last executing test programs: 7.737977773s ago: executing program 2 (id=18): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000080), 0x76e5467) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000380)={0x21, 0x0, 0x598e2bc758403697, 0x2}, 0x8) 7.632645421s ago: executing program 2 (id=21): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d40)={0x0, 0xe0, &(0x7f0000000d00)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c020000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d7843e40108804400008024000180ff0000000100000000000000fdffff01000000000000000000000000000000001400040003000000ac1414bb00000000000000000600050000000000000100802400020073e591ec06154031d3954ac0e16752e72640f08b5281a8461d17d26d12f2bbb6060005000021000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39228c00098028000080060001000a0000001400020020010000000000000000000000000001050003000000000088000080060001000a0000001400020020010000000000000000000000000002050003000000001003800080060001008c0e000008000200ac1414aa05000300000000001c000080060001000200000008000200ac1414bb0500030000000000200004000e00000000000000fe800000000000000000000000000000000000009c0000802400020073961633df6dc9cb418b15afd0bae7b90f1e6cfed8bb423cf9285c474163154908000a00010000002400010000000000000000000000000000000000000000000000000000000000000000004800098028000080060001000a00000014000200fe8000000000000000000000000000bb05000300000000001c000080060001000200000008000200000000000500030000000000080005000100000008000100", @ANYRES32=r2], 0x22c}}, 0x0) 7.504917602s ago: executing program 2 (id=24): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x441, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 6.591589297s ago: executing program 2 (id=29): r0 = syz_usb_connect(0x0, 0x31a, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000155f4108d31340330bab000000010902080301000000000904"], 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, &(0x7f0000000040)={0x9}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x6c, r4, 0x1, 0xffffffff, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x4d, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1}, {}, @device_a, @device_a, @random="a5fcc8639e98"}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x8}}, @void, @val={0x3c, 0x4, {0x0, 0x5}}, @void, @val={0x72, 0x6}, @void, @void}}]}, 0x32}}, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000240), 0x3af4701e) sendfile(r6, r1, 0x0, 0x10000a007) 5.575311054s ago: executing program 2 (id=32): pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f00000000c0)={0x1, 0x0, [{0x10, 0x7, 0x5, [0x1c1, 0xb, 0x2, 0x4, 0x0, 0xc, 0xc]}]}) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000080)="222fd493b590ca013e2ea9f8c67fc90766c34a0d844593bcd9d811e997349c48c3b7f1207b405ba73168d94c81323c07ddf5c7bd730272ab98a2d71d06c1af6d20c10279ef308290de332d04fee0f2a565672a1a3025b5", 0x57) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000002c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x400000001ffffffd) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000009380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r4, 0x40015b19, &(0x7f0000000040)) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x7b, 0x31, 0x62, 0x10, 0xf11, 0x1101, 0x143, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x3, 0x5, 0x0, 0x3, [{{0x9, 0x4, 0x55, 0xa, 0x2, 0xa0, 0x7, 0xae, 0x62, [], [{{0x9, 0x5, 0x0, 0x3, 0x200, 0xa, 0x9, 0x2}}, {{0x9, 0x5, 0xf, 0x3, 0x400, 0xd, 0x6, 0xf8}}]}}]}}]}}, &(0x7f00000004c0)={0xfffffffffffffe63, 0x0, 0x0, 0x0, 0x1555580e}) 2.529367726s ago: executing program 2 (id=45): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000001c0), 0x2) socket(0x0, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000240)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200), 0x2) 2.126597941s ago: executing program 0 (id=49): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0], &(0x7f0000000740), 0x20, 0x1, 0x0, 0x0, r2}) 2.055920315s ago: executing program 0 (id=50): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@random="e33110495bfd", @random="ff1df52cd002", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x28, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @local, @private1}}}}}}, 0x0) 2.055770232s ago: executing program 0 (id=51): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r0, 0x48073000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 1.99571348s ago: executing program 0 (id=52): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = eventfd2(0x0, 0x0) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffffe, 0x8) 1.973993694s ago: executing program 0 (id=53): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x281c2, 0x10) fcntl$setlease(r0, 0x400, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.698678597s ago: executing program 1 (id=57): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.610581752s ago: executing program 1 (id=59): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000680)={0x34, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 1.087802454s ago: executing program 0 (id=64): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) close(0xffffffffffffffff) 1.048147495s ago: executing program 1 (id=66): mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3b, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000004200)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) sendfile(r0, r0, 0x0, 0x20000000003f) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0) 1.012143423s ago: executing program 3 (id=67): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff8800000000000000000000000000000000000100"/40, 0x28}], 0x1}, 0x0) 1.011159535s ago: executing program 3 (id=68): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r2, 0x7}, 0x8) 