last executing test programs: 13m18.389988042s ago: executing program 2 (id=206): syz_usb_connect(0x5, 0x3f, &(0x7f0000000500)=ANY=[@ANYBLOB="120110014352cb40431955222b4c0102030109022d00010109100609040d060367aefbff09050e160000"], 0x0) 13m13.902682482s ago: executing program 2 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13m12.326205598s ago: executing program 2 (id=220): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000240)={0x0, 0xfffffffffffff001, 0x0, [0x6, 0x3, 0xe, 0x200, 0x2], [0x7fffffff, 0x80000001, 0xf, 0x7, 0x5, 0x8, 0xffffffffffffffff, 0xb, 0xa51c, 0x80000000, 0x2, 0x5, 0x24d, 0xa33, 0x1, 0x6, 0x10000, 0x2, 0x10, 0x5, 0x3, 0x8, 0x7c21804a, 0x8, 0x7fff, 0xa, 0x1, 0x1, 0x9, 0xe, 0x1, 0xde1d, 0x7, 0x2, 0x2, 0xffffffffffff8000, 0x1000, 0x12, 0x0, 0x0, 0x7f, 0x2, 0x5ba9, 0x8, 0x2, 0x7, 0x8, 0xfffffffffffffb60, 0x400000000, 0x100000000, 0x8001, 0x1, 0x3, 0x5, 0xffff, 0x3, 0x101, 0x0, 0x67c, 0x1684bfb2, 0x2, 0xc, 0x4, 0x0, 0x8000000000000000, 0x3, 0xca7, 0x5, 0x5, 0x100, 0x2da74e41, 0x1, 0x10, 0x80, 0x75, 0x1, 0x2, 0x2, 0x8, 0x9, 0x8000, 0x3, 0x7, 0x7ff, 0x3, 0xff, 0x1ff, 0x7, 0xe648, 0x3, 0x6, 0xdfb3, 0x3, 0x2, 0xfffffffffffffffd, 0x4, 0x7, 0x13, 0x80, 0x5, 0x8001, 0x0, 0x0, 0x80, 0x7f, 0x3, 0xb4000000, 0x0, 0x6, 0x80, 0x5, 0x662, 0x7, 0x9, 0xca, 0x8, 0x7, 0xc144, 0x2, 0xfffffffffffff36f, 0x4]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 13m12.29603215s ago: executing program 2 (id=221): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsopen(&(0x7f0000000180)='proc\x00', 0x1) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f00000000c0)=0x7) r4 = syz_open_dev$usbmon(&(0x7f0000002d80), 0x9929, 0x2200) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8040}, 0x4048001) ioctl$MON_IOCQ_RING_SIZE(r4, 0x9205) syz_open_dev$tty20(0xc, 0x4, 0x0) 13m11.278325553s ago: executing program 2 (id=222): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_DIRENT(0xffffffffffffffff, 0x0, 0x200001d0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpgrp(0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x10f000, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={r7, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000845}, 0x8000) 13m8.969792824s ago: executing program 2 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() listen(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, 0x0, &(0x7f0000004880)=@udp}, 0x20) 12m53.454085687s ago: executing program 32 (id=225): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() listen(0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r3, 0x0, &(0x7f0000004880)=@udp}, 0x20) 11m31.373170059s ago: executing program 3 (id=381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x800) 11m31.196980484s ago: executing program 3 (id=382): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18) mount(0x0, 0x0, &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000000580)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRES32=r4, @ANYBLOB="32e1463d0717bd5ae9d0d6537317e1dd0402ee2c8665e87ff40b06dd58175c17e1a9db8ba08ad61aa7f462f5fa7ec49d2d805ad18936c9acfe36eadf87cf23adf490eb6233bfda8b8abcae59b67b02e9d7d0e57c25503708d967bbfef9597b8269a051109f6574adc7d5de169ad4c550c014deb67851d46cc1266eeb8b01192827dd439b30ae87cc0069f7555125d63b3442a28b8c573f1a7a647582f29e3080ede1e2cacaa9a18055792ca350fc03e8c19788a88edc84384da65f9dd982dde87142dcb42cd9492dbd7e5c366cdcaa453e8f0bde23781b18be2fbfca6d584a02a213326e3557d1606b16b73f", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r6, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) socket$inet_udp(0x2, 0x2, 0x0) bind$bt_rfcomm(r0, &(0x7f0000001740)={0x1f, @none, 0xa}, 0xa) connect$bt_rfcomm(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) 11m27.596285089s ago: executing program 3 (id=386): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac1"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 11m24.225691712s ago: executing program 3 (id=391): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x800) 11m24.033943863s ago: executing program 3 (id=392): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x104}, 0x1, 0x0, 0x0, 0x91}, 0x24008000) 11m22.81274443s ago: executing program 3 (id=393): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 11m7.666251775s ago: executing program 33 (id=393): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x40000000000004) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r3, 0x0, 0x25, 0x0, @void}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000700)='sched_switch\x00'}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, 0xc0a742c700a80d57, 0x25aa6}}, 0x20}}, 0x2000e844) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) sendmsg$nl_xfrm(r9, &(0x7f00000000c0)={0x0, 0xa00, &(0x7f0000000080)={&(0x7f0000000040)=@flushpolicy={0x1c, 0x1d, 0x1, 0x0, 0x0, "", [@policy_type={0xa, 0x10, {0x1}}]}, 0x1c}}, 0x0) sendmsg$802154_dgram(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r5, r3, 0x4, r3}, 0x10) r10 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x3}}}}}}}, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r1, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x2000c094) 10m29.030016497s ago: executing program 0 (id=469): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e0000"], 0x48) fsopen(0x0, 0x1) syz_open_procfs(0x0, &(0x7f0000000000)='net/ptype\x00') r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000280), 0x80a00, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000080)={0x1, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 10m27.275957572s ago: executing program 0 (id=471): bind$tipc(0xffffffffffffffff, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x1ff, 0x12) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@md0, 0x0, &(0x7f0000000100)='./file0\x00') syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)="000003", 0xfe64) 10m25.489401391s ago: executing program 0 (id=472): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='ecryptfs\x00', 0x10005, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000580)=0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095", @ANYRES32=r4, @ANYBLOB="32e1463d0717bd5ae9d0d6537317e1dd0402ee2c8665e87ff40b06dd58175c17e1a9db8ba08ad61aa7f462f5fa7ec49d2d805ad18936c9acfe36eadf87cf23adf490eb6233bfda8b8abcae59b67b02e9d7d0e57c25503708d967bbfef9597b8269a051109f6574adc7d5de169ad4c550c014deb67851d46cc1266eeb8b01192827dd439b30ae87cc0069f7555125d63b3442a28b8c573f1a7a647582f29e3080ede1e2cacaa9a18055792ca350fc03e8c19788a88edc84384da65f9dd982dde87142dcb42cd9492dbd7e5c366cdcaa453e8f0bde23781b18be2fbfca6d584a02a213326e3557d1606b16b73f", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) execve(0x0, 0x0, 0x0) r6 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) shmat(r6, &(0x7f0000ff7000/0x3000)=nil, 0x400c) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ff7000/0x2000)=nil) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x1}, 0xa) 10m25.05435289s ago: executing program 0 (id=476): socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x0) 10m22.550495585s ago: executing program 0 (id=478): syz_usb_connect(0x0, 0x3b, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0) 10m19.353983707s ago: executing program 0 (id=481): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) memfd_secret(0x80000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) shmget(0x0, 0x4000, 0x100, &(0x7f0000519000/0x4000)=nil) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881af, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 10m3.992631316s ago: executing program 34 (id=481): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_genetlink_get_family_id$SEG6(&(0x7f0000000540), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) memfd_secret(0x80000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r3, 0x0) shmget(0x0, 0x4000, 0x100, &(0x7f0000519000/0x4000)=nil) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881af, 0x4}) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0xc}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) 21.277928515s ago: executing program 5 (id=1403): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) 21.046020283s ago: executing program 5 (id=1404): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000034) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) fanotify_mark(0xffffffffffffffff, 0x541, 0x40001019, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000200), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 17.007060914s ago: executing program 4 (id=1407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000940)=0x28, 0x4) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000005c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) 16.822163991s ago: executing program 5 (id=1408): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x28, 0x64, 0x0, 0xff08) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000080000002000000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="030000e0"], 0x48}, 0x1, 0x0, 0x0, 0xc044}, 0x8090) 15.645935584s ago: executing program 5 (id=1409): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x200}, 0xc) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) 11.92617829s ago: executing program 4 (id=1412): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) 11.698463517s ago: executing program 4 (id=1413): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x10f000, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173"], 0x50}}, 0x0) 9.788458213s ago: executing program 1 (id=1414): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x40901, 0x8) write$FUSE_DIRENT(r2, 0x0, 0x200001d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x10f000, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a"], 0x50}}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, 0x0) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000000)={r8, 0x1}) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x30, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001040)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000845}, 0x8000) 9.73086542s ago: executing program 4 (id=1415): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f00000000c0)="ad") 7.590996636s ago: executing program 1 (id=1416): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, 0x0, 0x20000034) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) fanotify_mark(0xffffffffffffffff, 0x541, 0x40001019, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) r5 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x10, &(0x7f0000000240), &(0x7f0000000200), 0x8, 0x15, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) 5.682576511s ago: executing program 1 (id=1417): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffbf8, @remote, 0x7}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fsopen(&(0x7f0000000080)='binder\x00', 0x1) fchdir(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x8c0) 5.521791475s ago: executing program 5 (id=1418): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) 5.122604471s ago: executing program 4 (id=1419): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x10f000, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, 0x0) 3.520594736s ago: executing program 5 (id=1420): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[], 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0xfffffbf8, @remote, 0x7}, 0x1c) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) fsopen(&(0x7f0000000080)='binder\x00', 0x1) fchdir(0xffffffffffffffff) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYRESHEX=r3, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES8=r2, @ANYRES32, @ANYRES64], &(0x7f0000000040)='syzkaller\x00'}, 0x94) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_settime(r4, 0x1, &(0x7f0000000200)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000240)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x8c0) 1.368574622s ago: executing program 1 (id=1421): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) 1.137076927s ago: executing program 1 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}, @NFT_MSG_NEWSETELEM={0x34, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 121.420441ms ago: executing program 4 (id=1423): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x10f000, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173"], 0x50}}, 0x0) 0s ago: executing program 1 (id=1424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = syz_usbip_server_init(0x4) write$usbip_server(r3, &(0x7f0000000040)=@ret_submit={{0x3, 0x1, 0x0, 0x1, 0x8}, 0xfff, 0x0, 0x34, 0x3, 0x1, 0x0, "", [{0x2, 0x5, 0x2, 0x5961}, {0x1, 0x7fffffff, 0x7, 0x8}, {0x6, 0x8, 0x1, 0x7fffffff}]}, 0x60) syz_emit_ethernet(0xfdef, &(0x7f0000000000)={@broadcast, @dev, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @empty, @empty, @local}}}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x80) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) get_mempolicy(0xffffffffffffffff, 0x0, 0x2000400000043ff, &(0x7f0000ff9000/0x2000)=nil, 0x2) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3282b}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) madvise(&(0x7f00001c1000/0x3000)=nil, 0x3000, 0x9) kernel console output (not intermixed with test programs): ge_slave_1: entered allmulticast mode [ 544.693001][ T8613] bridge_slave_1: entered promiscuous mode [ 544.732940][ T8630] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.733057][ T8630] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.733244][ T8630] bridge_slave_0: entered allmulticast mode [ 544.734905][ T8630] bridge_slave_0: entered promiscuous mode [ 544.846589][ T8630] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.846732][ T8630] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.846958][ T8630] bridge_slave_1: entered allmulticast mode [ 544.849985][ T8630] bridge_slave_1: entered promiscuous mode [ 545.226934][ T62] Bluetooth: hci1: command tx timeout [ 545.987220][ T5980] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 546.111909][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.277618][ T5980] usb 2-1: config 0 has an invalid interface number: 187 but max is 0 [ 546.277654][ T5980] usb 2-1: config 0 has no interface number 0 [ 546.279980][ T5980] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice=f7.32 [ 546.280006][ T5980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.280017][ T5980] usb 2-1: Product: syz [ 546.280024][ T5980] usb 2-1: Manufacturer: syz [ 546.280032][ T5980] usb 2-1: SerialNumber: syz [ 546.283707][ T5980] usb 2-1: config 0 descriptor?? [ 546.302112][ T5980] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.187/input/input6 [ 546.420880][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.449716][ T8630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.638385][ T6651] Bluetooth: hci1: command tx timeout [ 547.741263][ T8630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 549.093984][ T5151] bcm5974 2-1:0.187: could not read from device [ 549.167378][ T5980] usb 2-1: USB disconnect, device number 18 [ 549.585112][ T8613] team0: Port device team_slave_0 added [ 549.971733][ T6651] Bluetooth: hci1: command tx timeout [ 551.443813][ T8769] CIFS: Unable to determine destination address [ 551.462038][ T8769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.710'. [ 552.185226][ T8613] team0: Port device team_slave_1 added [ 552.767244][ T8630] team0: Port device team_slave_0 added [ 553.052004][ T8630] team0: Port device team_slave_1 added [ 553.115880][ T6651] Bluetooth: hci1: command tx timeout [ 555.317106][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.317121][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.317137][ T8613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.411986][ T8613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.411999][ T8613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.412015][ T8613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.665844][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.665863][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.665892][ T8630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.676346][ T8630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 555.676364][ T8630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.676390][ T8630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 555.883880][ T8795] Device name cannot be null; rc = [-22] [ 558.536381][ T8613] hsr_slave_0: entered promiscuous mode [ 558.537194][ T8613] hsr_slave_1: entered promiscuous mode [ 558.537714][ T8613] debugfs: 'hsr0' already exists in 'hsr' [ 558.537729][ T8613] Cannot create hsr debugfs directory [ 561.465228][ T8630] hsr_slave_0: entered promiscuous mode [ 561.466647][ T8630] hsr_slave_1: entered promiscuous mode [ 561.467546][ T8630] debugfs: 'hsr0' already exists in 'hsr' [ 561.467572][ T8630] Cannot create hsr debugfs directory [ 562.272668][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 563.690210][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.891129][ T5989] bridge_slave_1: left allmulticast mode [ 564.891299][ T5989] bridge_slave_1: left promiscuous mode [ 564.899961][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.769364][ T5989] bridge_slave_0: left allmulticast mode [ 565.769389][ T5989] bridge_slave_0: left promiscuous mode [ 565.769570][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.838298][ T5989] bridge_slave_1: left allmulticast mode [ 565.838321][ T5989] bridge_slave_1: left promiscuous mode [ 565.838471][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.917069][ T5989] bridge_slave_0: left allmulticast mode [ 565.917100][ T5989] bridge_slave_0: left promiscuous mode [ 565.917422][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 566.001802][ T5989] bridge_slave_1: left allmulticast mode [ 566.001835][ T5989] bridge_slave_1: left promiscuous mode [ 566.002073][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.636900][ T5989] bridge_slave_0: left allmulticast mode [ 567.636939][ T5989] bridge_slave_0: left promiscuous mode [ 567.637171][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.239888][ T5989] bridge_slave_1: left allmulticast mode [ 569.239926][ T5989] bridge_slave_1: left promiscuous mode [ 569.240164][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.387391][ T5989] bridge_slave_0: left allmulticast mode [ 569.387425][ T5989] bridge_slave_0: left promiscuous mode [ 569.387688][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.890109][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.486589][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 571.531384][ T5989] bond0 (unregistering): Released all slaves [ 572.016327][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.114086][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.179605][ T5989] bond0 (unregistering): Released all slaves [ 573.757640][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.019764][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.098601][ T5989] bond0 (unregistering): Released all slaves [ 574.415985][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.476249][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.563871][ T5989] bond0 (unregistering): Released all slaves [ 576.414483][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.414667][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.414853][ T8723] bridge_slave_0: entered allmulticast mode [ 576.441410][ T8723] bridge_slave_0: entered promiscuous mode [ 576.511282][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.511357][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.511539][ T8723] bridge_slave_1: entered allmulticast mode [ 576.513096][ T8723] bridge_slave_1: entered promiscuous mode [ 578.675877][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 578.876643][ T5989] hsr_slave_0: left promiscuous mode [ 578.904067][ T5989] hsr_slave_1: left promiscuous mode [ 578.905156][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.946919][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.206080][ T5989] hsr_slave_0: left promiscuous mode [ 579.265720][ T5989] hsr_slave_1: left promiscuous mode [ 579.270221][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 579.490504][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 580.805719][ T5989] hsr_slave_0: left promiscuous mode [ 581.903609][ T5989] hsr_slave_1: left promiscuous mode [ 581.904568][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 581.951821][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.275563][ T5989] hsr_slave_0: left promiscuous mode [ 582.355604][ T5989] hsr_slave_1: left promiscuous mode [ 582.379498][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 582.471091][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 582.829897][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 582.833284][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 582.883151][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 582.906851][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 582.914456][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 583.287558][ T8922] Device name cannot be null; rc = [-22] [ 584.960695][ T6651] Bluetooth: hci2: command tx timeout [ 585.429541][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 586.972318][ T8933] nvme_fabrics: missing parameter 'transport=%s' [ 586.972375][ T8933] nvme_fabrics: missing parameter 'nqn=%s' [ 587.035655][ T6651] Bluetooth: hci2: command tx timeout [ 587.310117][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 590.014016][ T6651] Bluetooth: hci2: command tx timeout [ 590.100574][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 590.103955][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 590.122785][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 590.206551][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 590.207447][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 592.085477][ T6651] Bluetooth: hci2: command tx timeout [ 592.245236][ T6651] Bluetooth: hci5: command tx timeout [ 594.316892][ T6651] Bluetooth: hci5: command tx timeout [ 594.426201][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 594.679312][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 596.827677][ T6651] Bluetooth: hci5: command tx timeout [ 597.620165][ T8990] Device name cannot be null; rc = [-22] [ 598.876306][ T6651] Bluetooth: hci5: command tx timeout [ 599.185590][ T804] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 599.345586][ T804] usb 5-1: Using ep0 maxpacket: 8 [ 599.347959][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 599.356627][ T804] usb 5-1: config 1 interface 0 has no altsetting 0 [ 599.359517][ T804] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.40 [ 599.359546][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.359565][ T804] usb 5-1: Product: syz [ 599.359580][ T804] usb 5-1: Manufacturer: syz [ 599.359595][ T804] usb 5-1: SerialNumber: syz [ 599.660480][ T804] usbhid 5-1:1.0: can't add hid device: -71 [ 599.660606][ T804] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 599.681433][ T804] usb 5-1: USB disconnect, device number 26 [ 599.897717][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 600.106448][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 600.586878][ T62] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 600.607202][ T62] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 600.610663][ T62] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 600.612313][ T62] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 600.613615][ T62] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 603.920033][ T62] Bluetooth: hci7: command tx timeout [ 604.950222][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 605.186101][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 605.486709][ T9039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 606.000911][ T62] Bluetooth: hci7: command tx timeout [ 606.041700][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.495949][ T9049] Device name cannot be null; rc = [-22] [ 608.077435][ T62] Bluetooth: hci7: command tx timeout [ 609.193888][ T9057] Device name cannot be null; rc = [-22] [ 610.205549][ T6651] Bluetooth: hci7: command tx timeout [ 610.703210][ T8613] syz-executor (8613) used greatest stack depth: 17496 bytes left [ 610.947395][ T8630] syz-executor (8630) used greatest stack depth: 16728 bytes left [ 611.811545][ T8948] chnl_net:caif_netlink_parms(): no params data found [ 611.820995][ T8919] chnl_net:caif_netlink_parms(): no params data found [ 612.895298][ T6651] Bluetooth: hci7: command 0x0405 tx timeout [ 613.359502][ T9012] chnl_net:caif_netlink_parms(): no params data found [ 614.215210][ T9096] Device name cannot be null; rc = [-22] [ 615.660659][ T9100] Device name cannot be null; rc = [-22] [ 616.626831][ T8948] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.631179][ T8948] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.631430][ T8948] bridge_slave_0: entered allmulticast mode [ 616.634122][ T8948] bridge_slave_0: entered promiscuous mode [ 616.673152][ T8919] bridge0: port 1(bridge_slave_0) entered blocking state [ 616.673275][ T8919] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.673481][ T8919] bridge_slave_0: entered allmulticast mode [ 616.703777][ T8919] bridge_slave_0: entered promiscuous mode [ 616.711998][ T8948] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.712119][ T8948] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.712348][ T8948] bridge_slave_1: entered allmulticast mode [ 616.715344][ T8948] bridge_slave_1: entered promiscuous mode [ 616.749846][ T8919] bridge0: port 2(bridge_slave_1) entered blocking state [ 616.749966][ T8919] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.750170][ T8919] bridge_slave_1: entered allmulticast mode [ 616.752979][ T8919] bridge_slave_1: entered promiscuous mode [ 617.281570][ T8948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.662349][ T8919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 617.676617][ T8948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.892110][ T8919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 618.987692][ T9012] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.987911][ T9012] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.988232][ T9012] bridge_slave_0: entered allmulticast mode [ 618.991061][ T9012] bridge_slave_0: entered promiscuous mode [ 619.189645][ T9118] Device name cannot be null; rc = [-22] [ 619.975063][ T9012] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.979629][ T9012] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.979895][ T9012] bridge_slave_1: entered allmulticast mode [ 619.984136][ T9012] bridge_slave_1: entered promiscuous mode [ 621.028173][ T8948] team0: Port device team_slave_0 added [ 621.032853][ T8919] team0: Port device team_slave_0 added [ 621.080676][ T8948] team0: Port device team_slave_1 added [ 621.318882][ T8919] team0: Port device team_slave_1 added [ 621.598817][ T9012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.597058][ T9141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 622.662709][ T9012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.022886][ T8948] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.022906][ T8948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.022934][ T8948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.207069][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.207081][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.207097][ T8919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.210061][ T8948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.210072][ T8948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.210089][ T8948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.433635][ T8919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.433654][ T8919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.433680][ T8919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.467105][ T9012] team0: Port device team_slave_0 added [ 623.538723][ T9012] team0: Port device team_slave_1 added [ 624.411201][ T9164] Device name cannot be null; rc = [-22] [ 624.620418][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.357095][ T8948] hsr_slave_0: entered promiscuous mode [ 625.397730][ T8948] hsr_slave_1: entered promiscuous mode [ 625.398368][ T8948] debugfs: 'hsr0' already exists in 'hsr' [ 625.398386][ T8948] Cannot create hsr debugfs directory [ 625.507506][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.507525][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.507551][ T9012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.651092][ T9012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.651112][ T9012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.651138][ T9012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 625.707498][ T8919] hsr_slave_0: entered promiscuous mode [ 625.715098][ T8919] hsr_slave_1: entered promiscuous mode [ 625.727999][ T8919] debugfs: 'hsr0' already exists in 'hsr' [ 625.728028][ T8919] Cannot create hsr debugfs directory [ 629.146641][ T9012] hsr_slave_0: entered promiscuous mode [ 629.148241][ T9012] hsr_slave_1: entered promiscuous mode [ 629.148798][ T9012] debugfs: 'hsr0' already exists in 'hsr' [ 629.148816][ T9012] Cannot create hsr debugfs directory [ 629.649171][ T9213] Device name cannot be null; rc = [-22] [ 632.687786][ T8948] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 632.741179][ T8948] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 633.950746][ T8948] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 634.005991][ T8948] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 634.452936][ T5989] bridge_slave_1: left allmulticast mode [ 634.452967][ T5989] bridge_slave_1: left promiscuous mode [ 634.453227][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.581469][ T5989] bridge_slave_0: left allmulticast mode [ 634.581501][ T5989] bridge_slave_0: left promiscuous mode [ 634.582957][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.709268][ T5989] bridge_slave_1: left allmulticast mode [ 634.709300][ T5989] bridge_slave_1: left promiscuous mode [ 634.709586][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.834573][ T5989] bridge_slave_0: left allmulticast mode [ 634.834605][ T5989] bridge_slave_0: left promiscuous mode [ 634.834869][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.008369][ T5989] bridge_slave_1: left allmulticast mode [ 635.008400][ T5989] bridge_slave_1: left promiscuous mode [ 635.008639][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.195030][ T5989] bridge_slave_0: left allmulticast mode [ 635.195062][ T5989] bridge_slave_0: left promiscuous mode [ 635.195346][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.583375][ T9288] netlink: 'syz.4.864': attribute type 27 has an invalid length. [ 636.926197][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.006242][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.095728][ T5989] bond0 (unregistering): Released all slaves [ 637.618356][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 637.780319][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 637.873638][ T5989] bond0 (unregistering): Released all slaves [ 638.612749][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.717181][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.805907][ T5989] bond0 (unregistering): Released all slaves [ 640.560197][ T5989] hsr_slave_0: left promiscuous mode [ 640.599646][ T5989] hsr_slave_1: left promiscuous mode [ 640.606763][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 640.639923][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 640.992533][ T5989] hsr_slave_0: left promiscuous mode [ 641.005873][ T5989] hsr_slave_1: left promiscuous mode [ 