last executing test programs: 1m5.149050906s ago: executing program 1 (id=2): mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 1m4.49653487s ago: executing program 1 (id=9): syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000600)=ANY=[@ANYBLOB="5000000008021100000108021100000050505050505000000000000000000000000401000006020202020202"], 0x36) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x5c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x96c}], @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x4801, 0x2, 0x5, 0x0, {0x1, 0x7c, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x800, 0x1, 0xa}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 59.014482824s ago: executing program 1 (id=22): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) 22.27602195s ago: executing program 0 (id=84): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e25, 0xfffffffd, @loopback, 0x3}, 0x1c) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfb) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) 15.766322001s ago: executing program 0 (id=93): flock(0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000340)=""/180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x89) 12.713612974s ago: executing program 0 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000580)="c78fa74c26", 0x5) 12.575973342s ago: executing program 0 (id=99): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) 11.134175802s ago: executing program 0 (id=102): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 9.299044045s ago: executing program 0 (id=104): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(&(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./myproc/scsi/device_info\x00', 0x40000, 0x0) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 9.189105907s ago: executing program 2 (id=105): socket(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) r3 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000040)={r3, r3, r3}, &(0x7f00000000c0)=""/61, 0xfffffffffffffd7e, 0x0) 9.090691768s ago: executing program 4 (id=106): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000030900010073797a300000004064000000060a01040000000000000000010000000900020073797a32000000000900010073797a30000000003800048034000180"], 0xec}, 0x1, 0x0, 0x0, 0x20050000}, 0x8090) 8.126101762s ago: executing program 4 (id=108): flock(0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000340)=""/180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x89) 7.9371069s ago: executing program 2 (id=110): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$tipc(0x1e, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000020)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000030)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000050)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000060)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000070)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000090)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000a0)) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000d0)) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) write(r0, &(0x7f0000000200)="580000001400010300000000000000001e000000ffffffff00"/88, 0x58) 7.46771896s ago: executing program 4 (id=112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) 7.27564541s ago: executing program 2 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x14, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) 6.943951129s ago: executing program 4 (id=114): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 6.813228484s ago: executing program 2 (id=115): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x1, 0x4, 0x3, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_MODE={0xa, 0x2, {0x5, 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x48005}, 0x4000800) 5.230102299s ago: executing program 4 (id=116): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) read$char_usb(r0, &(0x7f00000002c0)=""/151, 0x97) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) ptrace(0x10, r2) close(r0) eventfd2(0x8, 0x1) fallocate(0xffffffffffffffff, 0x8, 0x4000, 0x4002) 2.526831095s ago: executing program 3 (id=121): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB], 0x12) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000140)={0x0, 0x7, "c918b1", 0x1, 0x2}) 2.272517811s ago: executing program 3 (id=122): flock(0xffffffffffffffff, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[], 0x0, 0x400, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) msgctl$MSG_INFO(0x0, 0xc, &(0x7f0000000340)=""/180) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x89) 1.779228357s ago: executing program 3 (id=123): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x50, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x2e, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x50}}, 0x0) 1.492543387s ago: executing program 3 (id=124): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000140), 0x10) 1.228337025s ago: executing program 2 (id=125): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x14, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) 843.676616ms ago: executing program 2 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000040)={0x2000, 0x101, 0x0, 'queue0\x00'}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x1, 0x2) add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'}) 640.947098ms ago: executing program 3 (id=127): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_io_uring_setup(0x48be, 0x0, 0x0, &(0x7f0000001180), &(0x7f0000000000)) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') pread64(r0, 0x0, 0x0, 0x6) socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, 0x0) read$FUSE(r1, 0x0, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0xe26, 0x101400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=""/92) 176.714278ms ago: executing program 3 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) symlinkat(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/phonet.