977.095301ms ago: executing program 3 (id=69): setitimer(0x0, 0x0, &(0x7f0000000080)) 895.887256ms ago: executing program 3 (id=71): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x27, 0x0, 0x15a4016, 0x0, 0x0, 0x0, 0x9}}, 0x50) read$FUSE(r0, &(0x7f0000012cc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) open_by_handle_at(r1, &(0x7f00000021c0)=ANY=[@ANYBLOB="1c00000081000000fe"], 0xfeffffff) 712.774934ms ago: executing program 1 (id=73): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c20031000", @ANYBLOB="6d9b38ffe9"], 0xf) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee1, 0x8031, 0xffffffffffffffff, 0x0) 496.736065ms ago: executing program 1 (id=74): r0 = socket(0x10, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f00000003c0)={0x0, 0xffffffffffffff89, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x1000) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', r2, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1={0xfc, 0x1, '\x00', 0x1}}}) 419.910366ms ago: executing program 1 (id=75): r0 = syz_usbip_server_init(0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) write$usbip_server(r0, &(0x7f0000000840)=@ret_submit={{0x3, 0x9, 0x0, 0x0, 0x80000000}, 0x2000000, 0x0, 0x1, 0x0, 0x4}, 0x30) 215.324628ms ago: executing program 4 (id=78): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001a00010000000000000100008020000039"], 0x1c}}, 0x0) 214.084123ms ago: executing program 4 (id=79): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000240)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f40000ffffff8800000000000000000000000000000000000100"/40, 0x28}], 0x1}, 0x0) 182.378998ms ago: executing program 4 (id=80): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={r2, 0x7}, 0x8) 99.935566ms ago: executing program 4 (id=81): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001440), 0x800, 0x0) ioctl$SNDCTL_SEQ_RESETSAMPLES(r0, 0x40045109, &(0x7f0000001480)=0x5) 99.779658ms ago: executing program 4 (id=82): sched_setscheduler(0x0, 0x5, &(0x7f000000d380)) ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42802, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x20000023896) 80.794449ms ago: executing program 4 (id=83): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x400) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000001c0)={0x1d, r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x844}, 0x0) 31.762695ms ago: executing program 3 (id=84): syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e0c20031000", @ANYBLOB="6d9b38ffe9"], 0xf) 0s ago: executing program 3 (id=85): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a500e9406b06f92094ff010203010902121001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f0000000300)={0x0, 0x0, 0x2, "6d10"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x40, 0xb, 0x2, "19b6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0xb, 0x2, "1576"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.195' (ED25519) to the list of known hosts. [ 34.043190][ T6396] cgroup: Unknown subsys name 'net' [ 34.301328][ T6396] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.646303][ T6396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SS [ 35.923401][ T6411] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 35.935741][ T6411] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 35.960576][ T6420] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 35.962456][ T6420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 35.965027][ T6423] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 35.971001][ T6420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 35.971448][ T6421] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 35.973179][ T6420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 35.975144][ T6423] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 35.977578][ T6420] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 35.978728][ T6423] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 35.979979][ T6420] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 35.981238][ T6423] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 35.983189][ T6420] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 35.984086][ T6423] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 35.986060][ T6420] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 35.987882][ T6423] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 35.989537][ T6420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 35.990745][ T6423] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 35.991841][ T6420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 35.993058][ T6423] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 35.994592][ T6420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 35.996331][ T6423] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 35.997849][ T6420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 35.999136][ T6423] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 36.002020][ T6423] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 36.004909][ T6421] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 36.005405][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 36.013714][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 36.019233][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 36.199672][ T6417] chnl_net:caif_netlink_parms(): no params data found [ 36.220116][ T6408] chnl_net:caif_netlink_parms(): no params data found [ 36.252163][ T6413] chnl_net:caif_netlink_parms(): no params data found [ 36.324966][ T6413] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.326949][ T6413] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.328764][ T6413] bridge_slave_0: entered allmulticast mode [ 