641.006625][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.056463][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.936307][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 642.738636][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 643.531944][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 643.548241][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 643.549568][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 643.550877][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 643.551741][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 644.035142][ T37] audit: type=1326 audit(1765998323.350:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9364 comm="syz.4.887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdca011f749 code=0x0 [ 645.985600][ T62] Bluetooth: hci1: command tx timeout [ 646.586946][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 646.739865][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 647.006256][ T6651] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 647.028472][ T6651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 647.030256][ T6651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 647.031555][ T6651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 647.032427][ T6651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 648.075629][ T6651] Bluetooth: hci1: command tx timeout [ 649.184683][ T6651] Bluetooth: hci4: command tx timeout [ 650.780240][ T62] Bluetooth: hci1: command tx timeout [ 651.197262][ T6651] Bluetooth: hci4: command tx timeout [ 652.795599][ T6651] Bluetooth: hci1: command tx timeout [ 653.992385][ T6651] Bluetooth: hci4: command tx timeout [ 655.193255][ T9431] Device name cannot be null; rc = [-22] [ 656.008989][ T6651] Bluetooth: hci4: command tx timeout [ 658.112650][ T9360] chnl_net:caif_netlink_parms(): no params data found [ 659.238789][ T9387] chnl_net:caif_netlink_parms(): no params data found [ 661.525846][ T9360] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.542986][ T9360] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.543254][ T9360] bridge_slave_0: entered allmulticast mode [ 661.609815][ T9360] bridge_slave_0: entered promiscuous mode [ 661.716153][ T9360] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.716286][ T9360] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.716551][ T9360] bridge_slave_1: entered allmulticast mode [ 661.719179][ T9360] bridge_slave_1: entered promiscuous mode [ 662.276843][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 662.298411][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 662.299964][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 662.301191][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 662.301987][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 663.540375][ T9360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.926220][ T9490] Driver unsupported XDP return value 0 on prog (id 203) dev N/A, expect packet loss! [ 664.558387][ T62] Bluetooth: hci2: command tx timeout [ 665.033400][ T9360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.052423][ T9387] bridge0: port 1(bridge_slave_0) entered blocking state [ 665.052617][ T9387] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.052824][ T9387] bridge_slave_0: entered allmulticast mode [ 665.056342][ T9387] bridge_slave_0: entered promiscuous mode [ 666.635580][ T62] Bluetooth: hci2: command tx timeout [ 666.689762][ T9387] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.690712][ T9387] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.690975][ T9387] bridge_slave_1: entered allmulticast mode [ 666.718148][ T9387] bridge_slave_1: entered promiscuous mode [ 668.481476][ T9360] team0: Port device team_slave_0 added [ 668.716425][ T62] Bluetooth: hci2: command tx timeout [ 668.749884][ T9360] team0: Port device team_slave_1 added [ 668.856906][ T9387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.105321][ T9387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.527516][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 669.527535][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.527562][ T9360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 670.795643][ T62] Bluetooth: hci2: command tx timeout [ 670.814527][ T9360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 670.814540][ T9360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 670.814557][ T9360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 670.869988][ T9387] team0: Port device team_slave_0 added [ 670.899060][ T9387] team0: Port device team_slave_1 added [ 671.851020][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.851033][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.851049][ T9387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.905118][ T9536] Device name cannot be null; rc = [-22] [ 672.868084][ T9387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.868097][ T9387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.868114][ T9387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.224322][ T9549] Device name cannot be null; rc = [-22] [ 674.210255][ T9360] hsr_slave_0: entered promiscuous mode [ 674.211155][ T9360] hsr_slave_1: entered promiscuous mode [ 674.226260][ T9360] debugfs: 'hsr0' already exists in 'hsr' [ 674.226294][ T9360] Cannot create hsr debugfs directory [ 677.001928][ T9387] hsr_slave_0: entered promiscuous mode [ 677.002910][ T9387] hsr_slave_1: entered promiscuous mode [ 677.003500][ T9387] debugfs: 'hsr0' already exists in 'hsr' [ 677.003516][ T9387] Cannot create hsr debugfs directory [ 686.147770][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.359174][ T37] audit: type=1326 audit(1765998365.720:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9589 comm="syz.4.941" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 686.878123][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 688.841598][ T9622] Device name cannot be null; rc = [-22] [ 690.129634][ T37] audit: type=1326 audit(1765998369.490:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9631 comm="syz.4.952" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 691.623195][ T9644] Device name cannot be null; rc = [-22] [ 692.330348][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.330582][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.330806][ T9481] bridge_slave_0: entered allmulticast mode [ 692.333620][ T9481] bridge_slave_0: entered promiscuous mode [ 692.399126][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.399374][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.399632][ T9481] bridge_slave_1: entered allmulticast mode [ 692.453109][ T9481] bridge_slave_1: entered promiscuous mode [ 693.936629][ T9360] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 694.136207][ T9360] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 694.386994][ T9360] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 694.425288][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 694.439288][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 694.567329][ T9360] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 694.848484][ T9481] team0: Port device team_slave_0 added [ 695.072359][ T9481] team0: Port device team_slave_1 added [ 695.810472][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.810490][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.810516][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.821390][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.821417][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 695.821437][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 696.780879][ T9481] hsr_slave_0: entered promiscuous mode [ 696.784229][ T9481] hsr_slave_1: entered promiscuous mode [ 696.784895][ T9481] debugfs: 'hsr0' already exists in 'hsr' [ 696.784913][ T9481] Cannot create hsr debugfs directory [ 696.948183][ T5989] bridge_slave_1: left allmulticast mode [ 696.948207][ T5989] bridge_slave_1: left promiscuous mode [ 696.948384][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.016496][ T5989] bridge_slave_0: left allmulticast mode [ 697.016517][ T5989] bridge_slave_0: left promiscuous mode [ 697.016690][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 697.145089][ T5989] bridge_slave_1: left allmulticast mode [ 697.145113][ T5989] bridge_slave_1: left promiscuous mode [ 697.145267][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.369397][ T5989] bridge_slave_0: left allmulticast mode [ 697.369419][ T5989] bridge_slave_0: left promiscuous mode [ 697.369582][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.339179][ T5989] bridge_slave_1: left allmulticast mode [ 698.339211][ T5989] bridge_slave_1: left promiscuous mode [ 698.339453][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.634220][ T5989] bridge_slave_0: left allmulticast mode [ 698.646990][ T5989] bridge_slave_0: left promiscuous mode [ 698.652312][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.988216][ T9683] Device name cannot be null; rc = [-22] [ 701.282589][ T6651] Bluetooth: hci2: command 0x0405 tx timeout [ 701.419183][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 701.656336][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 701.762006][ T9704] ptrace attach of "./syz-executor exec"[5806] was attempted by " [ 703.302077][ T5989] bond0 (unregistering): Released all slaves [ 704.836802][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 704.839644][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 704.864832][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 704.888840][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 704.894603][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 704.913820][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.036240][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.101537][ T5989] bond0 (unregistering): Released all slaves [ 707.142570][ T6651] Bluetooth: hci5: command tx timeout [ 707.377549][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 707.476391][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 707.518368][ T5989] bond0 (unregistering): Released all slaves [ 708.284479][ T62] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 708.324564][ T62] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 708.329748][ T62] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 708.332240][ T62] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 708.336495][ T62] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 709.215912][ T6651] Bluetooth: hci5: command tx timeout [ 710.402137][ T6651] Bluetooth: hci6: command tx timeout [ 711.395520][ T6651] Bluetooth: hci5: command tx timeout [ 711.609763][ T9765] Device name cannot be null; rc = [-22] [ 712.226034][ T5989] hsr_slave_0: left promiscuous mode [ 712.250215][ T5989] hsr_slave_1: left promiscuous mode [ 712.250994][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.316338][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.435704][ T5989] hsr_slave_0: left promiscuous mode [ 712.456201][ T5989] hsr_slave_1: left promiscuous mode [ 712.456989][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.480876][ T6651] Bluetooth: hci6: command tx timeout [ 712.499823][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 712.596210][ T5989] hsr_slave_0: left promiscuous mode [ 712.616014][ T5989] hsr_slave_1: left promiscuous mode [ 712.616820][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 712.668076][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.436154][ T6651] Bluetooth: hci5: command tx timeout [ 713.656557][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 713.818493][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 714.565672][ T6651] Bluetooth: hci6: command tx timeout [ 714.946070][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 715.081157][ T9777] Device name cannot be null; rc = [-22] [ 715.428222][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 716.648151][ T6651] Bluetooth: hci6: command tx timeout [ 717.076387][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 717.236956][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 718.250842][ T9775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.986'. [ 719.967790][ T9802] process 'syz.1.994' launched './file0' with NULL argv: empty string added [ 721.957914][ T5980] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 722.136392][ T5980] usb 5-1: Using ep0 maxpacket: 32 [ 722.138848][ T5980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.138883][ T5980] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.140927][ T5980] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 722.140956][ T5980] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 722.140976][ T5980] usb 5-1: Product: syz [ 722.140990][ T5980] usb 5-1: Manufacturer: syz [ 722.276657][ T5980] hub 5-1:4.0: USB hub found [ 722.503511][ T5980] hub 5-1:4.0: 2 ports detected [ 722.747163][ T9722] chnl_net:caif_netlink_parms(): no params data found [ 722.836379][ T5980] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 722.836410][ T5980] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 723.031359][ T5980] usb 5-1: USB disconnect, device number 27 [ 723.310556][ T9739] chnl_net:caif_netlink_parms(): no params data found [ 723.528993][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 723.559288][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 723.561135][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 723.576511][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 723.577498][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 725.116633][ T9722] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.117047][ T9722] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.117298][ T9722] bridge_slave_0: entered allmulticast mode [ 725.147390][ T9722] bridge_slave_0: entered promiscuous mode [ 725.336288][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.336437][ T9722] bridge0: port 2(bridge_slave_1) entered disabled state [ 725.336678][ T9722] bridge_slave_1: entered allmulticast mode [ 725.339413][ T9722] bridge_slave_1: entered promiscuous mode [ 725.591892][ T9739] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.592106][ T9739] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.592347][ T9739] bridge_slave_0: entered allmulticast mode [ 725.595142][ T9739] bridge_slave_0: entered promiscuous mode [ 727.067168][ T62] Bluetooth: hci1: command tx timeout [ 727.199846][ T9739] bridge0: port 2(bridge_slave_1) entered blocking state [ 727.199968][ T9739] bridge0: port 2(bridge_slave_1) entered disabled state [ 727.200206][ T9739] bridge_slave_1: entered allmulticast mode [ 727.202376][ T9739] bridge_slave_1: entered promiscuous mode [ 727.238339][ T9722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.315571][ T804] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 727.388477][ T9722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.465796][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 727.473768][ T804] usb 5-1: config 0 interface 0 has no altsetting 0 [ 727.476270][ T804] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 727.476299][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 727.476320][ T804] usb 5-1: Product: syz [ 727.476334][ T804] usb 5-1: Manufacturer: syz [ 727.476347][ T804] usb 5-1: SerialNumber: syz [ 727.528280][ T804] usb 5-1: config 0 descriptor?? [ 727.819535][ T9739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 727.936598][ T9739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 727.941443][ T9722] team0: Port device team_slave_0 added [ 727.969206][ T804] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 728.181327][ T804] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 728.181770][ T804] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 728.246324][ T9722] team0: Port device team_slave_1 added [ 728.410000][ T7746] usb 5-1: USB disconnect, device number 28 [ 728.641246][ T9739] team0: Port device team_slave_0 added [ 728.741928][ T9739] team0: Port device team_slave_1 added [ 728.843300][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.843314][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 728.843330][ T9722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 729.115643][ T62] Bluetooth: hci1: command tx timeout [ 729.143655][ T9722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 729.143673][ T9722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 729.143701][ T9722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 730.375655][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 730.375674][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 730.375698][ T9739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 731.205488][ T62] Bluetooth: hci1: command tx timeout [ 731.208058][ T9739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 731.208074][ T9739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 731.208110][ T9739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.455956][ T804] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 732.594351][ T9722] hsr_slave_0: entered promiscuous mode [ 732.603057][ T9722] hsr_slave_1: entered promiscuous mode [ 732.604018][ T9722] debugfs: 'hsr0' already exists in 'hsr' [ 732.604047][ T9722] Cannot create hsr debugfs directory [ 732.777074][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 732.780105][ T804] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 732.780140][ T804] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 732.781793][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 732.781819][ T804] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 732.781830][ T804] usb 5-1: Product: syz [ 732.781838][ T804] usb 5-1: Manufacturer: syz [ 732.814502][ T804] hub 5-1:4.0: USB hub found [ 733.294907][ T62] Bluetooth: hci1: command tx timeout [ 733.738069][ T804] hub 5-1:4.0: 2 ports detected [ 734.220497][ T804] hub 5-1:4.0: set hub depth failed [ 734.535042][ T804] usb 5-1: USB disconnect, device number 29 [ 734.691722][ T9739] hsr_slave_0: entered promiscuous mode [ 734.693106][ T9739] hsr_slave_1: entered promiscuous mode [ 734.694062][ T9739] debugfs: 'hsr0' already exists in 'hsr' [ 734.694086][ T9739] Cannot create hsr debugfs directory [ 738.513288][ T9840] chnl_net:caif_netlink_parms(): no params data found [ 739.015902][ T804] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 739.171511][ T804] usb 5-1: Using ep0 maxpacket: 16 [ 739.175840][ T804] usb 5-1: unable to get BOS descriptor or descriptor too short [ 739.183987][ T804] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 739.184025][ T804] usb 5-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 739.184052][ T804] usb 5-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 739.184079][ T804] usb 5-1: config 1 interface 0 has no altsetting 0 [ 739.195003][ T804] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 739.195035][ T804] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.195056][ T804] usb 5-1: Product: syz [ 739.195070][ T804] usb 5-1: Manufacturer: syz [ 739.195084][ T804] usb 5-1: SerialNumber: syz [ 739.242554][T10004] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 739.512303][ T804] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input7 [ 739.535711][ T5151] bcm5974 5-1:1.0: could not read from device [ 740.083982][T10020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1027'. [ 740.866730][ T5151] bcm5974 5-1:1.0: could not read from device [ 740.879565][ T804] usb 5-1: USB disconnect, device number 30 [ 741.247898][ T9840] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.248093][ T9840] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.248323][ T9840] bridge_slave_0: entered allmulticast mode [ 741.252936][ T9840] bridge_slave_0: entered promiscuous mode [ 741.258669][ T9840] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.258838][ T9840] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.259041][ T9840] bridge_slave_1: entered allmulticast mode [ 741.261455][ T9840] bridge_slave_1: entered promiscuous mode [ 741.600132][ T5989] bridge_slave_1: left allmulticast mode [ 741.600163][ T5989] bridge_slave_1: left promiscuous mode [ 741.600432][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.659357][ T5989] bridge_slave_0: left allmulticast mode [ 741.659388][ T5989] bridge_slave_0: left promiscuous mode [ 741.659662][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.675865][ T804] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 741.740047][ T5989] bridge_slave_1: left allmulticast mode [ 741.740079][ T5989] bridge_slave_1: left promiscuous mode [ 741.740326][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 741.817097][ T5989] bridge_slave_0: left allmulticast mode [ 741.817128][ T5989] bridge_slave_0: left promiscuous mode [ 741.817385][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 741.825827][ T804] usb 5-1: Using ep0 maxpacket: 32 [ 741.829117][ T804] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.829150][ T804] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.858791][ T804] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 741.858825][ T804] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 741.858845][ T804] usb 5-1: Product: syz [ 741.858859][ T804] usb 5-1: Manufacturer: syz [ 741.894916][ T804] hub 5-1:4.0: USB hub found [ 742.139855][ T804] hub 5-1:4.0: 2 ports detected [ 742.178370][ T5989] bridge_slave_1: left allmulticast mode [ 742.178513][ T5989] bridge_slave_1: left promiscuous mode [ 742.178714][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 742.954294][ T5989] bridge_slave_0: left allmulticast mode [ 742.954316][ T5989] bridge_slave_0: left promiscuous mode [ 742.954539][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.154485][ T804] hub 5-1:4.0: set hub depth failed [ 743.216969][ T804] usb 5-1: USB disconnect, device number 31 [ 743.586455][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 743.686484][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 743.748411][ T5989] bond0 (unregistering): Released all slaves [ 744.036752][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.177740][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.248916][ T5989] bond0 (unregistering): Released all slaves [ 746.132557][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.996092][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.258333][ T5989] bond0 (unregistering): Released all slaves [ 748.114719][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 749.338797][ T9840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.496453][ T9840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.097877][ T5989] hsr_slave_0: left promiscuous mode [ 750.156952][ T5989] hsr_slave_1: left promiscuous mode [ 750.158095][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.217020][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.458647][ T5989] hsr_slave_0: left promiscuous mode [ 750.507467][ T5989] hsr_slave_1: left promiscuous mode [ 750.508592][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.559383][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.711037][ T5989] hsr_slave_0: left promiscuous mode [ 750.746675][ T5989] hsr_slave_1: left promiscuous mode [ 750.749153][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.796407][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.556329][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 751.786213][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 754.826447][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 755.036833][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 756.516341][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 756.706159][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 757.568964][ T9840] team0: Port device team_slave_0 added [ 757.620072][ T9840] team0: Port device team_slave_1 added [ 760.054501][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.054520][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.054547][ T9840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.186630][ T9840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.186649][ T9840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.186677][ T9840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.758157][ T9840] hsr_slave_0: entered promiscuous mode [ 760.759378][ T9840] hsr_slave_1: entered promiscuous mode [ 760.904923][ T9840] debugfs: 'hsr0' already exists in 'hsr' [ 760.925256][ T9840] Cannot create hsr debugfs directory [ 761.753481][ T9739] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 761.882113][ T9739] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 761.967674][ T9739] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 762.074939][ T9739] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 762.631408][ T9722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 762.758444][ T9722] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 762.833430][ T9722] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 763.168434][ T9722] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 763.406110][ T9840] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 763.530194][ T9840] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 764.165255][ T9840] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 764.675754][ T9840] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 764.841562][ T9739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 764.944118][ T9739] 8021q: adding VLAN 0 to HW filter on device team0 [ 764.983515][ T1007] bridge0: port 1(bridge_slave_0) entered blocking state [ 764.984054][ T1007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.007170][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.007762][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.617486][ T9840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.655356][ T6651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 765.668522][ T6651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 765.669863][ T6651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 765.671500][ T6651] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 765.675044][ T6651] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 766.565613][ T5789] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 766.673510][ T9840] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.045884][ T5789] usb 2-1: Using ep0 maxpacket: 32 [ 767.255038][ T5789] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.255276][ T5789] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.319656][ T5789] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 767.319690][ T5789] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 767.319712][ T5789] usb 2-1: Product: syz [ 767.319727][ T5789] usb 2-1: Manufacturer: syz [ 767.361001][ T5789] hub 2-1:4.0: USB hub found [ 767.587100][ T5789] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 767.778234][ T5789] usb 2-1: USB disconnect, device number 19 [ 768.319306][ T6651] Bluetooth: hci2: command tx timeout [ 768.616596][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.616792][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.676614][ T1007] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.676699][ T1007] bridge0: port 2(bridge_slave_1) entered forwarding state [ 769.344822][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 769.367030][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 769.379475][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 769.381833][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 769.383035][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 770.395600][ T62] Bluetooth: hci2: command tx timeout [ 771.442214][ T62] Bluetooth: hci4: command tx timeout [ 772.543849][ T62] Bluetooth: hci2: command tx timeout [ 773.515822][ T62] Bluetooth: hci4: command tx timeout [ 774.555550][ T62] Bluetooth: hci2: command tx timeout [ 774.563262][T10184] chnl_net:caif_netlink_parms(): no params data found [ 774.703748][ T48] bridge_slave_1: left allmulticast mode [ 774.703777][ T48] bridge_slave_1: left promiscuous mode [ 774.704006][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.857791][ T48] bridge_slave_0: left allmulticast mode [ 774.857822][ T48] bridge_slave_0: left promiscuous mode [ 774.858066][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.598218][ T62] Bluetooth: hci4: command tx timeout [ 776.498718][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.616072][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.747417][ T48] bond0 (unregistering): Released all slaves [ 777.976800][ T62] Bluetooth: hci4: command tx timeout [ 779.945572][ T48] hsr_slave_0: left promiscuous mode [ 779.985564][ T48] hsr_slave_1: left promiscuous mode [ 779.987603][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.036432][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.047183][ T48] team0 (unregistering): Port device team_slave_1 removed [ 783.216377][ T48] team0 (unregistering): Port device team_slave_0 removed [ 783.825074][T10184] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.825278][T10184] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.845634][T10184] bridge_slave_0: entered allmulticast mode [ 783.849200][T10184] bridge_slave_0: entered promiscuous mode [ 783.881987][T10184] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.882118][T10184] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.882357][T10184] bridge_slave_1: entered allmulticast mode [ 783.909908][T10184] bridge_slave_1: entered promiscuous mode [ 784.596356][T10305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1082'. [ 785.868260][ T6651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 785.879185][ T6651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 785.889742][ T6651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 785.897307][ T6651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 785.898149][ T6651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.927899][T10184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.964153][T10184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.353203][ T62] Bluetooth: hci5: command tx timeout [ 788.456614][T10184] team0: Port device team_slave_0 added [ 788.480240][T10213] chnl_net:caif_netlink_parms(): no params data found [ 788.506147][T10184] team0: Port device team_slave_1 added [ 790.296828][T10184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 790.296848][T10184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.296946][T10184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.384470][T10184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.384489][T10184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 790.384516][T10184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.395513][ T62] Bluetooth: hci5: command tx timeout [ 793.016108][ T62] Bluetooth: hci5: command tx timeout [ 794.202555][T10184] hsr_slave_0: entered promiscuous mode [ 794.203932][T10184] hsr_slave_1: entered promiscuous mode [ 794.204925][T10184] debugfs: 'hsr0' already exists in 'hsr' [ 794.204949][T10184] Cannot create hsr debugfs directory [ 794.647930][T10213] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.651135][T10213] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.680876][T10213] bridge_slave_0: entered allmulticast mode [ 794.778303][T10213] bridge_slave_0: entered promiscuous mode [ 794.878805][T10213] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.878938][T10213] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.879131][T10213] bridge_slave_1: entered allmulticast mode [ 794.881764][T10213] bridge_slave_1: entered promiscuous mode [ 795.035803][ T62] Bluetooth: hci5: command tx timeout [ 796.514958][T10213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 