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0', 0xb) write(r0, &(0x7f0000000580)="c78fa74c26", 0x5) 0s ago: executing program 4 (id=129): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e25, 0xfffffffd, @loopback, 0x3}, 0x1c) socket$inet(0x2, 0x4000000000000001, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) r1 = socket(0x840000000002, 0x3, 0x100) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x6, {0x2, 0x4e20, @rand_addr=0x64010101}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. [ 91.925058][ T10] cfg80211: failed to load regulatory.db [ 92.291061][ T5569] cgroup: Unknown subsys name 'net' [ 92.493993][ T5569] cgroup: Unknown subsys name 'cpuset' [ 92.557270][ T5569] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.559316][ T5569] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.256282][ T5591] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.289162][ T59] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.307636][ T5597] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.333945][ T5597] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.355540][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.367718][ T5597] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.369368][ T5597] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.380337][ T5597] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.381159][ T5597] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.383243][ T5600] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.383285][ T5597] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.394624][ T5591] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.418511][ T4897] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.426070][ T4897] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.454252][ T5591] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.455923][ T5591] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.456102][ T5591] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.469309][ T4897] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.499552][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.500514][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.504857][ T5591] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.514394][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.524492][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.582987][ T5591] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.619468][ T5591] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 99.518624][ T5598] Bluetooth: hci2: command tx timeout [ 99.676730][ T59] Bluetooth: hci4: command tx timeout [ 99.676864][ T59] Bluetooth: hci1: command tx timeout [ 99.676953][ T59] Bluetooth: hci3: command tx timeout [ 99.677202][ T5598] Bluetooth: hci0: command tx timeout [ 100.232485][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.233616][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.234376][ T5588] bridge_slave_0: entered allmulticast mode [ 100.236445][ T5588] bridge_slave_0: entered promiscuous mode [ 100.275710][ T5590] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.275830][ T5590] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.275955][ T5590] bridge_slave_0: entered allmulticast mode [ 100.290358][ T5590] bridge_slave_0: entered promiscuous mode [ 100.322162][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.322865][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.323026][ T5587] bridge_slave_0: entered allmulticast mode [ 100.331774][ T5587] bridge_slave_0: entered promiscuous mode [ 100.353357][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.353484][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.354640][ T5588] bridge_slave_1: entered allmulticast mode [ 100.358188][ T5588] bridge_slave_1: entered promiscuous mode [ 100.389638][ T5590] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.389758][ T5590] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.389893][ T5590] bridge_slave_1: entered allmulticast mode [ 100.391798][ T5590] bridge_slave_1: entered promiscuous mode [ 100.431726][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.431819][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.431945][ T5587] bridge_slave_1: entered allmulticast mode [ 100.434063][ T5587] bridge_slave_1: entered promiscuous mode [ 100.490343][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.490468][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.490816][ T5586] bridge_slave_0: entered allmulticast mode [ 100.492702][ T5586] bridge_slave_0: entered promiscuous mode [ 100.572865][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.573010][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.573170][ T5586] bridge_slave_1: entered allmulticast mode [ 100.575252][ T5586] bridge_slave_1: entered promiscuous mode [ 100.618279][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.643436][ T5590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.670640][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.673606][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.673862][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.673958][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.674070][ T5589] bridge_slave_0: entered allmulticast mode [ 100.676247][ T5589] bridge_slave_0: entered promiscuous mode [ 100.703927][ T5590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.744091][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.765258][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.765421][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.765553][ T5589] bridge_slave_1: entered