last executing test programs: 30m30.168842004s ago: executing program 32 (id=8): socket$tipc(0x1e, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000) signalfd(0xffffffffffffffff, &(0x7f0000000000)={[0x5]}, 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x300, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsmount(0xffffffffffffffff, 0x1, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0xfffc, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0xfd, 0x0, 0xfe, 0x22, 0x0, 0x7, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3}, 0xe) shutdown(r1, 0x1) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x13, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0xb, 0x0, &(0x7f00000007c0)="9b352e98d1dc0621a18bc4", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r3) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x54, r4, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @loopback}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x54}, 0x2, 0x34005}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000100"/20, @ANYRES32=0x0, @ANYRES16=r3], 0x58}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) 30m29.986341059s ago: executing program 33 (id=10): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_add_watch(0xffffffffffffffff, 0x0, 0x400) r5 = dup(0xffffffffffffffff) inotify_rm_watch(r5, r4) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r7 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000400)={0xf0f000, 0x1}) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}, {}, {0x8, 0x6558, 0x2}}}}}}, 0x0) r8 = socket(0x10, 0x2, 0x0) write(r8, 0x0, 0x0) recvmmsg(r8, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x8, 0x3, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 30m29.65425822s ago: executing program 34 (id=2): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) io_uring_setup(0x8015c0, &(0x7f00000000c0)={0x0, 0x5e5, 0x10000, 0x2, 0x12f}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 30m29.262905975s ago: executing program 35 (id=9): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r0) 30m28.959775546s ago: executing program 36 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x800) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket(0x1d, 0x2, 0x6) setsockopt$inet_int(r4, 0x6a, 0x16, 0x0, 0x0) 25m55.234908509s ago: executing program 37 (id=283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget(0x1, 0x400000, 0xe01, &(0x7f000013e000/0x400000)=nil) shmctl$IPC_RMID(r3, 0x0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) 25m34.297105939s ago: executing program 38 (id=303): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffffd}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000a, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x10, 0x0, 0x0, 0x4, 0x0, 0x1, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4090) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) 23m6.236981954s ago: executing program 5 (id=480): write(0xffffffffffffffff, &(0x7f0000000600)="fc0000001c000704ab5b2509b8", 0xd) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0xffffef7b, 0xfffffffa, 0xb2, 0x9, "1beb00000e001000000008010100"}) r1 = syz_open_pts(r0, 0x20800) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x44) 23m4.399335445s ago: executing program 5 (id=483): socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x11, 0x660f537f, 0x7b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4fa9, 0x3, 'nq\x00', 0x5, 0xf, 0x6c}, {@local, 0x4e1f, 0x0, 0x1, 0x3}}, 0x44) socket$inet_sctp(0x2, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0203000233000000fdffffffffdbdf2503000600002000000200000064010100000000000000040002000100000000000700fe0300000000030005000000000002000000e000000200000000000000000800120001000400b46b6e00fcffffff06006c00070800000200000000000000e0000002000000000000000000000000fe80000000000000000000000000400005000300328000000a004e2300000080fc010000000000000000000000000000050000000000000002000b0005000000ffff"], 0x198}, 0x1, 0x7}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r4, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r5 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) mq_timedsend(r5, 0x0, 0x2000, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) 23m2.806398704s ago: executing program 5 (id=484): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x2, 0x1f, 0x6}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000400)={0x400, 0x7, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x1, 0x403, 0x8}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x5, 0x9, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 23m2.087047603s ago: executing program 5 (id=487): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = gettid() sigaltstack(&(0x7f0000001040)={&(0x7f00000020c0)=""/4113, 0x0, 0xae0b9951e676bac7}, 0x0) rt_sigqueueinfo(r4, 0x21, &(0x7f00000002c0)={0xb, 0x4}) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000540)={0x28, 0x6, r1, 0x0, &(0x7f0000343000/0x3000)=nil, 0x3000, 0xa}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r1, 0x3, 0x9, 0x3fff}) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f00000002c0), &(0x7f0000000380)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 22m59.590605409s ago: executing program 5 (id=490): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1ff, 0x1, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000500)={0x38, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x38}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"db4c1421593cb4d3f8fe6094dc821bbbe06520701fc6de7b0349f34b0f8c556a9e9aff1355aab8d6da26d74608530f150f127f9e3f0a2f1fff0be9774c95d6c007c91903f78616596487bf50017c56b15385ab264cba5b168c62d971e67e6f3e73d60b5a8adbaaf2af8610c6a91c0a116f619adce4aa91d5a68faf8ee98693d32d8d8244381b5720ef596600e39491d216c22d0725904bab7d90fa8afb8fa04b707410aa300ef098609b4fa6dd77b1b7c321b1fc6356564ce3f90826be3a9a5be186ffc48eb13824e9dae77ed212a0f802074ff4f1725c4ad88cf5bbd36e3406bc59d96e82047631d8be9462ee7e54e5b2897c3fff38eabf67e1e160c2b5e18be06457844d89c9a606b7d25fbde713f4759da0bee1fabe3f71dcca63540f113a2b5edc4b327d1f9610377b97265d4aa875b4bc3c44bf8110d5df1beb1fe54794a0aa52dfc80df1caf7d812b4f1cdba1a6836b45ea2180d08439d411ce8e0755868cc839eaeac73e5d28f9f1990584038cf5fa6bee0c4095a27cc8c7b59519bf2a9bf1fedf54cc2dc6aea6c42c32de40c291e5f422f5c7792a08926af160fb379576dd81bac746232fb246817fc3248097914b75e83cc5eb518ce8fb643b34ca69c3b61f0d94e7db62dd480198d41e0862f1ec4429ab637569884a5ba446a0b09edfd986a2b3e15ee35bbd18610dad6271681ed240b0ffab9199b541013c0aadc36484da57511896c14776a41602aa1426edfbb828897d9c218b7936a0572840ebbc796e888a439b24e640324b511deb6ed0b2ce2f7567447826944b4f34101e492e8d20a2deda950e96e78f86d6d4c976f0c99041c94944309e6ce08d84a7c96677d570d9a57ec0506a4321d9e049b55be883ca3648c27772fc5dbaea5e6c2ded2ce72fb68989ae381fe1394cf6966ab04285d5ff8256bc2e85462b8d89aeeebd5432157c945b5dc1960d9282c6cc007fe029325d6078aef94d4954f956c71bcdf846f41392ebe0d3b289438d24ec4bc073617459a6b232445dd636a9f21140e14b162fd5ef1d626b0ff84884fd63d22cc1b05befb77ea937f3045cc15b125479b262c1e32fca75a5468423288c5776efee744b1fccb5e6d661d9d287cfa8582c96ea34a33c1bbc29c0035657da66a87150bbb885be5ee123e431fd793ea179a0fc77aaee66d874c0616cb32324826b36d0e27d14217ad1131cace3bae4ef82dfbc790e78de53a9bfbdb468bf0eb3ff134073b380858965de2d108862daf3fc6b49ad46f20832238aeaa5d010cf08e37938f0bb7bbeaa970c39ce9327a16fe07565708266ce9ef639bfa08538693b456228aa1c370d64ef9795b7cc208a2c528d381a042d149ed5c7f34ed26a7d5a4401b86434f054389e5dac7a4ee896e406d7b27240d925d478e0eb2202797832d3e2c74f4925ad58377b0d6ae9b97034f94"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22m57.507952219s ago: executing program 5 (id=493): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0a00fa1b04"], 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) 22m39.916138506s ago: executing program 39 (id=493): fcntl$setsig(0xffffffffffffffff, 0xa, 0x31) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd002000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x2, 0x5001) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0a00fa1b04"], 0x7) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setxattr$security_ima(0x0, &(0x7f0000000080), 0x0, 0x0, 0x1) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300090a0000000000000004000000030006000000000002000000ac1414000000000000000000020001000000000000000002fffffffb030005000000000002"], 0x50}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, 0x0) 16m44.657627766s ago: executing program 9 (id=796): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000105d00", @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x140, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) writev(r3, 0x0, 0x0) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = openat(r5, 0x0, 0x0, 0x10) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(0xffffffffffffffff, r6, 0x0, 0x7fffffff) r7 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r7, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r7, 0x4008af03, &(0x7f0000001980)={0x2, 0x0, [{0x5, 0x0, 0x0}, {0x0, 0x0, 0x0}]}) 16m43.777584097s ago: executing program 9 (id=798): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0]) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 16m42.277141832s ago: executing program 9 (id=799): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4016, &(0x7f0000000780)={[{@dioread_nolock}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@noauto_da_alloc}, {@commit={'commit', 0x3d, 0x1}}, {@grpjquota}, {@quota}]}, 0x1, 0x43c, &(0x7f0000000280)="$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") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socketpair$unix(0x1, 0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 16m41.172067427s ago: executing program 9 (id=800): creat(&(0x7f0000000000)='./bus\x00', 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$kcm(0x29, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)='.', 0x1}], 0x1}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 16m40.364662101s ago: executing program 9 (id=802): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r5, &(0x7f00000004c0)=""/57, 0x39) 16m37.250365701s ago: executing program 9 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x100000020008b}, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x2e42}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) 16m21.55481642s ago: executing program 40 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x100000020008b}, 0x0) r0 = getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0x3, &(0x7f0000000140)={0x2, 0x2e42}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000100)={0x2, 0x1, 0x3, 0x14, 0x4}) 9m14.541798546s ago: executing program 2 (id=1050): r0 = syz_ublk_setup_io_uring(0x33ba, &(0x7f0000000200)={0x0, 0x298e, 0x1000, 0x2, 0xd6}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50, 0x0, r0}, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0xc, 0x4007, @fd_index=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x2002, 0xfffffffd, 0x9, 0x0, 0x0) 9m13.354587874s ago: executing program 2 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[], 0x0}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000180)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x94, &(0x7f0000000280)=@string={0x94, 0x3, "54d8ed8d9493b9ef0e70ae372a3aaafb78e121aa6773a11e838e129078c8ba0014ff794c79f87d88a7cda04f36c744c36f3471a2850ce4657f6f74b0cc8182818054baed0a0eddddbd79b3916ea1a104219b04191ae08f9c2ea26216b9defe8f78dea92db003c50e715c2e7f42aaf44b3ff1c37a63ce4021ce3eecd8eb57ff37f050926a5394b62c3c83b4ece251e3f54f01"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40d}}]}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002eb0e00000000000000000105000600200000000a00000040010000000500e50000070020001f00001a000000030000a95a6e870200010000e9ff070040000200ee1500050005000000cc580a"], 0x80}}, 0x20000000) 9m9.898209865s ago: executing program 2 (id=1062): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(0xffffffffffffffff, &(0x7f0000000180)='0', 0xfe64) 9m4.002363822s ago: executing program 2 (id=1067): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)={0x14, 0x3, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x44014) 8m57.871006587s ago: executing program 2 (id=1080): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 8m54.163934932s ago: executing program 2 (id=1082): r0 = socket$netlink(0x10, 0x3, 0xc) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x1, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 8m37.857630225s ago: executing program 41 (id=1082): r0 = socket$netlink(0x10, 0x3, 0xc) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) socket(0x18, 0x1, 0x80000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="d80000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa1400040000000000000000000000ffff0a0101020c00028005000100000000003c0002802c00018014000300fc02000000000000000000000000000014000400fe8000000000000000000000000000aa0c0002800500010000000000080007400000000044000f800800034000000006080002400000000108000340000000ce08000240000000030800034058696a8c0800024000000001080001"], 0xd8}, 0x1, 0x0, 0x0, 0x40}, 0x0) 7m18.236636783s ago: executing program 1 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'vlan1\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) 7m13.148669522s ago: executing program 1 (id=1245): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000603710559000905080000000000010200090502761c"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_connect(0x1, 0x51, 0x0, 0x0) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) read$char_usb(r1, 0x0, 0x0) 7m9.034551847s ago: executing program 1 (id=1252): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) unshare(0x28020480) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)={0x10, 0x2a, 0x503}, 0x10}], 0x1}, 0x14008010) 7m5.25801354s ago: executing program 1 (id=1258): r0 = socket$rxrpc(0x21, 0x2, 0xa) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x7, 0x9, 0x42, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x8000000000000001, 0x2, 0x3aaa, 0x91, 0x4, 0x3}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001a006da800000056cf208561f6756e7596fc0000000000000800010000"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 7m3.816862882s ago: executing program 0 (id=1261): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000603710559000905080000000000010200090502761c"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_connect(0x1, 0x51, 0x0, 0x0) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde56ca9a62c", 0x7) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r2) write$char_usb(r3, 0x0, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$lan78xx(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x23, 0xf7, {0xf7, 0x23, "6b0cf68bdefb6e5dffa7c6c0af18766a210fabfeaa0eda9b37671f30c2f14018e4c98da7125761552ba0b89d5922b888d5c27810083421c8a81bd4976fbde5b02d371a9f0cd91c650f5570b9cb6e60f09919b337838a3f1cce4032f2c121c5b710fbf8265129d2c48ef32798da4aa3361abae616d2ff551bb9d9e3b76dfd568f9334674255489853027f26e477687b050fa749d741dcbd93edbd35cc91f01d31448f928ea722f898fe0bd3b6146cc0e7951e8319375d27343d438fad609683c863c7ca789593d22f7ec9230b6ea460d6699d197d9a0b1fe1115caa5b2ba0a413413590f17772b7151827090eb4fe80b16f224f48c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x9, 0xa8, "d0563271208ef7e3956dc0aa3778f77f7f4c26472ff43943cc31e9ac28424705198e8c95e72155faef66b0136526a3379c36f5ad3669ebcbbfe6bcccc93aad8b4b43acfbcb8b8cf47bbbc953e0bec2077af237dd7c2ef3639cce5b0aa4ed7b4b6745494fca6d33971a0bee1f650435733f8027424f437275786c617e8e1a23c08181620c0a0209a9d6780d9d8414560e0a4e5919c5019f389db2fdecc6200f30881e5fedce579e91"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0xc0, 0xa1, 0x4, 0x286b}, &(0x7f0000000900)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000940)={0xc0, 0xa2, 0x2f, "eee6915624c9dcbdc37552d9f418aec689ad4babdcc8c5fc8f29e73164c0116e4453c311844a865f84fa78527b3ffb"}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0xf4240, 0xfffffffe, 0x7, 0xff, 0x1}) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xad, 0xe0cd5659ebd36afe, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x6, 0x7, {0xa, 0x25, 0x25, 0x3, 0x40, 0x1a1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x80, 0x7, 0x7, {0xa, 0x25, 0x25, 0x9f, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001500)=ANY=[@ANYRES8=r0], 0x0) syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x4, 0x0, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x8, 0x1c, 0x4e}, [@extension_unit={0x7, 0x24, 0x9, 0x1, 0x7ff}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x100, 0xf3, 0x1, 0xb, 0x0, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x7, 