device team_slave_0 removed [ 320.411230][ T5802] Bluetooth: hci1: command tx timeout [ 321.362055][ T13] team0 (unregistering): Port device team_slave_1 removed [ 321.501968][ T13] team0 (unregistering): Port device team_slave_0 removed [ 322.501244][ T5802] Bluetooth: hci1: command tx timeout [ 322.553117][ T13] team0 (unregistering): Port device team_slave_1 removed [ 322.576831][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.682357][ T13] team0 (unregistering): Port device team_slave_0 removed [ 323.259315][ T6745] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 323.720170][ T6753] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 323.742239][ T6753] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 323.790654][ T6753] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 323.866943][ T6753] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 324.256374][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 324.548707][ T6745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.591182][ T5802] Bluetooth: hci1: command tx timeout [ 324.893971][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.894192][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.894456][ T7002] bridge_slave_0: entered allmulticast mode [ 324.897886][ T7002] bridge_slave_0: entered promiscuous mode [ 324.919405][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.919562][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.919860][ T7002] bridge_slave_1: entered allmulticast mode [ 324.924039][ T7002] bridge_slave_1: entered promiscuous mode [ 324.932897][ T6753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.168110][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.177001][ T6745] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.184157][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.385960][ T7002] team0: Port device team_slave_0 added [ 325.517013][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.517207][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.526491][ T7002] team0: Port device team_slave_1 added [ 325.701413][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.701642][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.732444][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.732457][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.732477][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.738240][ T6753] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.814831][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.814845][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.814864][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.910173][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.910333][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.093009][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.093807][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.106316][ T7002] hsr_slave_0: entered promiscuous mode [ 326.108064][ T7002] hsr_slave_1: entered promiscuous mode [ 326.109211][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 326.109249][ T7002] Cannot create hsr debugfs directory [ 326.651201][ T5802] Bluetooth: hci1: command tx timeout [ 327.747683][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 327.766164][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 327.767538][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 327.769281][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 327.770209][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 327.780033][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 327.792830][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 327.807229][ T5802] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 327.846767][ T5802] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 327.848903][ T5802] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 329.487967][ T13] bridge_slave_1: left allmulticast mode [ 329.487998][ T13] bridge_slave_1: left promiscuous mode [ 329.488241][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.572699][ T13] bridge_slave_0: left allmulticast mode [ 329.572729][ T13] bridge_slave_0: left promiscuous mode [ 329.573024][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.853067][ T5808] Bluetooth: hci5: command tx timeout [ 329.931449][ T5808] Bluetooth: hci4: command tx timeout [ 330.012409][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.112142][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.173720][ T13] bond0 (unregistering): Released all slaves [ 330.681329][ T13] hsr_slave_0: left promiscuous mode [ 330.701315][ T13] hsr_slave_1: left promiscuous mode [ 330.702315][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.752081][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.374268][ T13] team0 (unregistering): Port device team_slave_1 removed [ 331.501875][ T13] team0 (unregistering): Port device team_slave_0 removed [ 331.931223][ T5808] Bluetooth: hci5: command tx timeout [ 332.021448][ T5808] Bluetooth: hci4: command tx timeout [ 332.062122][ T38] audit: type=1400 audit(1763927149.294:19): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 332.175877][ T38] audit: type=1400 audit(1763927149.424:20): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject=")" object="_" requested=w pid=1184 comm="irq/31-virtio1-" saddr=10.128.0.169 src=30008 daddr=10.128.1.209 dest=42942 netif=eth0 [ 332.242769][ T7071] chnl_net:caif_netlink_parms(): no params data found [ 332.279210][ T7072] chnl_net:caif_netlink_parms(): no params data found [ 