36.330676][ T6413] bridge_slave_0: entered promiscuous mode [ 36.333658][ T6408] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.335139][ T6408] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.337297][ T6408] bridge_slave_0: entered allmulticast mode [ 36.339077][ T6408] bridge_slave_0: entered promiscuous mode [ 36.343530][ T6408] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.345020][ T6408] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.347801][ T6408] bridge_slave_1: entered allmulticast mode [ 36.349545][ T6408] bridge_slave_1: entered promiscuous mode [ 36.351954][ T6417] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.353506][ T6417] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.355308][ T6417] bridge_slave_0: entered allmulticast mode [ 36.357833][ T6417] bridge_slave_0: entered promiscuous mode [ 36.360526][ T6417] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.362060][ T6417] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.363591][ T6417] bridge_slave_1: entered allmulticast mode [ 36.365367][ T6417] bridge_slave_1: entered promiscuous mode [ 36.367704][ T6413] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.369304][ T6413] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.370915][ T6413] bridge_slave_1: entered allmulticast mode [ 36.372711][ T6413] bridge_slave_1: entered promiscuous mode [ 36.385926][ T6408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.408972][ T6408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.429581][ T6417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.432875][ T6417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.443055][ T6413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.447494][ T6413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.484699][ T6417] team0: Port device team_slave_0 added [ 36.491920][ T6413] team0: Port device team_slave_0 added [ 36.493999][ T6417] team0: Port device team_slave_1 added [ 36.496902][ T6413] team0: Port device team_slave_1 added [ 36.503711][ T6408] team0: Port device team_slave_0 added [ 36.509917][ T6412] chnl_net:caif_netlink_parms(): no params data found [ 36.530011][ T6408] team0: Port device team_slave_1 added [ 36.536638][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.538116][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.543409][ T6413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.557865][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.559448][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.564581][ T6417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.575414][ T6408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.577384][ T6408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.583028][ T6408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.586123][ T6409] chnl_net:caif_netlink_parms(): no params data found [ 36.589657][ T6408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.591122][ T6408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.596548][ T6408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.599681][ T6413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.601150][ T6413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.607016][ T6413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.613994][ T6417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.615472][ T6417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.621902][ T6417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.697940][ T6417] hsr_slave_0: entered promiscuous mode [ 36.736413][ T6417] hsr_slave_1: entered promiscuous mode [ 36.821524][ T6412] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.823331][ T6412] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.825008][ T6412] bridge_slave_0: entered allmulticast mode [ 36.827546][ T6412] bridge_slave_0: entered promiscuous mode [ 36.877607][ T6413] hsr_slave_0: entered promiscuous mode [ 36.916206][ T6413] hsr_slave_1: entered promiscuous mode [ 36.975969][ T6413] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 36.977687][ T6413] Cannot create hsr debugfs directory [ 37.037713][ T6408] hsr_slave_0: entered promiscuous mode [ 37.076178][ T6408] hsr_slave_1: entered promiscuous mode [ 37.140030][ T6408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.141716][ T6408] Cannot create hsr debugfs directory [ 37.143062][ T6412] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.144772][ T6412] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.146586][ T6412] bridge_slave_1: entered allmulticast mode [ 37.148421][ T6412] bridge_slave_1: entered promiscuous mode [ 37.171159][ T6409] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.172627][ T6409] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.174159][ T6409] bridge_slave_0: entered allmulticast mode [ 37.176188][ T6409] bridge_slave_0: entered promiscuous mode [ 37.178529][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.179948][ T6409] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.181448][ T6409] bridge_slave_1: entered allmulticast mode [ 37.183263][ T6409] bridge_slave_1: entered promiscuous mode [ 37.212948][ T6412] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.253696][ T6412] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.262029][ T6409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.291330][ T6409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.312380][ T6412] team0: Port device team_slave_0 added [ 37.331738][ T6412] team0: Port device team_slave_1 added [ 37.347689][ T6409] team0: Port device team_slave_0 added [ 37.350496][ T6409] team0: Port device team_slave_1 added [ 37.371960][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.373429][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.379399][ T6409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.384164][ T6409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.390006][ T6409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.395754][ T6409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.416625][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.418186][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.423230][ T6412] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.427326][ T6412] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.428765][ T6412] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.433913][ T6412] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.517447][ T6409] hsr_slave_0: entered promiscuous mode [ 37.566324][ T6409] hsr_slave_1: entered promiscuous mode [ 37.606000][ T6409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.607680][ T6409] Cannot create hsr debugfs directory [ 37.677892][ T6412] hsr_slave_0: entered promiscuous mode [ 37.716227][ T6412] hsr_slave_1: entered promiscuous mode [ 37.756063][ T6412] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 37.757666][ T6412] Cannot create hsr debugfs directory [ 37.759022][ T6417] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 37.764582][ T6417] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 37.775254][ T6417] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 37.778615][ T6417] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 37.834085][ T6413] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 37.837601][ T6413] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 37.842801][ T6413] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 37.876119][ T6413] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 37.887166][ T6408] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 37.912984][ T6408] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 37.934998][ T6408] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 37.951050][ T6408] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.981602][ T6417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.019042][ T6417] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.020924][ T5977] Bluetooth: hci4: command tx timeout [ 38.020934][ T53] Bluetooth: hci0: command tx timeout [ 38.022398][ T5977] Bluetooth: hci1: command tx timeout [ 38.028424][ T6409] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 38.031311][ T6409] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 38.037286][ T44] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.038960][ T44] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.044750][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.046280][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.068622][ T6409] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 38.071553][ T6409] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 38.093089][ T6412] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 38.096255][ T5977] Bluetooth: hci2: command tx timeout [ 38.096321][ T6414] Bluetooth: hci3: command tx timeout [ 38.102194][ T6412] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 38.106487][ T6412] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 38.112330][ T6413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.121159][ T6413] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.140654][ T6412] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 38.144220][ T111] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.145729][ T111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.150351][ T111] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.151838][ T111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.170367][ T6417] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.179464][ T6408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.201294][ T6408] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.217482][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.218871][ T446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.221184][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.222583][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.240409][ T6409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.263982][ T6409] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.288550][ T579] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.290116][ T579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.308353][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.309766][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.328302][ T6408] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.330508][ T6408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.365101][ T6417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.373670][ T6409] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.420022][ T6412] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.431526][ T6412] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.438266][ T6413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.458956][ T6417] veth0_vlan: entered promiscuous mode [ 38.472557][ T6408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.475497][ T6417] veth1_vlan: entered promiscuous mode [ 38.483204][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.484768][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.513467][ T6413] veth0_vlan: entered promiscuous mode [ 38.519073][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.520612][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.536720][ T6417] veth0_macvtap: entered promiscuous mode [ 38.539842][ T6417] veth1_macvtap: entered promiscuous mode [ 38.550878][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.571726][ T6413] veth1_vlan: entered