796.564061][T10213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.060579][T10213] team0: Port device team_slave_0 added [ 798.350780][T10383] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 798.350804][T10383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 798.361532][T10383] vhci_hcd vhci_hcd.0: Device attached [ 799.289076][T10386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 799.304285][T10384] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 799.330018][ T1411] vhci_hcd vhci_hcd.1: stop threads [ 799.330924][ T1411] vhci_hcd vhci_hcd.1: release socket [ 799.331022][ T1411] vhci_hcd vhci_hcd.1: disconnect device [ 799.358246][T10213] team0: Port device team_slave_1 added [ 799.956392][ T6078] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 800.196256][ T6078] usb 2-1: Using ep0 maxpacket: 32 [ 800.597707][ T6078] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 800.597745][ T6078] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.600008][ T6078] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 800.600037][ T6078] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 800.600059][ T6078] usb 2-1: Product: syz [ 800.600075][ T6078] usb 2-1: Manufacturer: syz [ 800.672288][ T6078] hub 2-1:4.0: USB hub found [ 802.137214][ T6078] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 802.192252][ T6078] usb 2-1: USB disconnect, device number 20 [ 802.269477][T10213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 802.269495][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.269523][T10213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 802.636555][T10213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 802.636568][T10213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 802.636584][T10213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 802.748408][T10310] chnl_net:caif_netlink_parms(): no params data found [ 804.241861][T10213] hsr_slave_0: entered promiscuous mode [ 804.243157][T10213] hsr_slave_1: entered promiscuous mode [ 804.260375][T10213] debugfs: 'hsr0' already exists in 'hsr' [ 804.260407][T10213] Cannot create hsr debugfs directory [ 805.635681][ T9942] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 805.788612][ T9942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 805.788665][ T9942] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 805.788689][ T9942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.825894][ T9942] usb 2-1: config 0 descriptor?? [ 805.941509][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.944138][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.944521][T10310] bridge_slave_0: entered allmulticast mode [ 805.971125][T10310] bridge_slave_0: entered promiscuous mode [ 806.049975][ T9942] usbhid 2-1:0.0: can't add hid device: -71 [ 806.050095][ T9942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 806.066055][ T9942] usb 2-1: USB disconnect, device number 21 [ 806.101914][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.102116][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.102367][T10310] bridge_slave_1: entered allmulticast mode [ 806.152288][T10310] bridge_slave_1: entered promiscuous mode [ 806.463235][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 806.482331][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 806.525664][ T6078] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 806.675549][ T6078] usb 2-1: Using ep0 maxpacket: 32 [ 806.697847][ T6078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.697899][ T6078] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 806.697924][ T6078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.776467][ T6078] usb 2-1: config 0 descriptor?? [ 806.781702][ T6078] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 806.847787][ T6078] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 807.794243][ T6551] usb 2-1: USB disconnect, device number 22 [ 807.812419][ T6551] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 808.849090][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.553933][T10310] team0: Port device team_slave_0 added [ 809.819129][T10310] team0: Port device team_slave_1 added [ 811.592363][T10466] ptrace attach of "./syz-executor exec"[5806] was attempted by ""[10466] [ 812.351822][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.351840][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.351877][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.426409][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.426427][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.426454][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 813.476357][ T5789] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 813.965533][ T5789] usb 5-1: Using ep0 maxpacket: 32 [ 813.968914][ T5789] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.968947][ T5789] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.971819][ T5789] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 813.971851][ T5789] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 813.971870][ T5789] usb 5-1: Product: syz [ 813.971885][ T5789] usb 5-1: Manufacturer: syz [ 814.051999][ T5789] hub 5-1:4.0: USB hub found [ 814.219292][T10184] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 814.275982][ T5789] hub 5-1:4.0: 5 ports detected [ 814.276333][ T5789] hub 5-1:4.0: insufficient power available to use all downstream ports [ 814.483928][ T5789] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 814.483958][ T5789] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 815.780786][ T5789] usb 5-1: USB disconnect, device number 32 [ 815.989163][T10184] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 816.102919][T10310] hsr_slave_0: entered promiscuous mode [ 816.104218][T10310] hsr_slave_1: entered promiscuous mode [ 816.105143][T10310] debugfs: 'hsr0' already exists in 'hsr' [ 816.105169][T10310] Cannot create hsr debugfs directory [ 816.115583][T10184] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 817.655348][T10184] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 818.384616][ T48] bridge_slave_1: left allmulticast mode [ 818.384648][ T48] bridge_slave_1: left promiscuous mode [ 818.384895][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 818.497435][ T48] bridge_slave_0: left allmulticast mode [ 818.497466][ T48] bridge_slave_0: left promiscuous mode [ 818.497711][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 820.110240][ T48] bridge_slave_1: left allmulticast mode [ 820.110273][ T48] bridge_slave_1: left promiscuous mode [ 820.110576][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.197275][ T48] bridge_slave_0: left allmulticast mode [ 820.197307][ T48] bridge_slave_0: left promiscuous mode [ 820.197561][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 825.175647][ T885] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 825.345606][ T885] usb 5-1: Using ep0 maxpacket: 32 [ 825.351190][ T885] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.351225][ T885] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.353182][ T885] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 825.353213][ T885] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 825.353235][ T885] usb 5-1: Product: syz [ 825.353250][ T885] usb 5-1: Manufacturer: syz [ 825.417567][ T885] hub 5-1:4.0: USB hub found [ 825.623453][ T885] hub 5-1:4.0: 5 ports detected [ 825.623796][ T885] hub 5-1:4.0: insufficient power available to use all downstream ports [ 825.835938][ T885] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 825.835966][ T885] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 825.892649][ T885] usb 5-1: USB disconnect, device number 33 [ 826.032515][T10529] Device name cannot be null; rc = [-22] [ 826.808320][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 826.996292][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.780974][ T48] bond0 (unregistering): Released all slaves [ 828.036425][ T6651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 828.057523][ T6651] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 828.058608][ T6651] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 828.065011][ T6651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 828.086357][ T6651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 830.171715][ T6651] Bluetooth: hci1: command tx timeout [ 830.564702][ T62] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 830.589823][ T62] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 830.599978][ T62] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 830.601402][ T62] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 830.602819][ T62] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 832.235721][ T6651] Bluetooth: hci1: command tx timeout [ 832.723958][ T6651] Bluetooth: hci6: command tx timeout [ 835.120402][ T6651] Bluetooth: hci1: command tx timeout [ 835.120412][ T62] Bluetooth: hci6: command tx timeout [ 835.737504][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.568843][ T62] Bluetooth: hci1: command tx timeout [ 837.568857][ T6651] Bluetooth: hci6: command tx timeout [ 837.578150][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 838.005782][ T48] bond0 (unregistering): Released all slaves [ 838.035742][ T6078] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 838.277399][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 838.277449][ T6078] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 838.277463][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.286764][ T6078] usb 5-1: config 0 descriptor?? [ 838.531901][ T6078] usbhid 5-1:0.0: can't add hid device: -71 [ 838.568898][ T6078] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 838.599921][ T6078] usb 5-1: USB disconnect, device number 34 [ 839.065951][ T6078] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 839.135612][ T48] hsr_slave_0: left promiscuous mode [ 839.180034][ T48] hsr_slave_1: left promiscuous mode [ 839.180687][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.218837][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.245594][ T6078] usb 5-1: Using ep0 maxpacket: 32 [ 839.247299][ T6078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.247329][ T6078] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 839.247342][ T6078] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.251315][ T6078] usb 5-1: config 0 descriptor?? [ 839.297505][ T6078] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 839.299488][ T6078] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 839.445587][ T48] hsr_slave_0: left promiscuous mode [ 839.475592][ T48] hsr_slave_1: left promiscuous mode [ 839.476322][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 839.510633][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 839.596084][ T6651] Bluetooth: hci6: command tx timeout [ 839.826301][ T9942] usb 5-1: USB disconnect, device number 35 [ 839.856123][ T9942] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 843.378215][ T48] team0 (unregistering): Port device team_slave_1 removed [ 844.073914][ T48] team0 (unregistering): Port device team_slave_0 removed [ 844.205616][ T9942] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 844.425669][ T9942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 844.425708][ T9942] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 844.425722][ T9942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.429256][ T9942] usb 2-1: config 0 descriptor?? [ 844.688131][ T9942] usbhid 2-1:0.0: can't add hid device: -71 [ 844.688218][ T9942] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 844.717997][ T9942] usb 2-1: USB disconnect, device number 23 [ 845.215775][ T9942] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 845.365540][ T9942] usb 2-1: Using ep0 maxpacket: 32 [ 845.370182][ T9942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.370234][ T9942] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 845.370258][ T9942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.426032][ T9942] usb 2-1: config 0 descriptor?? [ 845.431020][ T9942] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 845.434010][ T9942] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 845.507171][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 845.562209][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 845.564420][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 845.588181][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 845.588996][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 847.157422][ T5882] usb 2-1: USB disconnect, device number 24 [ 847.205930][ T5882] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 847.738252][ T6651] Bluetooth: hci2: command tx timeout [ 848.305593][ T5883] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 848.487821][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.487872][ T5883] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 848.487895][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.492212][ T5883] usb 2-1: config 0 descriptor?? [ 848.702424][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 848.702549][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 848.741146][ T5883] usb 2-1: USB disconnect, device number 25 [ 849.216990][ T9942] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 849.374619][ T37] audit: type=1326 audit(1765998528.730:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10669 comm="syz.4.1176" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 849.385507][ T9942] usb 2-1: Using ep0 maxpacket: 32 [ 849.415357][ T9942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 849.415524][ T9942] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 849.415549][ T9942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.418775][ T9942] usb 2-1: config 0 descriptor?? [ 849.428367][ T9942] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 849.446192][ T9942] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 849.755598][ T6651] Bluetooth: hci2: command tx timeout [ 850.826497][ T48] team0 (unregistering): Port device team_slave_1 removed [ 851.175171][ T9942] usb 2-1: USB disconnect, device number 26 [ 851.186750][ T9942] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 851.392836][ T48] team0 (unregistering): Port device team_slave_0 removed [ 851.840104][ T6651] Bluetooth: hci2: command tx timeout [ 854.216742][ T6651] Bluetooth: hci2: command tx timeout [ 854.302090][ T37] audit: type=1326 audit(1765998533.660:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10697 comm="syz.1.1184" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 859.575684][ T37] audit: type=1326 audit(1765998538.930:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10732 comm="syz.1.1194" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 863.797387][T10552] chnl_net:caif_netlink_parms(): no params data found [ 864.169856][T10542] chnl_net:caif_netlink_parms(): no params data found [ 864.300022][T10642] chnl_net:caif_netlink_parms(): no params data found [ 865.582188][T10552] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.583357][T10552] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.583613][T10552] bridge_slave_0: entered allmulticast mode [ 865.614767][T10552] bridge_slave_0: entered promiscuous mode [ 865.705673][T10552] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.705811][T10552] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.706131][T10552] bridge_slave_1: entered allmulticast mode [ 865.750965][T10552] bridge_slave_1: entered promiscuous mode [ 866.528397][ T37] audit: type=1326 audit(1765998545.890:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10799 comm="syz.4.1202" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 868.527981][T10552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.528135][T10542] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.528262][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.528368][T10542] bridge_slave_0: entered allmulticast mode [ 868.529962][T10542] bridge_slave_0: entered promiscuous mode [ 868.757711][T10542] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.759033][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.759219][T10542] bridge_slave_1: entered allmulticast mode [ 868.761873][T10542] bridge_slave_1: entered promiscuous mode [ 868.810774][T10552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 868.811598][T10642] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.812412][T10642] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.812617][T10642] bridge_slave_0: entered allmulticast mode [ 868.849756][T10642] bridge_slave_0: entered promiscuous mode [ 869.117229][T10642] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.117334][T10642] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.117473][T10642] bridge_slave_1: entered allmulticast mode [ 869.119345][T10642] bridge_slave_1: entered promiscuous mode [ 870.663805][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.341784][T10542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.349617][T10552] team0: Port device team_slave_0 added [ 871.621868][T10542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.624342][T10552] team0: Port device team_slave_1 added [ 871.650160][T10642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.556695][ T37] audit: type=1326 audit(1765998551.920:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10834 comm="syz.1.1210" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 872.880802][T10642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 873.266594][T10552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.266606][T10552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.266623][T10552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 873.269339][T10542] team0: Port device team_slave_0 added [ 873.368287][T10552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 873.368305][T10552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.368331][T10552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 873.370735][T10542] team0: Port device team_slave_1 added [ 873.377517][T10642] team0: Port device team_slave_0 added [ 873.857705][T10846] Bluetooth: MGMT ver 1.23 [ 874.228285][T10642] team0: Port device team_slave_1 added [ 874.549376][T10542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.549393][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.549414][T10542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.888288][T10542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.888301][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.888317][T10542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.891960][T10642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.891979][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.892005][T10642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 875.048141][T10642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 875.048160][T10642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 875.048187][T10642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.062023][T10552] hsr_slave_0: entered promiscuous mode [ 875.063729][T10552] hsr_slave_1: entered promiscuous mode [ 875.065324][T10552] debugfs: 'hsr0' already exists in 'hsr' [ 875.065347][T10552] Cannot create hsr debugfs directory [ 876.283369][ T6651] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 876.285807][ T6651] Bluetooth: hci0: command 0x0406 tx timeout [ 876.612614][T10542] hsr_slave_0: entered promiscuous mode [ 876.614040][T10542] hsr_slave_1: entered promiscuous mode [ 876.615493][T10542] debugfs: 'hsr0' already exists in 'hsr' [ 876.615518][T10542] Cannot create hsr debugfs directory [ 876.872482][T10642] hsr_slave_0: entered promiscuous mode [ 876.873926][T10642] hsr_slave_1: entered promiscuous mode [ 876.874951][T10642] debugfs: 'hsr0' already exists in 'hsr' [ 876.874975][T10642] Cannot create hsr debugfs directory [ 877.473361][ T48] bridge_slave_1: left allmulticast mode [ 877.473391][ T48] bridge_slave_1: left promiscuous mode [ 877.473635][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.867838][ T48] bridge_slave_0: left allmulticast mode [ 877.867858][ T48] bridge_slave_0: left promiscuous mode [ 877.868213][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.950651][ T48] bridge_slave_1: left allmulticast mode [ 877.950673][ T48] bridge_slave_1: left promiscuous mode [ 877.950850][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.026597][ T48] bridge_slave_0: left allmulticast mode [ 878.026621][ T48] bridge_slave_0: left promiscuous mode [ 878.026780][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.085494][ T48] bridge_slave_1: left allmulticast mode [ 878.085525][ T48] bridge_slave_1: left promiscuous mode [ 878.113002][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.146499][ T48] bridge_slave_0: left allmulticast mode [ 878.146521][ T48] bridge_slave_0: left promiscuous mode [ 878.146691][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.857166][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.916927][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.996836][ T48] bond0 (unregistering): Released all slaves [ 881.046302][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 881.424687][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 881.601917][ T48] bond0 (unregistering): Released all slaves [ 882.296303][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 882.417983][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 882.477929][ T48] bond0 (unregistering): Released all slaves [ 885.425561][ T48] hsr_slave_0: left promiscuous mode [ 885.572960][ T48] hsr_slave_1: left promiscuous mode [ 885.573642][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 885.686285][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.305692][ T48] hsr_slave_0: left promiscuous mode [ 886.325536][ T48] hsr_slave_1: left promiscuous mode [ 886.326299][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.366290][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.545644][ T48] hsr_slave_0: left promiscuous mode [ 886.692031][ T48] hsr_slave_1: left promiscuous mode [ 886.693023][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.729177][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 886.995661][ T6300] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 887.168040][ T6300] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 887.168079][ T6300] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 887.168093][ T6300] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.171989][ T6300] usb 2-1: config 0 descriptor?? [ 887.425745][ T6300] usbhid 2-1:0.0: can't add hid device: -71 [ 887.425873][ T6300] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 887.434304][ T6300] usb 2-1: USB disconnect, device number 27 [ 887.538246][ T48] team0 (unregistering): Port device team_slave_1 removed [ 887.676861][ T48] team0 (unregistering): Port device team_slave_0 removed [ 887.905511][ T5789] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 888.038699][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 888.060328][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 888.061724][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 888.063617][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 888.075458][ T5789] usb 2-1: Using ep0 maxpacket: 32 [ 888.078291][ T5789] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.078343][ T5789] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 888.078370][ T5789] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.105920][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 888.151530][ T5789] usb 2-1: config 0 descriptor?? [ 888.902551][ T5789] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 888.904485][ T5789] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 890.442214][ T5789] usb 2-1: USB disconnect, device number 28 [ 890.530096][ T5789] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 890.875751][ T62] Bluetooth: hci4: command tx timeout [ 891.547718][ T6651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 891.551648][ T6651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 891.553488][ T6651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 891.554554][ T6651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 891.555259][ T6651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 891.632626][ T48] team0 (unregistering): Port device team_slave_1 removed [ 891.866235][ T48] team0 (unregistering): Port device team_slave_0 removed [ 892.035649][ T5883] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 892.195597][ T5883] usb 5-1: device descriptor read/64, error -71 [ 892.446698][ T5883] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 892.576080][ T5883] usb 5-1: device descriptor read/64, error -71 [ 892.695945][ T5883] usb usb5-port1: attempt power cycle [ 892.957238][ T62] Bluetooth: hci4: command tx timeout [ 893.049586][ T5883] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 893.181300][ T5883] usb 5-1: device descriptor read/8, error -71 [ 893.439021][ T5883] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 893.459666][ T5883] usb 5-1: device descriptor read/8, error -71 [ 893.576731][ T5883] usb usb5-port1: unable to enumerate USB device [ 893.636502][ T48] team0 (unregistering): Port device team_slave_1 removed [ 893.737236][ T62] Bluetooth: hci5: command tx timeout [ 894.542896][ T48] team0 (unregistering): Port device team_slave_0 removed [ 896.575558][ T6651] Bluetooth: hci5: command tx timeout [ 896.575668][ T62] Bluetooth: hci4: command tx timeout [ 898.350376][ T37] audit: type=1326 audit(1765998577.710:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11015 comm="syz.1.1260" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 898.643588][ T6651] Bluetooth: hci5: command tx timeout [ 898.646196][ T62] Bluetooth: hci4: command tx timeout [ 900.716257][ T6651] Bluetooth: hci5: command tx timeout [ 903.853086][ T37] audit: type=1326 audit(1765998583.210:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11077 comm="syz.1.1268" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 904.210089][T10960] chnl_net:caif_netlink_parms(): no params data found [ 905.136720][T10972] chnl_net:caif_netlink_parms(): no params data found [ 905.591498][ T5883] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 905.738014][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.738068][ T5883] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 905.738101][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.743855][ T5883] usb 2-1: config 0 descriptor?? [ 906.570194][ T5883] usbhid 2-1:0.0: can't add hid device: -71 [ 906.570330][ T5883] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 906.593666][ T5883] usb 2-1: USB disconnect, device number 29 [ 906.809562][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 906.837902][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 906.840547][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 906.841713][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 906.843262][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 907.114889][T10960] bridge0: port 1(bridge_slave_0) entered blocking state [ 907.115061][T10960] bridge0: port 1(bridge_slave_0) entered disabled state [ 907.115310][T10960] bridge_slave_0: entered allmulticast mode [ 907.119464][T10960] bridge_slave_0: entered promiscuous mode [ 907.145536][ T5883] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 907.216347][T10960] bridge0: port 2(bridge_slave_1) entered blocking state [ 907.216484][T10960] bridge0: port 2(bridge_slave_1) entered disabled state [ 907.216744][T10960] bridge_slave_1: entered allmulticast mode [ 907.219494][T10960] bridge_slave_1: entered promiscuous mode [ 907.335527][ T5883] usb 2-1: Using ep0 maxpacket: 32 [ 907.337901][ T5883] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.337959][ T5883] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 907.337984][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.343356][ T5883] usb 2-1: config 0 descriptor?? [ 907.389486][ T5883] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 907.410493][ T5883] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 908.627674][ T5883] usb 2-1: USB disconnect, device number 30 [ 908.644525][ T5883] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 908.694053][ T37] audit: type=1326 audit(1765998588.050:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11131 comm="syz.1.1277" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 908.755091][T10960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 908.867701][T10960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 908.869769][T10972] bridge0: port 1(bridge_slave_0) entered blocking state [ 908.870672][T10972] bridge0: port 1(bridge_slave_0) entered disabled state [ 908.870918][T10972] bridge_slave_0: entered allmulticast mode [ 908.875061][T10972] bridge_slave_0: entered promiscuous mode [ 908.955674][ T6651] Bluetooth: hci1: command tx timeout [ 909.020970][T10972] bridge0: port 2(bridge_slave_1) entered blocking state [ 909.022548][T10972] bridge0: port 2(bridge_slave_1) entered disabled state [ 909.022793][T10972] bridge_slave_1: entered allmulticast mode [ 909.030835][T10972] bridge_slave_1: entered promiscuous mode [ 909.233152][T10960] team0: Port device team_slave_0 added [ 909.350074][T10960] team0: Port device team_slave_1 added [ 909.650083][T10972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 909.899475][T10972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.035602][ T6651] Bluetooth: hci1: command tx timeout [ 911.130338][T10960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.130357][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 911.130382][T10960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.974316][ T37] audit: type=1326 audit(1765998591.330:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11159 comm="syz.1.1286" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 912.003497][T10960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.003515][T10960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.003539][T10960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.012609][T10972] team0: Port device team_slave_0 added [ 912.067540][T10972] team0: Port device team_slave_1 added [ 912.481248][T10972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.481261][T10972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.481277][T10972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.681797][T10972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.681814][T10972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.681836][T10972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.696083][T10960] hsr_slave_0: entered promiscuous mode [ 912.697724][T10960] hsr_slave_1: entered promiscuous mode [ 912.699070][T10960] debugfs: 'hsr0' already exists in 'hsr' [ 912.753949][T10960] Cannot create hsr debugfs directory [ 913.153391][ T6651] Bluetooth: hci1: command tx timeout [ 914.352822][T10972] hsr_slave_0: entered promiscuous mode [ 914.353695][T10972] hsr_slave_1: entered promiscuous mode [ 914.354273][T10972] debugfs: 'hsr0' already exists in 'hsr' [ 914.354290][T10972] Cannot create hsr debugfs directory [ 915.390659][ T6651] Bluetooth: hci1: command tx timeout [ 915.477095][ T37] audit: type=1326 audit(1765998594.840:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11183 comm="syz.4.1294" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 916.088993][T11113] chnl_net:caif_netlink_parms(): no params data found [ 918.458002][T11208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 918.575882][T11206] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 918.575911][T11206] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 