332.767923][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.768050][ T7071] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.768281][ T7071] bridge_slave_0: entered allmulticast mode [ 332.770594][ T7071] bridge_slave_0: entered promiscuous mode [ 332.971322][ T7071] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.971495][ T7071] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.971745][ T7071] bridge_slave_1: entered allmulticast mode [ 332.974071][ T7071] bridge_slave_1: entered promiscuous mode [ 333.192422][ T7072] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.192547][ T7072] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.192796][ T7072] bridge_slave_0: entered allmulticast mode [ 333.194823][ T7072] bridge_slave_0: entered promiscuous mode [ 333.345921][ T7072] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.346037][ T7072] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.346236][ T7072] bridge_slave_1: entered allmulticast mode [ 333.348254][ T7072] bridge_slave_1: entered promiscuous mode [ 333.361718][ T7071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.470622][ T7071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.646088][ T7072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.746501][ T7072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.756117][ T7071] team0: Port device team_slave_0 added [ 333.832753][ T7002] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 333.876671][ T7071] team0: Port device team_slave_1 added [ 333.973019][ T7002] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 334.011248][ T5808] Bluetooth: hci5: command tx timeout [ 334.091445][ T5808] Bluetooth: hci4: command tx timeout [ 334.176922][ T7072] team0: Port device team_slave_0 added [ 334.177317][ T7002] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 334.366482][ T7072] team0: Port device team_slave_1 added [ 334.367113][ T7002] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 334.388545][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.388564][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.388592][ T7071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.485130][ T7071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.485143][ T7071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.485163][ T7071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.977783][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.977796][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.977816][ T7072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.162464][ T7072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.162478][ T7072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.162497][ T7072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.540380][ T7071] hsr_slave_0: entered promiscuous mode [ 335.547548][ T7071] hsr_slave_1: entered promiscuous mode [ 335.548579][ T7071] debugfs: 'hsr0' already exists in 'hsr' [ 335.548604][ T7071] Cannot create hsr debugfs directory [ 336.091209][ T5808] Bluetooth: hci5: command tx timeout [ 336.125096][ T7072] hsr_slave_0: entered promiscuous mode [ 336.126127][ T7072] hsr_slave_1: entered promiscuous mode [ 336.126850][ T7072] debugfs: 'hsr0' already exists in 'hsr' [ 336.126867][ T7072] Cannot create hsr debugfs directory [ 336.171306][ T5808] Bluetooth: hci4: command tx timeout [ 337.360015][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.423345][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.664744][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.665710][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.688381][ T987] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.688615][ T987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.931770][ C0] ------------[ cut here ]------------ [ 337.931785][ C0] ODEBUG: free active (active state 0) object: ffff88805d9a6cd0 object type: timer_list hint: rose_t0timer_expiry+0x0/0x360 [ 337.932590][ C0] WARNING: CPU: 0 PID: 16 at lib/debugobjects.c:615 debug_print_object+0x16b/0x1e0 [ 337.932634][ C0] Modules linked in: [ 337.932667][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.932686][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.932699][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 337.932721][ C0] Code: 4c 89 ff e8 e7 9a 9d fd 4d 8b 0f 48 c7 c7 80 e9 3d 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 23 00 fd 48 83 c4 08 90 <0f> 0b 90 90 ff 05 07 81 53 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 337.932736][ C0] RSP: 0018:ffffc90000157708 EFLAGS: 00010282 [ 337.932750][ C0] RAX: 5d0139e5d54e8000 RBX: dffffc0000000000 RCX: ffff88801b685a00 [ 337.932762][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 337.932772][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 337.932782][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffffffff89b37fc0 [ 337.932795][ C0] R13: ffffffff8b3deb00 R14: ffff88805d9a6cd0 R15: ffffffff8aecf940 [ 337.932807][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 337.932821][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 337.932832][ C0] CR2: 00005639062f9138 CR3: 000000003d9d2000 CR4: 00000000003526f0 [ 337.932846][ C0] Call Trace: [ 337.932856][ C0] [ 337.932869][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 337.932904][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 337.932927][ C0] kfree+0x114/0x950 [ 337.932945][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 337.932971][ C0] rose_timer_expiry+0x4cb/0x600 [ 337.932991][ C0] ? call_timer_fn+0x155/0x5f0 [ 337.933017][ C0] call_timer_fn+0x17e/0x5f0 [ 337.933039][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.933060][ C0] ? call_timer_fn+0xbe/0x5f0 [ 337.933082][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 337.933112][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.933138][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.933161][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.933183][ C0] __run_timer_base+0x648/0x970 [ 337.933217][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 337.933252][ C0] run_timer_softirq+0xb7/0x180 [ 337.933274][ C0] handle_softirqs+0x22f/0x710 [ 337.933337][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 337.933366][ C0] run_ktimerd+0xcf/0x190 [ 337.933395][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 337.933416][ C0] ? schedule+0x91/0x360 [ 337.933445][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 337.933466][ C0] smpboot_thread_fn+0x542/0xa60 [ 337.933488][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 337.933517][ C0] kthread+0x711/0x8a0 [ 337.933547][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 337.933569][ C0] ? __pfx_kthread+0x10/0x10 [ 337.933592][ C0] ? rt_spin_unlock+0x150/0x200 [ 337.933615][ C0] ? rt_spin_unlock+0x161/0x200 [ 337.933650][ C0] ? __pfx_kthread+0x10/0x10 [ 337.933676][ C0] ret_from_fork+0x4bc/0x870 [ 337.933699][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 337.933727][ C0] ? __switch_to_asm+0x39/0x70 [ 337.933744][ C0] ? __switch_to_asm+0x33/0x70 [ 337.933759][ C0] ? __pfx_kthread+0x10/0x10 [ 337.933785][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.933817][ C0] [ 337.933825][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 337.933836][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 337.933855][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 337.933864][ C0] Call Trace: [ 337.933870][ C0] [ 337.933876][ C0] dump_stack_lvl+0x99/0x250 [ 337.933902][ C0] ? __asan_memcpy+0x40/0x70 [ 337.933922][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 337.933947][ C0] ? __pfx__printk+0x10/0x10 [ 337.933978][ C0] vpanic+0x237/0x6d0 [ 337.933995][ C0] ? __pfx_vpanic+0x10/0x10 [ 337.934021][ C0] panic+0xb9/0xc0 [ 337.934036][ C0] ? __pfx_panic+0x10/0x10 [ 337.934064][ C0] __warn+0x31b/0x4b0 [ 337.934078][ C0] ? debug_print_object+0x16b/0x1e0 [ 337.934102][ C0] ? debug_print_object+0x16b/0x1e0 [ 337.934123][ C0] report_bug+0x2be/0x4f0 [ 337.934147][ C0] ? debug_print_object+0x16b/0x1e0 [ 337.934169][ C0] ? debug_print_object+0x16b/0x1e0 [ 337.934190][ C0] ? debug_print_object+0x16d/0x1e0 [ 337.934211][ C0] handle_bug+0x84/0x160 [ 337.934229][ C0] exc_invalid_op+0x1a/0x50 [ 337.934246][ C0] asm_exc_invalid_op+0x1a/0x20 [ 337.934262][ C0] RIP: 0010:debug_print_object+0x16b/0x1e0 [ 337.934283][ C0] Code: 4c 89 ff e8 e7 9a 9d fd 4d 8b 0f 48 c7 c7 80 e9 3d 8b 48 8b 34 24 4c 89 ea 89 e9 4d 89 f0 41 54 e8 0a 23 00 fd 48 83 c4 08 90 <0f> 0b 90 90 ff 05 07 81 53 0a 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 [ 337.934304][ C0] RSP: 0018:ffffc90000157708 EFLAGS: 00010282 [ 337.934318][ C0] RAX: 5d0139e5d54e8000 RBX: dffffc0000000000 RCX: ffff88801b685a00 [ 337.934331][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000100 [ 337.934340][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000100 [ 337.934350][ C0] R10: dffffc0000000000 R11: ffffed101710487b R12: ffffffff89b37fc0 [ 337.934363][ C0] R13: ffffffff8b3deb00 R14: ffff88805d9a6cd0 R15: ffffffff8aecf940 [ 337.934378][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.934406][ C0] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 337.934427][ C0] debug_check_no_obj_freed+0x3a2/0x470 [ 337.934461][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 337.934483][ C0] kfree+0x114/0x950 [ 337.934501][ C0] ? rose_timer_expiry+0x4cb/0x600 [ 337.934527][ C0] rose_timer_expiry+0x4cb/0x600 [ 337.934547][ C0] ? call_timer_fn+0x155/0x5f0 [ 337.934572][ C0] call_timer_fn+0x17e/0x5f0 [ 337.934595][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.934615][ C0] ? call_timer_fn+0xbe/0x5f0 [ 337.934638][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 337.934668][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 337.934693][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 337.934716][ C0] ? __pfx_rose_timer_expiry+0x10/0x10 [ 337.934739][ C0] __run_timer_base+0x648/0x970 [ 337.934773][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 337.934808][ C0] run_timer_softirq+0xb7/0x180 [ 337.934829][ C0] handle_softirqs+0x22f/0x710 [ 337.934858][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 337.934887][ C0] run_ktimerd+0xcf/0x190 [ 337.934910][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 337.934932][ C0] ? schedule+0x91/0x360 [ 337.934961][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 337.934982][ C0] smpboot_thread_fn+0x542/0xa60 [ 337.935005][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 337.935034][ C0] kthread+0x711/0x8a0 [ 337.935062][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 337.935083][ C0] ? __pfx_kthread+0x10/0x10 [ 337.935106][ C0] ? rt_spin_unlock+0x150/0x200 [ 337.935130][ C0] ? rt_spin_unlock+0x161/0x200 [ 337.935148][ C0] ? __pfx_kthread+0x10/0x10 [ 337.935175][ C0] ret_from_fork+0x4bc/0x870 [ 337.935197][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 337.935223][ C0] ? __switch_to_asm+0x39/0x70 [ 337.935239][ C0] ? __switch_to_asm+0x33/0x70 [ 337.935254][ C0] ? __pfx_kthread+0x10/0x10 [ 337.935281][ C0] ret_from_fork_asm+0x1a/0x30 [ 337.935316][ C0] [ 337.942991][ C0] Kernel Offset: disabled