last executing test programs: 6m28.362169165s ago: executing program 1 (id=23): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\xfa\x8b\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x845n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\xfey\bJ\x86\x8d\xdf\x16\xbb3\x85\xf5\xe0zYe\xc2\n\x0f\x87\xc4\x8f\x8e\xec\xee\xcd\f\xe9\xc8\xbc\x97,\xb7!\xf2\x93\xd3\t\xd9=\x93\x1d\x945\x97\x1e\x9d\xa6\xe9\xa6\xf9p,\xf7v>\xcd\xd9\xc4\x1b\x9c(\xb8\x90\xdeg\xbf[n\x82\x96\xaev\xd4\xac \x14\xf0\x18@\xc3\xf1\xe2\x14\x1c\x0f\xa4-\xde\xae\xfa;\xaf\xae\x06\x9ag\x02\x98\xd0C2\xe7?\xfb\xb01\x9d\xf8\xd3Q\xb3\xb2\x18V\xe8\x8c\x87\xf4\t\x1c\x85\xa4\xc1\xb1\xf4k!G\xf5\xbb\xbbs&\xeac\xb3\xafW\x846\v\xb3\xca\xeb\xb7\x9e\x9e#]\x10lj\xaf\xaf\xd1\'{\x11\xaa,\x0f\xc5OY\"\x82\x84\xb6:J\x8c\xf37\x1d\xca\xf1\xef\x9f\xcf\a\xcf\xcb', 0x6) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84800) splice(r4, 0x0, r3, 0x0, 0x4, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000240001052abd7000fedbdf2509000000060003"], 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r5) sendmsg$NLBL_CIPSOV4_C_LISTALL(r6, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xb4, r7, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x98, 0xc, 0x0, 0x1, [{0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeff1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd4d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb27f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ff4e9d5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcecf}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa271}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x65b2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xeb4ec3c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x10cb69dd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa934}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc81f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1df03123}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb86e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x58b3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2d30}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x88b4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xddc0}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x4) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fcdbdf2501000000080001000300000008000200030000003400048005"], 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x880) 6m26.428884959s ago: executing program 1 (id=29): socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0xf) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg(r1, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newnexthop={0x30, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008018}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socket$key(0xf, 0x3, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0x400003}, 0x0) r3 = socket(0x1, 0x2, 0x2) ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, 0x0) shutdown(r3, 0x2) getsockopt$CAN_RAW_LOOPBACK(r3, 0x65, 0x20, 0x0, &(0x7f0000001040)) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="d0000000", @ANYRES16=0x0], 0xd0}, 0x1, 0x0, 0x0, 0x8081}, 0xc243daee1b2782cc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='veth0_to_batadv\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000000)={@remote, r5}, 0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r5, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xffff, 0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x4840) 6m25.390947106s ago: executing program 0 (id=32): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x6) timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r3 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xf8, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r3}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x0, 0x1}, @fd}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x1101}, @flat=@binder={0x73622a85, 0x2, 0x3}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 6m23.366320179s ago: executing program 0 (id=35): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102392, 0x18ff8) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x11, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) setresgid(0xee00, 0x0, 0xee00) setresgid(0xffffffffffffffff, 0x0, 0x0) 6m23.018551201s ago: executing program 0 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) 6m22.343509376s ago: executing program 0 (id=37): r0 = timerfd_create(0x9, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000002ec0)=""/261, 0x105, 0x6) timerfd_settime(r0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x3938700}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1404200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) r6 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000002c0)={0xf8, 0x0, &(0x7f0000000740)=[@free_buffer={0x40086303, r6}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x0, 0x0, 0x3f}, @flat=@handle={0x73682a85, 0x0, 0x1}, @fd}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}, @clear_death={0x400c630f, 0x3}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x8, 0x1, 0x18}, @flat=@binder={0x73622a85, 0x1101}, @flat=@binder={0x73622a85, 0x2, 0x3}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) 6m19.694912238s ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008091}, 0x4000000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) mount(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x2208004, 0x0) sched_getattr(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000380)=@multiplanar_fd={0x0, 0xa, 0x4, 0x20, 0x3, {}, {0x4, 0x1, 0x40, 0x2, 0x43, 0x2, "352fc590"}, 0x4, 0x4, {&(0x7f0000000300)=[{0xffff, 0x1, {}, 0x7}, {0xc, 0x5, {}, 0x9}]}, 0x3ff}) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x40078, &(0x7f0000000000)) 6m18.621391022s ago: executing program 1 (id=41): mkdir(0x0, 0x0) mkdir(0x0, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x8000) 6m18.596930126s ago: executing program 0 (id=42): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000080)={0x2, 0x32314742, 0x2, @discrete={0x7, 0xbe78}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r1}, 0x38) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000000)="e06921e8682d85ff9782762f86dd", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f0000000200), 0x1, r1}, 0x38) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0x14, 0x30, 0x25}, 0x14}}, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, [@alu={0x4, 0x0, 0xd, 0xa, 0x0, 0x0, 0xfffffffffffffffc}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) sendfile(r4, r4, 0x0, 0x200900) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x8850) sendmsg$NFT_BATCH(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}}, 0x0) 6m18.007064409s ago: executing program 1 (id=44): io_uring_setup(0x667, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 6m15.436750723s ago: executing program 0 (id=47): socket$kcm(0x10, 0x2, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 6m14.71580412s ago: executing program 1 (id=48): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000340)=0xfec00000) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6m0.165605024s ago: executing program 32 (id=47): socket$kcm(0x10, 0x2, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5m59.288614433s ago: executing program 33 (id=48): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f0000000340)=0xfec00000) socket$nl_netfilter(0x10, 0x3, 0xc) rseq(&(0x7f0000000680), 0x20, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 23.185413549s ago: executing program 2 (id=466): syz_emit_vhci(0x0, 0xd) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}}}, 0x9) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x3, 0x5, 0x12, @mcast2, @private0, 0x0, 0x8007, 0x100, 0x5}}) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x800) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012100, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, r5, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x2000400c) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRESDEC], 0x0) 20.324823598s ago: executing program 4 (id=470): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 19.356229481s ago: executing program 4 (id=471): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) socket$kcm(0x11, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000020"], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 10.340863107s ago: executing program 3 (id=474): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) pipe(&(0x7f0000000440)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000c40)={{0x80}, 'port0\x00', 0x40, 0x400, 0x5, 0x6, 0x2, 0x40, 0x3, 0x0, 0x1, 0x5}) syz_open_dev$vim2m(0x0, 0x7, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, @printk={@lx, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 10.335884863s ago: executing program 2 (id=475): fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) 8.574676272s ago: executing program 3 (id=476): socket(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f000001b700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) getrlimit(0x3, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(&(0x7f00000000c0), 0x0, 0x440200) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r2, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x2, 0x5, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x3c, 0x3, 0x65, 0xe0, 0x36, 0x33, 0x9, @multicast2, @multicast1}}}}, 0x3e) 8.353454899s ago: executing program 2 (id=477): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, 0x0, 0x0, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r5, 0x0, 0x0, 0xc2a) 6.668120795s ago: executing program 3 (id=478): io_uring_setup(0x667, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) 6.470311067s ago: executing program 4 (id=479): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0xffffffffffffffff, 0x3, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0x6a14, 0x40, 0x40000, 0xffffffff}, &(0x7f0000000100), &(0x7f0000000180)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='ns\x00') r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0xa}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) open_tree(r1, &(0x7f00000002c0)='./mnt\x00', 0x9001) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x81, 0x0, 0x1000, 0x20042}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000040)) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="0e00000001"], 0xc) 6.056076927s ago: executing program 2 (id=480): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x100, 0x49, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) 4.893722111s ago: executing program 3 (id=481): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) pipe(&(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x7f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r5 = syz_open_pts(r0, 0x103100) dup3(r5, r0, 0x0) 4.8674359s ago: executing program 2 (id=482): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket(0x2, 0x80805, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000000c0)=0x40) write$dsp(r2, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r4, &(0x7f0000003cc0), 0x0, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') pread64(r5, 0x0, 0x0, 0xc2a) 4.652833173s ago: executing program 4 (id=483): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) 3.655157931s ago: executing program 3 (id=484): socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0xa6) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs$userns(r0, &(0x7f0000000000)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0xb1c07, 0x2, 0x1, 0x6, 0x0, 0x1, 0x0, 0x2, 0x2}) readv(r3, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) connect$qrtr(0xffffffffffffffff, &(0x7f0000000080), 0xc) close(r3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000000)={0xbe, 0x0, 0x1}) ioctl$VIDIOC_G_PRIORITY(0xffffffffffffffff, 0x80045643, 0x2) 2.370393298s ago: executing program 3 (id=485): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r3, &(0x7f0000000000)=@FILEID_NILFS_WITHOUT_PARENT={0x20, 0xf1, {0xffff, 0x80, 0x5, 0xfffffff8, 0x40}}, 0x0) 2.177433717s ago: executing program 4 (id=486): fsopen(&(0x7f0000000080)='ext3\x00', 0x0) r0 = socket$inet(0xa, 0x801, 0x84) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100020008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) listen(r0, 0x6) accept4(r0, 0x0, 0x0, 0x0) 919.645299ms ago: executing program 4 (id=487): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) socket$inet6_mptcp(0xa, 0x1, 0x106) accept4(r0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x200003, 0x0) socket$kcm(0x11, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0x71, &(0x7f0000000280)=ANY=[@ANYBLOB="1201500200000020"], 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00'], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 0s ago: executing program 2 (id=488): ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0) pipe(&(0x7f0000000440)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() open(0x0, 0x147842, 0x1ef) sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_pts(r0, 0x103100) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.244' (ED25519) to the list of known hosts. [ 80.453172][ T5788] cgroup: Unknown subsys name 'net' [ 80.694028][ T5788] cgroup: Unknown subsys name 'cpuset' [ 80.790047][ T5788] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.594850][ T5788] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.887982][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.892364][ T5803] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.899363][ T5803] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.902297][ T44] cfg80211: failed to load regulatory.db [ 86.905108][ T5808] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.905934][ T5808] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.923457][ T5808] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.959618][ T5808] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.961758][ T5808] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.990212][ T5808] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.991538][ T5808] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.187882][ T61] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.197432][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.200211][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.211339][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.214022][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.215008][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.267862][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.269640][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.291446][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.294394][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.314336][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.318228][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.327847][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.331247][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.332425][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.961222][ T5806] chnl_net:caif_netlink_parms(): no params data found [ 88.051160][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 