918.576018][T11206] vhci_hcd vhci_hcd.0: Device attached [ 918.576235][T11210] vhci_hcd: connection closed [ 918.576580][ T6246] vhci_hcd vhci_hcd.1: stop threads [ 918.576602][ T6246] vhci_hcd vhci_hcd.1: release socket [ 918.576639][ T6246] vhci_hcd vhci_hcd.1: disconnect device [ 921.182498][T11113] bridge0: port 1(bridge_slave_0) entered blocking state [ 921.182875][T11113] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.183088][T11113] bridge_slave_0: entered allmulticast mode [ 921.219022][T11113] bridge_slave_0: entered promiscuous mode [ 921.348781][T11113] bridge0: port 2(bridge_slave_1) entered blocking state [ 921.348916][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.349125][T11113] bridge_slave_1: entered allmulticast mode [ 921.351903][T11113] bridge_slave_1: entered promiscuous mode [ 921.490577][ T48] bridge_slave_1: left allmulticast mode [ 921.490609][ T48] bridge_slave_1: left promiscuous mode [ 921.490868][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.566986][ T48] bridge_slave_0: left allmulticast mode [ 921.567018][ T48] bridge_slave_0: left promiscuous mode [ 921.567311][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.601082][ T37] audit: type=1326 audit(1765998600.960:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11224 comm="syz.4.1303" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 921.680232][ T48] bridge_slave_1: left allmulticast mode [ 921.680264][ T48] bridge_slave_1: left promiscuous mode [ 921.680619][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.767065][ T48] bridge_slave_0: left allmulticast mode [ 921.767096][ T48] bridge_slave_0: left promiscuous mode [ 921.767825][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 921.861627][ T48] bridge_slave_1: left allmulticast mode [ 921.861658][ T48] bridge_slave_1: left promiscuous mode [ 921.861894][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 921.958988][ T48] bridge_slave_0: left allmulticast mode [ 921.959019][ T48] bridge_slave_0: left promiscuous mode [ 921.959258][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 922.296945][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.368145][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.454367][ T48] bond0 (unregistering): Released all slaves [ 922.755540][ T5883] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 922.826740][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 922.906247][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 922.918214][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.918377][ T5883] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 922.918403][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.975787][ T5883] usb 5-1: config 0 descriptor?? [ 923.042893][ T48] bond0 (unregistering): Released all slaves [ 923.199191][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 923.199329][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 923.246072][ T5883] usb 5-1: USB disconnect, device number 40 [ 923.516477][T11242] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 923.516496][T11242] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 923.516585][T11242] vhci_hcd vhci_hcd.0: Device attached [ 923.517295][T11243] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 923.641528][ T1479] vhci_hcd vhci_hcd.1: stop threads [ 923.641607][ T1479] vhci_hcd vhci_hcd.1: release socket [ 923.657284][ T1479] vhci_hcd vhci_hcd.1: disconnect device [ 923.900360][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 924.326224][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 924.368171][ T48] bond0 (unregistering): Released all slaves [ 924.420466][T11245] 8021q: adding VLAN 0 to HW filter on device bond3 [ 924.445664][ T5883] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 924.605946][ T5883] usb 5-1: Using ep0 maxpacket: 32 [ 924.655928][ T5883] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.655980][ T5883] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 924.655998][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.663852][ T5883] usb 5-1: config 0 descriptor?? [ 924.670435][ T5883] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 924.680169][ T5883] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 924.682329][T11113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 924.740384][T11113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 924.972756][T10960] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 926.006754][T10917] usb 5-1: USB disconnect, device number 41 [ 926.053771][T10917] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 927.697120][T10960] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 927.731881][T11113] team0: Port device team_slave_0 added [ 927.800515][T10960] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 927.847339][T11113] team0: Port device team_slave_1 added [ 928.041859][T10960] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 929.778500][ T48] hsr_slave_0: left promiscuous mode [ 929.815536][ T48] hsr_slave_1: left promiscuous mode [ 929.816932][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 929.843187][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 929.995857][ T48] hsr_slave_0: left promiscuous mode [ 930.035912][ T48] hsr_slave_1: left promiscuous mode [ 930.036607][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.077524][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.130834][ T37] audit: type=1326 audit(1765998609.490:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11271 comm="syz.4.1315" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdca011f749 code=0x0 [ 930.255726][ T48] hsr_slave_0: left promiscuous mode [ 930.345550][ T48] hsr_slave_1: left promiscuous mode [ 930.347255][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.397674][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.276642][ T48] team0 (unregistering): Port device team_slave_1 removed [ 931.456712][ T48] team0 (unregistering): Port device team_slave_0 removed [ 931.685020][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.750012][ T48] team0 (unregistering): Port device team_slave_1 removed [ 932.879953][ T48] team0 (unregistering): Port device team_slave_0 removed [ 933.957176][ T48] team0 (unregistering): Port device team_slave_1 removed [ 934.116267][ T48] team0 (unregistering): Port device team_slave_0 removed [ 934.673394][T11113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.673406][T11113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.673422][T11113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.857160][T11113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.857178][T11113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.857206][T11113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.350803][T11113] hsr_slave_0: entered promiscuous mode [ 936.351605][T11113] hsr_slave_1: entered promiscuous mode [ 936.352174][T11113] debugfs: 'hsr0' already exists in 'hsr' [ 936.352191][T11113] Cannot create hsr debugfs directory [ 937.685886][T10972] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 937.849729][T10972] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 938.011202][T10972] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 938.185204][T10972] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 938.328617][T10960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 938.631310][T11113] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 938.735886][T11113] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 938.852897][T11113] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 939.086397][T11332] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 939.086427][T11332] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 939.086525][T11332] vhci_hcd vhci_hcd.0: Device attached [ 939.087537][T11333] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 940.014597][ T6177] vhci_hcd vhci_hcd.4: stop threads [ 940.014622][ T6177] vhci_hcd vhci_hcd.4: release socket [ 940.014653][ T6177] vhci_hcd vhci_hcd.4: disconnect device [ 940.045353][T11113] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 940.135470][ T37] audit: type=1326 audit(1765998619.490:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11337 comm="syz.1.1324" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 940.140836][T10960] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.409557][ T5996] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.409735][ T5996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.604294][T11257] bridge0: port 2(bridge_slave_1) entered blocking state [ 940.604446][T11257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 942.054684][T11367] Device name cannot be null; rc = [-22] [ 943.059740][T10972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.144559][T10972] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.181859][ T1423] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.182083][ T1423] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.220025][ T1423] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.220225][ T1423] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.253853][T11113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 943.333939][T11113] 8021q: adding VLAN 0 to HW filter on device team0 [ 943.373574][T10498] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.374630][T10498] bridge0: port 1(bridge_slave_0) entered forwarding state [ 943.441119][ T5947] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.441295][ T5947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 943.542477][T10960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.894828][T11383] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 943.894861][T11383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 943.894953][T11383] vhci_hcd vhci_hcd.0: Device attached [ 943.896635][T11384] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 944.216633][ T37] audit: type=1800 audit(1765998623.440:30): pid=11387 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.1331" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 944.413771][T11386] 8021q: adding VLAN 0 to HW filter on device bond1 [ 944.949257][ T5996] vhci_hcd vhci_hcd.4: stop threads [ 944.949335][ T5996] vhci_hcd vhci_hcd.4: release socket [ 944.951836][ T5996] vhci_hcd vhci_hcd.4: disconnect device [ 945.700757][T11402] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 945.700785][T11402] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 945.700880][T11402] vhci_hcd vhci_hcd.0: Device attached [ 945.701783][T11404] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 945.868675][ T5947] vhci_hcd vhci_hcd.4: stop threads [ 945.868806][ T5947] vhci_hcd vhci_hcd.4: release socket [ 946.453453][T10972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.471923][ T5947] vhci_hcd vhci_hcd.4: disconnect device [ 946.672863][T11113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 946.812543][T10960] veth0_vlan: entered promiscuous mode [ 946.913776][ T37] audit: type=1326 audit(1765998626.270:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11415 comm="syz.1.1334" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 947.009871][T10960] veth1_vlan: entered promiscuous mode [ 947.351621][T10960] veth0_macvtap: entered promiscuous mode [ 947.388073][T10960] veth1_macvtap: entered promiscuous mode [ 947.477931][T10960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.518646][T10960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 947.588277][ T1439] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.594128][ T1439] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.603711][T10972] veth0_vlan: entered promiscuous mode [ 947.610456][ T5947] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.612946][T11113] veth0_vlan: entered promiscuous mode [ 947.620292][ T1439] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 947.712060][T10972] veth1_vlan: entered promiscuous mode [ 947.756454][T11113] veth1_vlan: entered promiscuous mode [ 947.900940][T11430] Device name cannot be null; rc = [-22] [ 948.919152][T11113] veth0_macvtap: entered promiscuous mode [ 948.932208][T10972] veth0_macvtap: entered promiscuous mode [ 948.963270][T10972] veth1_macvtap: entered promiscuous mode [ 948.974618][T11113] veth1_macvtap: entered promiscuous mode [ 949.044909][T10972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.073897][T10972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.093161][T11113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 949.114106][T11113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 949.114189][ T202] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.136515][ T202] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.140304][ T202] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.143555][ T202] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.182780][ T1411] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.194435][ T1411] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.204541][ T1411] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 949.207476][ T1411] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.168929][T11442] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 950.201626][T11442] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 950.203462][T11442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 950.232933][T11442] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 950.259476][T11442] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 950.631477][ T5972] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 950.673069][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.673084][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.314913][ T5972] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.407407][ T6651] Bluetooth: hci2: command tx timeout [ 953.024386][T11458] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 953.613739][ T5972] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.667838][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.667862][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.911228][ T5972] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.001353][ T1016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.001375][ T1016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.355772][T11442] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.375918][T11442] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.378380][T11442] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.379673][T11442] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.380541][T11442] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 954.485234][ T37] audit: type=1326 audit(1765998633.830:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11466 comm="syz.1.1344" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f67ec41f749 code=0x0 [ 954.494195][ T6651] Bluetooth: hci2: command tx timeout [ 955.324137][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.245'. [ 956.377052][T11480] Device name cannot be null; rc = [-22] [ 956.395789][T11442] Bluetooth: hci4: command tx timeout [ 956.555866][T11442] Bluetooth: hci2: command tx timeout [ 957.672624][T11441] chnl_net:caif_netlink_parms(): no params data found [ 957.765023][ T5972] bridge_slave_1: left allmulticast mode [ 957.765052][ T5972] bridge_slave_1: left promiscuous mode [ 957.765291][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.379001][ T5972] bridge_slave_0: left allmulticast mode [ 958.379037][ T5972] bridge_slave_0: left promiscuous mode [ 958.379323][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.524722][T11442] Bluetooth: hci4: command tx timeout [ 958.588870][T11503] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 958.588902][T11503] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 958.589012][T11503] vhci_hcd vhci_hcd.0: Device attached [ 