promiscuous mode [ 38.580235][ T6408] veth0_vlan: entered promiscuous mode [ 38.584495][ T6412] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 38.588078][ T6412] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 38.592384][ T6417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.600143][ T6409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.604423][ T6417] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.613179][ T6417] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.614908][ T6417] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.617233][ T6417] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.624756][ T6408] veth1_vlan: entered promiscuous mode [ 38.703873][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.705562][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.712396][ T6413] veth0_macvtap: entered promiscuous mode [ 38.715632][ T6413] veth1_macvtap: entered promiscuous mode [ 38.732887][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.735221][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.739857][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.751718][ T6413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.753918][ T6413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.776231][ T6413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.779334][ T6413] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.781126][ T6413] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.782901][ T6413] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.784715][ T6413] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.793372][ T6408] veth0_macvtap: entered promiscuous mode [ 38.808675][ T6412] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.821600][ T6408] veth1_macvtap: entered promiscuous mode [ 38.830495][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.832704][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.834933][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.835439][ T579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.838207][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.842289][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.843857][ T579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.878211][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.884047][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.894750][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.899457][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.901424][ T6408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.903563][ T6408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.907736][ T6408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.924807][ T6408] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.927323][ T6408] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.930028][ T6408] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.931815][ T6408] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.945710][ T6412] veth0_vlan: entered promiscuous mode [ 38.946846][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.948700][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 38.955672][ T6412] veth1_vlan: entered promiscuous mode [ 38.995524][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.003480][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.027084][ T6409] veth0_vlan: entered promiscuous mode [ 39.032208][ T6412] veth0_macvtap: entered promiscuous mode [ 39.039466][ T6409] veth1_vlan: entered promiscuous mode [ 39.053166][ T6412] veth1_macvtap: entered promiscuous mode [ 39.081492][ T446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.083154][ T446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.083486][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.087866][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.089897][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.092159][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.094111][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.100673][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.104338][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.110235][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.112482][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.114534][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.116980][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.118994][ T6412] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.121124][ T6412] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.124394][ T6412] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.144056][ T6412] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.146612][ T6412] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.148598][ T6412] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.150619][ T6412] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.168750][ T6499] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 39.194907][ T6499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.202216][ T6502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.208268][ T6499] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 39.221752][ T6501] bond0: entered promiscuous mode [ 39.222854][ T6501] bond_slave_0: entered promiscuous mode [ 39.224125][ T6501] bond_slave_1: entered promiscuous mode [ 39.225426][ T6501] batadv0: entered promiscuous mode [ 39.236312][ T6502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.237150][ T6409] veth0_macvtap: entered promiscuous mode [ 39.251949][ T6409] veth1_macvtap: entered promiscuous mode [ 