88.391973][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 88.541754][ T5818] chnl_net:caif_netlink_parms(): no params data found [ 88.730502][ T5806] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.731820][ T5806] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.732201][ T5806] bridge_slave_0: entered allmulticast mode [ 88.733811][ T5806] bridge_slave_0: entered promiscuous mode [ 88.737609][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 88.852066][ T5806] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.852178][ T5806] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.852317][ T5806] bridge_slave_1: entered allmulticast mode [ 88.854139][ T5806] bridge_slave_1: entered promiscuous mode [ 88.951196][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.951301][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.951472][ T5802] bridge_slave_0: entered allmulticast mode [ 88.953750][ T5802] bridge_slave_0: entered promiscuous mode [ 89.010874][ T5808] Bluetooth: hci0: command tx timeout [ 89.011083][ T61] Bluetooth: hci1: command tx timeout [ 89.072816][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.072940][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.073065][ T5802] bridge_slave_1: entered allmulticast mode [ 89.074603][ T5802] bridge_slave_1: entered promiscuous mode [ 89.329318][ T61] Bluetooth: hci3: command tx timeout [ 89.329643][ T61] Bluetooth: hci2: command tx timeout [ 89.403412][ T5806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.410053][ T5808] Bluetooth: hci4: command tx timeout [ 89.582530][ T5806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.588954][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.589083][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.590105][ T5814] bridge_slave_0: entered allmulticast mode [ 89.592789][ T5814] bridge_slave_0: entered promiscuous mode [ 89.713117][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.806293][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.806509][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.806676][ T5814] bridge_slave_1: entered allmulticast mode [ 89.808522][ T5814] bridge_slave_1: entered promiscuous mode [ 89.872381][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.050219][ T5818] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.050325][ T5818] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.050437][ T5818] bridge_slave_0: entered allmulticast mode [ 90.051940][ T5818] bridge_slave_0: entered promiscuous mode [ 90.152390][ T5806] team0: Port device team_slave_0 added [ 90.470217][ T5818] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.470339][ T5818] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.470504][ T5818] bridge_slave_1: entered allmulticast mode [ 90.472539][ T5818] bridge_slave_1: entered promiscuous mode [ 90.582584][ T5806] team0: Port device team_slave_1 added [ 90.583551][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.583639][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.583755][ T5815] bridge_slave_0: entered allmulticast mode [ 90.585246][ T5815] bridge_slave_0: entered promiscuous mode [ 90.590326][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.664384][ T5802] team0: Port device team_slave_0 added [ 90.740296][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.740402][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.740565][ T5815] bridge_slave_1: entered allmulticast mode [ 90.742039][ T5815] bridge_slave_1: entered promiscuous mode [ 90.744825][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.802445][ T5802] team0: Port device team_slave_1 added [ 91.032824][ T5818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.089384][ T5808] Bluetooth: hci0: command tx timeout [ 91.089416][ T5808] Bluetooth: hci1: command tx timeout [ 91.091067][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.091077][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.091090][ T5806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.242455][ T5818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.320977][ T5806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.320992][ T5806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.321015][ T5806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.419386][ T61] Bluetooth: hci2: command tx timeout [ 91.419417][ T61] Bluetooth: hci3: command tx timeout [ 91.483060][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.485124][ T5814] team0: Port device team_slave_0 added [ 91.499854][ T5808] Bluetooth: hci4: command tx timeout [ 91.560972][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.560985][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.560998][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.572534][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.574508][ T5814] team0: Port device team_slave_1 added [ 91.661007][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.661022][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.661045][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.852438][ T5818] team0: Port device team_slave_0 added [ 92.012563][ T5818] team0: Port device team_slave_1 added [ 92.015730][ T5815] team0: Port device team_slave_0 added [ 92.080514][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.080529][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.080549][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.142250][ T5815] team0: Port device team_slave_1 added [ 92.200659][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.200674][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.200698][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.445376][ T5806] hsr_slave_0: entered promiscuous mode [ 92.446412][ T5806] hsr_slave_1: entered promiscuous mode [ 92.470584][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.470603][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.470626][ T5818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.803195][ T5818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.803206][ T5818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.803219][ T5818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.811439][ T5802] hsr_slave_0: entered promiscuous mode [ 92.812815][ T5802] hsr_slave_1: entered promiscuous mode [ 92.813928][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 92.814045][ T5802] Cannot create hsr debugfs directory [ 92.816050][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.816062][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.816085][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.836995][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.837011][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.837034][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.169482][ T5808] Bluetooth: hci1: command tx timeout [ 93.169515][ T5808] Bluetooth: hci0: command tx timeout [ 93.265656][ T5814] hsr_slave_0: entered promiscuous mode [ 93.266446][ T5814] hsr_slave_1: entered promiscuous mode [ 93.266980][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 93.266997][ T5814] Cannot create hsr debugfs directory [ 93.489519][ T61] Bluetooth: hci3: command tx timeout [ 93.489551][ T61] Bluetooth: hci2: command tx timeout [ 93.579346][ T5808] Bluetooth: hci4: command tx timeout [ 93.581317][ T5818] hsr_slave_0: entered promiscuous mode [ 93.582095][ T5818] hsr_slave_1: entered promiscuous mode [ 93.582644][ T5818] debugfs: 'hsr0' already exists in 'hsr' [ 93.582661][ T5818] Cannot create hsr debugfs directory [ 93.835546][ T5815] hsr_slave_0: entered promiscuous mode [ 93.836375][ T5815] hsr_slave_1: entered promiscuous mode [ 93.836943][ T5815] debugfs: 'hsr0' already exists in 'hsr' [ 93.836964][ T5815] Cannot create hsr debugfs directory [ 94.942818][ T5806] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.976428][ T5806] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.024021][ T5806] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.075617][ T5806] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.174867][ T5802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.206712][ T5802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.224080][ T5802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.249327][ T5808] Bluetooth: hci0: command tx timeout [ 95.249360][ T5808] Bluetooth: hci1: command tx timeout [ 95.281168][ T5802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.412154][ T5814] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.453976][ T5814] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.495429][ T5814] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.549366][ T5814] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.569376][ T5808] Bluetooth: hci3: command tx timeout [ 95.569423][ T61] Bluetooth: hci2: command tx timeout [ 95.650274][ T61] Bluetooth: hci4: command tx timeout [ 95.688674][ T5818] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.731344][ T5818] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.768561][ T5818] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.820636][ T5818] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 95.968218][ T5806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.968467][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.997557][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.036078][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.081284][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.154335][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.157204][ T5806] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.203050][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.203640][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.243291][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.243499][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.264285][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.298831][ T4088] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.299028][ T4088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.327284][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.354250][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.354352][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.425864][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.454348][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.462765][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.462979][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.502169][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.502312][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.566669][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.638057][ T3638] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.653097][ T3638] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.676801][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.698212][ T3638] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.698393][ T3638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.816513][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.886222][ T1121] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.886480][ T1121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.929065][ T4088] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.939777][ T4088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.993175][ T5806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.185332][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.318596][ T5806] veth0_vlan: entered promiscuous mode [ 97.371155][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.394607][ T5806] veth1_vlan: entered promiscuous mode [ 97.632662][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.647015][ T5806] veth0_macvtap: entered promiscuous mode [ 97.683228][ T5814] veth0_vlan: entered promiscuous mode [ 97.688755][ T5806] veth1_macvtap: entered promiscuous mode [ 97.723750][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.725921][ T5814] veth1_vlan: entered promiscuous mode [ 97.794619][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.819474][ T5806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.862367][ T3574] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.885296][ T3574] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.902856][ T3574] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.908115][ T5818] veth0_vlan: entered promiscuous mode [ 97.908536][ T3574] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.908681][ T5802] veth0_vlan: entered promiscuous mode [ 97.981025][ T5814] veth0_macvtap: entered promiscuous mode [ 97.995846][ T5818] veth1_vlan: entered promiscuous mode [ 97.997802][ T5814] veth1_macvtap: entered promiscuous mode [ 98.061920][ T5802] veth1_vlan: entered promiscuous mode [ 98.063474][ T5815] veth0_vlan: entered promiscuous mode [ 98.162672][ T5815] veth1_vlan: entered promiscuous mode [ 98.178607][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.230362][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.241974][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.241998][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.286284][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.304226][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.323538][ T5818] veth0_macvtap: entered promiscuous mode [ 98.324711][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.341520][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.356147][ T5802] veth0_macvtap: entered promiscuous mode [ 98.357589][ T5818] veth1_macvtap: entered promiscuous mode [ 98.365436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.365453][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.429634][ T5802] veth1_macvtap: entered promiscuous mode [ 98.485338][ T5815] veth0_macvtap: entered promiscuous mode [ 98.553403][ T5815] veth1_macvtap: entered promiscuous mode [ 98.582557][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.693433][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.709495][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.733301][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.733320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.737384][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.763885][ T4088] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.780090][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.797630][ T4088] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.818045][ T4088] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.837123][ T4088] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.890881][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.994725][ T4088] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.073456][ T4088] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.073961][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.073971][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.114215][ T4088] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.117968][ T4088] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.185889][ T4088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.241113][ T3574] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.244586][ T3574] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.246651][ T3574] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.709164][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 100.791377][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.791390][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.960479][ T3638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.960498][ T3638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.094500][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.094520][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.309872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 101.797318][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.806664][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.576530][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.596968][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.402040][ T5942] netlink: 360 bytes leftover after parsing attributes in process `syz.3.9'. [ 103.607891][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 103.722372][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.722385][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.768210][ T4088] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.838068][ T4088] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.878261][ T4088] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.884452][ T43] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.979168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 103.984324][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.039246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.039346][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.039404][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.040655][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.040780][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 104.040825][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.168029][ T5957] Zero length message leads to an empty skb [ 105.184318][ T5957] netlink: 'syz.1.2': attribute type 27 has an invalid length. [ 105.184343][ T5957] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 105.184355][ T5957] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.253689][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.253710][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.882536][ T5790] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 107.119297][ T5790] usb 5-1: Using ep0 maxpacket: 32 [ 107.144865][ T5790] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 107.144891][ T5790] usb 5-1: config 0 has no interface number 0 [ 107.192363][ T5790] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 107.192393][ T5790] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.192411][ T5790] usb 5-1: Product: syz [ 107.192424][ T5790] usb 5-1: Manufacturer: syz [ 107.192437][ T5790] usb 5-1: SerialNumber: syz [ 107.313703][ T5790] usb 5-1: config 0 descriptor?? [ 107.353626][ T5790] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 107.418711][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.418731][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.809715][ T5970] ======================================================= [ 107.809715][ T5970] WARNING: The mand mount option has been deprecated and [ 107.809715][ T5970] and is ignored by this kernel. Remove the mand [ 107.809715][ T5970] option from the mount to silence this warning. [ 107.809715][ T5970] ======================================================= [ 107.992572][ T5974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.993372][ T5974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.021399][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 108.061016][ T5790] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 108.116434][ T5790] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 108.160280][ T5790] usb 5-1: USB disconnect, device number 2 [ 108.182253][ T5790] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 108.189047][ T5790] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 108.215682][ T5790] quatech2 5-1:0.51: device disconnected [ 109.654179][ T5971] netlink: 72 bytes leftover after parsing attributes in process `syz.1.14'. [ 109.837325][ T5992] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.169313][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.402336][ T10] usb 3-1: config 0 has no interfaces? [ 110.402375][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 110.402398][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.433462][ T10] usb 3-1: config 0 descriptor?? [ 110.632376][ T6001] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.446521][ T5972] usb 3-1: USB disconnect, device number 2 [ 111.475910][ T6001] netlink: 'syz.4.19': attribute type 9 has an invalid length. [ 111.475931][ T6001] netlink: 'syz.4.19': attribute type 6 has an invalid length. [ 111.475943][ T6001] netlink: 'syz.4.19': attribute type 7 has an invalid length. [ 111.475956][ T6001] netlink: 'syz.4.19': attribute type 8 has an invalid length. [ 115.866254][ T5879] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 116.015683][ T5879] usb 3-1: Using ep0 maxpacket: 8 [ 116.026110][ T5879] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 7 [ 116.095422][ T5879] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 116.095463][ T5879] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 116.095482][ T5879] usb 3-1: Product: syz [ 116.095496][ T5879] usb 3-1: Manufacturer: syz [ 116.095508][ T5879] usb 3-1: SerialNumber: syz [ 116.186862][ T6021] netlink: 64 bytes leftover after parsing attributes in process `syz.1.23'. [ 116.238304][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.1.23'. [ 117.370702][ T6043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.29'. [ 117.379421][ T5887] IPVS: starting estimator thread 0... [ 117.800328][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.869539][ T6042] IPVS: using max 14 ests per chain, 33600 per kthread [ 118.314330][ C1] vkms_vblank_simulate: vblank timer overrun [ 118.412829][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.288801][ C1] vkms_vblank_simulate: vblank timer overrun [ 119.343532][ T5972] usb 3-1: USB disconnect, device number 3 [ 120.004392][ T6059] syzkaller1: entered promiscuous mode [ 120.004409][ T6059] syzkaller1: entered allmulticast mode [ 120.693975][ C1] vkms_vblank_simulate: vblank timer overrun [ 120.976338][ C1] vkms_vblank_simulate: vblank timer overrun [ 122.086391][ C1] vkms_vblank_simulate: vblank timer overrun [ 125.306482][ T6090] netlink: 'syz.1.41': attribute type 1 has an invalid length. [ 131.023666][ T3638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.023687][ T3638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.953191][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.953285][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.462004][ T5887] IPVS: starting estimator thread 0... [ 142.772923][ T6145] IPVS: using max 9 ests per chain, 21600 per kthread [ 143.056274][ T6138] kvm: kvm [6137]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 143.058598][ T6138] kvm: kvm [6137]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 143.062188][ T6138] kvm: kvm [6137]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 143.062220][ T6138] kvm: kvm [6137]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x4000 [ 143.065705][ T6138] kvm: kvm [6137]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 143.065791][ T6138] kvm: kvm [6137]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x4000 [ 143.849985][ T5887] IPVS: starting estimator thread 0... [ 143.939392][ T6159] IPVS: using max 8 ests per chain, 19200 per kthread [ 144.481012][ T5808] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.484346][ T5808] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.486474][ T5808] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.487422][ T5808] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.488008][ T5808] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 144.830426][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.979263][ T44] usb 3-1: Using ep0 maxpacket: 16 [ 144.981873][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.981903][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.981939][ T44] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 144.981959][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.058765][ T44] usb 3-1: config 0 descriptor?? [ 145.210869][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.518489][ T44] kye 0003:0458:5016.0001: control desc unexpectedly large [ 145.566179][ T44] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0001/input/input5 [ 145.713351][ T44] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0001/input/input6 [ 145.722708][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 145.744470][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 145.746625][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 145.766473][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 145.767392][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 145.994621][ T44] kye 0003:0458:5016.0001: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 146.266481][ T5879] usb 3-1: USB disconnect, device number 4 [ 146.572433][ T43] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.619378][ T61] Bluetooth: hci5: command tx timeout [ 146.923440][ T43] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.207242][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.648676][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.888876][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.914752][ T61] Bluetooth: hci3: command tx timeout [ 148.689373][ T61] Bluetooth: hci5: command tx timeout [ 150.795735][ T5808] Bluetooth: hci3: command tx timeout [ 150.795770][ T5808] Bluetooth: hci5: command tx timeout [ 151.136916][ T43] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.290088][ T6205] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 152.403038][ T43] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.464403][ T6163] chnl_net:caif_netlink_parms(): no params data found [ 152.758910][ T6213] netlink: 360 bytes leftover after parsing attributes in process `syz.3.69'. [ 152.849357][ T5119] Bluetooth: hci5: command tx timeout [ 152.849388][ T5119] Bluetooth: hci3: command tx timeout [ 152.849433][ T5119] Bluetooth: hci4: command 0x1003 tx timeout [ 152.849480][ T61] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.593155][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.593358][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.593589][ T6163] bridge_slave_0: entered allmulticast mode [ 154.596065][ T6163] bridge_slave_0: entered promiscuous mode [ 155.060912][ T5808] Bluetooth: hci3: command tx timeout [ 155.298643][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.298824][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.299046][ T6163] bridge_slave_1: entered allmulticast mode [ 155.304336][ T6163] bridge_slave_1: entered promiscuous mode [ 156.214627][ T6251] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 156.243246][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.298449][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.631905][ T6174] chnl_net:caif_netlink_parms(): no params data found [ 156.652636][ T43] bridge_slave_1: left allmulticast mode [ 156.652736][ T43] bridge_slave_1: left promiscuous mode [ 156.655068][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.677569][ T6257] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 156.690186][ T6257] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 156.690402][ T6257] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 156.690617][ T6257] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 156.690751][ T6257] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 156.695977][ T6257] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 156.696250][ T6257] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 156.751674][ T6257] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 156.751898][ T6257] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 156.752339][ T6257] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 157.031649][ T43] bridge_slave_0: left allmulticast mode [ 157.031668][ T43] bridge_slave_0: left promiscuous mode [ 157.031995][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.622186][ T6135] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 157.802125][ T6135] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 157.802154][ T6135] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.802172][ T6135] usb 4-1: Product: syz [ 157.802185][ T6135] usb 4-1: Manufacturer: syz [ 157.802198][ T6135] usb 4-1: SerialNumber: syz [ 158.125658][ C1] vkms_vblank_simulate: vblank timer overrun [ 158.127532][ T1796] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 158.469364][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.021417][ T6135] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 159.021481][ T6135] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 159.111812][ T6135] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 159.111871][ T6135] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 159.115654][ T6135] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 159.154614][ C1] vkms_vblank_simulate: vblank timer overrun [ 159.160204][ T1796] usb 5-1: config 0 has no interfaces? [ 159.160242][ T1796] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 159.160263][ T1796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.197352][ T6135] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 159.239297][ T1796] usb 5-1: config 0 descriptor?? [ 159.913218][ T1796] usb 5-1: USB disconnect, device number 3 [ 160.373120][ T5886] usb 4-1: USB disconnect, device number 2 [ 160.412638][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.491076][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.676159][ T43] bond0 (unregistering): Released all slaves [ 160.856853][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.100277][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.126722][ T6163] team0: Port device team_slave_0 added [ 161.261778][ T6291] overlayfs: failed to resolve './file0': -2 [ 161.265676][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.853686][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.016676][ T6163] team0: Port device team_slave_1 added [ 162.079418][ C1] vkms_vblank_simulate: vblank timer overrun [ 162.403484][ T6299] create_pit_timer: 10 callbacks suppressed [ 162.403505][ T6299] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 162.428531][ T6299] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 162.428759][ T6299] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 162.429630][ T6299] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 162.430051][ T6299] kvm: requested 31009 ns i8254 timer period limited to 200000 ns [ 162.454864][ T6299] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 162.456475][ T6299] kvm: requested 114819 ns i8254 timer period limited to 200000 ns [ 162.456751][ T6299] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 162.529286][ T6299] kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 162.915521][ C1] vkms_vblank_simulate: vblank timer overrun [ 163.409539][ C1] vkms_vblank_simulate: vblank timer overrun [ 164.115921][ C1] vkms_vblank_simulate: vblank timer overrun [ 165.655540][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.655551][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.655565][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.755127][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.755137][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.755150][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.923971][ T6135] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.129371][ T6135] usb 4-1: device descriptor read/64, error -71 [ 166.421300][ T6348] overlayfs: failed to resolve './file0': -2 [ 166.428465][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.048994][ C1] vkms_vblank_simulate: vblank timer overrun [ 167.102662][ T6135] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.339242][ T6135] usb 4-1: device descriptor read/64, error -71 [ 167.345638][ T6174] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.352907][ T6174] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.353150][ T6174] bridge_slave_0: entered allmulticast mode [ 167.355791][ T6174] bridge_slave_0: entered promiscuous mode [ 167.529301][ T6135] usb usb4-port1: attempt power cycle [ 168.332004][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.634944][ C1] vkms_vblank_simulate: vblank timer overrun [ 168.659869][ T6135] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.749507][ T43] hsr_slave_0: left promiscuous mode [ 168.789377][ T1796] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 168.799595][ T43] hsr_slave_1: left promiscuous mode [ 168.802295][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.802400][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.838967][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.838995][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.939404][ T1796] usb 3-1: Using ep0 maxpacket: 8 [ 168.942950][ T1796] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 168.948828][ T1796] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 168.948856][ T1796] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 168.948875][ T1796] usb 3-1: Product: syz [ 168.948888][ T1796] usb 3-1: Manufacturer: syz [ 168.948901][ T1796] usb 3-1: SerialNumber: syz [ 169.081988][ T43] veth1_macvtap: left promiscuous mode [ 169.084200][ T43] veth0_macvtap: left promiscuous mode [ 169.085736][ T43] veth1_vlan: left promiscuous mode [ 169.088122][ T43] veth0_vlan: left promiscuous mode [ 169.435035][ T1796] usb 3-1: palm_os_3_probe - error -32 getting connection information [ 169.435149][ T1796] visor 3-1:1.0: probe with driver visor failed with error -32 [ 169.510444][ T1796] usb 3-1: USB disconnect, device number 5 [ 172.480692][ T6135] usb 4-1: device descriptor read/8, error -71 [ 176.417798][ T6384] overlayfs: failed to resolve './file0': -2 [ 177.345632][ T6386] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 177.345872][ T6386] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 177.346112][ T6386] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 177.346428][ T6386] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 177.346571][ T6386] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 177.347960][ T6386] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 177.348338][ T6386] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 177.350043][ T6386] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 177.350699][ T6386] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 177.351059][ T6386] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 177.886448][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.010976][ T43] team0 (unregistering): Port device team_slave_1 removed [ 178.199813][ T43] team0 (unregistering): Port device team_slave_0 removed [ 178.652156][ C1] vkms_vblank_simulate: vblank timer overrun [ 178.883677][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.099790][ C1] vkms_vblank_simulate: vblank timer overrun [ 179.735322][ C1] vkms_vblank_simulate: vblank timer overrun [ 181.413742][ T6174] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.413853][ T6174] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.414089][ T6174] bridge_slave_1: entered allmulticast mode [ 181.418276][ T6174] bridge_slave_1: entered promiscuous mode [ 181.719345][ T5972] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 182.880311][ T5972] usb 5-1: Using ep0 maxpacket: 16 [ 182.884628][ T5972] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 182.884659][ T5972] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 182.888356][ T5972] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 182.888383][ T5972] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.888402][ T5972] usb 5-1: Product: syz [ 182.888413][ T5972] usb 5-1: Manufacturer: syz [ 182.888426][ T5972] usb 5-1: SerialNumber: syz [ 182.920268][ T5972] usb 5-1: config 0 descriptor?? [ 182.955539][ T5972] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 182.997562][ T6163] hsr_slave_0: entered promiscuous mode [ 183.011403][ T6163] hsr_slave_1: entered promiscuous mode [ 183.017834][ T6163] debugfs: 'hsr0' already exists in 'hsr' [ 183.017894][ T6163] Cannot create hsr debugfs directory [ 185.803460][ T1796] usb 5-1: USB disconnect, device number 4 [ 185.953729][ T6174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.445130][ T6174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.490337][ T6174] team0: Port device team_slave_0 added [ 190.567752][ T6174] team0: Port device team_slave_1 added [ 193.292492][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.292503][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.292516][ T6174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.432677][ T6174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.432689][ T6174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 193.432702][ T6174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.498547][ T43] IPVS: stop unused estimator thread 0... [ 194.736000][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.736043][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.625364][ T6489] netlink: 'syz.3.130': attribute type 1 has an invalid length. [ 199.840549][ T6174] hsr_slave_0: entered promiscuous mode [ 199.850743][ T6174] hsr_slave_1: entered promiscuous mode [ 199.851631][ T6174] debugfs: 'hsr0' already exists in 'hsr' [ 199.851652][ T6174] Cannot create hsr debugfs directory [ 206.890210][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.131328][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.731393][ T6547] netlink: 'syz.4.141': attribute type 13 has an invalid length. [ 208.109580][ T5886] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 208.283255][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 208.283293][ T5886] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14660, setting to 64 [ 208.283317][ T5886] usb 5-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 208.283329][ T5886] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.356382][ T5886] usb 5-1: config 0 descriptor?? [ 208.367079][ T6554] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 208.486372][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 208.600953][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 208.620733][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 208.636795][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 208.640471][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 208.657757][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 208.665118][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 208.757561][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 208.776723][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 208.778839][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.444171][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.446702][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.769252][ T61] Bluetooth: hci6: command tx timeout [ 210.857224][ T61] Bluetooth: hci4: command tx timeout [ 210.914645][ T5886] usbhid 5-1:0.0: can't add hid device: -71 [ 210.914728][ T5886] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 210.938184][ T5886] usb 5-1: USB disconnect, device number 5 [ 211.226436][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.247991][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.814017][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 211.814053][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 211.814072][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 212.849826][ T6578] overlayfs: failed to resolve './file1': -2 [ 212.858637][ T5807] Bluetooth: hci6: command tx timeout [ 212.940137][ T5807] Bluetooth: hci4: command tx timeout [ 214.989319][ T5807] Bluetooth: hci6: command tx timeout [ 215.024273][ T5807] Bluetooth: hci4: command tx timeout [ 215.660341][ T6588] ip6tnl1: entered promiscuous mode [ 216.834463][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.087340][ T5807] Bluetooth: hci6: command tx timeout [ 217.089604][ T5807] Bluetooth: hci4: command tx timeout [ 218.379275][ T5879] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 218.509390][ T5879] usb 5-1: device descriptor read/64, error -71 [ 218.750642][ T5879] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 219.349426][ T5879] usb 5-1: device descriptor read/64, error -71 [ 219.671606][ T5879] usb usb5-port1: attempt power cycle [ 219.967945][ T69] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.991943][ T6616] binder: 6614:6616 ioctl 4018620d 0 returned -22 [ 220.119686][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 220.451648][ T69] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.866418][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.244385][ T69] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.246684][ T69] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.443044][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.598234][ T6633] comedi comedi1: ni_at_a2150: a I/O base address must be specified [ 223.600087][ T6633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.159'. [ 224.015979][ C0] vkms_vblank_simulate: vblank timer overrun [ 225.171517][ T5879] usb 5-1: device descriptor read/8, error -110 [ 225.409364][ T5879] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 225.429548][ T5879] usb 5-1: device descriptor read/8, error -32 [ 225.659355][ T5879] usb usb5-port1: unable to enumerate USB device [ 226.624956][ C0] vkms_vblank_simulate: vblank timer overrun [ 226.821314][ T43] bridge_slave_1: left allmulticast mode [ 226.821341][ T43] bridge_slave_1: left promiscuous mode [ 226.821605][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.985956][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.093383][ T43] bridge_slave_0: left allmulticast mode [ 227.093401][ T43] bridge_slave_0: left promiscuous mode [ 227.093560][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.255791][ T6665] binder: 6662:6665 ioctl 4018620d 0 returned -22 [ 228.410272][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 228.897226][ C0] vkms_vblank_simulate: vblank timer overrun [ 229.178633][ T5886] usb 3-1: config index 0 descriptor too short (expected 28277, got 36) [ 229.178668][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.178686][ T5886] usb 3-1: config 0 has no interfaces? [ 229.178716][ T5886] usb 3-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 229.178738][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.235023][ T5886] usb 3-1: config 0 descriptor?? [ 229.275686][ T6675] create_pit_timer: 10 callbacks suppressed [ 229.275705][ T6675] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 229.277100][ T6675] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 229.304334][ T6675] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 229.304757][ T6675] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 229.305063][ T6675] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 229.306371][ T6675] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 229.306634][ T6675] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 229.424477][ T6675] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 229.424894][ T6675] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 229.430715][ T6675] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 230.341444][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.899566][ T5887] usb 3-1: USB disconnect, device number 6 [ 231.199348][ T5886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 231.384145][ T5886] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.384180][ T5886] usb 4-1: config 0 has no interfaces? [ 231.384407][ T5886] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.384468][ T5886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.496343][ T5886] usb 4-1: config 0 descriptor?? [ 232.384655][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.287147][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.495491][ C1] vkms_vblank_simulate: vblank timer overrun [ 233.956046][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.009898][ T44] usb 4-1: USB disconnect, device number 7 [ 234.190882][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.395877][ T6707] binder: 6705:6707 ioctl 4018620d 0 returned -22 [ 234.791596][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.810127][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.800042][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.005769][ T43] bond0 (unregistering): Released all slaves [ 236.339669][ T5887] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 237.158299][ T5887] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 237.158319][ T5887] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.158328][ T5887] usb 4-1: config 0 has no interfaces? [ 237.158353][ T5887] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 237.158365][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.890563][ T5887] usb 4-1: config 0 descriptor?? [ 237.995525][ T5887] IPVS: starting estimator thread 0... [ 238.539344][ T6729] IPVS: using max 9 ests per chain, 21600 per kthread [ 241.268077][ T5972] usb 4-1: USB disconnect, device number 8 [ 245.880801][ T6562] chnl_net:caif_netlink_parms(): no params data found [ 247.486327][ T6780] syz.4.191 (6780) used greatest stack depth: 17848 bytes left [ 248.961668][ T43] hsr_slave_0: left promiscuous mode [ 249.018736][ T43] hsr_slave_1: left promiscuous mode [ 249.057028][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.070777][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.094650][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.094670][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.262496][ T43] veth1_macvtap: left promiscuous mode [ 249.262616][ T43] veth0_macvtap: left promiscuous mode [ 249.262877][ T43] veth1_vlan: left promiscuous mode [ 249.263220][ T43] veth0_vlan: left promiscuous mode [ 249.539253][ T5887] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 249.692988][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 249.695348][ T5887] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.695364][ T5887] usb 5-1: config 0 has no interface number 0 [ 249.708361][ T5887] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 249.708389][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.708408][ T5887] usb 5-1: Product: syz [ 249.708421][ T5887] usb 5-1: Manufacturer: syz [ 249.708433][ T5887] usb 5-1: SerialNumber: syz [ 249.726392][ T5887] usb 5-1: config 0 descriptor?? [ 249.780687][ T5887] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 250.384927][ T6798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.405380][ T6798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.412736][ T5887] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 250.563271][ T5887] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 250.643202][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 250.671128][ T5887] usb 5-1: USB disconnect, device number 10 [ 250.720980][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 250.746650][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 250.747667][ T5887] quatech2 5-1:0.51: device disconnected [ 252.789999][ T43] team0 (unregistering): Port device team_slave_1 removed [ 253.020063][ T43] team0 (unregistering): Port device team_slave_0 removed [ 256.671325][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.672787][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.660175][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 276.233137][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 276.238832][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 276.260451][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 276.311454][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 276.315956][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 276.416681][ T5808] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 276.437120][ T5808] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 276.461381][ T6904] ip6tnl1: entered promiscuous mode [ 276.485786][ T5808] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 276.488682][ T5808] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.505180][ T5808] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.859295][ T5808] Bluetooth: hci3: command tx timeout [ 278.969735][ T5808] Bluetooth: hci4: command tx timeout [ 279.810415][ T6942] ip6tnl1: entered promiscuous mode [ 280.949435][ T5808] Bluetooth: hci3: command tx timeout [ 281.010102][ T5808] Bluetooth: hci4: command tx timeout [ 283.009392][ T5808] Bluetooth: hci3: command tx timeout [ 283.089450][ T5808] Bluetooth: hci4: command tx timeout [ 285.144523][ T5808] Bluetooth: hci3: command tx timeout [ 285.169508][ T5808] Bluetooth: hci4: command tx timeout [ 286.320510][ T6974] overlayfs: failed to resolve './file0': -2 [ 286.633007][ T43] bridge_slave_1: left allmulticast mode [ 286.633043][ T43] bridge_slave_1: left promiscuous mode [ 286.633307][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.741631][ T43] bridge_slave_0: left allmulticast mode [ 286.741660][ T43] bridge_slave_0: left promiscuous mode [ 286.758415][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.091847][ T43] bridge_slave_1: left allmulticast mode [ 288.091889][ T43] bridge_slave_1: left promiscuous mode [ 288.092202][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.647585][ T43] bridge_slave_0: left allmulticast mode [ 288.647614][ T43] bridge_slave_0: left promiscuous mode [ 288.647863][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.300084][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.410300][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.512347][ T43] bond0 (unregistering): Released all slaves [ 291.970776][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.087130][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.145876][ T43] bond0 (unregistering): Released all slaves [ 292.354325][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 293.948340][ T6909] chnl_net:caif_netlink_parms(): no params data found [ 299.033740][ T7058] comedi comedi1: ni_at_a2150: a I/O base address must be specified [ 299.034587][ T7058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 299.220371][ T43] hsr_slave_0: left promiscuous mode [ 300.597120][ T43] hsr_slave_1: left promiscuous mode [ 300.598186][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.730974][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.049839][ T43] hsr_slave_0: left promiscuous mode [ 301.095291][ T43] hsr_slave_1: left promiscuous mode [ 301.107997][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.122014][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.629805][ T43] team0 (unregistering): Port device team_slave_1 removed [ 306.141729][ T43] team0 (unregistering): Port device team_slave_0 removed [ 309.916067][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.253'. [ 310.001141][ T43] team0 (unregistering): Port device team_slave_1 removed [ 310.160608][ T43] team0 (unregistering): Port device team_slave_0 removed [ 311.006744][ T7106] macvtap1: entered promiscuous mode [ 311.006770][ T7106] bond0: entered promiscuous mode [ 311.006785][ T7106] bond_slave_0: entered promiscuous mode [ 311.007213][ T7106] bond_slave_1: entered promiscuous mode [ 311.008437][ T7106] macvtap1: entered allmulticast mode [ 311.008455][ T7106] bond0: entered allmulticast mode [ 311.008468][ T7106] bond_slave_0: entered allmulticast mode [ 311.008486][ T7106] bond_slave_1: entered allmulticast mode [ 311.042126][ T7106] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 311.579396][ T6136] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 311.702457][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.702609][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.702837][ T6912] bridge_slave_0: entered allmulticast mode [ 311.735653][ T6912] bridge_slave_0: entered promiscuous mode [ 311.769883][ T6136] usb 3-1: Using ep0 maxpacket: 32 [ 311.773024][ T6136] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 311.773041][ T6136] usb 3-1: config 0 has no interface number 0 [ 311.812304][ T6136] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 311.812333][ T6136] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.812351][ T6136] usb 3-1: Product: syz [ 311.812364][ T6136] usb 3-1: Manufacturer: syz [ 311.812377][ T6136] usb 3-1: SerialNumber: syz [ 311.916556][ T6136] usb 3-1: config 0 descriptor?? [ 311.929446][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.929581][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.929828][ T6912] bridge_slave_1: entered allmulticast mode [ 311.935317][ T6912] bridge_slave_1: entered promiscuous mode [ 311.947742][ T6909] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.947979][ T6909] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.948235][ T6909] bridge_slave_0: entered allmulticast mode [ 311.953133][ T6909] bridge_slave_0: entered promiscuous mode [ 312.009656][ T5887] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 312.015201][ T6136] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 312.170052][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 312.203433][ T5887] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 312.203461][ T5887] usb 4-1: config 0 has no interface number 0 [ 312.232457][ T5887] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 312.232712][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.232733][ T5887] usb 4-1: Product: syz [ 312.232746][ T5887] usb 4-1: Manufacturer: syz [ 312.232760][ T5887] usb 4-1: SerialNumber: syz [ 312.374209][ T5887] usb 4-1: config 0 descriptor?? [ 312.394636][ T5887] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 312.497573][ T6909] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.497736][ T6909] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.497949][ T6909] bridge_slave_1: entered allmulticast mode [ 312.504419][ T6909] bridge_slave_1: entered promiscuous mode [ 313.223909][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.224542][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.502131][ T6136] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 313.563516][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 313.564516][ T6136] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 313.627115][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.642503][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.647835][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 313.675952][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 313.739484][ T6136] usb 3-1: USB disconnect, device number 7 [ 313.884938][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 313.924213][ T5887] usb 4-1: USB disconnect, device number 9 [ 313.974304][ T7128] netlink: 72 bytes leftover after parsing attributes in process `syz.4.259'. [ 314.047029][ T5887] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 314.089010][ T6136] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 314.118195][ T5887] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 314.133196][ T6136] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 314.134554][ T5887] quatech2 4-1:0.51: device disconnected [ 314.137283][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.182762][ T6136] quatech2 3-1:0.51: device disconnected [ 314.481198][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.577050][ T6909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.768406][ T7137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.261'. [ 314.895280][ T6909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.933111][ T6136] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 314.994059][ T7137] vlan2: entered promiscuous mode [ 314.994228][ T7137] gretap0: entered promiscuous mode [ 315.195193][ T7141] binder: 7138:7141 ioctl 4018620d 0 returned -22 [ 315.289227][ T6136] usb 3-1: Using ep0 maxpacket: 32 [ 315.542065][ T7133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.260'. [ 317.618008][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.618081][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.530869][ T6136] usb 3-1: unable to get BOS descriptor or descriptor too short [ 320.531281][ T6136] usb 3-1: no configurations [ 320.531295][ T6136] usb 3-1: can't read configurations, error -22 [ 321.359268][ T6136] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 321.547157][ T6136] usb 3-1: device descriptor read/64, error -32 [ 321.690944][ T6136] usb usb3-port1: attempt power cycle [ 321.986252][ T7133] vlan2: entered promiscuous mode [ 321.986285][ T7133] team0: entered promiscuous mode [ 321.986298][ T7133] team_slave_0: entered promiscuous mode [ 321.986551][ T7133] team_slave_1: entered promiscuous mode [ 322.055582][ T6912] team0: Port device team_slave_0 added [ 322.109716][ T6136] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 322.239983][ T6136] usb 3-1: device descriptor read/8, error -32 [ 323.123613][ T6912] team0: Port device team_slave_1 added [ 323.143299][ T6909] team0: Port device team_slave_0 added [ 325.259543][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.443041][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.796459][ T6909] team0: Port device team_slave_1 added [ 325.886367][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.747527][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.269300][ C1] vkms_vblank_simulate: vblank timer overrun [ 327.789883][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.627386][ C1] vkms_vblank_simulate: vblank timer overrun [ 328.753834][ T5887] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 328.889432][ T5887] usb 4-1: device descriptor read/64, error -71 [ 329.149491][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 335.244686][ T5887] usb 4-1: device descriptor read/64, error -110 [ 335.360645][ T5887] usb usb4-port1: attempt power cycle [ 335.387495][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.412367][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.414204][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.485327][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.495248][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 335.812152][ T5887] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 335.860419][ T5887] usb 4-1: device descriptor read/8, error -32 [ 336.017044][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.035713][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.038518][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.046168][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.048748][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 336.086039][ T1198] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 336.087044][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 336.139757][ T5887] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 336.173930][ T5887] usb 4-1: device descriptor read/8, error -32 [ 336.229384][ T1198] usb 3-1: device descriptor read/64, error -32 [ 336.279479][ T5887] usb usb4-port1: unable to enumerate USB device [ 336.660575][ T1198] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 336.719898][ T7254] netlink: 'syz.4.280': attribute type 1 has an invalid length. [ 336.819303][ T1198] usb 3-1: device descriptor read/64, error -71 [ 336.920846][ T43] bond0 (unregistering): Released all slaves [ 336.930525][ T1198] usb usb3-port1: attempt power cycle [ 337.284678][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.481580][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.748589][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.086357][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.261458][ T1198] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 338.315994][ T1198] usb 3-1: device descriptor read/8, error -71 [ 338.369430][ T5807] Bluetooth: hci5: command tx timeout [ 338.413085][ T43] bond0 (unregistering): Released all slaves [ 338.529482][ T5807] Bluetooth: hci6: command tx timeout [ 338.598625][ T1198] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 338.823814][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.005634][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.635449][ T7254] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 340.449587][ T5807] Bluetooth: hci5: command tx timeout [ 340.609442][ T5807] Bluetooth: hci6: command tx timeout [ 341.640221][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.455340][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.415966][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.416652][ T5807] Bluetooth: hci5: command tx timeout [ 343.416680][ T5807] Bluetooth: hci6: command tx timeout [ 343.659872][ T1198] usb 3-1: device descriptor read/8, error -110 [ 343.781078][ T1198] usb usb3-port1: unable to enumerate USB device [ 345.495580][ T5807] Bluetooth: hci5: command tx timeout [ 345.496543][ T5808] Bluetooth: hci6: command tx timeout [ 346.002959][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.217764][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.647640][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.895419][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.013124][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.128075][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.926157][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.248588][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.408703][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.700761][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.419000][ T7332] netlink: 72 bytes leftover after parsing attributes in process `syz.4.291'. [ 349.659151][ T7234] chnl_net:caif_netlink_parms(): no params data found [ 349.885919][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.914006][ C1] vkms_vblank_simulate: vblank timer overrun [ 350.967472][ C1] vkms_vblank_simulate: vblank timer overrun [ 351.580813][ T7237] chnl_net:caif_netlink_parms(): no params data found [ 351.791713][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.392613][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.502666][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.933126][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.602369][ C1] vkms_vblank_simulate: vblank timer overrun [ 355.946973][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.947051][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.947224][ T7234] bridge_slave_0: entered allmulticast mode [ 355.979320][ T7234] bridge_slave_0: entered promiscuous mode [ 356.043544][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.043621][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.043791][ T7234] bridge_slave_1: entered allmulticast mode [ 356.086329][ T7234] bridge_slave_1: entered promiscuous mode [ 356.087678][ T43] bridge_slave_1: left allmulticast mode [ 356.087697][ T43] bridge_slave_1: left promiscuous mode [ 356.087851][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.219563][ T43] bridge_slave_0: left allmulticast mode [ 356.219590][ T43] bridge_slave_0: left promiscuous mode [ 356.219836][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.841400][ T43] bridge_slave_1: left allmulticast mode [ 356.841425][ T43] bridge_slave_1: left promiscuous mode [ 356.841580][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.976452][ T43] bridge_slave_0: left allmulticast mode [ 356.976473][ T43] bridge_slave_0: left promiscuous mode [ 356.976632][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.990704][ T37] audit: type=1804 audit(1764293755.236:2): pid=7379 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.298" name="/newroot/90/file0" dev="tmpfs" ino=476 res=1 errno=0 [ 357.539975][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.838022][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.078997][ T43] bond0 (unregistering): Released all slaves [ 359.310001][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.452303][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.562415][ T43] bond0 (unregistering): Released all slaves [ 359.738024][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.015399][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.081317][ T7397] bond0: left allmulticast mode [ 360.081350][ T7397] bond_slave_0: left allmulticast mode [ 360.081377][ T7397] bond_slave_1: left allmulticast mode [ 360.081399][ T7397] bond0: left promiscuous mode [ 360.081411][ T7397] bond_slave_0: left promiscuous mode [ 360.081653][ T7397] bond_slave_1: left promiscuous mode [ 360.328448][ T7406] binder: 7404:7406 ioctl 4018620d 0 returned -22 [ 361.468608][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.720163][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.987966][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.171154][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.334158][ C1] vkms_vblank_simulate: vblank timer overrun [ 362.764331][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.027332][ T7429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.308'. [ 363.278581][ C1] vkms_vblank_simulate: vblank timer overrun [ 363.308598][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.313292][ T7237] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.313550][ T7237] bridge_slave_0: entered allmulticast mode [ 364.079705][ C1] vkms_vblank_simulate: vblank timer overrun [ 364.232439][ T7237] bridge_slave_0: entered promiscuous mode [ 364.671233][ T43] team0 (unregistering): Port device team_slave_1 removed [ 364.890890][ T43] team0 (unregistering): Port device team_slave_0 removed [ 366.658135][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.711537][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.770261][ T43] team0 (unregistering): Port device team_slave_1 removed [ 366.800109][ C1] vkms_vblank_simulate: vblank timer overrun [ 366.910253][ T43] team0 (unregistering): Port device team_slave_0 removed [ 367.112801][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.620081][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.015332][ T7237] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.015465][ T7237] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.015678][ T7237] bridge_slave_1: entered allmulticast mode [ 368.049420][ T7237] bridge_slave_1: entered promiscuous mode [ 368.052396][ T7234] team0: Port device team_slave_0 added [ 368.242151][ T7234] team0: Port device team_slave_1 added [ 368.414241][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.905631][ T7237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.055066][ T7237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 369.163616][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.305170][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.305187][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.305213][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.589739][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.589756][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 369.589781][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.795096][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.051622][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.244967][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.689832][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.710283][ T37] audit: type=1804 audit(1764293768.496:3): pid=7462 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.316" name="/newroot/103/file0" dev="tmpfs" ino=555 res=1 errno=0 [ 371.013133][ T7237] team0: Port device team_slave_0 added [ 371.042778][ T7237] team0: Port device team_slave_1 added [ 374.753961][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.753979][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.753992][ T7237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.763413][ T7234] hsr_slave_0: entered promiscuous mode [ 374.765066][ T7234] hsr_slave_1: entered promiscuous mode [ 374.768915][ T7234] debugfs: 'hsr0' already exists in 'hsr' [ 374.768942][ T7234] Cannot create hsr debugfs directory [ 374.770366][ T7237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.770379][ T7237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.770403][ T7237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.629687][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.936539][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.392240][ T7237] hsr_slave_0: entered promiscuous mode [ 377.393765][ T7237] hsr_slave_1: entered promiscuous mode [ 377.394985][ T7237] debugfs: 'hsr0' already exists in 'hsr' [ 377.395013][ T7237] Cannot create hsr debugfs directory [ 378.605832][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.605853][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.686043][ C0] vkms_vblank_simulate: vblank timer overrun [ 378.696277][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.696356][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.093619][ T7525] binder: 7524:7525 ioctl c0306201 0 returned -14 [ 379.093935][ T7525] binder: 7524:7525 ioctl c0306201 0 returned -14 [ 379.153435][ T5887] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 379.216358][ T5887] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 379.442498][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.673880][ C0] vkms_vblank_simulate: vblank timer overrun [ 379.689283][ T1198] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 380.341102][ T1198] usb 4-1: config 0 has no interfaces? [ 380.345235][ T1198] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 380.345279][ T1198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 380.345299][ T1198] usb 4-1: SerialNumber: syz [ 380.436771][ T1198] usb 4-1: config 0 descriptor?? [ 380.629098][ T7538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 380.691254][ T7538] macvtap2: entered promiscuous mode [ 380.691541][ T7538] macvtap2: entered allmulticast mode [ 380.691556][ T7538] team0: entered allmulticast mode [ 380.691570][ T7538] team_slave_0: entered allmulticast mode [ 380.691587][ T7538] team_slave_1: entered allmulticast mode [ 380.692201][ T7538] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 382.262484][ T1198] usb 4-1: USB disconnect, device number 14 [ 382.896867][ T7555] team0: left allmulticast mode [ 382.906446][ T7555] team_slave_0: left allmulticast mode [ 382.906476][ T7555] team_slave_1: left allmulticast mode [ 383.804045][ T7234] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 383.960827][ T7234] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.038491][ T7234] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 384.413717][ T7234] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 384.678469][ T7237] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 384.840520][ T7237] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 384.902595][ T7237] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 384.980541][ T7237] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 386.749711][ T7237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.802619][ T7237] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.854787][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.854976][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.936704][ T2125] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.936851][ T2125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.868067][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.907090][ T37] audit: type=1804 audit(1764293787.156:4): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.340" name="/newroot/111/file0" dev="tmpfs" ino=597 res=1 errno=0 [ 389.271818][ C1] vkms_vblank_simulate: vblank timer overrun [ 389.274498][ T5807] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 389.303890][ T5807] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 389.307553][ T5807] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 389.308786][ T5807] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 389.309992][ T5807] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 390.381348][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.876041][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.036751][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.358699][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.845797][ C1] vkms_vblank_simulate: vblank timer overrun [ 392.380518][ T5808] Bluetooth: hci3: command tx timeout [ 392.426250][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 392.472221][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 392.479950][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 392.481762][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 392.482610][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 392.791596][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.540389][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.701487][ C1] vkms_vblank_simulate: vblank timer overrun [ 393.899755][ T1198] Process accounting resumed [ 394.449469][ T5807] Bluetooth: hci3: command tx timeout [ 394.529412][ T5807] Bluetooth: hci4: command tx timeout [ 396.529296][ T5807] Bluetooth: hci3: command tx timeout [ 396.611523][ T5807] Bluetooth: hci4: command tx timeout [ 396.649329][ T1198] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 396.829416][ T1198] usb 5-1: Using ep0 maxpacket: 8 [ 396.845725][ T1198] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 396.845753][ T1198] usb 5-1: config 0 has no interface number 0 [ 396.845805][ T1198] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.845828][ T1198] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 396.845856][ T1198] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.845878][ T1198] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.845917][ T1198] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 396.845938][ T1198] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.973298][ T1198] usb 5-1: config 0 descriptor?? [ 397.034096][ T1198] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 398.586466][ T5886] usb 5-1: USB disconnect, device number 11 [ 398.586551][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 398.619327][ T5807] Bluetooth: hci3: command tx timeout [ 398.636489][ T7668] ldusb: No device or device unplugged -19 [ 398.636553][ T5886] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 398.718123][ C0] vkms_vblank_simulate: vblank timer overrun [ 398.742491][ T5807] Bluetooth: hci4: command tx timeout [ 398.921851][ T7694] netlink: 'syz.3.353': attribute type 1 has an invalid length. [ 399.112940][ T7694] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.162775][ T7695] bond1: (slave dummy0): making interface the new active one [ 399.222205][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.384159][ C0] vkms_vblank_simulate: vblank timer overrun [ 399.386815][ T7695] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 400.769432][ T5807] Bluetooth: hci4: command tx timeout [ 401.081450][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.190519][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.387646][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.606441][ T7625] chnl_net:caif_netlink_parms(): no params data found [ 404.634583][ T7718] netlink: 'syz.3.358': attribute type 1 has an invalid length. [ 404.760520][ T7718] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.827823][ T7719] bond1: (slave dummy0): Releasing active interface [ 404.883605][ T7719] bond2: (slave dummy0): making interface the new active one [ 404.884576][ T7719] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 407.299319][ T1198] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 408.459313][ T1198] usb 3-1: device descriptor read/64, error -71 [ 408.729464][ T1198] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 408.981520][ T7766] binder: BINDER_SET_CONTEXT_MGR already set [ 408.981773][ T7766] binder: 7763:7766 ioctl 4018620d 200000004a80 returned -16 [ 409.322319][ T7649] chnl_net:caif_netlink_parms(): no params data found [ 409.954517][ T1128] bridge_slave_1: left allmulticast mode [ 409.955600][ T1128] bridge_slave_1: left promiscuous mode [ 410.075816][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.565902][ T1128] bridge_slave_0: left allmulticast mode [ 410.565932][ T1128] bridge_slave_0: left promiscuous mode [ 410.566169][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.959636][ T7776] binder: 7775:7776 ioctl c0306201 0 returned -14 [ 410.960995][ T7776] binder: 7775:7776 ioctl c0306201 0 returned -14 [ 411.046453][ T5887] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 411.090141][ T5887] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 411.239395][ T991] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 411.408502][ T991] usb 4-1: config 0 has no