958.590326][T11504] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 959.143619][T11442] Bluetooth: hci2: command tx timeout [ 959.486054][ T3814] vhci_hcd vhci_hcd.1: stop threads [ 959.486079][ T3814] vhci_hcd vhci_hcd.1: release socket [ 959.486116][ T3814] vhci_hcd vhci_hcd.1: disconnect device [ 960.557972][T11442] Bluetooth: hci4: command tx timeout [ 962.635523][T11442] Bluetooth: hci4: command tx timeout [ 963.196558][T11522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1356'. [ 964.676252][ T5972] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.746757][ T5972] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.840187][ T5972] bond0 (unregistering): Released all slaves [ 965.121318][T11506] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 966.428162][T11510] team0: Port device team_slave_0 removed [ 966.955827][ T5972] hsr_slave_0: left promiscuous mode [ 966.996343][ T5972] hsr_slave_1: left promiscuous mode [ 967.000031][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 967.000060][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.131514][ T5972] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 967.131545][ T5972] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 967.402844][ T5972] veth1_macvtap: left promiscuous mode [ 967.402911][ T5972] veth0_macvtap: left promiscuous mode [ 967.406338][ T5972] veth1_vlan: left promiscuous mode [ 967.406533][ T5972] veth0_vlan: left promiscuous mode [ 970.636434][ T6651] Bluetooth: hci0: command 0x0406 tx timeout [ 970.636925][T11442] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 971.947306][T11597] Device name cannot be null; rc = [-22] [ 975.974557][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1387'. [ 978.920278][T11631] Device name cannot be null; rc = [-22] [ 985.056351][ T5958] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 985.335589][ T7746] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 985.395580][ T5958] usb 5-1: Using ep0 maxpacket: 16 [ 985.398515][ T5958] usb 5-1: unable to get BOS descriptor or descriptor too short [ 985.400080][ T5958] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 985.400137][ T5958] usb 5-1: config 1 interface 0 altsetting 127 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 985.400167][ T5958] usb 5-1: config 1 interface 0 has no altsetting 0 [ 985.403179][ T5958] usb 5-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 985.403210][ T5958] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.403232][ T5958] usb 5-1: Product: syz [ 985.403247][ T5958] usb 5-1: Manufacturer: syz [ 985.403262][ T5958] usb 5-1: SerialNumber: syz [ 986.137970][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 986.168546][ T5958] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input8 [ 986.171291][ T5151] bcm5974 5-1:1.0: could not read from device [ 986.260345][ T7746] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 986.260398][ T7746] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 986.260420][ T7746] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 986.307665][ T7746] usb 2-1: config 0 descriptor?? [ 986.423102][ T5958] usb 5-1: USB disconnect, device number 42 [ 986.431203][ T5151] bcm5974 5-1:1.0: could not read from device [ 986.517026][ T7746] usbhid 2-1:0.0: can't add hid device: -71 [ 986.517148][ T7746] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 986.549608][ T7746] usb 2-1: USB disconnect, device number 31 [ 986.553598][ T5972] team0 (unregistering): Port device team_slave_1 removed [ 990.741966][ T5972] team0 (unregistering): Port device team_slave_0 removed [ 994.304856][ T37] audit: type=1800 audit(1765998672.030:33): pid=11705 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.5.1409" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 994.326522][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1000.055748][ T5958] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1000.263393][ T5958] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1000.263447][ T5958] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1000.263473][ T5958] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.274153][ T5958] usb 5-1: config 0 descriptor?? [ 1000.547533][T11729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1000.548522][T11729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1000.804154][ T5958] usbhid 5-1:0.0: can't add hid device: -71 [ 1000.804273][ T5958] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1001.692126][ T5958] usb 5-1: USB disconnect, device number 43 [ 1001.887036][T11704] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1002.459903][T11746] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 1002.459937][T11746] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1002.460055][T11746] vhci_hcd vhci_hcd.0: Device attached [ 1003.373182][T11749] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 1003.379677][ T1411] vhci_hcd vhci_hcd.5: stop threads [ 1003.379702][ T1411] vhci_hcd vhci_hcd.5: release socket [ 1003.399657][ T1411] vhci_hcd vhci_hcd.5: disconnect device [ 1003.457436][T11751] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.263692][T11441] bridge0: port 1(bridge_slave_0) entered blocking state [ 1004.306427][T11441] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.306689][T11441] bridge_slave_0: entered allmulticast mode [ 1004.335118][T11441] bridge_slave_0: entered promiscuous mode [ 1004.452264][T11441] bridge0: port 2(bridge_slave_1) entered blocking state [ 1004.452354][T11441] bridge0: port 2(bridge_slave_1) entered disabled state [ 1004.452504][T11441] bridge_slave_1: entered allmulticast mode [ 1004.453989][T11441] bridge_slave_1: entered promiscuous mode [ 1006.082917][T11441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.190234][T11441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.602051][T11441] team0: Port device team_slave_0 added [ 1007.639465][T11441] team0: Port device team_slave_1 added [ 1007.663344][T11470] chnl_net:caif_netlink_parms(): no params data found [ 1008.025809][T11775] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 1008.025840][T11775] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1008.025937][T11775] vhci_hcd vhci_hcd.0: Device attached [ 1008.390070][ T6078] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1008.390442][ T37] audit: type=1800 audit(1765998687.670:34): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.1424" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1008.760022][ T6078] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 1009.011358][T11778] ================================================================== [ 1009.011379][T11778] BUG: KASAN: slab-use-after-free in vhci_tx_loop+0x38e/0x1a80 [ 1009.011568][T11778] Read of size 8 at addr ffff888033c85fa0 by task vhci_tx/11778 [ 1009.011584][T11778] [ 1009.011598][T11778] CPU: 0 UID: 0 PID: 11778 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.011623][T11778] Tainted: [L]=SOFTLOCKUP [ 1009.011630][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.011641][T11778] Call Trace: [ 1009.011649][T11778] [ 1009.011656][T11778] dump_stack_lvl+0x189/0x250 [ 1009.011712][T11778] ? __kasan_check_byte+0x12/0x40 [ 1009.011765][T11778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.011788][T11778] ? lock_release+0x4b/0x3b0 [ 1009.011836][T11778] ? __virt_addr_valid+0x4a5/0x5c0 [ 1009.011870][T11778] print_report+0xca/0x240 [ 1009.011896][T11778] ? vhci_tx_loop+0x38e/0x1a80 [ 1009.011911][T11778] kasan_report+0x118/0x150 [ 1009.011928][T11778] ? vhci_tx_loop+0x38e/0x1a80 [ 1009.011948][T11778] vhci_tx_loop+0x38e/0x1a80 [ 1009.011971][T11778] ? __pfx_vhci_tx_loop+0x10/0x10 [ 1009.011992][T11778] ? __schedule+0x1496/0x50a0 [ 1009.012119][T11778] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1009.012163][T11778] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.012181][T11778] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1009.012198][T11778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1009.012218][T11778] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1009.012250][T11778] ? __kthread_parkme+0x7b/0x200 [ 1009.012279][T11778] ? __kthread_parkme+0x1a1/0x200 [ 1009.012302][T11778] kthread+0x711/0x8a0 [ 1009.012327][T11778] ? __pfx_vhci_tx_loop+0x10/0x10 [ 1009.012344][T11778] ? __pfx_kthread+0x10/0x10 [ 1009.012365][T11778] ? rt_spin_unlock+0x150/0x200 [ 1009.012390][T11778] ? rt_spin_unlock+0x161/0x200 [ 1009.012410][T11778] ? __pfx_kthread+0x10/0x10 [ 1009.012433][T11778] ret_from_fork+0x599/0xb30 [ 1009.012460][T11778] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.012484][T11778] ? __switch_to_asm+0x39/0x70 [ 1009.012507][T11778] ? __switch_to_asm+0x33/0x70 [ 1009.012530][T11778] ? __pfx_kthread+0x10/0x10 [ 1009.012553][T11778] ret_from_fork_asm+0x1a/0x30 [ 1009.012584][T11778] [ 1009.012591][T11778] [ 1009.012595][T11778] Allocated by task 6078: [ 1009.012610][T11778] kasan_save_track+0x3e/0x80 [ 1009.012632][T11778] __kasan_kmalloc+0x93/0xb0 [ 1009.012654][T11778] __kmalloc_cache_noprof+0x1fb/0x6d0 [ 1009.012687][T11778] vhci_urb_enqueue+0x5cd/0xe30 [ 1009.012709][T11778] usb_hcd_submit_urb+0x323/0x1b60 [ 1009.012802][T11778] usb_start_wait_urb+0x115/0x4f0 [ 1009.012820][T11778] usb_control_msg+0x232/0x3e0 [ 1009.012836][T11778] hub_port_init+0xb1d/0x28d0 [ 1009.012855][T11778] hub_event+0x25b3/0x4f30 [ 1009.012874][T11778] process_scheduled_works+0xad1/0x1770 [ 1009.012893][T11778] worker_thread+0x8a0/0xda0 [ 1009.012911][T11778] kthread+0x711/0x8a0 [ 1009.012931][T11778] ret_from_fork+0x599/0xb30 [ 1009.012946][T11778] ret_from_fork_asm+0x1a/0x30 [ 1009.012967][T11778] [ 1009.012971][T11778] Freed by task 11777: [ 1009.012980][T11778] kasan_save_track+0x3e/0x80 [ 1009.013002][T11778] kasan_save_free_info+0x46/0x50 [ 1009.013020][T11778] __kasan_slab_free+0x5c/0x80 [ 1009.013041][T11778] kfree+0x1bd/0x900 [ 1009.013060][T11778] pickup_urb_and_free_priv+0x225/0x400 [ 1009.013077][T11778] vhci_rx_loop+0x39f/0x9d0 [ 1009.013092][T11778] kthread+0x711/0x8a0 [ 1009.013112][T11778] ret_from_fork+0x599/0xb30 [ 1009.013128][T11778] ret_from_fork_asm+0x1a/0x30 [ 1009.013150][T11778] [ 1009.013155][T11778] The buggy address belongs to the object at ffff888033c85f80 [ 1009.013155][T11778] which belongs to the cache kmalloc-64 of size 64 [ 1009.013171][T11778] The buggy address is located 32 bytes inside of [ 1009.013171][T11778] freed 64-byte region [ffff888033c85f80, ffff888033c85fc0) [ 1009.013190][T11778] [ 1009.013195][T11778] The buggy address belongs to the physical page: [ 1009.013210][T11778] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33c85 [ 1009.013227][T11778] flags: 0x80000000000000(node=0|zone=1) [ 1009.013251][T11778] page_type: f5(slab) [ 1009.013268][T11778] raw: 0080000000000000 ffff88813ff268c0 ffffea0000cc9bc0 dead000000000004 [ 1009.013284][T11778] raw: 0000000000000000 0000000000200020 00000000f5000000 0000000000000000 [ 1009.013295][T11778] page dumped because: kasan: bad access detected [ 1009.013307][T11778] page_owner tracks the page as allocated [ 1009.013314][T11778] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5153, tgid 5153 (start-stop-daem), ts 24440846967, free_ts 22870254625 [ 1009.013346][T11778] post_alloc_hook+0x234/0x290 [ 1009.013369][T11778] get_page_from_freelist+0x28c0/0x2960 [ 1009.013386][T11778] __alloc_frozen_pages_noprof+0x181/0x370 [ 1009.013402][T11778] alloc_pages_mpol+0xd1/0x380 [ 1009.013418][T11778] allocate_slab+0x86/0x3b0 [ 1009.013436][T11778] ___slab_alloc+0xb10/0x1400 [ 1009.013453][T11778] __slab_alloc+0xc6/0x1f0 [ 1009.013469][T11778] __kmalloc_noprof+0x15f/0x7e0 [ 1009.013490][T11778] tomoyo_encode+0x28b/0x550 [ 1009.013572][T11778] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1009.013589][T11778] tomoyo_path_perm+0x213/0x4b0 [ 1009.013648][T11778] security_inode_getattr+0x12f/0x330 [ 1009.013697][T11778] __x64_sys_newfstat+0xfc/0x200 [ 1009.013725][T11778] do_syscall_64+0xfa/0xf80 [ 1009.013769][T11778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1009.013804][T11778] page last free pid 1 tgid 1 stack trace: [ 1009.013815][T11778] __free_frozen_pages+0xfe1/0x1170 [ 1009.013838][T11778] kasan_depopulate_vmalloc_pte+0x6d/0x90 [ 1009.013860][T11778] __apply_to_page_range+0xb66/0x13d0 [ 1009.013885][T11778] __kasan_release_vmalloc+0xa2/0xd0 [ 1009.013906][T11778] purge_vmap_node+0x214/0x8d0 [ 1009.013921][T11778] __purge_vmap_area_lazy+0x77a/0xb00 [ 1009.013938][T11778] _vm_unmap_aliases+0x718/0x7b0 [ 1009.013959][T11778] change_page_attr_set_clr+0x308/0xfb0 [ 1009.013977][T11778] set_memory_nx+0xd6/0x110 [ 1009.013995][T11778] free_kernel_image_pages+0x85/0x100 [ 1009.014021][T11778] kernel_init+0x31/0x1d0 [ 1009.014040][T11778] ret_from_fork+0x599/0xb30 [ 1009.014061][T11778] ret_from_fork_asm+0x1a/0x30 [ 1009.014085][T11778] [ 1009.014089][T11778] Memory state around the buggy address: [ 1009.014099][T11778] ffff888033c85e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1009.014111][T11778] ffff888033c85f00: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 1009.014124][T11778] >ffff888033c85f80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1009.014133][T11778] ^ [ 1009.014143][T11778] ffff888033c86000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1009.014156][T11778] ffff888033c86080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1009.014165][T11778] ================================================================== [ 1009.014185][T11778] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1009.014208][T11778] CPU: 0 UID: 0 PID: 11778 Comm: vhci_tx Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1009.014248][T11778] Tainted: [L]=SOFTLOCKUP [ 1009.014255][T11778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1009.014267][T11778] Call Trace: [ 1009.014274][T11778] [ 1009.014282][T11778] dump_stack_lvl+0x99/0x250 [ 1009.014306][T11778] ? __asan_memcpy+0x40/0x70 [ 1009.014328][T11778] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1009.014352][T11778] ? __pfx__printk+0x10/0x10 [ 1009.014376][T11778] vpanic+0x237/0x6d0 [ 1009.014400][T11778] ? __pfx_vpanic+0x10/0x10 [ 1009.014427][T11778] panic+0xb9/0xc0 [ 1009.014450][T11778] ? __pfx_panic+0x10/0x10 [ 1009.014471][T11778] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1009.014492][T11778] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1009.014514][T11778] ? vhci_tx_loop+0x38e/0x1a80 [ 1009.014532][T11778] check_panic_on_warn+0x89/0xb0 [ 1009.014566][T11778] ? vhci_tx_loop+0x38e/0x1a80 [ 1009.014584][T11778] end_report+0x6f/0x140 [ 1009.014600][T11778] kasan_report+0x129/0x150 [ 1009.014618][T11778] ? vhci_tx_loop+0x38e/0x1a80 [ 1009.014638][T11778] vhci_tx_loop+0x38e/0x1a80 [ 1009.014666][T11778] ? __pfx_vhci_tx_loop+0x10/0x10 [ 1009.014688][T11778] ? __schedule+0x1496/0x50a0 [ 1009.014724][T11778] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1009.014743][T11778] ? lockdep_hardirqs_on+0x98/0x140 [ 1009.014761][T11778] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1009.014779][T11778] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1009.014800][T11778] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1009.014823][T11778] ? __kthread_parkme+0x7b/0x200 [ 1009.014846][T11778] ? __kthread_parkme+0x1a1/0x200 [ 1009.014870][T11778] kthread+0x711/0x8a0 [ 1009.014895][T11778] ? __pfx_vhci_tx_loop+0x10/0x10 [ 1009.014913][T11778] ? __pfx_kthread+0x10/0x10 [ 1009.014936][T11778] ? rt_spin_unlock+0x150/0x200 [ 1009.014960][T11778] ? rt_spin_unlock+0x161/0x200 [ 1009.014982][T11778] ? __pfx_kthread+0x10/0x10 [ 1009.015006][T11778] ret_from_fork+0x599/0xb30 [ 1009.015027][T11778] ? __pfx_ret_from_fork+0x10/0x10 [ 1009.015050][T11778] ? __switch_to_asm+0x39/0x70 [ 1009.015075][T11778] ? __switch_to_asm+0x33/0x70 [ 1009.015098][T11778] ? __pfx_kthread+0x10/0x10 [ 1009.015123][T11778] ret_from_fork_asm+0x1a/0x30 [ 1009.015155][T11778] [ 1009.015582][T11778] Kernel Offset: disabled