39.307003][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.309311][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.311342][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.313476][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.320246][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.322341][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.324395][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 39.330736][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.335675][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.341833][ T6507] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.355123][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.361268][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.363494][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.367242][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.369975][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.372277][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.374392][ T6409] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 39.384594][ T6409] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 39.393595][ T6409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.403695][ T6409] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.405552][ T6409] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.410696][ T6409] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.412680][ T6409] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.422447][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.424665][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.447348][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.456392][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.503732][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.514341][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.573013][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.576804][ T6512] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.582731][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.597861][ T446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.599507][ T446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.627487][ T6512] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.677254][ T6515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.701669][ T6516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.719208][ T6515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.737256][ T6516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 40.096419][ T6414] Bluetooth: hci1: command tx timeout [ 40.096590][ T5977] Bluetooth: hci0: command tx timeout [ 40.097900][ T53] Bluetooth: hci4: command tx timeout [ 40.176219][ T53] Bluetooth: hci3: command tx timeout [ 40.189452][ T6414] Bluetooth: hci2: command tx timeout [ 40.268619][ T6521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 40.340074][ T6521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.111192][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.147123][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.160661][ T6527] netlink: 136 bytes leftover after parsing attributes in process `syz.1.11'. [ 41.328644][ T6398] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 41.345441][ T6541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.401026][ T6541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.456187][ T6537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.498363][ T6537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.518567][ T6398] usb 1-1: Using ep0 maxpacket: 16 [ 41.523957][ T6398] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 41.531798][ T6398] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 41.549204][ T6398] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 41.557550][ T6398] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.559236][ T6398] usb 1-1: Product: syz [ 41.567174][ T6398] usb 1-1: Manufacturer: syz [ 41.568187][ T6398] usb 1-1: SerialNumber: syz [ 41.584490][ T6556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.596647][ T6398] usb 1-1: config 0 descriptor?? [ 41.610645][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 41.615707][ T6398] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 41.623139][ T6398] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 41.636076][ T6556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.875049][ T6563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.916499][ T6563] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.176950][ T53] Bluetooth: hci1: command tx timeout [ 42.176985][ T5977] Bluetooth: hci4: command tx timeout [ 42.178157][ T6414] Bluetooth: hci0: command tx timeout [ 42.223898][ T6398] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 42.225723][ T6398] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 42.266357][ T6414] Bluetooth: hci2: command tx timeout [ 42.524590][ T6573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.576334][ T6573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.766010][ T6574] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 42.768804][ T6574] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 42.780763][ T6574] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 42.791024][ T6574] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 42.793186][ T6574] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.811863][ T6574] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 42.844124][ T6574] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 42.845392][ T6574] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 42.853238][ T6574] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 42.863364][ T6574] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 42.865539][ T6574] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 42.870815][ T6574] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 42.887593][ T6574] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 