allmulticast mode [ 100.777041][ T5589] bridge_slave_1: entered promiscuous mode [ 100.811335][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.882319][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.906193][ T5588] team0: Port device team_slave_0 added [ 100.928360][ T5590] team0: Port device team_slave_0 added [ 100.951082][ T5587] team0: Port device team_slave_0 added [ 100.953412][ T5588] team0: Port device team_slave_1 added [ 100.968880][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.980877][ T5590] team0: Port device team_slave_1 added [ 101.001365][ T5587] team0: Port device team_slave_1 added [ 101.021957][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.047594][ T5586] team0: Port device team_slave_0 added [ 101.126470][ T5586] team0: Port device team_slave_1 added [ 101.145823][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.145840][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.145896][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.205564][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.205582][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.205611][ T5590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.257356][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.257369][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.257388][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.260349][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.260365][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.260395][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.262973][ T5589] team0: Port device team_slave_0 added [ 101.263942][ T5590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.263956][ T5590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.263986][ T5590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.340560][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.340624][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.340706][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.421010][ T5589] team0: Port device team_slave_1 added [ 101.457332][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.457349][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.457378][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.524354][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.524366][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.524386][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.596702][ T5598] Bluetooth: hci2: command tx timeout [ 101.635904][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.635916][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.635934][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.756630][ T5598] Bluetooth: hci0: command tx timeout [ 101.756665][ T5598] Bluetooth: hci3: command tx timeout [ 101.756682][ T5594] Bluetooth: hci1: command tx timeout [ 101.756691][ T5598] Bluetooth: hci4: command tx timeout [ 102.082038][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.082057][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.082085][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.151744][ T5588] hsr_slave_0: entered promiscuous mode [ 102.152891][ T5588] hsr_slave_1: entered promiscuous mode [ 102.168738][ T5590] hsr_slave_0: entered promiscuous mode [ 102.172280][ T5590] hsr_slave_1: entered promiscuous mode [ 102.175073][ T5590] debugfs: 'hsr0' already exists in 'hsr' [ 102.175364][ T5590] Cannot create hsr debugfs directory [ 102.223527][ T5587] hsr_slave_0: entered promiscuous mode [ 102.224524][ T5587] hsr_slave_1: entered promiscuous mode [ 102.225193][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 102.225209][ T5587] Cannot create hsr debugfs directory [ 102.271539][ T5586] hsr_slave_0: entered promiscuous mode [ 102.272573][ T5586] hsr_slave_1: entered promiscuous mode [ 102.273848][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 102.273865][ T5586] Cannot create hsr debugfs directory [ 102.448473][ T5589] hsr_slave_0: entered promiscuous mode [ 102.449409][ T5589] hsr_slave_1: entered promiscuous mode [ 102.450167][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 102.450183][ T5589] Cannot create hsr debugfs directory [ 103.350955][ T5590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 103.398945][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.404475][ T5590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 103.463691][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.476407][ T5590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 103.493578][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.519003][ T5590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.551898][ T5590] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 103.674057][ T5587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.677021][ T59] Bluetooth: hci2: command tx timeout [ 103.716110][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.730753][ T5587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.773767][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.775891][ T5587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.800820][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.836943][ T59] Bluetooth: hci1: command tx timeout [ 103.836976][ T59] Bluetooth: hci0: command tx timeout [ 103.837073][ T5598] Bluetooth: hci4: command tx timeout [ 103.837099][ T5598] Bluetooth: hci3: command tx timeout [ 103.840197][ T5587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.881215][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.000891][ T5586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.042107][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.046346][ T5586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.091198][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.110593][ T5586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.130850][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.158461][ T5586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.191841][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.370139][ T5588] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.410374][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.427215][ T5588] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.458314][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.475748][ T5588] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.492353][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.530393][ T5588] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.551177][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.600640][ T5590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.724556][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.750470][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.754741][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.780859][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.795956][ T5590] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.812874][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.840648][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.851144][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.882000][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.952030][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.952282][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.006467][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.030618][ T1297] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.030733][ T1297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.143225][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.196071][ T1029] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.196228][ T1029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.220526][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.253389][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.253493][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.370483][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.429481][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.429708][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.464991][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.527727][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.528671][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.645986][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.713046][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.713194][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.760906][ T5598] Bluetooth: hci2: command tx timeout [ 105.788805][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.802002][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.802458][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.916958][ T5598] Bluetooth: hci3: command tx timeout [ 105.916991][ T5598] Bluetooth: hci0: command tx timeout [ 105.917490][ T5598] Bluetooth: hci4: command tx timeout [ 105.917516][ T5598] Bluetooth: hci1: command tx timeout [ 106.019850][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.136063][ T3393] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.136205][ T3393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.200359][ T3393] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.200535][ T3393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.523081][ T5590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.885891][ T5590] veth0_vlan: entered promiscuous mode [ 106.945884][ T5590] veth1_vlan: entered promiscuous mode [ 107.102132][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.234379][ T5590] veth0_macvtap: entered promiscuous mode [ 107.271681][ T5590] veth1_macvtap: entered promiscuous mode [ 107.496805][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.520660][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.555786][ T5590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.679167][ T5587] veth0_vlan: entered promiscuous mode [ 107.719902][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.837365][ T5587] veth1_vlan: entered promiscuous mode [ 107.973295][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.265565][ T5586] veth0_vlan: entered promiscuous mode [ 108.377186][ T5587] veth0_macvtap: entered promiscuous mode [ 108.387031][ T5586] veth1_vlan: entered promiscuous mode [ 108.439709][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.439737][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.485964][ T5587] veth1_macvtap: entered promiscuous mode [ 108.616055][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.616075][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.654499][ T5589] veth0_vlan: entered promiscuous mode [ 108.688818][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.730683][ T5589] veth1_vlan: entered promiscuous mode [ 108.734108][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.765567][ T5586] veth0_macvtap: entered promiscuous mode [ 108.781781][ T5588] veth0_vlan: entered promiscuous mode [ 108.817789][ T5586] veth1_macvtap: entered promiscuous mode [ 108.848224][ T5588] veth1_vlan: entered promiscuous mode [ 109.126841][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.292982][ T5589] veth0_macvtap: entered promiscuous mode [ 109.301957][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.365230][ T5774] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 109.383396][ T5589] veth1_macvtap: entered promiscuous mode [ 109.412636][ T5774] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 109.473154][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.473175][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.522305][ T5774] socket: no more sockets [ 109.555267][ T5588] veth0_macvtap: entered promiscuous mode [ 109.596029][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.658491][ T5588] veth1_macvtap: entered promiscuous mode [ 109.667599][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.667657][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.712627][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.979560][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.069669][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.248059][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.248089][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.669258][ T1297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.669277][ T1297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.853689][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.853707][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.359082][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.359104][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.552637][ T1297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.552659][ T1297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.638963][ T5786] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.661504][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.665980][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.981066][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.981088][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.008837][ T3393] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.062734][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.062953][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.063387][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.063669][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.098064][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.098307][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.098923][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.099268][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.164185][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.212750][ T3354] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.550912][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.551130][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.551317][ T43] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.582232][ T1297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.582862][ T1297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.769320][ T1297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.816937][ T1297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.033787][ T5816] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 114.115069][ T5806] udc dummy_udc.0: failed to start g1: -4 [ 114.115100][ T5806] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 114.158663][ T5806] UDC core: g1: couldn't find an available UDC or it's busy [ 114.181779][ T5811] UDC core: g1: couldn't find an available UDC or it's busy [ 114.656558][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.306666][ T5829] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 117.337857][ T5830] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 119.597672][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.493153][ T5598] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.499792][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.548552][ T5598] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.553107][ T5598] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.573389][ T5598] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.580280][ T5598] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 121.366157][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.639509][ T5594] Bluetooth: hci0: command tx timeout [ 122.766213][ T5858] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 122.766253][ T5858] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 122.766311][ T5858] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 122.884122][ T5858] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 122.976551][ T5693] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 123.123416][ T5858] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 123.232160][ T5693] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.288965][ T5693] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.308357][ T5693] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.308383][ T5693] usb 5-1: Product: syz [ 123.308398][ T5693] usb 5-1: Manufacturer: syz [ 123.308412][ T5693] usb 5-1: SerialNumber: syz [ 123.404284][ T5693] usb 5-1: config 0 descriptor?? [ 123.405976][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.547735][ T5872] overlayfs: upper fs does not support file handles, falling back to index=off. [ 124.356566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.376552][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.386531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.396543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.406531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.416534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.426534][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.436538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.446529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 125.739358][ T5594] Bluetooth: hci0: command tx timeout [ 126.964033][ T5693] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 127.152822][ T5693] usb 5-1: USB disconnect, device number 2 [ 127.222092][ T5771] udevd[5771]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.784343][ T5598] Bluetooth: hci0: command tx timeout [ 129.454398][ T44] bridge_slave_1: left allmulticast mode [ 129.496921][ T44] bridge_slave_1: left promiscuous mode [ 129.537518][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.446212][ T44] bridge_slave_0: left allmulticast mode [ 130.446249][ T44] bridge_slave_0: left promiscuous mode [ 130.470301][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.797932][ T5598] Bluetooth: hci0: command tx timeout [ 133.880565][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.880670][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.284644][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.421581][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.722947][ T44] bond0 (unregistering): Released all slaves [ 138.744524][ T5955] overlayfs: conflicting options: nfs_export=on,index=off [ 141.782391][ T5974] Zero length message leads to an empty skb [ 145.120275][ T5993] overlayfs: conflicting options: nfs_export=on,index=off [ 145.763598][ T6005] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.859754][ T197] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 146.165641][ T197] usb 3-1: unable to get BOS descriptor or descriptor too short [ 146.166243][ T197] usb 3-1: not running at top speed; connect to a high speed hub [ 146.166277][ T197] usb 3-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice= 0.40 [ 146.255835][ T197] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.255856][ T197] usb 3-1: Product: syz [ 146.255867][ T197] usb 3-1: Manufacturer: syz [ 146.255877][ T197] usb 3-1: SerialNumber: syz [ 146.741157][ T197] snd-ua101 3-1:1.1: sample format descriptor not found [ 146.741188][ T197] snd-ua101 3-1:1.0: invalid num_altsetting [ 149.046824][ T5712] usb 3-1: USB disconnect, device number 2 [ 149.976696][ T5712] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 150.126606][ T5712] usb 3-1: Using ep0 maxpacket: 8 [ 150.145873][ T5712] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.170192][ T5712] usb 3-1: config 0 has no interfaces? [ 150.170232][ T5712] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.210122][ T5712] usb 3-1: config 0 descriptor?? [ 150.571383][ T6024] tipc: Started in network mode [ 150.571420][ T6024] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 150.571979][ T6024] tipc: Enabled bearer , priority 0 [ 150.824072][ T5243] 8021q: adding VLAN 0 to HW filter on device eth1 [ 151.748039][ T5712] tipc: Node number set to 43690 [ 151.751773][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.751900][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.752125][ T5843] bridge_slave_0: entered allmulticast mode [ 151.809758][ T5843] bridge_slave_0: entered promiscuous mode [ 153.522614][ T6053] overlayfs: conflicting options: nfs_export=on,index=off [ 153.603332][ T5796] usb 3-1: USB disconnect, device number 3 [ 153.806675][ T44] hsr_slave_0: left promiscuous mode [ 153.857748][ T44] hsr_slave_1: left promiscuous mode [ 153.875613][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.875707][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.939603][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.939632][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.166291][ T44] veth1_macvtap: left promiscuous mode [ 154.211365][ T44] veth0_macvtap: left promiscuous mode [ 154.211700][ T44] veth1_vlan: left promiscuous mode [ 154.242993][ T44] veth0_vlan: left promiscuous mode [ 157.026873][ T6064] syz.0.84 (6064) used greatest stack depth: 19080 bytes left [ 157.767338][ T44] team0 (unregistering): Port device team_slave_1 removed [ 157.849675][ T44] team0 (unregistering): Port device team_slave_0 removed [ 160.616260][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.618139][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.621735][ T5843] bridge_slave_1: entered allmulticast mode [ 160.693683][ T5843] bridge_slave_1: entered promiscuous mode [ 161.173164][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.385565][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.566096][ T5843] team0: Port device team_slave_0 added [ 161.624676][ T5843] team0: Port device team_slave_1 added [ 162.939778][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.939796][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.939823][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.950394][ T6119] UDC core: g1: couldn't find an available UDC or it's busy [ 164.009258][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.009275][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.009306][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.337986][ T5843] hsr_slave_0: entered promiscuous mode [ 164.343522][ T5843] hsr_slave_1: entered promiscuous mode [ 164.755365][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 164.755394][ T5843] Cannot create hsr debugfs directory [ 167.671562][ T6144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.106'. [ 167.671624][ T6144] netlink: 48 bytes leftover after parsing attributes in process `syz.4.106'. [ 167.888003][ T6141] netlink: 'syz.3.103': attribute type 12 has an invalid length. [ 168.391145][ T5243] 8021q: adding VLAN 0 to HW filter on device eth2 [ 172.137439][ T6177] netlink: 'syz.3.118': attribute type 12 has an invalid length. [ 174.938859][ T5712] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 175.096651][ T5712] usb 5-1: Using ep0 maxpacket: 32 [ 175.101575][ T5712] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 175.125811][ T5712] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 175.176879][ T5712] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 175.176910][ T5712] usb 5-1: Product: syz [ 175.176926][ T5712] usb 5-1: Manufacturer: syz [ 175.176942][ T5712] usb 5-1: SerialNumber: syz [ 175.266963][ T5712] usb 5-1: config 0 descriptor?? [ 175.271929][ T6206] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 175.882649][ T5314] usb 5-1: USB disconnect, device number 3 [ 176.742223][ T6238] netlink: 'syz.4.129': attribute type 12 has an invalid length. [ 