0x5, {0x8, 0x25, 0x1, 0x1, 0xc, 0x40, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb, 0x10, 0x6, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x5f, 0x5}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 7m3.595141899s ago: executing program 1 (id=1263): syz_emit_vhci(0x0, 0x12) clock_adjtime(0x0, &(0x7f0000000340)={0x37db, 0x82000000002f4246, 0xfffffffffffffffc, 0x6, 0x8, 0x5, 0x80, 0x4, 0x4, 0x80000, 0x2, 0x1, 0x100, 0x0, 0x9, 0x2000000000000, 0x9, 0x5, 0x800000009, 0x4000000000200, 0x0, 0x2, 0x0, 0x10000000000f48, 0x8, 0x25}) 7m2.747154843s ago: executing program 1 (id=1264): r0 = io_uring_setup(0x492b, &(0x7f0000000000)={0x0, 0x838e, 0x1000, 0x2, 0x1cf}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000240)=0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) 6m59.198555898s ago: executing program 42 (id=1264): r0 = io_uring_setup(0x492b, &(0x7f0000000000)={0x0, 0x838e, 0x1000, 0x2, 0x1cf}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x80400, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000240)=0x8000000) close_range(r0, 0xffffffffffffffff, 0x0) 6m58.892108218s ago: executing program 0 (id=1268): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b48, &(0x7f0000000040)) 6m57.539219719s ago: executing program 0 (id=1271): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0xc0) 6m56.871417119s ago: executing program 0 (id=1272): r0 = socket$rxrpc(0x21, 0x2, 0xa) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x12, 0x2, 0x7, 0x9, 0x42, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0x112, 0x8000000000000001, 0x2, 0x3aaa, 0x91, 0x4, 0x3}, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000200), 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001a006da800000056cf208561f6756e7596fc0000000000000800010000"], 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r2 = socket(0x2d, 0x2, 0x0) bind$xdp(r2, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0x3e}, 0x10) r3 = dup(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(r4, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 6m56.017286734s ago: executing program 0 (id=1275): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc", 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) 6m53.181187128s ago: executing program 0 (id=1279): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b48, &(0x7f0000000040)) 6m49.551234677s ago: executing program 43 (id=1279): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x6}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000ff90850000007100000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0xd5dd0000, 0x1c6017}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBTYPE(r8, 0x4b48, &(0x7f0000000040)) 4m12.920858997s ago: executing program 8 (id=1577): socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000240)={0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x11, 0x660f537f, 0x7b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4fa9, 0x3, 'nq\x00', 0x5, 0xf, 0x6c}, {@local, 0x4e1f, 0x0, 0x1, 0x3}}, 0x44) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x198}, 0x1, 0x7}, 0x4040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000010, r4, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r5 = mq_open(&(0x7f0000000000)='!s\"D\xd7$\xd6\xe0\x8b\xdb\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x80, 0x0) mq_timedsend(r5, 0x0, 0x2000, 0x4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) 4m9.84756732s ago: executing program 8 (id=1585): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d00010000000009040000050300150009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m8.625631909s ago: executing program 8 (id=1590): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0xffff}, {@in=@broadcast, 0x4d4, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, 0x0, 0x1000, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x40}, 0x40082) 4m7.272860298s ago: executing program 8 (id=1594): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba", 0x2) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) syz_ublk_setup_io_uring(0x76e3, &(0x7f0000000180)={0x0, 0xf4bc, 0x80, 0x0, 0x92}, &(0x7f0000000200), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0xc0844123, &(0x7f00000001c0)) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000002c0)=0x9) 4m6.534008298s ago: executing program 8 (id=1597): r0 = syz_ublk_setup_io_uring(0x33ba, &(0x7f0000000200)={0x0, 0x298e, 0x1000, 0x2, 0xd6}, 0x0, 0x0, 0x0) syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0x69ee, 0xc00, 0x5, 0x50, 0x0, r0}, 0x0, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, 0x0) syz_io_uring_submit(r2, r3, 0x0, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0xc, 0x4007, @fd_index=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x1}) io_uring_enter(r1, 0x2002, 0xfffffffd, 0x9, 0x0, 0x0) 4m6.410499808s ago: executing program 3 (id=1599): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000009c0), 0xa0001, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) 4m2.54949521s ago: executing program 3 (id=1601): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x9e, 0x9, 0xfffffffffffffffd, 0x10000000, 0xffff, 0x3, 0x6002004c2, 0x1000, 0x9, 0x0, 0x400, 0x80, 0x3, 0x0, 0x1, 0x8d], 0x58000, 0x2164c0}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m2.365878769s ago: executing program 8 (id=1603): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_API_VERSION(r0, 0xae00, 0x0) 4m0.956227249s ago: executing program 3 (id=1604): r0 = syz_open_dev$usbmon(&(0x7f0000005440), 0x400, 0x42401) ioctl$VHOST_VDPA_GET_STATUS(0xffffffffffffffff, 0x8001af71, 0x0) ppoll(&(0x7f00000067c0)=[{r0, 0x200}], 0x1, &(0x7f0000006880), 0x0, 0x0) 3m59.644053417s ago: executing program 3 (id=1608): bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x0, 0x6, "75287ad1ee602ec4452a04ea7cdcd151bb2cd9893bc31f80718316d9bd3517076db9ad1f6a120d8be6d7f81cd81ec2757d0386e7d95f0669b740a5418d69d0", 0x10000000000001}, 0x60) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x20, @loopback, 0x23}, 0x1c) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001840)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/179, &(0x7f0000000140)=""/63, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000001880)=""/4101}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000240)=0x1) 3m58.985962873s ago: executing program 3 (id=1609): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x20000) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x0, 0x80000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) epoll_create(0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(0x0, r3, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x10, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000240)={0x80004, &(0x7f0000000880)=[{0x8, '\x00', @st={0x4, [{0x1, @uvalue=0x40}, {0x1, @svalue=0x3d}, {0x0, @uvalue=0x8}, {0x2, @uvalue=0xfffffffffffffff9}]}, 0x2}, {0x16, '\x00', @st={0x4, [{0x1, @uvalue=0x2000000}, {0x2, @svalue=0x8}, {0x3, @svalue=0x4000000000000}, {0x3, @svalue=0x100}]}, 0x131}, {0x2a, '\x00', @data=0xd, 0x1000}, {0x2c, '\x00', @st={0x4, [{0x3, @svalue=0x3}, {0x3, @svalue=0x3}, {0x0, @uvalue=0x3}, {0x2, @uvalue=0xffffffffffffffff}]}, 0x10000}]}) 3m52.555196086s ago: executing program 3 (id=1614): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x149a82, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xec776000) write$cgroup_int(r0, &(0x7f00000000c0)=0xfffffffffffffffc, 0x12) 3m36.958870279s ago: executing program 44 (id=1614): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/address_bits', 0x149a82, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000009, 0x204031, 0xffffffffffffffff, 0xec776000) write$cgroup_int(r0, &(0x7f00000000c0)=0xfffffffffffffffc, 0x12) 3m5.429895293s ago: executing program 4 (id=1666): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r1 = dup2(r0, r0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x5) 3m4.190100155s ago: executing program 4 (id=1668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x501, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x6001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r4, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000023896) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0x7}, {0x0, 0x1}, {0xfff2, 0x1}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}, @TCA_RATE={0x6, 0x5, {0x8d, 0x5}}]}, 0x34}}, 0x80) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 3m1.472247898s ago: executing program 4 (id=1670): socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000003340), 0x40040, 0x0) socket$inet6(0xa, 0x2, 0x0) write$vga_arbiter(r1, &(0x7f0000000080)=@other={'trylock', ' ', 'mem'}, 0xc) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$tipc(0x1e, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000280)={0x9}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000100)={[{0x100005, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x2, 0x6, 0x12, 0x5, 0x40}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x4, 0xff, 0x0, 0x4, 0x6, 0x6f, 0x20c}, {0x0, 0x3, 0x38, 0x3, 0x84, 0x7, 0x3, 0x50, 0xc, 0x5, 0x6f, 0x8, 0x9}], 0xdfffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m59.912514161s ago: executing program 4 (id=1672): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000"], 0x50) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 2m56.261243689s ago: executing program 4 (id=1675): io_setup(0x7, &(0x7f0000000280)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001500)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0xaad80) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000200001000000000000000000020000100000020000"], 0x1c}}, 0x48850) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x14) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r2 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x2734, 0x1, 0x0, 0x0, 0x0, r0}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)=""/4095, 0x440000}], 0x2000000000000021) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000001c0)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r4, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001440)=ANY=[@ANYBLOB="78000000070a010200000000000000000f0000060900010073797a31000000005800048054000180090001006d65746100000000440002800800014000000000080002400000000bd22771beb7600cb69eb54a400800014000000001080003400000000c080001400000000b080001400000001208000340000000150800014000000002"], 0x78}, 0x1, 0x0, 0x0, 0x480d5}, 0x1400c084) socket$nl_generic(0x10, 0x3, 0x10) 2m44.668636722s ago: executing program 4 (id=1686): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008580)=[{0x3, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x8, 0x5, 0x8]}, {0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f0000004000)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {0x0}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x1, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {&(0x7f00000065c0)=""/80, 0x50}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x7, 0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f00000068c0)=""/197, 0xc5}, {&(0x7f0000006a00)=""/251, 0xfb}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0x5, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000000580)=""/263, 0x107}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000007140)=""/169, 0xa9}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/237, 0xed}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008380)=""/92, 0x5c}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x7) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595d, 0x200, 0x0, 0x17c}, &(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) 2m27.644568965s ago: executing program 45 (id=1686): socket$nl_rdma(0x10, 0x3, 0x14) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xe4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) setpriority(0x1, 0xffffffffffffffff, 0x3) r2 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100)=0x0, &(0x7f00000000c0), &(0x7f0000000000)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r6 = socket$kcm(0xa, 0xf, 0x106) sendmsg$kcm(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) sendmsg$kcm(r6, &(0x7f0000000480)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r5, 0x7}, 0x80, 0x0}, 0x4000011) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000015c0)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08786eb807e0000000000000000000009fe70ba83a7a66e67a0bae5cfaccbbb81e28d7b568", @ANYRESHEX, @ANYRESOCT], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008580)=[{0x3, 0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a00)=""/146, 0x92}, {&(0x7f0000002ac0)=""/35, 0x23}, {&(0x7f0000002b00)=""/199, 0xc7}], &(0x7f0000002c40)=[0x9, 0x8000000000000001, 0x8, 0x5, 0x8]}, {0x0, 0x0, 0x0, &(0x7f0000003fc0), &(0x7f0000004000)=[0x1, 0x3baf, 0x5, 0x3]}, {0x4, 0x1, 0x0, &(0x7f0000005300)=[{0x0}, {0x0}, {&(0x7f00000042c0)=""/56, 0x38}, {&(0x7f0000004300)=""/4096, 0x1000}], &(0x7f0000005380)=[0x1ff, 0x6, 0x2, 0x400, 0x6]}, {0x2, 0x0, 0x0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000063c0)=""/246, 0xf6}], &(0x7f0000006500)=[0x1, 0x8000]}, {0x4, 0x0, 0x0, &(0x7f0000006740)=[{&(0x7f0000006540)=""/23, 0x17}, {&(0x7f0000006580)=""/13, 0xd}, {&(0x7f00000065c0)=""/80, 0x50}, {0x0}], &(0x7f0000006780)=[0x7ff, 0x7ff]}, {0x7, 0x0, 0x0, &(0x7f0000006e40)=[{&(0x7f00000068c0)=""/197, 0xc5}, {&(0x7f0000006a00)=""/251, 0xfb}, {&(0x7f0000006b00)=""/174, 0xae}, {&(0x7f0000006bc0)=""/173, 0xad}, {&(0x7f0000006c80)=""/47, 0x2f}, {&(0x7f0000006cc0)=""/241, 0xf1}, {&(0x7f0000006dc0)=""/93, 0x5d}], &(0x7f0000006f00)=[0x0, 0x3, 0x5, 0xbbdc, 0x7]}, {0x9, 0x1, 0x0, &(0x7f0000008480)=[{&(0x7f0000000580)=""/263, 0x107}, {&(0x7f0000007040)=""/195, 0xc3}, {&(0x7f0000007140)=""/169, 0xa9}, {&(0x7f0000007200)=""/4096, 0x1000}, {&(0x7f0000008200)=""/237, 0xed}, {&(0x7f0000008300)=""/21, 0x15}, {&(0x7f0000008380)=""/92, 0x5c}, {&(0x7f0000008400)=""/54, 0x36}, {&(0x7f0000008440)=""/47, 0x2f}], &(0x7f0000008540)=[0x2193, 0x401, 0x41f9]}], 0x7) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r8 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595d, 0x200, 0x0, 0x17c}, &(0x7f0000000100), &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r3, r9, r10, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10}) io_uring_enter(r8, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) 6.252184229s ago: executing program 6 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e3802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) close(0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 6.009409162s ago: executing program 6 (id=1835): socket(0x10, 0x80002, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f00000003c0), 0x4) recvmsg$kcm(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) 5.741701378s ago: executing program 7 (id=1837): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 5.046306606s ago: executing program 7 (id=1838): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902380001000000000904000603710559000905080000000000010200090502761c"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) syz_usb_connect(0x1, 0x51, 0x0, 0x0) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x7, 0x1, 0x3, 0x40, 0x4b8, 0x202, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xfb, 0xb0, 0xc, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r3, &(0x7f00000007c0)="0bcde56ca9a62c", 0x7) write$char_usb(r3, 0x0, 0x0) syz_usb_disconnect(r2) write$char_usb(r3, 0x0, 0x0) r4 = syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) syz_usb_disconnect(r4) r5 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$lan78xx(r0, &(0x7f0000000680)={0x14, &(0x7f0000000540)={0x0, 0x23, 0xf7, {0xf7, 0x23, "6b0cf68bdefb6e5dffa7c6c0af18766a210fabfeaa0eda9b37671f30c2f14018e4c98da7125761552ba0b89d5922b888d5c27810083421c8a81bd4976fbde5b02d371a9f0cd91c650f5570b9cb6e60f09919b337838a3f1cce4032f2c121c5b710fbf8265129d2c48ef32798da4aa3361abae616d2ff551bb9d9e3b76dfd568f9334674255489853027f26e477687b050fa749d741dcbd93edbd35cc91f01d31448f928ea722f898fe0bd3b6146cc0e7951e8319375d27343d438fad609683c863c7ca789593d22f7ec9230b6ea460d6699d197d9a0b1fe1115caa5b2ba0a413413590f17772b7151827090eb4fe80b16f224f48c1"}}, &(0x7f0000000640)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x140a}}}, &(0x7f0000000980)={0x34, &(0x7f00000006c0)={0x40, 0x9, 0xa8, "d0563271208ef7e3956dc0aa3778f77f7f4c26472ff43943cc31e9ac28424705198e8c95e72155faef66b0136526a3379c36f5ad3669ebcbbfe6bcccc93aad8b4b43acfbcb8b8cf47bbbc953e0bec2077af237dd7c2ef3639cce5b0aa4ed7b4b6745494fca6d33971a0bee1f650435733f8027424f437275786c617e8e1a23c08181620c0a0209a9d6780d9d8414560e0a4e5919c5019f389db2fdecc6200f30881e5fedce579e91"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000880)={0x0, 