interfaces? [ 411.410688][ T991] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.410714][ T991] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.410733][ T991] usb 4-1: SerialNumber: syz [ 411.664113][ T991] usb 4-1: config 0 descriptor?? [ 412.090507][ C0] vkms_vblank_simulate: vblank timer overrun [ 412.142281][ T5887] usb 4-1: USB disconnect, device number 15 [ 413.251669][ T37] audit: type=1804 audit(1764293811.376:5): pid=7785 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.371" name="/newroot/124/file0" dev="tmpfs" ino=664 res=1 errno=0 [ 413.670903][ C0] vkms_vblank_simulate: vblank timer overrun [ 413.966802][ T1198] usb 3-1: device descriptor read/64, error -110 [ 414.069729][ T1198] usb usb3-port1: attempt power cycle [ 414.347630][ C0] vkms_vblank_simulate: vblank timer overrun [ 414.440745][ T1198] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.982950][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.151583][ T1198] usb 3-1: device not accepting address 18, error -71 [ 415.554912][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.669643][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.806155][ C0] vkms_vblank_simulate: vblank timer overrun [ 415.813075][ T1128] bond0 (unregistering): Released all slaves [ 416.006946][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.493009][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.958379][ C0] vkms_vblank_simulate: vblank timer overrun [ 417.749639][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.379783][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.554481][ C0] vkms_vblank_simulate: vblank timer overrun [ 418.932119][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.190478][ C0] vkms_vblank_simulate: vblank timer overrun [ 419.339253][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 419.410487][ T1128] hsr_slave_0: left promiscuous mode [ 419.429510][ T1128] hsr_slave_1: left promiscuous mode [ 419.430550][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.472076][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.473420][ T7825] create_pit_timer: 10 callbacks suppressed [ 419.473432][ T7825] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 419.474113][ T7825] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 419.474564][ T7825] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 419.475575][ T7825] kvm: requested 165104 ns i8254 timer period limited to 200000 ns [ 419.475725][ T7825] kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 419.477197][ T7825] kvm: requested 128228 ns i8254 timer period limited to 200000 ns [ 419.477457][ T7825] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 419.491567][ T7825] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 419.491973][ T7825] kvm: requested 56990 ns i8254 timer period limited to 200000 ns [ 419.492242][ T7825] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 419.599913][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 419.599939][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.599949][ T10] usb 4-1: Product: syz [ 419.599956][ T10] usb 4-1: Manufacturer: syz [ 419.599963][ T10] usb 4-1: SerialNumber: syz [ 420.089156][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 420.089213][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 420.352713][ C0] vkms_vblank_simulate: vblank timer overrun [ 420.805771][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 420.805909][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 420.832179][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 421.023807][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 421.455941][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.480058][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 421.541705][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 421.649499][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 421.657712][ T7841] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 421.748238][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 421.808324][ C0] vkms_vblank_simulate: vblank timer overrun [ 421.830205][ T991] usb 4-1: USB disconnect, device number 16 [ 422.309841][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.507995][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.838282][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.349231][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.405124][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.491879][ C0] vkms_vblank_simulate: vblank timer overrun [ 423.690356][ C0] vkms_vblank_simulate: vblank timer overrun [ 424.669390][ C0] vkms_vblank_simulate: vblank timer overrun [ 425.698103][ T7860] binder: 7859:7860 ioctl c0306201 0 returned -14 [ 425.698851][ T7860] binder: 7859:7860 ioctl c0306201 0 returned -14 [ 425.749534][ T5887] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 425.864382][ T5887] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 426.061336][ T5887] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 426.233859][ T5887] usb 3-1: config 0 has no interfaces? [ 426.236138][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 426.236212][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 426.236231][ T5887] usb 3-1: SerialNumber: syz [ 426.287911][ T5887] usb 3-1: config 0 descriptor?? [ 426.400711][ T7625] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.403758][ T7625] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.404008][ T7625] bridge_slave_0: entered allmulticast mode [ 426.406749][ T7625] bridge_slave_0: entered promiscuous mode [ 426.473625][ T7841] vlan2: entered promiscuous mode [ 426.473640][ T7841] team0: entered promiscuous mode [ 426.473650][ T7841] team_slave_0: entered promiscuous mode [ 426.473838][ T7841] team_slave_1: entered promiscuous mode [ 426.475215][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.3.392'. [ 426.480740][ T7625] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.480877][ T7625] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.481117][ T7625] bridge_slave_1: entered allmulticast mode [ 426.483814][ T7625] bridge_slave_1: entered promiscuous mode [ 426.528077][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 426.528165][ T10] usb 5-1: no configurations [ 426.528178][ T10] usb 5-1: can't read configurations, error -22 [ 426.576180][ T6136] usb 3-1: USB disconnect, device number 20 [ 429.318217][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.909316][ C1] vkms_vblank_simulate: vblank timer overrun [ 429.959748][ T7649] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.959896][ T7649] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.960136][ T7649] bridge_slave_0: entered allmulticast mode [ 429.967087][ T7649] bridge_slave_0: entered promiscuous mode [ 430.080613][ T7625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 430.081686][ T7649] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.083544][ T7649] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.083776][ T7649] bridge_slave_1: entered allmulticast mode [ 430.122231][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.175511][ T7649] bridge_slave_1: entered promiscuous mode [ 430.195318][ T7625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 430.391228][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.773526][ C1] vkms_vblank_simulate: vblank timer overrun [ 431.355700][ C1] vkms_vblank_simulate: vblank timer overrun [ 432.078419][ T7649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.102086][ T7625] team0: Port device team_slave_0 added [ 432.117710][ T7649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.160618][ T7625] team0: Port device team_slave_1 added [ 432.223281][ C1] vkms_vblank_simulate: vblank timer overrun [ 433.133282][ T7913] netlink: 'syz.4.405': attribute type 1 has an invalid length. [ 433.280027][ T7649] team0: Port device team_slave_0 added [ 433.512500][ T7913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 434.067724][ T7914] bond1: (slave dummy0): making interface the new active one [ 434.073023][ T7914] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 434.074296][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.074310][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.074332][ T7625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.100015][ T7649] team0: Port device team_slave_1 added [ 434.122247][ T7625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.122264][ T7625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.122288][ T7625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.646742][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.646761][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.646784][ T7649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.756403][ T7936] netlink: 360 bytes leftover after parsing attributes in process `syz.3.409'. [ 434.878916][ T7649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.878935][ T7649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.878959][ T7649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.897504][ T7625] hsr_slave_0: entered promiscuous mode [ 437.913366][ T7625] hsr_slave_1: entered promiscuous mode [ 437.917692][ T7625] debugfs: 'hsr0' already exists in 'hsr' [ 437.917720][ T7625] Cannot create hsr debugfs directory [ 440.022598][ T7649] hsr_slave_0: entered promiscuous mode [ 440.051154][ T7649] hsr_slave_1: entered promiscuous mode [ 440.070723][ T7649] debugfs: 'hsr0' already exists in 'hsr' [ 440.070889][ T7649] Cannot create hsr debugfs directory [ 440.139852][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.139922][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.552679][ T7980] netlink: 360 bytes leftover after parsing attributes in process `syz.2.419'. [ 442.960207][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.030633][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.089842][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.306586][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.479942][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.529024][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.709424][ C0] vkms_vblank_simulate: vblank timer overrun [ 444.913962][ C0] vkms_vblank_simulate: vblank timer overrun [ 445.143116][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.143163][ C0] vkms_vblank_simulate: vblank timer overrun [ 446.251187][ C0] vkms_vblank_simulate: vblank timer overrun [ 448.296513][ T8002] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.322484][ T8002] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.688601][ T5808] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.707710][ T5808] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.726368][ T5808] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.727687][ T5808] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.730369][ T5808] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.180607][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.2.426'. [ 449.431083][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.478801][ T8002] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.634973][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 449.657145][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 449.679933][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 449.681773][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 449.682786][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 450.780470][ T5808] Bluetooth: hci3: command tx timeout [ 451.596432][ T144] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.741103][ T5808] Bluetooth: hci5: command tx timeout [ 451.836476][ T144] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.859297][ T5808] Bluetooth: hci3: command tx timeout [ 453.312246][ T10] Process accounting resumed [ 453.683302][ C0] vkms_vblank_simulate: vblank timer overrun [ 453.696181][ T8042] create_pit_timer: 10 callbacks suppressed [ 453.696202][ T8042] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 453.696675][ T8042] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 453.698834][ T8042] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 453.701413][ T8042] kvm: requested 14247 ns i8254 timer period limited to 200000 ns [ 453.704091][ T8042] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 453.721990][ T8042] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 453.728817][ T8042] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 454.689640][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.689782][ T5808] Bluetooth: hci5: command tx timeout [ 454.699607][ T8042] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 454.699799][ T8042] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 454.699999][ T8042] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 454.845642][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.930955][ T144] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.934493][ T144] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.939373][ T5808] Bluetooth: hci3: command tx timeout [ 455.175632][ C0] vkms_vblank_simulate: vblank timer overrun [ 455.790966][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.465252][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.505741][ T1128] bridge_slave_1: left allmulticast mode [ 456.505770][ T1128] bridge_slave_1: left promiscuous mode [ 456.506025][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.578540][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.704483][ C0] vkms_vblank_simulate: vblank timer overrun [ 456.769430][ T5808] Bluetooth: hci5: command tx timeout [ 456.940340][ T1128] bridge_slave_0: left allmulticast mode [ 456.940369][ T1128] bridge_slave_0: left promiscuous mode [ 456.940648][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.009375][ T5807] Bluetooth: hci3: command tx timeout [ 457.415274][ C0] vkms_vblank_simulate: vblank timer overrun [ 457.715654][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.297521][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.449643][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.514222][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.733808][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.784755][ C0] vkms_vblank_simulate: vblank timer overrun [ 458.849617][ T5807] Bluetooth: hci5: command tx timeout [ 459.388838][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.667419][ C0] vkms_vblank_simulate: vblank timer overrun [ 459.738980][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.195097][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.250192][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.440304][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.496755][ T1128] bond0 (unregistering): Released all slaves [ 460.641028][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.709369][ T1796] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 460.830080][ C0] vkms_vblank_simulate: vblank timer overrun [ 460.860336][ T1796] usb 5-1: Using ep0 maxpacket: 8 [ 461.086992][ C0] vkms_vblank_simulate: vblank timer overrun [ 461.111059][ T1796] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 461.111090][ T1796] usb 5-1: config 0 has no interface number 0 [ 461.111139][ T1796] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 461.111160][ T1796] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 461.111183][ T1796] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 461.111207][ T1796] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 461.112505][ T1796] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 461.112743][ T1796] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.123843][ T1796] usb 5-1: config 0 descriptor?? [ 462.256809][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.515824][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.557473][ T1796] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 462.618935][ C0] vkms_vblank_simulate: vblank timer overrun [ 462.639202][ T1796] usb 5-1: USB disconnect, device number 14 [ 462.717957][ T1796] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 462.929834][ T1128] hsr_slave_0: left promiscuous mode [ 462.971316][ T1128] hsr_slave_1: left promiscuous mode [ 462.972686][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.999231][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.323664][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.446'. [ 464.029955][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 464.200004][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 469.964948][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 470.052109][ T8020] chnl_net:caif_netlink_parms(): no params data found [ 471.506547][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 471.796839][ T10] usb 3-1: device descriptor read/64, error -71 [ 472.380028][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 472.519302][ T10] usb 3-1: device descriptor read/64, error -71 [ 472.630933][ T10] usb usb3-port1: attempt power cycle [ 473.800401][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 474.429522][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.429653][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.429914][ T8011] bridge_slave_0: entered allmulticast mode [ 474.433174][ T8011] bridge_slave_0: entered promiscuous mode [ 474.645011][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.645253][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.645605][ T8011] bridge_slave_1: entered allmulticast mode [ 474.694292][ T8011] bridge_slave_1: entered promiscuous mode [ 474.720012][ T8020] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.720138][ T8020] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.720448][ T8020] bridge_slave_0: entered allmulticast mode [ 474.763269][ T8020] bridge_slave_0: entered promiscuous mode [ 474.988898][ T8020] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.989072][ T8020] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.989665][ T8020] bridge_slave_1: entered allmulticast mode [ 475.033727][ T8020] bridge_slave_1: entered promiscuous mode [ 475.653056][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 475.875761][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 475.906167][ T8020] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.098162][ T8020] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.823532][ T8011] team0: Port device team_slave_0 added [ 477.276372][ T10] usb 3-1: device descriptor read/8, error -71 [ 477.278819][ T8011] team0: Port device team_slave_1 added [ 477.302180][ T1128] bridge_slave_1: left allmulticast mode [ 477.302209][ T1128] bridge_slave_1: left promiscuous mode [ 477.302492][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.385460][ T1128] bridge_slave_0: left allmulticast mode [ 477.385490][ T1128] bridge_slave_0: left promiscuous mode [ 477.390397][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.495748][ T1128] bridge_slave_1: left allmulticast mode [ 477.495779][ T1128] bridge_slave_1: left promiscuous mode [ 477.496160][ T1128] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.581037][ T1128] bridge_slave_0: left allmulticast mode [ 477.581065][ T1128] bridge_slave_0: left promiscuous mode [ 477.581321][ T1128] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.871608][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 477.950275][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.033625][ T1128] bond0 (unregistering): Released all slaves [ 478.900116][ T1128] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.239444][ T1128] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.284837][ T1128] bond0 (unregistering): Released all slaves [ 480.389378][ T8020] team0: Port device team_slave_0 added [ 480.903343][ T1796] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 481.366907][ T8020] team0: Port device team_slave_1 added [ 481.489373][ T1796] usb 3-1: device descriptor read/64, error -71 [ 481.729468][ T1796] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 481.869295][ T1796] usb 3-1: device descriptor read/64, error -71 [ 481.979741][ T1796] usb usb3-port1: attempt power cycle [ 482.110028][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.110048][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.110074][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.250668][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 482.250683][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.250696][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.263773][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.263790][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 482.263813][ T8020] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 482.359437][ T1796] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 482.390595][ T1796] usb 3-1: device descriptor read/8, error -71 [ 482.556632][ T8236] binder: 8234:8236 ioctl 4018620d 0 returned -22 [ 482.989317][ T1128] hsr_slave_0: left promiscuous mode [ 483.053338][ T1128] hsr_slave_1: left promiscuous mode [ 483.056609][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.069402][ T1796] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 483.109144][ T1796] usb 3-1: device descriptor read/8, error -71 [ 483.182594][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 483.219729][ T1796] usb usb3-port1: unable to enumerate USB device [ 483.589870][ T1128] hsr_slave_0: left promiscuous mode [ 483.611134][ T1128] hsr_slave_1: left promiscuous mode [ 483.612011][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 483.670214][ T1128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.459715][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 485.339260][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 485.351632][ T8241] netlink: 12 bytes leftover after parsing attributes in process `syz.4.471'. [ 490.373449][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 490.373570][ T10] usb 5-1: no configurations [ 490.373583][ T10] usb 5-1: can't read configurations, error -22 [ 490.559346][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 490.719308][ T10] usb 5-1: device descriptor read/64, error -32 [ 490.839574][ T10] usb usb5-port1: attempt power cycle [ 491.259371][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 491.279661][ T10] usb 5-1: device descriptor read/8, error -32 [ 491.559302][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 491.579852][ T10] usb 5-1: device descriptor read/8, error -32 [ 491.699425][ T10] usb usb5-port1: unable to enumerate USB device [ 494.015181][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 494.240261][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 495.760303][ T1128] team0 (unregistering): Port device team_slave_1 removed [ 495.880064][ T1128] team0 (unregistering): Port device team_slave_0 removed [ 496.550800][ T8020] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.550812][ T8020] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.550825][ T8020] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.558892][ T8241] vlan3: entered promiscuous mode [ 496.558912][ T8241] bond0: entered promiscuous mode [ 496.558924][ T8241] bond_slave_0: entered promiscuous mode [ 496.569654][ T8241] bond_slave_1: entered promiscuous mode [ 497.119534][ T8276] binder: 8275:8276 ioctl c0306201 0 returned -14 [ 497.120661][ T8276] binder: 8275:8276 ioctl c0306201 0 returned -14 [ 498.196838][ T8011] hsr_slave_0: entered promiscuous mode [ 498.198158][ T8011] hsr_slave_1: entered promiscuous mode [ 498.239186][ T8011] debugfs: 'hsr0' already exists in 'hsr' [ 498.239219][ T8011] Cannot create hsr debugfs directory [ 498.731470][ T8020] hsr_slave_0: entered promiscuous mode [ 498.732966][ T8020] hsr_slave_1: entered promiscuous mode [ 498.734006][ T8020] debugfs: 'hsr0' already exists in 'hsr' [ 498.734029][ T8020] Cannot create hsr debugfs directory [ 501.572715][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.572758][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.819531][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 502.979704][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 502.987036][ T8312] netlink: 12 bytes leftover after parsing attributes in process `syz.4.487'. [ 503.054883][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 503.054973][ T10] usb 5-1: no configurations [ 503.054986][ T10] usb 5-1: can't read configurations, error -22 [ 503.919772][ T8311] ------------[ cut here ]------------ [ 503.919795][ T8311] WARNING: CPU: 0 PID: 8311 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 503.919846][ T8311] Modules linked in: [ 503.919888][ T8311] CPU: 0 UID: 0 PID: 8311 Comm: syz.4.487 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 503.919916][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.919932][ T8311] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 503.919960][ T8311] Code: c7 c7 50 45 c5 8e 48 c7 c6 1e 27 da 8c 48 c7 c2 e4 fc d8 8c 4c 89 f9 e8 82 61 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 503.919977][ T8311] RSP: 0018:ffffc9000520fd00 EFLAGS: 00010287 [ 503.919994][ T8311] RAX: 1297a019d0e56000 RBX: ffff88814475e800 RCX: 0000000000000000 [ 503.920009][ T8311] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 503.920023][ T8311] RBP: ffffc9000520fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 503.920037][ T8311] R10: dffffc0000000000 R11: fffffbfff1dac82f R12: 1ffff1100544b5bd [ 503.920052][ T8311] R13: 0000000000000000 R14: ffff88814475e808 R15: ffff88805e3ebc00 [ 503.920067][ T8311] FS: 0000555573ff8500(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 503.920084][ T8311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 503.920098][ T8311] CR2: 00007fc0acf06286 CR3: 0000000054b46000 CR4: 00000000003526f0 [ 503.920115][ T8311] Call Trace: [ 503.920128][ T8311] [ 503.920140][ T8311] do_exit+0x105/0x2300 [ 503.920180][ T8311] ? rt_mutex_slowunlock+0x493/0x8a0 [ 503.920209][ T8311] ? __pfx_do_exit+0x10/0x10 [ 503.920239][ T8311] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 503.920271][ T8311] ? rt_spin_unlock+0x161/0x200 [ 503.920296][ T8311] do_group_exit+0x21c/0x2d0 [ 503.920321][ T8311] __x64_sys_exit_group+0x3f/0x40 [ 503.920339][ T8311] x64_sys_call+0x21f7/0x2200 [ 503.920360][ T8311] do_syscall_64+0xfa/0xfa0 [ 503.920391][ T8311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.920410][ T8311] ? asm_sysvec_call_function_single+0x1a/0x20 [ 503.920430][ T8311] ? clear_bhb_loop+0x60/0xb0 [ 503.920454][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.920473][ T8311] RIP: 0033:0x7f7a0232f749 [ 503.920614][ T8311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.920632][ T8311] RSP: 002b:00007ffcfe856708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 503.920652][ T8311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a0232f749 [ 503.920669][ T8311] RDX: 0000001b2f524000 RSI: 0000000000000014 RDI: 0000000000000000 [ 503.920683][ T8311] RBP: 00007ffcfe85676c R08: 000000000000257c R09: 00000000000927c0 [ 503.920697][ T8311] R10: 00000000003fd860 R11: 0000000000000246 R12: 000000000000009e [ 503.920711][ T8311] R13: 00000000000927c0 R14: 000000000007a925 R15: 00007ffcfe8567c0 [ 503.921182][ T8311] [ 503.921210][ T8311] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 503.921228][ T8311] CPU: 0 UID: 0 PID: 8311 Comm: syz.4.487 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 503.921252][ T8311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 503.921264][ T8311] Call Trace: [ 503.921272][ T8311] [ 503.921281][ T8311] dump_stack_lvl+0x99/0x250 [ 503.921331][ T8311] ? __asan_memcpy+0x40/0x70 [ 503.921361][ T8311] ? __pfx_dump_stack_lvl+0x10/0x10 [ 503.921391][ T8311] ? __pfx__printk+0x10/0x10 [ 503.921434][ T8311] vpanic+0x237/0x6d0 [ 503.921453][ T8311] ? __pfx_vpanic+0x10/0x10 [ 503.921481][ T8311] panic+0xb9/0xc0 [ 503.921500][ T8311] ? __pfx_panic+0x10/0x10 [ 503.921546][ T8311] __warn+0x31b/0x4b0 [ 503.921564][ T8311] ? kcov_task_exit+0x13c/0x150 [ 503.921601][ T8311] ? kcov_task_exit+0x13c/0x150 [ 503.921633][ T8311] report_bug+0x2be/0x4f0 [ 503.921668][ T8311] ? kcov_task_exit+0x13c/0x150 [ 503.921744][ T8311] ? kcov_task_exit+0x13c/0x150 [ 503.921770][ T8311] ? kcov_task_exit+0x13e/0x150 [ 503.921794][ T8311] handle_bug+0x84/0x160 [ 503.921813][ T8311] exc_invalid_op+0x1a/0x50 [ 503.921833][ T8311] asm_exc_invalid_op+0x1a/0x20 [ 503.921853][ T8311] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 503.921902][ T8311] Code: c7 c7 50 45 c5 8e 48 c7 c6 1e 27 da 8c 48 c7 c2 e4 fc d8 8c 4c 89 f9 e8 82 61 f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 503.921921][ T8311] RSP: 0018:ffffc9000520fd00 EFLAGS: 00010287 [ 503.921940][ T8311] RAX: 1297a019d0e56000 RBX: ffff88814475e800 RCX: 0000000000000000 [ 503.921956][ T8311] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 503.921971][ T8311] RBP: ffffc9000520fe68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 503.921986][ T8311] R10: dffffc0000000000 R11: fffffbfff1dac82f R12: 1ffff1100544b5bd [ 503.922002][ T8311] R13: 0000000000000000 R14: ffff88814475e808 R15: ffff88805e3ebc00 [ 503.922024][ T8311] ? rt_spin_lock+0x1c1/0x3e0 [ 503.922055][ T8311] do_exit+0x105/0x2300 [ 503.922099][ T8311] ? rt_mutex_slowunlock+0x493/0x8a0 [ 503.922127][ T8311] ? __pfx_do_exit+0x10/0x10 [ 503.922157][ T8311] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 503.922191][ T8311] ? rt_spin_unlock+0x161/0x200 [ 503.922219][ T8311] do_group_exit+0x21c/0x2d0 [ 503.922244][ T8311] __x64_sys_exit_group+0x3f/0x40 [ 503.922263][ T8311] x64_sys_call+0x21f7/0x2200 [ 503.922283][ T8311] do_syscall_64+0xfa/0xfa0 [ 503.922313][ T8311] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.922333][ T8311] ? asm_sysvec_call_function_single+0x1a/0x20 [ 503.922353][ T8311] ? clear_bhb_loop+0x60/0xb0 [ 503.922378][ T8311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.922398][ T8311] RIP: 0033:0x7f7a0232f749 [ 503.922417][ T8311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.922434][ T8311] RSP: 002b:00007ffcfe856708 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 503.922453][ T8311] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7a0232f749 [ 503.922468][ T8311] RDX: 0000001b2f524000 RSI: 0000000000000014 RDI: 0000000000000000 [ 503.922481][ T8311] RBP: 00007ffcfe85676c R08: 000000000000257c R09: 00000000000927c0 [ 503.922495][ T8311] R10: 00000000003fd860 R11: 0000000000000246 R12: 000000000000009e [ 503.922508][ T8311] R13: 00000000000927c0 R14: 000000000007a925 R15: 00007ffcfe8567c0 [ 503.922542][ T8311] [ 503.924846][ T8311] Kernel Offset: disabled