176.775031][ T6234] ------------[ cut here ]------------ [ 176.775046][ T6234] kernel BUG at net/core/dev.c:11344! [ 176.796766][ T6234] Oops: invalid opcode: 0000 [#1] SMP KASAN[ 176.796766][ T6234] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 176.796810][ T6234] CPU: 0 UID: 0 PID: 6234 Comm: syz.3.128 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 176.796835][ T6234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 176.796848][ T6234] RIP: 0010:register_netdevice+0x1eb4/0x1ed0 [ 176.796902][ T6234] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c bd fb ff ff 4c 89 f7 e8 bf eb 15 f9 e9 b0 fb ff ff e8 c5 75 ac f8 90 0f 0b e8 bd 75 ac f8 90 <0f> 0b e8 b5 75 ac f8 90 0f 0b e8 ad 75 ac f8 41 be 42 00 00 00 e9 [ 176.796921][ T6234] RSP: 0018:ffffc90005d675e0 EFLAGS: 00010283 [ 176.796949][ T6234] RAX: ffffffff89195273 RBX: 1ffff92000baced0 RCX: 0000000000080000 [ 176.796967][ T6234] RDX: ffffc90006aea000 RSI: 000000000000070a RDI: 000000000000070b [ 176.796982][ T6234] RBP: ffffc90005d67758 R08: 0000000000000000 R09: 0000000000000000 [ 176.796996][ T6234] R10: dffffc0000000000 R11: fffffbfff1f5e9e7 R12: ffff88805f384888 [ 176.797013][ T6234] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88805f384000 [ 176.797029][ T6234] FS: 00007f7fc0e666c0(0000) GS:ffff888125c45000(0000) knlGS:0000000000000000 [ 176.797047][ T6234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.797062][ T6234] CR2: 0000200000005240 CR3: 000000003d530000 CR4: 00000000003526f0 [ 176.797086][ T6234] Call Trace: [ 176.797095][ T6234] [ 176.797104][ T6234] ? up_write+0x5a/0x190 [ 176.797142][ T6234] ? __pfx_register_netdevice+0x10/0x10 [ 176.797170][ T6234] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.797202][ T6234] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.797233][ T6234] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 176.797265][ T6234] ? _mutex_lock_killable+0x152/0x1d0 [ 176.797290][ T6234] ? register_netdev+0x18/0x60 [ 176.797319][ T6234] register_netdev+0x40/0x60 [ 176.797345][ T6234] pn_bind+0x115/0xb20 [ 176.797385][ T6234] usb_add_function+0x290/0x930 [ 176.797406][ T6234] ? check_remote_wakeup_config+0x58/0x1c0 [ 176.797430][ T6234] configfs_composite_bind+0xde0/0x1410 [ 176.797457][ T6234] ? __pfx_configfs_composite_bind+0x10/0x10 [ 176.797481][ T6234] gadget_bind_driver+0x2ca/0x9e0 [ 176.797518][ T6234] ? __pfx_gadget_bind_driver+0x10/0x10 [ 176.797548][ T6234] really_probe+0x254/0xae0 [ 176.797581][ T6234] __driver_probe_device+0x1e8/0x360 [ 176.797611][ T6234] driver_probe_device+0x4f/0x240 [ 176.797643][ T6234] __driver_attach+0x339/0x600 [ 176.797672][ T6234] bus_for_each_dev+0x23e/0x2c0 [ 176.797692][ T6234] ? __pfx___driver_attach+0x10/0x10 [ 176.797719][ T6234] ? __pfx_bus_for_each_dev+0x10/0x10 [ 176.797742][ T6234] ? rt_spin_unlock+0x163/0x200 [ 176.797768][ T6234] bus_add_driver+0x348/0x670 [ 176.797792][ T6234] driver_register+0x23a/0x320 [ 176.797824][ T6234] usb_gadget_register_driver_owner+0xf9/0x270 [ 176.797856][ T6234] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 176.797889][ T6234] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 176.797921][ T6234] configfs_write_iter+0x33a/0x430 [ 176.797948][ T6234] vfs_write+0x61e/0xbb0 [ 176.797976][ T6234] ? __pfx_vfs_write+0x10/0x10 [ 176.798000][ T6234] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 176.798031][ T6234] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.798063][ T6234] ? mutex_lock_nested+0x152/0x1d0 [ 176.798086][ T6234] ? fdget_pos+0x252/0x320 [ 176.798109][ T6234] ksys_write+0x156/0x270 [ 176.798134][ T6234] ? __pfx_ksys_write+0x10/0x10 [ 176.798163][ T6234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.798185][ T6234] do_syscall_64+0x174/0x580 [ 176.798216][ T6234] ? trace_irq_disable+0x3b/0x140 [ 176.798251][ T6234] ? clear_bhb_loop+0x70/0xc0 [ 176.798276][ T6234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.798297][ T6234] RIP: 0033:0x7f7fc2c0e0d9 [ 176.798327][ T6234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.798346][ T6234] RSP: 002b:00007f7fc0e66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 176.798377][ T6234] RAX: ffffffffffffffda RBX: 00007f7fc2e95fa0 RCX: 00007f7fc2c0e0d9 [ 176.798395][ T6234] RDX: 000000000000000b RSI: 0000200000000280 RDI: 0000000000000003 [ 176.798409][ T6234] RBP: 00007f7fc2ca5024 R08: 0000000000000000 R09: 0000000000000000 [ 176.798425][ T6234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.798437][ T6234] R13: 00007f7fc2e96038 R14: 00007f7fc2e95fa0 R15: 00007ffd238b1888 [ 176.798461][ T6234] [ 176.798475][ T6234] Modules linked in: [ 176.798521][ T6234] ---[ end trace 0000000000000000 ]--- [ 176.811500][ T6234] RIP: 0010:register_netdevice+0x1eb4/0x1ed0 [ 176.811613][ T6234] Code: ff 44 89 f1 80 e1 07 38 c1 0f 8c bd fb ff ff 4c 89 f7 e8 bf eb 15 f9 e9 b0 fb ff ff e8 c5 75 ac f8 90 0f 0b e8 bd 75 ac f8 90 <0f> 0b e8 b5 75 ac f8 90 0f 0b e8 ad 75 ac f8 41 be 42 00 00 00 e9 [ 176.811658][ T6234] RSP: 0018:ffffc90005d675e0 EFLAGS: 00010283 [ 176.811710][ T6234] RAX: ffffffff89195273 RBX: 1ffff92000baced0 RCX: 0000000000080000 [ 176.811760][ T6234] RDX: ffffc90006aea000 RSI: 000000000000070a RDI: 000000000000070b [ 176.811793][ T6234] RBP: ffffc90005d67758 R08: 0000000000000000 R09: 0000000000000000 [ 176.811833][ T6234] R10: dffffc0000000000 R11: fffffbfff1f5e9e7 R12: ffff88805f384888 [ 176.811888][ T6234] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff88805f384000 [ 176.811924][ T6234] FS: 00007f7fc0e666c0(0000) GS:ffff888125c45000(0000) knlGS:0000000000000000 [ 176.811977][ T6234] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.812049][ T6234] CR2: 0000200000005240 CR3: 000000003d530000 CR4: 00000000003526f0 [ 176.812113][ T6234] Kernel panic - not syncing: Fatal exception [ 176.812829][ T6234] Kernel Offset: disabled