42.891670][ T6574] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 42.901963][ T6574] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 42.912900][ T6579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.915423][ T6579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.253562][ T6398] em28xx 1-1:0.0: AC97 vendor ID = 0x00fc00fe [ 43.556930][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.563601][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.627842][ T5977] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 43.652510][ T6586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 43.658782][ T6586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 43.860265][ T6398] em28xx 1-1:0.0: AC97 features = 0x0080 [ 43.865977][ T6398] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 44.067946][ T6398] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 44.079057][ T6398] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 44.082509][ T6398] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 44.084140][ T6398] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 44.088140][ T6398] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 44.106469][ T6398] usb 1-1: USB disconnect, device number 2 [ 44.127036][ T5977] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 44.737659][ T5977] Bluetooth: hci0: command 0x0c1a tx timeout [ 44.817771][ T5977] Bluetooth: hci1: command 0x0c1a tx timeout [ 44.819998][ T6414] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 44.896036][ T6414] Bluetooth: hci4: command 0x0c1a tx timeout [ 44.897515][ T6414] Bluetooth: hci3: command 0x0c1a tx timeout [ 44.900294][ T6604] netlink: 12 bytes leftover after parsing attributes in process `syz.1.40'. [ 45.095978][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 45.287355][ T8] usb 1-1: config index 0 descriptor too short (expected 4114, got 18) [ 45.293132][ T8] usb 1-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 45.297594][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.302452][ T8] usb 1-1: Product: syz [ 45.303355][ T8] usb 1-1: Manufacturer: syz [ 45.308300][ T8] usb 1-1: SerialNumber: syz [ 45.315780][ T8] usb 1-1: config 0 descriptor?? [ 45.426756][ T6607] loop1: detected capacity change from 0 to 32768 [ 45.431035][ T6607] ======================================================= [ 45.431035][ T6607] WARNING: The mand mount option has been deprecated and [ 45.431035][ T6607] and is ignored by this kernel. Remove the mand [ 45.431035][ T6607] option from the mount to silence this warning. [ 45.431035][ T6607] ======================================================= [ 45.443119][ T6607] XFS: ikeep mount option is deprecated. [ 45.444530][ T6607] XFS: noikeep mount option is deprecated. [ 45.480547][ T6607] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 45.525720][ T6607] XFS (loop1): Ending clean mount [ 45.550310][ T6607] XFS (loop1): Quotacheck needed: Please wait. [ 45.586237][ T6607] XFS (loop1): Quotacheck: Done. [ 45.696204][ T6617] netlink: 56 bytes leftover after parsing attributes in process `syz.4.42'. [ 46.392730][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 46.396537][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 46.399462][ T8] asix 1-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 46.402850][ T8] asix 1-1:0.0: probe with driver asix failed with error -71 [ 46.411904][ T8] usb 1-1: USB disconnect, device number 3 [ 46.418531][ T6412] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 46.692277][ T6633] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 46.733664][ T6633] loop1: detected capacity change from 0 to 2048 [ 46.763245][ T6633] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 46.794625][ T6637] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 46.800547][ T6633] syz.1.46: attempt to access beyond end of device [ 46.800547][ T6633] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 46.810987][ T6638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.816463][ T6414] Bluetooth: hci0: command 0x0c1a tx timeout [ 46.821171][ T6638] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 46.832248][ T6638] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 46.876259][ T6495] psmouse serio0: Failed to reset mouse on : -5 [ 46.896089][ T6414] Bluetooth: hci1: command 0x0c1a tx timeout [ 46.976597][ T6414] Bluetooth: hci3: command 0x0c1a tx timeout [ 46.986036][ T6414] Bluetooth: hci4: command 0x0c1a tx timeout [ 47.027949][ T6644] Zero length message leads to an empty skb [ 47.131919][ T30] audit: type=1326 audit(47.110:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6647 comm="syz.0.53" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb7b4a6e8 code=0x0 [ 47.230284][ T6650] binder: 6649:6650 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10) [ 47.234153][ T6650] binder: 6650 RLIMIT_NICE not set [ 47.284746][ T6652] binder: 6649:6652 tried to acquire reference to desc 0, got 1 instead [ 47.287927][ T6650] binder: 6650 RLIMIT_NICE not set [ 47.288108][ T6652] binder: 6649:6652 got new transaction with bad transaction stack, transaction 5 has target 6649:0 [ 47.291928][ T6652] binder: 6649:6652 transaction call to 6649:0 failed 6/29201/-71, size 0-0 line 3204 [ 47.303092][ T6464] binder: release 6649:6652 transaction 5 out, still active [ 47.304960][ T6464] binder: undelivered TRANSACTION_COMPLETE [ 47.306617][ T6464] binder: undelivered TRANSACTION_ERROR: 29201 [ 47.310308][ T6398] binder: release 6649:6650 transaction 5 in, still active [ 47.311941][ T6398] binder: send failed reply for transaction 5, target dead [ 47.333420][ T6654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.356232][ T6654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.470873][ T6662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.506848][ T6662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.538651][ T6665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 47.566456][ T6665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 47.934570][ T6669] capability: warning: `syz.3.62' uses 32-bit capabilities (legacy support in use) [ 48.115020][ T6685] syz.3.69 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 48.177644][ T6414] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 48.180171][ T6414] Bluetooth: hci2: Injecting HCI hardware error event [ 48.182721][ T5977] Bluetooth: hci2: hardware error 0x00 [ 48.240154][ T6414] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 48.275944][ T1645] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 48.377590][ T6414] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 48.465982][ T1645] usb 1-1: Using ep0 maxpacket: 16 [ 48.469653][ T1645] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 48.471630][ T1645] usb 1-1: config 0 has no interface number 0 [ 48.474735][ T1645] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 48.476916][ T1645] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.479086][ T1645] usb 1-1: Product: syz [ 48.479891][ T1645] usb 1-1: Manufacturer: syz [ 48.480937][ T1645] usb 1-1: SerialNumber: syz [ 48.483587][ T1645] usb 1-1: config 0 descriptor?? [ 48.490305][ T1645] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 48.633140][ T6698] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 48.634668][ T6698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 48.638796][ T6698] vhci_hcd vhci_hcd.0: Device attached [ 48.643165][ T6699] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 48.649849][ T446] vhci_hcd: stop threads [ 48.651403][ T446] vhci_hcd: release socket [ 48.652548][ T446] vhci_hcd: disconnect device [ 48.895994][ T6414] Bluetooth: hci0: command 0x0c1a tx timeout [ 49.011527][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.4.83'. [ 49.056232][ T6414] Bluetooth: hci4: command 0x0c1a tx timeout [ 49.056966][ T53] Bluetooth: hci3: command 0x0c1a tx timeout [ 49.065334][ T53] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 49.099238][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.137232][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.148049][ T6715] ------------[ cut here ]------------ [ 49.149487][ T6715] name '6875' [ 49.150331][ T6715] WARNING: CPU: 0 PID: 6715 at fs/proc/generic.c:711 remove_proc_entry+0x278/0x4cc [ 49.152270][ T6715] Modules linked in: [ 49.153168][ T6715] CPU: 0 UID: 0 PID: 6715 Comm: syz.4.83 Not tainted 6.11.0-rc7-syzkaller-g5f5673607153 #0 [ 49.155248][ T6715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 49.157593][ T6715] pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 49.159293][ T6715] pc : remove_proc_entry+0x278/0x4cc [ 49.160620][ T6715] lr : remove_proc_entry+0x278/0x4cc [ 49.161882][ T6715] sp : ffff8000a31d7ac0 [ 49.162768][ T6715] x29: ffff8000a31d7b40 x28: ffff0000c6571640 x27: dfff800000000000 [ 49.164668][ T6715] x26: ffff70001463af58 x25: ffff800092593e60 x24: 1ffff0001463af60 [ 49.166442][ T6715] x23: 0000000000000004 x22: ffff0000c65716f8 x21: ffff0000d1936548 [ 49.168336][ T6715] x20: 0000000000000000 x19: ffff0000d1936548 x18: 0000000000000008 [ 49.170071][ T6715] x17: 0000000000000000 x16: ffff800083032784 x15: 0000000000000001 [ 49.171828][ T6715] x14: 1fffe000366d325a x13: 0000000000000000 x12: 0000000000000000 [ 49.173594][ T6715] x11: 0000000000000002 x10: 0000000000ff0100 x9 : 4a14fe7958629300 [ 49.175386][ T6715] x8 : 4a14fe7958629300 x7 : 0000000000000001 x6 : 0000000000000001 [ 49.177165][ T6715] x5 : ffff8000a31d7218 x4 : ffff80008f65b620 x3 : ffff8000806051a0 [ 49.178952][ T6715] x2 : 0000000000000001 x1 : 0000000100000000 x0 : 0000000000000000 [ 49.180738][ T6715] Call trace: [ 49.181413][ T6715] remove_proc_entry+0x278/0x4cc [ 49.182523][ T6715] bcm_release+0x21c/0x800 [ 49.183562][ T6715] sock_close+0xa4/0x1e8 [ 49.184514][ T6715] __fput+0x1bc/0x774 [ 49.185433][ T6715] ____fput+0x20/0x30 [ 49.186300][ T6715] task_work_run+0x230/0x2e0 [ 49.187372][ T6715] do_notify_resume+0x178/0x1f4 [ 49.188334][ T6715] el0_svc+0xac/0x168 [ 49.189196][ T6715] el0t_64_sync_handler+0x84/0xfc [ 49.190330][ T6715] el0t_64_sync+0x190/0x194 [ 49.190398][ T6722] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.191250][ T6715] irq event stamp: 3614 [ 49.194134][ T6715] hardirqs last enabled at (3613): [] console_unlock+0x18c/0x3d4 [ 49.196182][ T6715] hardirqs last disabled at (3614): [] el1_dbg+0x24/0x80 [ 49.198102][ T6715] softirqs last enabled at (3592): [] lock_sock_nested+0xcc/0x11c [ 49.200247][ T6715] softirqs last disabled at (3590): [] lock_sock_nested+0x74/0x11c [ 49.202308][ T6715] ---[ end trace 0000000000000000 ]--- [ 49.203506][ C0] vkms_vblank_simulate: vblank timer overrun [ 49.236800][ T6722] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.292266][ T1645] gspca_spca1528: reg_w err -71 [ 49.316656][ T1645] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71 [ 49.319511][ T1645] usb 1-1: USB disconnect, device number 4 [ 50.255973][ T5977] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 50.475997][ T6495] misc userio: Buffer overflowed, userio client isn't keeping up [ 51.765604][ T6495] input: PS/2 Generic Mouse as /devices/serio0/input/input2 [ 51.975975][ T6495] psmouse serio0: Failed to enable mouse on [ 52.256093][ T5977] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 52.258029][ T5977] Bluetooth: hci1: Injecting HCI hardware error event [ 52.260997][ T5977] Bluetooth: hci1: hardware error 0x00 [ 54.336102][ T5977] Bluetooth: hci1: Opcode 0x0c03 failed: -110