0x8, 0x1, 0x2}, &(0x7f00000008c0)={0xc0, 0xa1, 0x4, 0x286b}, &(0x7f0000000900)={0x40, 0xa0, 0x4, 0x5}, &(0x7f0000000940)={0xc0, 0xa2, 0x2f, "eee6915624c9dcbdc37552d9f418aec689ad4babdcc8c5fc8f29e73164c0116e4453c311844a865f84fa78527b3ffb"}}) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x40045b0a, &(0x7f0000000000)={0xf4240, 0xfffffffe, 0x7, 0xff, 0x1}) read$char_usb(r1, 0x0, 0x0) syz_usb_connect$uac3(0x2, 0x80, &(0x7f00000004c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8211, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xad, 0xe0cd5659ebd36afe, 0x4, {0x8, 0xb, 0x0, 0x1, 0x1, 0x21, 0x30, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0xfe, 0x6, 0x7, {0xa, 0x25, 0x25, 0x3, 0x40, 0x1a1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x80, 0x7, 0x7, {0xa, 0x25, 0x25, 0x9f, 0x1, 0x6}}}}}}}}]}}, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000001500)=ANY=[@ANYRES8=r0], 0x0) syz_usb_connect$uac2(0x3, 0x8e, &(0x7f0000000080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x3, 0x1, 0x4, 0x0, 0x1, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x8, 0x8, 0x1c, 0x4e}, [@extension_unit={0x7, 0x24, 0x9, 0x1, 0x7ff}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x100, 0xf3, 0x1, 0xb, 0x0, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x7, 0x7, 0x5, {0x8, 0x25, 0x1, 0x1, 0xc, 0x40, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xb, 0x10, 0x6, {0x8, 0x25, 0x1, 0x2, 0x3c, 0x5f, 0x5}}}}}}}}]}}, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) 5.035213366s ago: executing program 6 (id=1839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 3.344413107s ago: executing program 7 (id=1840): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x67) memfd_create(&(0x7f00000006c0)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xact\xf4\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xfbF\x99V4\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xe8\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`\x01Os\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x8f\x13\xda\x95\xec\"\x95\xc5B\x9dE\xe1\xd0_b\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W\x06|\x1c\x80\xbc\x840x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000840)={r6, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'geneve0\x00'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x600) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r8, 0xc0a85320, &(0x7f0000000440)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07, 0x0, 0xd}) close_range(r7, 0xffffffffffffffff, 0x3f00000000000000) 3.02419978s ago: executing program 6 (id=1841): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='net/mcfilter\x00') preadv(r1, &(0x7f0000001b80)=[{&(0x7f00000000c0)=""/92, 0x84}], 0x1, 0x62, 0xfd4c) r2 = accept4$unix(r1, &(0x7f0000019080)=@abs, &(0x7f0000019100)=0x6e, 0x40000) connect$unix(r2, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a3100000000091a00030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4], 0x1c}}, 0x840) 661.417521ms ago: executing program 7 (id=1842): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e3802, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, 0x0, 0xa) close(0xffffffffffffffff) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 409.686771ms ago: executing program 6 (id=1843): socket$rxrpc(0x21, 0x2, 0xa) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0) r0 = getpgid(0x0) mount$bind(&(0x7f0000000100)='.\x00', 0x0, 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) dup(0xffffffffffffffff) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = syz_pidfd_open(r0, 0x0) mount$tmpfs(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x800, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 375.079003ms ago: executing program 7 (id=1844): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xb, 0x3}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x41, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 48.291638ms ago: executing program 6 (id=1845): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 0s ago: executing program 7 (id=1846): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x2, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) connect$tipc(r1, &(0x7f0000000280)=@id={0x1e, 0x3, 0x0, {0x4e23, 0x4}}, 0x10) kernel console output (not intermixed with test programs): [ 1734.029837][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1424'. [ 1735.235144][T15057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.491785][T15057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.523880][T15057] team0: Port device team_slave_0 added [ 1736.668016][T15057] team0: Port device team_slave_1 added [ 1737.171589][T15057] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.193376][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.286677][T15057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.401531][T15057] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.451542][T15057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.581938][T15057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.650305][ T8969] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 1737.874828][ T8969] usb 7-1: device descriptor read/64, error -71 [ 1737.954285][T15244] fuse: fd is not a fuse device [ 1738.116158][T15057] hsr_slave_0: entered promiscuous mode [ 1738.148351][ T8969] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 1738.159356][T15057] hsr_slave_1: entered promiscuous mode [ 1738.218258][T15057] debugfs: 'hsr0' already exists in 'hsr' [ 1738.249694][T15057] Cannot create hsr debugfs directory [ 1738.360904][ T8969] usb 7-1: device descriptor read/64, error -71 [ 1738.489420][ T8969] usb usb7-port1: attempt power cycle [ 1738.870121][ T8969] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1738.935759][ T8969] usb 7-1: device descriptor read/8, error -71 [ 1739.199386][ T8969] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 1739.262707][ T8969] usb 7-1: device descriptor read/8, error -71 [ 1739.400545][ T8969] usb usb7-port1: unable to enumerate USB device [ 1739.646324][T14913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1740.428897][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.444454][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.473790][T15057] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1740.586667][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1740.612415][T15057] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1740.695788][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1740.715927][T15057] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1740.765427][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1740.806169][T15057] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1740.861474][T15057] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1742.007085][T15057] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1742.364035][T15057] 8021q: adding VLAN 0 to HW filter on device team0 [ 1742.570263][ T6351] bridge0: port 1(bridge_slave_0) entered blocking state [ 1742.577976][ T6351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1742.712752][T15308] binder: BINDER_SET_CONTEXT_MGR already set [ 1742.723619][T14913] veth0_vlan: entered promiscuous mode [ 1742.735472][T15308] binder: 15307:15308 ioctl 4018620d 200000000040 returned -16 [ 1742.814473][ T6351] bridge0: port 2(bridge_slave_1) entered blocking state [ 1742.822075][ T6351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1742.993898][T14913] veth1_vlan: entered promiscuous mode [ 1743.804456][T14913] veth0_macvtap: entered promiscuous mode [ 1743.947921][T14913] veth1_macvtap: entered promiscuous mode [ 1744.149721][ T5683] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1744.339519][T14913] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1744.340597][ T5683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.405310][ T5683] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.463967][ T5683] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1744.494883][T14913] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1744.514838][ T5683] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1744.557920][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.604120][ T5683] usb 7-1: config 0 descriptor?? [ 1744.719481][ T6600] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.781853][ T6600] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.850025][ T6600] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1744.946001][ T6600] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1745.124786][ T5683] usbhid 7-1:0.0: can't add hid device: -71 [ 1745.169774][ T5683] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1745.235009][ T5683] usb 7-1: USB disconnect, device number 13 [ 1745.953532][T15340] virt_wifi0 speed is unknown, defaulting to 1000 [ 1747.823144][T15057] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1749.678614][ T5686] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1749.874886][ T5686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1749.933863][ T5686] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1749.971525][ T5686] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1750.022148][ T5686] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1750.069911][ T5686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.140272][ T5686] usb 7-1: config 0 descriptor?? [ 1750.504625][T15057] veth0_vlan: entered promiscuous mode [ 1750.616570][T15057] veth1_vlan: entered promiscuous mode [ 1750.647526][ T5686] usbhid 7-1:0.0: can't add hid device: -71 [ 1750.663305][ T5686] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1750.766904][ T5686] usb 7-1: USB disconnect, device number 14 [ 1751.012564][T15057] veth0_macvtap: entered promiscuous mode [ 1751.090395][T15057] veth1_macvtap: entered promiscuous mode [ 1751.273190][T15057] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.370623][T15057] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.502714][ T6351] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.526418][ T6351] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.604827][ T6351] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.635713][ T6351] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1753.152473][T15431] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1753.167892][T15431] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1753.183701][T15431] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1753.213699][T15431] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1753.238154][T15433] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1753.683893][T15437] fuse: fd is not a fuse device [ 1753.762490][T15440] fuse: fd is not a fuse device [ 1755.302048][T15433] Bluetooth: hci4: command tx timeout [ 1755.406431][ T6353] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.594535][T15460] virt_wifi0 speed is unknown, defaulting to 1000 [ 1755.682551][ T6353] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.926186][ T6353] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.137841][ T11] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1756.253304][ T6353] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.067902][ T6353] bridge_slave_1: left allmulticast mode [ 1757.105228][ T6353] bridge_slave_1: left promiscuous mode [ 1757.142786][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.213467][ T6353] bridge_slave_0: left allmulticast mode [ 1757.250263][ T6353] bridge_slave_0: left promiscuous mode [ 1757.288875][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.378845][T15433] Bluetooth: hci4: command tx timeout [ 1758.736966][ T6353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1758.838058][ T6353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1758.887349][ T6353] bond0 (unregistering): Released all slaves [ 1758.933331][T15429] virt_wifi0 speed is unknown, defaulting to 1000 [ 1759.458288][T15433] Bluetooth: hci4: command tx timeout [ 1759.710123][ T6353] hsr_slave_0: left promiscuous mode [ 1759.728041][ T6353] hsr_slave_1: left promiscuous mode [ 1759.744344][ T6353] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1759.752272][ T6353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1759.782389][ T6353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1759.808242][ T6353] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1759.980482][ T6353] veth1_macvtap: left promiscuous mode [ 1759.986200][ T6353] veth0_macvtap: left promiscuous mode [ 1760.027210][ T6353] veth1_vlan: left promiscuous mode [ 1760.039999][ T6353] veth0_vlan: left promiscuous mode [ 1761.351175][ T11] usb 7-1: device descriptor read/64, error -110 [ 1761.537879][ T48] Bluetooth: hci4: command tx timeout [ 1761.641103][ T11] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1761.793556][ T11] usb 7-1: device descriptor read/64, error -32 [ 1761.921365][ T11] usb usb7-port1: attempt power cycle [ 1762.059976][ T6353] team0 (unregistering): Port device team_slave_1 removed [ 1762.127455][ T6353] team0 (unregistering): Port device team_slave_0 removed [ 1762.292674][ T11] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1762.360475][ T11] usb 7-1: device descriptor read/8, error -32 [ 1762.470837][ T11] raw-gadget.0 gadget.6: failed to queue suspend event [ 1762.511817][ T11] raw-gadget.0 gadget.6: failed to queue reset event [ 1762.600426][ T11] raw-gadget.0 gadget.6: failed to queue resume event [ 1762.698396][ T11] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1762.769747][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1762.777406][ T11] usb 7-1: device descriptor read/8, error -32 [ 1762.889596][ T11] raw-gadget.0 gadget.6: failed to queue suspend event [ 1762.945250][ T11] usb usb7-port1: unable to enumerate USB device [ 1762.978829][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 1764.076589][ T6351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.132905][ T6351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1764.514018][T15472] raw-gadget.0 gadget.6: failed to queue disconnect event [ 1764.751855][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1764.780665][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1765.707975][ T11] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1765.719213][T15579] bridge0: port 3(syz_tun) entered blocking state [ 1765.741257][T15579] bridge0: port 3(syz_tun) entered disabled state [ 1765.754975][T15579] syz_tun: entered allmulticast mode [ 1765.772560][T15579] syz_tun: entered promiscuous mode [ 1765.787493][T15579] bridge0: port 3(syz_tun) entered blocking state [ 1765.794719][T15579] bridge0: port 3(syz_tun) entered forwarding state [ 1765.808818][ T808] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1765.889459][ T11] usb 5-1: Using ep0 maxpacket: 8 [ 1765.907808][ T11] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1765.931082][ T11] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1765.956091][ T11] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1765.991592][ T11] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1766.000355][ T808] usb 7-1: Using ep0 maxpacket: 8 [ 1766.046482][ T11] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1766.055517][ T808] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1766.080018][ T11] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1766.095141][ T808] usb 7-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 1766.095285][ T808] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1766.095494][ T808] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1766.095634][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.125890][T15429] bridge0: port 1(bridge_slave_0) entered blocking state [ 1766.165841][ T808] usbtmc 7-1:16.0: bulk endpoints not found [ 1766.200834][T15429] bridge0: port 1(bridge_slave_0) entered disabled state [ 1766.246806][ T11] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1766.264007][T15429] bridge_slave_0: entered allmulticast mode [ 1766.290598][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.300774][T15429] bridge_slave_0: entered promiscuous mode [ 1766.371782][T15429] bridge0: port 2(bridge_slave_1) entered blocking state [ 1766.399796][T15429] bridge0: port 2(bridge_slave_1) entered disabled state [ 1766.428301][T15429] bridge_slave_1: entered allmulticast mode [ 1766.470502][T15429] bridge_slave_1: entered promiscuous mode [ 1766.575705][ T11] usb 5-1: usb_control_msg returned -32 [ 1766.599735][ T11] usbtmc 5-1:16.0: can't read capabilities [ 1766.661097][ T11] usb 5-1: USB disconnect, device number 2 [ 1766.826633][T15429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1766.900872][T15429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1767.112192][T15429] team0: Port device team_slave_0 added [ 1767.183991][T15429] team0: Port device team_slave_1 added [ 1767.536867][T15429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.574815][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.666253][T15429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.736218][T15429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.783615][T15429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.855587][T15429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1768.193713][T15429] hsr_slave_0: entered promiscuous mode [ 1768.205244][T15429] hsr_slave_1: entered promiscuous mode [ 1768.692724][ T5683] usb 7-1: USB disconnect, device number 19 [ 1771.808342][T15429] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1771.926875][T15429] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1771.976170][T15429] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1772.078119][T15429] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1772.116378][T15429] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1772.166998][T15429] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1772.202752][T15429] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1772.297972][T15429] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1772.759993][ T11] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1772.974206][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1773.017240][ T11] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1773.046957][ T11] usb 7-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 1773.083783][ T11] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1773.141987][ T11] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1773.212371][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.188752][ T11] usbtmc 7-1:16.0: bulk endpoints not found [ 1776.514940][ T11] usb 7-1: USB disconnect, device number 20 [ 1777.437500][T15429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1777.600062][T15429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1777.716598][ T779] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.724268][ T779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1777.850756][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.858399][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1780.187860][ T5686] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1780.348378][ T5686] usb 5-1: Using ep0 maxpacket: 8 [ 1780.376551][ T5686] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1780.387792][ T5686] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1781.216400][ T5686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1781.233605][ T5686] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1781.259957][ T5686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1781.295001][ T5686] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1781.318345][ T5686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1781.340836][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1781.767462][ T5686] usb 5-1: usb_control_msg returned -71 [ 1781.796108][ T5686] usbtmc 5-1:16.0: can't read capabilities [ 1781.898861][ T5686] usb 5-1: USB disconnect, device number 3 [ 1782.489753][ T8878] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1782.700620][ T8878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.743671][ T8878] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.769540][ T8878] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1782.803037][ T8878] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.875181][ T8878] usb 5-1: config 0 descriptor?? [ 1783.412810][ T8878] hid_parser_main: 470 callbacks suppressed [ 1783.412909][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.459518][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.466672][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.510144][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.530970][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.571573][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.602399][ T8878] pyra 0003:1E7D:2CF6.0014: unknown main item tag 0x0 [ 1783.692140][ T8878] pyra 0003:1E7D:2CF6.0014: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.4-1/input0 [ 1783.773333][ T8878] pyra 0003:1E7D:2CF6.0014: couldn't init struct pyra_device [ 1783.833827][ T8878] pyra 0003:1E7D:2CF6.0014: couldn't install mouse [ 1783.886419][ T8878] pyra 0003:1E7D:2CF6.0014: probe with driver pyra failed with error -71 [ 1783.994045][ T8878] usb 5-1: USB disconnect, device number 4 [ 1784.358168][ T5683] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1784.555746][T15429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.619643][ T5683] usb 7-1: Using ep0 maxpacket: 8 [ 1785.046874][ T5683] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1785.125530][ T5683] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1785.242775][ T5683] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1785.362607][ T5683] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1785.374773][T15743] fuse: fd is not a fuse device [ 1785.483551][ T5683] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1785.584888][ T5683] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1785.663827][T15734] fido_id[15734]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1785.699866][ T5683] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1785.741104][ T5683] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1786.430644][ T5683] usb 7-1: usb_control_msg returned -71 [ 1786.519627][ T5683] usbtmc 7-1:16.0: can't read capabilities [ 1786.695036][ T5683] usb 7-1: USB disconnect, device number 21 [ 1788.078282][ T5686] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1788.269147][ T5686] usb 5-1: Using ep0 maxpacket: 8 [ 1788.302279][ T5686] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1788.340851][ T5686] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1788.407238][ T5686] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1788.447206][ T5686] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1788.506638][ T5686] usb 5-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1788.578475][ T5686] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1788.614502][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1788.686483][ T5686] usbtmc 5-1:16.0: bulk endpoints not found [ 1788.695583][T15429] veth0_vlan: entered promiscuous mode [ 1788.821973][T15429] veth1_vlan: entered promiscuous mode [ 1789.197201][T15429] veth0_macvtap: entered promiscuous mode [ 1789.332399][T15429] veth1_macvtap: entered promiscuous mode [ 1789.953416][T15429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1790.834923][T15429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1791.181425][ T177] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.265914][ T177] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.410291][ T8878] usb 5-1: USB disconnect, device number 5 [ 1791.446424][ T177] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.571089][ T6600] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1792.438020][ T4899] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1792.627950][ T4899] usb 5-1: Using ep0 maxpacket: 8 [ 1792.665250][ T4899] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1792.703904][ T4899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1792.744402][ T4899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1792.815819][ T4899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1792.880913][ T4899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1792.924346][ T4899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1792.974862][ T4899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1793.030921][T15813] fuse: fd is not a fuse device [ 1793.034777][ T4899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.555974][ T4899] usb 5-1: usb_control_msg returned -71 [ 1793.596116][ T4899] usbtmc 5-1:16.0: can't read capabilities [ 1793.665737][ T4899] usb 5-1: USB disconnect, device number 6 [ 1793.838622][T15823] overlayfs: failed to clone upperpath [ 1798.259889][ T4899] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1798.468365][ T4899] usb 5-1: Using ep0 maxpacket: 8 [ 1798.516392][ T4899] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1798.592294][ T4899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1798.655156][ T4899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1798.709394][ T4899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1798.762109][ T4899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1798.815402][ T4899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1798.884905][ T4899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1798.950578][ T4899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1799.512376][ T4899] usb 5-1: usb_control_msg returned -71 [ 1799.531604][ T4899] usbtmc 5-1:16.0: can't read capabilities [ 1799.614857][ T4899] usb 5-1: USB disconnect, device number 7 [ 1801.303400][ T177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1801.368935][ T177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1801.933740][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.940712][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1804.353285][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1804.406903][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1805.496727][ T8878] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1806.128894][ T8878] usb 7-1: Using ep0 maxpacket: 32 [ 1806.171048][ T8878] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1806.264374][ T8878] usb 7-1: config 0 has no interface number 0 [ 1806.324280][ T8878] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1806.464516][ T8878] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1806.544082][ T8878] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1806.620731][ T8878] usb 7-1: Product: syz [ 1806.653771][ T8878] usb 7-1: Manufacturer: syz [ 1806.721595][ T8878] usb 7-1: SerialNumber: syz [ 1806.805258][ T8878] usb 7-1: config 0 descriptor?? [ 1807.720179][ T8878] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1807.782747][ T8878] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1808.289015][ T8878] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 1808.347269][ T8878] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 1808.409622][ T8878] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1808.472312][ T8878] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -71 [ 1810.937176][ T8878] usb 7-1: USB disconnect, device number 22 [ 1812.797413][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1812.826030][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1812.874694][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1812.897318][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1812.912616][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1813.161805][ T8878] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1813.378141][ T8878] usb 8-1: Using ep0 maxpacket: 16 [ 1813.423993][ T8878] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1813.496945][ T8878] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1813.633572][ T8878] usb 8-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 1813.691744][ T8878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1813.764393][ T8878] usb 8-1: Product: syz [ 1813.783282][ T8878] usb 8-1: Manufacturer: syz [ 1813.827769][ T8878] usb 8-1: SerialNumber: syz [ 1813.897992][ T8878] usb 8-1: config 0 descriptor?? [ 1814.988180][ T48] Bluetooth: hci1: command tx timeout [ 1816.442468][ T8878] usb 8-1: USB disconnect, device number 4 [ 1817.038181][ T5683] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1817.057919][ T48] Bluetooth: hci1: command tx timeout [ 1817.318706][ T5683] usb 5-1: Using ep0 maxpacket: 16 [ 1817.460467][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1817.512145][ T5683] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1817.564950][ T5683] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1817.615765][ T5683] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1817.653188][ T5683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.749898][ T5683] usb 5-1: config 0 descriptor?? [ 1817.930740][ T6351] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.300197][ T6351] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.676258][ T6351] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1818.802548][ T8878] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1818.874234][ T5683] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0015/input/input15 [ 1818.936881][ T5683] microsoft 0003:045E:07DA.0015: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1818.952501][ T6351] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1819.008257][ T8878] usb 8-1: Using ep0 maxpacket: 8 [ 1819.041546][ T8878] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1819.097834][ T8878] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1819.113399][ T5683] usb 5-1: USB disconnect, device number 8 [ 1819.143337][ T48] Bluetooth: hci1: command tx timeout [ 1819.170771][ T8878] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1819.236714][ T8878] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1819.334212][ T8878] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1819.425671][ T8878] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1819.510697][ T8878] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1819.605887][ T8878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1819.680350][T15961] virt_wifi0 speed is unknown, defaulting to 1000 [ 1819.981473][ T8878] usb 8-1: GET_CAPABILITIES returned 0 [ 1820.019724][ T8878] usbtmc 8-1:16.0: can't read capabilities [ 1820.223522][ T6351] bridge_slave_1: left allmulticast mode [ 1820.237156][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1820.255619][ T6351] bridge_slave_1: left promiscuous mode [ 1820.280418][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1820.295343][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.352339][T16005] fido_id[16005]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1820.395797][ T6351] bridge_slave_0: left allmulticast mode [ 1820.441793][ T6351] bridge_slave_0: left promiscuous mode [ 1820.466320][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1820.595279][ T808] usb 8-1: USB disconnect, device number 5 [ 1821.238275][ T48] Bluetooth: hci1: command tx timeout [ 1822.823756][ T5686] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1822.926160][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 1823.098246][ T5686] usb 5-1: device descriptor read/64, error -32 [ 1823.393760][ T5686] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1823.636591][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.696778][ T5686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1823.754504][ T5686] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1823.816742][ T5686] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1823.874994][ T5686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.961705][ T5686] usb 5-1: config 0 descriptor?? [ 1824.434535][ T5686] usb 5-1: can't set config #0, error -71 [ 1824.484311][ T5686] usb 5-1: USB disconnect, device number 10 [ 1824.724669][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.819585][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.889048][ T6351] bond0 (unregistering): (slave team0): Releasing backup interface [ 1824.929895][ T6351] bond0 (unregistering): Released all slaves [ 1824.959983][ T6351] bond1 (unregistering): Released all slaves [ 1825.080291][ T6351] bond2 (unregistering): Released all slaves [ 1825.173426][ T6351] bond3 (unregistering): Released all slaves [ 1825.206792][ T6351] bond4 (unregistering): Released all slaves [ 1826.006865][ T6351] tipc: Disabling bearer [ 1826.026547][ T6351] tipc: Left network mode [ 1828.668928][ T5686] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1828.838260][ T5686] usb 7-1: Using ep0 maxpacket: 8 [ 1828.867411][ T5686] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1828.918092][ T5686] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1828.984794][ T5686] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1829.044144][ T5686] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1829.086998][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1829.191733][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1829.359235][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1829.475419][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1829.939809][ T5686] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1829.956560][ T6351] veth1_macvtap: left promiscuous mode [ 1829.984416][ T5686] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1830.004084][ T6351] veth0_macvtap: left promiscuous mode [ 1830.048620][ T5686] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1830.050760][ T6351] veth1_vlan: left promiscuous mode [ 1830.116214][ T6351] veth0_vlan: left promiscuous mode [ 1830.195006][ T5686] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1830.599258][ T5686] usb 7-1: GET_CAPABILITIES returned 2f [ 1830.635720][ T5686] usbtmc 7-1:16.0: can't read capabilities [ 1830.838718][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1830.894288][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.001764][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.085987][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.191391][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1831.223128][T16045] usbtmc 7-1:16.0: Unable to send data, error -71 [ 1831.710552][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1831.789389][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1831.966727][T15433] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1831.987219][T15433] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1832.002788][T15433] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1832.032263][T15433] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1832.052349][T15433] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1832.311837][ T5686] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1832.403578][T16069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.461430][T16069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.515059][ T5686] usb 8-1: Using ep0 maxpacket: 8 [ 1832.560873][ T5686] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1832.574655][T16069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1832.605619][ T5686] usb 8-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 1832.633804][T16069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1832.663024][ T5686] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1832.733249][ T5686] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1833.246335][ T5686] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1834.137982][T15433] Bluetooth: hci5: command tx timeout [ 1834.260964][ T5686] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1834.480415][ T5686] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.616536][ T5686] usbtmc 8-1:16.0: bulk endpoints not found [ 1834.763204][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1834.830682][ T30] usb 7-1: USB disconnect, device number 23 [ 1834.925948][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1835.239371][T16088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1835.317899][T16088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1836.258804][T15433] Bluetooth: hci5: command tx timeout [ 1837.331428][ T30] usb 8-1: USB disconnect, device number 6 [ 1838.339974][ T48] Bluetooth: hci5: command tx timeout [ 1838.594757][T15178] bridge0: port 3(syz_tun) entered disabled state [ 1838.702831][T15178] syz_tun (unregistering): left allmulticast mode [ 1838.743790][T15178] syz_tun (unregistering): left promiscuous mode [ 1838.806078][T15178] bridge0: port 3(syz_tun) entered disabled state [ 1839.188382][ T11] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1839.538618][ T11] usb 7-1: Using ep0 maxpacket: 8 [ 1839.860215][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 1840.193828][ T11] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 196, changing to 11 [ 1840.368221][ T11] usb 7-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1840.419103][T15433] Bluetooth: hci5: command tx timeout [ 1840.454879][ T11] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1840.522858][ T11] usb 7-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1840.607824][ T11] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.716236][ T11] usb 7-1: config 0 descriptor?? [ 1841.454054][ T11] usbhid 7-1:0.0: can't add hid device: -71 [ 1841.478434][T15961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1841.493220][ T11] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1841.540763][T15961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1841.581015][T15961] bridge_slave_0: entered allmulticast mode [ 1841.592746][ T11] usb 7-1: USB disconnect, device number 24 [ 1841.640453][T15961] bridge_slave_0: entered promiscuous mode [ 1841.783203][T15961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1841.829616][T15961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.866890][T15961] bridge_slave_1: entered allmulticast mode [ 1841.904333][T15961] bridge_slave_1: entered promiscuous mode [ 1841.967371][T16070] virt_wifi0 speed is unknown, defaulting to 1000 [ 1842.448081][ T30] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1842.489516][T15961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1842.653520][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 1842.748604][ T30] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 1842.783131][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1842.813529][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1842.861106][T15961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1842.864315][ T30] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1843.303490][ T30] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1843.315724][ T30] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1843.348356][ T30] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1844.333676][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1844.737493][ T30] usb 5-1: GET_CAPABILITIES returned f8 [ 1844.770077][ T30] usbtmc 5-1:16.0: can't read capabilities [ 1844.914095][ T6351] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1844.988721][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1845.547197][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1845.834354][T16130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1846.125074][T16130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1846.451646][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1846.466202][T16130] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1847.496167][ T6351] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1847.791846][T15961] team0: Port device team_slave_0 added [ 1847.811478][T15961] team0: Port device team_slave_1 added [ 1849.321609][ T6351] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.343603][ T8878] usb 5-1: USB disconnect, device number 11 [ 1849.655254][ T6351] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1849.781593][T15961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1849.840603][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1849.940190][T15961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1850.023821][T15961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1850.046751][T15961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1850.185554][T15961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1851.607309][T15961] hsr_slave_0: entered promiscuous mode [ 1851.686348][T15961] hsr_slave_1: entered promiscuous mode [ 1851.736445][T15961] debugfs: 'hsr0' already exists in 'hsr' [ 1851.773346][T15961] Cannot create hsr debugfs directory [ 1852.327124][ T6351] bridge_slave_1: left allmulticast mode [ 1852.374977][ T6351] bridge_slave_1: left promiscuous mode [ 1852.410676][ T6351] bridge0: port 2(bridge_slave_1) entered disabled state [ 1852.495454][ T6351] bridge_slave_0: left allmulticast mode [ 1852.536948][ T6351] bridge_slave_0: left promiscuous mode [ 1852.574369][ T6351] bridge0: port 1(bridge_slave_0) entered disabled state [ 1855.344547][ T6351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1855.479920][ T6351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1855.608630][ T6351] bond0 (unregistering): Released all slaves [ 1855.910131][ T8878] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1856.100616][ T8878] usb 8-1: Using ep0 maxpacket: 8 [ 1856.129266][ T8878] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1856.164225][ T8878] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1856.182724][ T8878] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1856.199255][ T8878] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1856.229212][ T8878] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1856.301567][ T8878] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1856.381333][ T8878] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1856.445638][ T8878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1857.969536][ T8878] usb 8-1: GET_CAPABILITIES returned 2f [ 1857.981389][ T8878] usbtmc 8-1:16.0: can't read capabilities [ 1858.303402][ T30] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1858.841303][T16213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1859.848179][T16213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1860.293810][ T30] usb 7-1: unable to read config index 0 descriptor/all [ 1860.301218][ T30] usb 7-1: can't read configurations, error -71 [ 1860.386245][ T8878] usb 8-1: USB disconnect, device number 7 [ 1861.068380][ T11] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1861.248284][ T11] usb 8-1: Using ep0 maxpacket: 32 [ 1861.300953][ T11] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 1861.311747][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1861.362003][ T11] usb 8-1: config 0 has no interface number 0 [ 1861.381373][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1861.404071][ T11] usb 8-1: config 0 interface 184 has no altsetting 0 [ 1861.437269][ T6351] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1861.483146][ T6351] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1861.498487][ T11] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1861.544410][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1861.581534][ T11] usb 8-1: Product: syz [ 1861.603872][ T6351] veth1_macvtap: left promiscuous mode [ 1861.604248][ T11] usb 8-1: Manufacturer: syz [ 1861.611553][ T6351] veth0_macvtap: left promiscuous mode [ 1861.628354][ T6351] veth1_vlan: left promiscuous mode [ 1861.637783][ T11] usb 8-1: SerialNumber: syz [ 1861.700515][ T11] usb 8-1: config 0 descriptor?? [ 1862.817494][ T11] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 1863.006963][ T6351] team0 (unregistering): Port device vlan0 removed [ 1863.029846][ T11] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1863.054027][ T11] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1863.084835][ T11] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1863.118804][ T11] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1863.160385][ T11] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 1863.261688][ T35] smbdirect: ib_dev[syz1] removed [ 1863.267192][ T11] usb 8-1: USB disconnect, device number 8 [ 1863.336967][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.343924][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1864.701373][ T6351] team0 (unregistering): Port device team_slave_1 removed [ 1864.786444][ T6351] team0 (unregistering): Port device team_slave_0 removed [ 1866.662105][T16070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1866.694979][ T30] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1866.709491][T16070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1866.740278][T16070] bridge_slave_0: entered allmulticast mode [ 1866.776859][T16070] bridge_slave_0: entered promiscuous mode [ 1866.853764][ T6351] IPVS: stop unused estimator thread 0... [ 1866.879922][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 1866.911115][T16070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1866.930786][ T30] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1866.944060][T16070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1866.960741][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1866.996082][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1867.020754][T16070] bridge_slave_1: entered allmulticast mode [ 1867.034295][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1867.057826][T16070] bridge_slave_1: entered promiscuous mode [ 1867.109095][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1867.148520][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1867.213432][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1867.257058][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1867.928169][ T30] usb 7-1: GET_CAPABILITIES returned 2f [ 1867.995534][ T30] usbtmc 7-1:16.0: can't read capabilities [ 1868.015502][T16070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1868.112522][T16070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1868.173103][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.219624][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1868.633212][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1868.992308][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.142769][T16247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.200068][T16070] team0: Port device team_slave_0 added [ 1870.233532][T16247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.313677][T16070] team0: Port device team_slave_1 added [ 1870.797223][T16070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.837743][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1870.904964][T16259] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1870.952272][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1870.969409][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1870.999861][T16070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.089592][T16259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1871.122900][T16070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.142897][T16259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1871.152912][T16070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1871.265002][T16070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.580608][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1871.599078][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1871.613259][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1871.640012][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1871.662919][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1871.723709][ T8895] usb 7-1: USB disconnect, device number 27 [ 1874.111837][T15433] Bluetooth: hci0: command tx timeout [ 1875.666704][T16070] hsr_slave_0: entered promiscuous mode [ 1875.676520][T16070] hsr_slave_1: entered promiscuous mode [ 1876.891555][T15431] Bluetooth: hci0: command tx timeout [ 1876.897232][T15431] Bluetooth: hci4: command 0x0406 tx timeout [ 1877.267827][T16070] debugfs: 'hsr0' already exists in 'hsr' [ 1877.299457][T16070] Cannot create hsr debugfs directory [ 1878.979241][ T48] Bluetooth: hci0: command tx timeout [ 1880.456543][ T35] bridge_slave_1: left allmulticast mode [ 1880.475849][ T35] bridge_slave_1: left promiscuous mode [ 1880.512396][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1880.569260][ T35] bridge_slave_0: left allmulticast mode [ 1880.596092][ T35] bridge_slave_0: left promiscuous mode [ 1880.629344][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1881.059207][ T48] Bluetooth: hci0: command tx timeout [ 1883.623626][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1883.668212][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1883.699504][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1883.828439][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 1884.218398][ T30] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1884.244284][ T35] bond0 (unregistering): Released all slaves [ 1884.369005][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1884.629083][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1884.734400][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1884.828324][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1687'. [ 1884.835471][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1884.872902][T16324] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1687'. [ 1884.945569][T16320] lo speed is unknown, defaulting to 1000 [ 1884.947789][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1885.013151][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1885.043432][ T35] hsr_slave_0: left promiscuous mode [ 1885.078016][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1885.079277][ T35] hsr_slave_1: left promiscuous mode [ 1885.145876][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1885.200272][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1885.432884][ T30] usb 8-1: GET_CAPABILITIES returned 2f [ 1885.459228][ T30] usbtmc 8-1:16.0: can't read capabilities [ 1885.681522][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1885.764858][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.403423][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1886.666999][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1886.844854][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1886.877260][T16314] usbtmc 8-1:16.0: Unable to send data, error -71 [ 1887.371749][T16314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1887.414787][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1887.439924][T16314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1887.545845][ T35] team0 (unregistering): Port device team_slave_0 removed [ 1888.506525][ T808] usb 8-1: USB disconnect, device number 9 [ 1888.571422][T16320] lo speed is unknown, defaulting to 1000 [ 1888.865846][T16320] lo speed is unknown, defaulting to 1000 [ 1888.963250][T16320] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1889.132044][T16320] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1889.274059][T16320] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1889.598414][T16320] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1889.716752][T16271] lo speed is unknown, defaulting to 1000 [ 1890.473794][T16320] lo speed is unknown, defaulting to 1000 [ 1891.017981][T16320] lo speed is unknown, defaulting to 1000 [ 1891.249538][T16320] lo speed is unknown, defaulting to 1000 [ 1892.730062][ T29] audit: type=1326 audit(1781817227.171:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16358 comm="syz.6.1693" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cb959ce59 code=0x0 [ 1895.732392][T16320] lo speed is unknown, defaulting to 1000 [ 1899.918217][T15433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1899.941816][T15433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1899.959965][T15433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1899.990182][T15433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1900.015195][T15433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1901.408393][ T30] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1901.588999][ T30] usb 7-1: Using ep0 maxpacket: 8 [ 1901.613380][ T30] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1901.630757][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1901.646721][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1901.660270][ T30] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1901.674796][ T30] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1901.691587][ T30] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1901.737210][ T30] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1901.799295][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1901.843385][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1901.861279][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1901.878172][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1901.893662][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1901.905571][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1902.099295][T15433] Bluetooth: hci1: command tx timeout [ 1902.198590][ T30] usb 7-1: GET_CAPABILITIES returned 2f [ 1902.220987][ T30] usbtmc 7-1:16.0: can't read capabilities [ 1902.405247][T16395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.456808][T16395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.477898][T16392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1902.527340][T16395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.583348][T16395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1902.647177][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1902.671745][T16395] usbtmc 7-1:16.0: Unable to send data, error -71 [ 1902.919495][T16395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1902.968222][T13928] bridge_slave_1: left allmulticast mode [ 1902.975100][T16395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.027311][T13928] bridge_slave_1: left promiscuous mode [ 1903.071920][T13928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1903.167538][T13928] bridge_slave_0: left allmulticast mode [ 1903.217788][T13928] bridge_slave_0: left promiscuous mode [ 1903.262287][T13928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1903.670745][T16411] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1903.736074][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.779685][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.827720][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1903.872398][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1903.937965][T15433] Bluetooth: hci5: command tx timeout [ 1904.163748][T13928] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1904.178000][T15433] Bluetooth: hci1: command tx timeout [ 1904.199354][T13928] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1904.219802][T13928] bond0 (unregistering): Released all slaves [ 1904.704758][T13928] hsr_slave_0: left promiscuous mode [ 1904.761288][T13928] hsr_slave_1: left promiscuous mode [ 1904.827290][T13928] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1904.876354][T13928] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1905.347531][ T11] usb 7-1: USB disconnect, device number 28 [ 1905.900585][T13928] team0 (unregistering): Port device team_slave_1 removed [ 1905.995505][T13928] team0 (unregistering): Port device team_slave_0 removed [ 1906.018679][T15433] Bluetooth: hci5: command tx timeout [ 1906.258922][T15433] Bluetooth: hci1: command tx timeout [ 1908.098229][T15433] Bluetooth: hci5: command tx timeout [ 1908.384244][T15433] Bluetooth: hci1: command tx timeout [ 1908.630640][T16440] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1909.460926][ T6511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1910.177814][T15433] Bluetooth: hci5: command tx timeout [ 1910.461147][T16271] bridge0: port 1(bridge_slave_0) entered blocking state [ 1911.549041][T16271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1911.556753][T16271] bridge_slave_0: entered allmulticast mode [ 1911.570284][T16271] bridge_slave_0: entered promiscuous mode [ 1911.589568][T16271] bridge0: port 2(bridge_slave_1) entered blocking state [ 1911.704242][T16271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1911.728325][T16271] bridge_slave_1: entered allmulticast mode [ 1911.745063][T16271] bridge_slave_1: entered promiscuous mode [ 1912.092811][ T6511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.218730][T16271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1912.349700][ T6511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.429419][T16383] lo speed is unknown, defaulting to 1000 [ 1912.518370][T16271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1912.694585][ T6511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1912.749277][T16397] lo speed is unknown, defaulting to 1000 [ 1913.337778][T16271] team0: Port device team_slave_0 added [ 1913.606070][T16271] team0: Port device team_slave_1 added [ 1913.998205][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1914.190231][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 1914.224797][ T30] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 1914.252223][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1914.291445][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1914.336390][ T30] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1914.385606][ T30] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1914.440753][ T30] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1914.547997][ T30] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1914.569699][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1914.875123][ T30] usb 8-1: GET_CAPABILITIES returned 0 [ 1914.889576][ T30] usbtmc 8-1:16.0: can't read capabilities [ 1915.056404][T16271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1915.086680][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.110181][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.130091][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1915.201778][T16271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1915.280393][ T6511] bridge_slave_1: left allmulticast mode [ 1915.286250][ T6511] bridge_slave_1: left promiscuous mode [ 1915.300698][ T6511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.324979][ T6511] bridge_slave_0: left allmulticast mode [ 1915.328292][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.376931][ T6511] bridge_slave_0: left promiscuous mode [ 1915.397110][ T6511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1915.410792][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1915.476105][ C0] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1915.486945][T16477] usbtmc 8-1:16.0: Unable to send data, error -71 [ 1915.711873][T16477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1915.763073][T16477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.376164][T16491] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1916.414028][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.447264][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.530903][T16491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1916.584010][T16491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1916.642267][ T6511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1916.736912][ T6511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1916.800926][ T6511] bond0 (unregistering): Released all slaves [ 1916.861092][T16271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1916.920836][T16271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1917.025002][T16271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1917.832967][ T11] usb 8-1: USB disconnect, device number 10 [ 1919.576292][ T6511] hsr_slave_0: left promiscuous mode [ 1919.649028][ T6511] hsr_slave_1: left promiscuous mode [ 1919.665221][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1919.676684][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1919.689061][ T6511] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1919.790368][ T6511] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1920.091347][ T6511] veth1_macvtap: left promiscuous mode [ 1920.134237][ T6511] veth0_macvtap: left promiscuous mode [ 1920.176974][ T6511] veth1_vlan: left promiscuous mode [ 1920.218146][ T6511] veth0_vlan: left promiscuous mode [ 1921.757855][ T11] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1921.978924][ T11] usb 8-1: config index 0 descriptor too short (expected 59281, got 36) [ 1922.004300][ T11] usb 8-1: config 18 has an invalid descriptor of length 208, skipping remainder of the config [ 1922.029775][ T11] usb 8-1: config 18 has 0 interfaces, different from the descriptor's value: 23 [ 1922.093291][ T11] usb 8-1: string descriptor 0 read error: -22 [ 1922.100438][ T11] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 1922.110254][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1922.154989][ T6511] team0 (unregistering): Port device team_slave_1 removed [ 1922.256461][ T6511] team0 (unregistering): Port device team_slave_0 removed [ 1922.796867][ T6353] smbdirect: ib_dev[syz2] removed [ 1922.854320][T16271] hsr_slave_0: entered promiscuous mode [ 1922.872918][T16271] hsr_slave_1: entered promiscuous mode [ 1922.883908][T16271] debugfs: 'hsr0' already exists in 'hsr' [ 1922.890837][T16271] Cannot create hsr debugfs directory [ 1922.932295][ T808] lo speed is unknown, defaulting to 1000 [ 1922.947472][ T808] infiniband syz2: ib_query_port failed (-19) [ 1922.978913][ T8878] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1923.151327][ T8878] usb 7-1: Using ep0 maxpacket: 8 [ 1923.184506][ T8878] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 1923.206813][ T8878] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1923.254330][ T8878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1923.284440][ T8878] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 1923.322576][ T8878] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1923.346230][ T8878] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1923.377196][ T8878] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1923.391746][ T8878] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.664440][ T8878] usb 7-1: GET_CAPABILITIES returned 2f [ 1923.677448][ T8878] usbtmc 7-1:16.0: can't read capabilities [ 1923.878366][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.115046][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.252711][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.388413][T16536] 9pnet_virtio: no channels available for device syz [ 1924.405937][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1924.472310][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1924.505627][T16527] usbtmc 7-1:16.0: Unable to send data, error -71 [ 1924.772388][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1924.779824][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1924.812660][T16527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1924.832721][T16527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.445724][T16539] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -71 [ 1925.496115][T16539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.524009][T16539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.566391][T16539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1925.602232][T16539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1925.622623][T16271] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1925.692622][T16271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1925.719989][T16397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1925.741872][T16397] bridge0: port 1(bridge_slave_0) entered disabled state [ 1925.760998][T16397] bridge_slave_0: entered allmulticast mode [ 1925.792505][T16397] bridge_slave_0: entered promiscuous mode [ 1925.844103][T16271] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1925.900756][ T30] usb 8-1: USB disconnect, device number 11 [ 1925.940584][T16271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1925.995633][T16397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.031087][T16397] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.066385][T16397] bridge_slave_1: entered allmulticast mode [ 1926.116972][T16397] bridge_slave_1: entered promiscuous mode [ 1926.155588][T16271] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1926.202965][T16271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1926.304504][T16271] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1926.364056][T16271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1926.550262][T16383] bridge0: port 1(bridge_slave_0) entered blocking state [ 1926.583441][T16383] bridge0: port 1(bridge_slave_0) entered disabled state [ 1926.613642][T16383] bridge_slave_0: entered allmulticast mode [ 1926.657311][T16383] bridge_slave_0: entered promiscuous mode [ 1926.760769][T16397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1926.844380][T16383] bridge0: port 2(bridge_slave_1) entered blocking state [ 1926.864139][T16383] bridge0: port 2(bridge_slave_1) entered disabled state [ 1926.944523][T16561] 9pnet_virtio: no channels available for device syz [ 1926.963988][T16561] ======================================================= [ 1926.963988][T16561] WARNING: The mand mount option has been deprecated and [ 1926.963988][T16561] and is ignored by this kernel. Remove the mand [ 1926.963988][T16561] option from the mount to silence this warning. [ 1926.963988][T16561] ======================================================= [ 1927.025186][T16561] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1927.263900][T16561] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 1927.274544][T16561] overlayfs: failed to look up (tracing) for ino (-66) [ 1927.944307][ T8878] usb 7-1: USB disconnect, device number 29 [ 1927.991834][T16383] bridge_slave_1: entered allmulticast mode [ 1928.054472][T16383] bridge_slave_1: entered promiscuous mode [ 1930.876899][T16397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1935.268483][T16397] team0: Port device team_slave_0 added [ 1936.004457][T16383] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1936.181920][T16383] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1936.314253][T16397] team0: Port device team_slave_1 added [ 1940.219509][ T48] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1940.229047][ T48] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1940.241935][ T48] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1940.262149][ T48] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1940.280433][ T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1940.464585][T16397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1940.485901][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1940.552627][T16397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1940.628801][T16383] team0: Port device team_slave_0 added [ 1940.697042][T16383] team0: Port device team_slave_1 added [ 1940.716350][T16397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1940.742434][T16397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1940.806897][T16397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1941.189709][T16383] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1941.229934][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1941.328960][T16383] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1941.392259][T16383] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1941.432711][T16383] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1941.515743][T16383] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1941.902939][T16397] hsr_slave_0: entered promiscuous mode [ 1941.973148][T16397] hsr_slave_1: entered promiscuous mode [ 1941.998723][T16397] debugfs: 'hsr0' already exists in 'hsr' [ 1942.004627][T16397] Cannot create hsr debugfs directory [ 1942.349792][ T48] Bluetooth: hci3: command tx timeout [ 1942.704857][T16383] hsr_slave_0: entered promiscuous mode [ 1942.752400][T16383] hsr_slave_1: entered promiscuous mode [ 1942.793445][T16383] debugfs: 'hsr0' already exists in 'hsr' [ 1942.816886][T16383] Cannot create hsr debugfs directory [ 1944.334793][ T5232] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1944.418287][ T48] Bluetooth: hci3: command tx timeout [ 1945.242901][ T6381] bridge_slave_1: left allmulticast mode [ 1945.269934][ T6381] bridge_slave_1: left promiscuous mode [ 1945.287488][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 1945.355645][ T6381] bridge_slave_0: left allmulticast mode [ 1945.372423][ T6381] bridge_slave_0: left promiscuous mode [ 1945.396426][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 1945.898382][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1945.950331][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1945.967229][ T6381] bond0 (unregistering): Released all slaves [ 1946.178287][ T11] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1946.264127][ T6381] hsr_slave_0: left promiscuous mode [ 1946.294616][ T6381] hsr_slave_1: left promiscuous mode [ 1946.304383][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1946.316327][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1946.355964][ T11] usb 8-1: config index 0 descriptor too short (expected 59281, got 36) [ 1946.367457][ T11] usb 8-1: config 18 has an invalid descriptor of length 208, skipping remainder of the config [ 1946.384461][ T11] usb 8-1: config 18 has 0 interfaces, different from the descriptor's value: 23 [ 1946.452280][ T11] usb 8-1: string descriptor 0 read error: -22 [ 1946.460386][ T11] usb 8-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.40 [ 1946.470038][ T11] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1946.498019][ T48] Bluetooth: hci3: command tx timeout [ 1946.862914][ T6381] team0 (unregistering): Port device team_slave_1 removed [ 1946.920396][ T6381] team0 (unregistering): Port device team_slave_0 removed [ 1948.578505][ T48] Bluetooth: hci3: command tx timeout [ 1954.053682][T16631] Set syz1 is full, maxelem 65536 reached [ 1954.449540][ T11] usb 8-1: USB disconnect, device number 12 [ 1954.504726][T16643] fuse: Bad value for 'group_id' [ 1954.529093][T16643] fuse: Bad value for 'group_id' [ 1954.794699][T16397] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1954.840686][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1954.883785][T16397] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1954.954430][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1955.010302][T16397] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1955.095905][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1955.166702][T16397] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1955.256159][T16397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1955.403136][T15433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1955.419979][T15433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1955.431061][T15433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1955.479038][T15433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1955.492642][T15433] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1956.145035][T16583] bridge0: port 1(bridge_slave_0) entered blocking state [ 1956.198779][T16583] bridge0: port 1(bridge_slave_0) entered disabled state [ 1956.244786][T16583] bridge_slave_0: entered allmulticast mode [ 1956.291224][T16583] bridge_slave_0: entered promiscuous mode [ 1956.393300][T16583] bridge0: port 2(bridge_slave_1) entered blocking state [ 1956.433238][T16583] bridge0: port 2(bridge_slave_1) entered disabled state [ 1956.464766][T16583] bridge_slave_1: entered allmulticast mode [ 1956.513479][T16583] bridge_slave_1: entered promiscuous mode [ 1956.890720][T16583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1957.026924][T16583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1957.426821][T16583] team0: Port device team_slave_0 added [ 1957.513491][T16583] team0: Port device team_slave_1 added [ 1957.539503][T15433] Bluetooth: hci0: command tx timeout [ 1958.086191][T16583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1958.096708][T16689] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1736'. [ 1958.116131][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.192458][T16583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1958.313608][T16583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1958.357027][T16583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1958.425313][T16583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1958.775192][ T6450] bridge_slave_1: left allmulticast mode [ 1958.792014][ T6450] bridge_slave_1: left promiscuous mode [ 1958.824454][ T6450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1958.878841][ T6450] bridge_slave_0: left allmulticast mode [ 1958.906661][ T6450] bridge_slave_0: left promiscuous mode [ 1958.940357][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1959.159398][ T11] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1959.521619][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1959.565482][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1959.604205][ T6450] bond0 (unregistering): Released all slaves [ 1959.618047][T15433] Bluetooth: hci0: command tx timeout [ 1960.013666][ T6450] hsr_slave_0: left promiscuous mode [ 1960.024953][ T6450] hsr_slave_1: left promiscuous mode [ 1960.035110][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1960.047025][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1960.714348][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 1960.814592][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 1961.580477][T16583] hsr_slave_0: entered promiscuous mode [ 1961.634833][T16583] hsr_slave_1: entered promiscuous mode [ 1961.694223][T16583] debugfs: 'hsr0' already exists in 'hsr' [ 1961.701226][T15433] Bluetooth: hci0: command tx timeout [ 1961.724404][T16583] Cannot create hsr debugfs directory [ 1962.835434][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1962.850416][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1962.860738][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1962.894621][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1962.909009][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1963.126320][T16717] fuse: Bad value for 'group_id' [ 1963.132959][T16717] fuse: Bad value for 'group_id' [ 1963.789304][T15433] Bluetooth: hci0: command tx timeout [ 1964.978682][T15433] Bluetooth: hci1: command tx timeout [ 1966.602653][T16583] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1966.751409][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1966.776557][T16583] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1966.892276][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1966.975839][T16583] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1967.059516][T15433] Bluetooth: hci1: command tx timeout [ 1967.073367][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1967.086483][T16583] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1967.136580][T16583] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1967.834222][T16656] bridge0: port 1(bridge_slave_0) entered blocking state [ 1967.870672][T16656] bridge0: port 1(bridge_slave_0) entered disabled state [ 1967.900530][T16656] bridge_slave_0: entered allmulticast mode [ 1967.913379][T16656] bridge_slave_0: entered promiscuous mode [ 1968.051970][T16656] bridge0: port 2(bridge_slave_1) entered blocking state [ 1968.060247][T16656] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.078471][T16656] bridge_slave_1: entered allmulticast mode [ 1968.099549][T16656] bridge_slave_1: entered promiscuous mode [ 1968.520908][T13795] bridge_slave_1: left allmulticast mode [ 1968.532075][T13795] bridge_slave_1: left promiscuous mode [ 1968.542118][T13795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1968.563365][T13795] bridge_slave_0: left allmulticast mode [ 1968.569575][T13795] bridge_slave_0: left promiscuous mode [ 1968.576504][T13795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1969.138087][T15433] Bluetooth: hci1: command tx timeout [ 1969.159034][T13795] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1969.234319][T13795] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1969.274104][T13795] bond0 (unregistering): Released all slaves [ 1969.317547][T16656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1969.511560][T16656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1969.736654][T13795] hsr_slave_0: left promiscuous mode [ 1969.751092][T13795] hsr_slave_1: left promiscuous mode [ 1969.764679][T16765] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1744'. [ 1969.771779][T13795] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1969.797884][T13795] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1970.377969][T13795] team0 (unregistering): Port device team_slave_1 removed [ 1970.443943][T13795] team0 (unregistering): Port device team_slave_0 removed [ 1970.970235][T16656] team0: Port device team_slave_0 added [ 1971.212460][T16656] team0: Port device team_slave_1 added [ 1971.227936][T15433] Bluetooth: hci1: command tx timeout [ 1971.929725][T16656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1971.941120][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1971.997434][T16656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1972.247541][T16656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1972.281654][T16656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1972.344920][T16656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1972.883551][T16656] hsr_slave_0: entered promiscuous mode [ 1972.914843][T16656] hsr_slave_1: entered promiscuous mode [ 1972.936218][T16656] debugfs: 'hsr0' already exists in 'hsr' [ 1972.957232][T16656] Cannot create hsr debugfs directory [ 1973.474721][T16805] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1749'. [ 1974.532475][T16583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1974.662532][T16822] Bluetooth: MGMT ver 1.23 [ 1974.856637][T16824] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1753'. [ 1974.976751][T16713] bridge0: port 1(bridge_slave_0) entered blocking state [ 1975.004630][T16713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1975.032995][T16713] bridge_slave_0: entered allmulticast mode [ 1975.052181][T16713] bridge_slave_0: entered promiscuous mode [ 1975.098037][T16713] bridge0: port 2(bridge_slave_1) entered blocking state [ 1975.124661][T16713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1975.148730][T16713] bridge_slave_1: entered allmulticast mode [ 1975.171183][T16713] bridge_slave_1: entered promiscuous mode [ 1975.378764][T16583] 8021q: adding VLAN 0 to HW filter on device team0 [ 1975.869829][T16656] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1975.908922][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1975.920091][T16656] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1975.941615][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1976.029523][T13928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1976.037021][T13928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1976.118057][T16713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1976.154359][T16656] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1976.300973][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1976.415865][T16713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1976.454455][T16656] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1976.529043][T16656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1976.869766][ T6450] bridge0: port 2(bridge_slave_1) entered blocking state [ 1976.877271][ T6450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1976.981792][T16713] team0: Port device team_slave_0 added [ 1977.161977][T16713] team0: Port device team_slave_1 added [ 1977.602719][T16713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1977.627170][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1977.679545][T16713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1977.767248][T16713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1977.802500][T16713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1977.864071][T16713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1978.466741][T16713] hsr_slave_0: entered promiscuous mode [ 1978.507344][T16713] hsr_slave_1: entered promiscuous mode [ 1978.538044][T16713] debugfs: 'hsr0' already exists in 'hsr' [ 1978.552816][T16713] Cannot create hsr debugfs directory [ 1978.598097][ T5232] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1978.670447][ T11] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1978.838004][ T11] usb 7-1: Using ep0 maxpacket: 16 [ 1978.876847][T15433] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1981.010220][ T11] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1981.045938][ T11] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1981.073819][ T11] usb 7-1: can't read configurations, error -71 [ 1981.850653][T16656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1982.268888][T16656] 8021q: adding VLAN 0 to HW filter on device team0 [ 1982.464609][T13795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1982.472238][T13795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1982.855649][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1982.863258][T13795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1982.906377][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1762'. [ 1983.031928][T16713] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1983.095421][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1983.130549][T16713] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1983.187927][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1983.260584][T16713] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1983.354326][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1983.370997][T16713] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1983.461748][T16713] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1984.378960][ T5232] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1985.745625][T16713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1986.066830][T16713] 8021q: adding VLAN 0 to HW filter on device team0 [ 1986.175210][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 1986.182932][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1986.208849][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1986.215447][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 1986.415924][ T6381] bridge0: port 2(bridge_slave_1) entered blocking state [ 1986.423464][ T6381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1986.691489][T16583] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1987.037034][T16952] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1771'. [ 1989.741562][T16656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1989.865332][ T5232] 8021q: adding VLAN 0 to HW filter on device eth17 [ 1990.174483][T16583] veth0_vlan: entered promiscuous mode [ 1990.328768][T16583] veth1_vlan: entered promiscuous mode [ 1990.869199][T16583] veth0_macvtap: entered promiscuous mode [ 1990.968642][T16583] veth1_macvtap: entered promiscuous mode [ 1991.197482][T16583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1991.358324][T16583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1991.452260][T13795] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.493387][ T72] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.526164][ T72] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1991.581812][ T72] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1992.253596][T16713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1992.852250][T16656] veth0_vlan: entered promiscuous mode [ 1993.022308][T16656] veth1_vlan: entered promiscuous mode [ 1993.734709][T16656] veth0_macvtap: entered promiscuous mode [ 1993.833714][T16656] veth1_macvtap: entered promiscuous mode [ 1994.130532][T16656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1994.322857][T16656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1994.525912][T13928] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.557278][T13928] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.641870][T13928] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.671013][T13928] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1994.788419][ T5232] 8021q: adding VLAN 0 to HW filter on device eth18 [ 1994.946145][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1994.965257][ T48] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1994.977340][ T48] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1995.004990][ T48] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1995.020592][ T48] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1996.963802][T16713] veth0_vlan: entered promiscuous mode [ 1997.061322][ T48] Bluetooth: hci5: command tx timeout [ 1997.186912][T16713] veth1_vlan: entered promiscuous mode [ 1997.440223][ T8878] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1997.675196][ T8878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1997.729591][ T8878] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1997.745820][T16713] veth0_macvtap: entered promiscuous mode [ 1997.809707][ T8878] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1997.850331][ T8878] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1997.896607][T16713] veth1_macvtap: entered promiscuous mode [ 1997.923089][ T8878] usb 8-1: config 0 descriptor?? [ 1998.022122][ T8878] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1998.819333][T16713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1998.861954][T16713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1998.938515][ T55] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1998.954712][ T55] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.050722][ T6450] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.071539][T13928] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1999.140726][ T48] Bluetooth: hci5: command tx timeout [ 1999.577023][ T6381] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1999.794121][ T6381] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.066267][ T6381] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.245819][ T6381] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2000.927464][ T11] usb 8-1: USB disconnect, device number 14 [ 2001.219231][ T48] Bluetooth: hci5: command tx timeout [ 2001.497028][ T6381] bridge_slave_1: left allmulticast mode [ 2001.521654][ T6381] bridge_slave_1: left promiscuous mode [ 2001.548277][ T6381] bridge0: port 2(bridge_slave_1) entered disabled state [ 2001.620170][ T6381] bridge_slave_0: left allmulticast mode [ 2001.652388][ T6381] bridge_slave_0: left promiscuous mode [ 2001.687409][ T6381] bridge0: port 1(bridge_slave_0) entered disabled state [ 2003.297857][ T48] Bluetooth: hci5: command tx timeout [ 2003.913764][T17102] sctp: [Deprecated]: syz.7.1786 (pid 17102) Use of int in maxseg socket option. [ 2003.913764][T17102] Use struct sctp_assoc_value instead [ 2005.806699][ T6381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2005.910292][ T6381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2006.098423][ T6381] bond0 (unregistering): Released all slaves [ 2006.615200][ T5232] 8021q: adding VLAN 0 to HW filter on device eth19 [ 2007.043178][ T6381] hsr_slave_0: left promiscuous mode [ 2007.086985][ T6381] hsr_slave_1: left promiscuous mode [ 2007.137526][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2007.218001][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2007.230620][ T6381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2007.264832][ T6381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2007.425757][ T6381] veth1_macvtap: left promiscuous mode [ 2007.442172][ T6381] veth0_macvtap: left promiscuous mode [ 2007.473504][ T6381] veth1_vlan: left promiscuous mode [ 2007.495950][ T6381] veth0_vlan: left promiscuous mode [ 2007.690036][ T808] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 2007.926934][ T808] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2007.949871][ T808] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2007.997356][ T808] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2008.021958][ T808] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2008.071993][ T808] usb 7-1: config 0 descriptor?? [ 2008.126204][ T808] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 2010.557510][ T808] usb 7-1: USB disconnect, device number 32 [ 2011.011891][ T6381] team0 (unregistering): Port device team_slave_1 removed [ 2011.120609][ T6381] team0 (unregistering): Port device team_slave_0 removed [ 2012.050371][ T5232] 8021q: adding VLAN 0 to HW filter on device eth20 [ 2015.833813][T15433] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2015.846573][T15433] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2015.861148][T15433] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2015.876924][T15433] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2015.893823][T15433] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2016.486491][T17032] bridge0: port 1(bridge_slave_0) entered blocking state [ 2016.527028][T17032] bridge0: port 1(bridge_slave_0) entered disabled state [ 2016.536575][T17032] bridge_slave_0: entered allmulticast mode [ 2016.566601][T17032] bridge_slave_0: entered promiscuous mode [ 2016.637181][T17032] bridge0: port 2(bridge_slave_1) entered blocking state [ 2016.671322][T17032] bridge0: port 2(bridge_slave_1) entered disabled state [ 2017.110502][T17032] bridge_slave_1: entered allmulticast mode [ 2017.149763][T17032] bridge_slave_1: entered promiscuous mode [ 2017.308646][T17032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2017.365787][T17032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2017.821742][T17032] team0: Port device team_slave_0 added [ 2017.847250][T17032] team0: Port device team_slave_1 added [ 2018.245379][T15433] Bluetooth: hci3: command tx timeout [ 2020.259147][T15433] Bluetooth: hci3: command tx timeout [ 2020.560590][T17032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2020.612590][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2020.717380][T17032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2020.916480][T17032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2020.954568][T17032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2021.033409][T17032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2021.343775][T10973] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2022.797834][T15433] Bluetooth: hci3: command tx timeout [ 2024.893640][T15433] Bluetooth: hci3: command tx timeout [ 2027.491254][T10973] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2027.613283][T17032] hsr_slave_0: entered promiscuous mode [ 2027.629191][T17032] hsr_slave_1: entered promiscuous mode [ 2027.651807][T17032] debugfs: 'hsr0' already exists in 'hsr' [ 2027.658730][T17032] Cannot create hsr debugfs directory [ 2027.775768][T10973] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2028.073720][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2028.085527][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2028.105642][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2028.124026][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2028.139126][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2028.228925][T10973] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.178697][T15433] Bluetooth: hci0: command tx timeout [ 2030.952088][T10973] bridge_slave_1: left allmulticast mode [ 2030.980140][T10973] bridge_slave_1: left promiscuous mode [ 2030.988353][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2031.026793][T10973] bridge_slave_0: left allmulticast mode [ 2031.053763][T10973] bridge_slave_0: left promiscuous mode [ 2031.090633][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2032.182244][T10973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2032.226832][T10973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2032.295948][T15433] Bluetooth: hci0: command tx timeout [ 2032.304498][T10973] bond0 (unregistering): Released all slaves [ 2032.636008][T10973] hsr_slave_0: left promiscuous mode [ 2032.647034][T10973] hsr_slave_1: left promiscuous mode [ 2032.668980][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2032.676927][T10973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2032.711898][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2032.738551][T10973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2032.775560][T10973] veth1_macvtap: left promiscuous mode [ 2032.793977][T10973] veth0_macvtap: left promiscuous mode [ 2032.806365][T10973] veth1_vlan: left promiscuous mode [ 2032.824857][T10973] veth0_vlan: left promiscuous mode [ 2032.872296][T17277] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1820'. [ 2033.432844][T10973] team0 (unregistering): Port device team_slave_1 removed [ 2033.471230][T10973] team0 (unregistering): Port device team_slave_0 removed [ 2034.407046][T15433] Bluetooth: hci0: command tx timeout [ 2036.418455][T15433] Bluetooth: hci0: command tx timeout [ 2036.860196][T10973] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.090066][T10973] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.145810][T17032] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2037.194235][T17032] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2037.274341][T17032] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2037.297161][T17307] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1829'. [ 2037.311993][T17032] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2037.383250][T10973] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.496031][T17032] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2037.519614][T17032] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2037.655981][T17032] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2037.734324][T17032] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2037.792303][T10973] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2037.930903][T17191] bridge0: port 1(bridge_slave_0) entered blocking state [ 2037.961398][T17191] bridge0: port 1(bridge_slave_0) entered disabled state [ 2037.985362][T17191] bridge_slave_0: entered allmulticast mode [ 2037.996548][T17191] bridge_slave_0: entered promiscuous mode [ 2038.136074][T17191] bridge0: port 2(bridge_slave_1) entered blocking state [ 2038.156570][T17191] bridge0: port 2(bridge_slave_1) entered disabled state [ 2038.185993][T17191] bridge_slave_1: entered allmulticast mode [ 2038.207512][T17191] bridge_slave_1: entered promiscuous mode [ 2039.256653][T17191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2040.899123][T17191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2041.101630][T10973] bridge_slave_1: left allmulticast mode [ 2041.119771][T10973] bridge_slave_1: left promiscuous mode [ 2041.130515][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.165916][T10973] bridge_slave_0: left allmulticast mode [ 2041.172140][T10973] bridge_slave_0: left promiscuous mode [ 2041.182082][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.371464][T17333] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1837'. [ 2041.673677][T10973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2041.690329][T10973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2041.714030][T10973] bond0 (unregistering): Released all slaves [ 2041.898318][T17191] team0: Port device team_slave_0 added [ 2042.029839][T17191] team0: Port device team_slave_1 added [ 2042.230956][T17191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.249230][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2042.279575][T17191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.374082][T10973] hsr_slave_0: left promiscuous mode [ 2042.385412][T10973] hsr_slave_1: left promiscuous mode [ 2042.396075][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2042.414907][T10973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2042.430164][T10973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2042.452292][T10973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2042.497355][T10973] veth1_macvtap: left promiscuous mode [ 2042.506793][T10973] veth0_macvtap: left promiscuous mode [ 2042.518702][T10973] veth1_vlan: left promiscuous mode [ 2042.526039][T10973] veth0_vlan: left promiscuous mode [ 2043.817281][T10973] team0 (unregistering): Port device team_slave_1 removed [ 2043.875513][T10973] team0 (unregistering): Port device team_slave_0 removed [ 2046.781280][T17191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2046.789694][T17191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2046.846574][T17191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2047.015116][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 2047.043127][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 2047.065576][T17236] bridge_slave_0: entered allmulticast mode [ 2047.093719][T17236] bridge_slave_0: entered promiscuous mode [ 2047.127447][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 2047.145620][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 2047.165328][T17236] bridge_slave_1: entered allmulticast mode [ 2047.181242][T17236] bridge_slave_1: entered promiscuous mode [ 2047.194425][T17359] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1845'. [ 2047.469010][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2047.522047][T17191] hsr_slave_0: entered promiscuous mode [ 2047.545040][T17191] hsr_slave_1: entered promiscuous mode [ 2047.566255][T17191] debugfs: 'hsr0' already exists in 'hsr' [ 2047.583430][T17191] Cannot create hsr debugfs directory [ 2047.636032][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 2047.642861][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 2047.677933][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2047.831552][T17236] team0: Port device team_slave_0 added [ 2047.873043][T17236] team0: Port device team_slave_1 added [ 2048.202789][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2048.223899][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2048.274171][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2049.289733][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2049.309828][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2049.416204][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2052.461584][T17236] hsr_slave_0: entered promiscuous mode [ 2052.492612][T17236] hsr_slave_1: entered promiscuous mode [ 2052.527473][T17236] debugfs: 'hsr0' already exists in 'hsr' [ 2052.550779][T17236] Cannot create hsr debugfs directory [ 2052.592442][T17032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2053.112056][T17032] 8021q: adding VLAN 0 to HW filter on device team0 [ 2053.293260][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 2053.300865][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2053.514565][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state [ 2053.522112][ T6353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2053.680273][T17191] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 2053.699526][T17191] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2053.711008][T17191] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 2053.728381][T17191] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2053.741204][T17191] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 2053.765023][T17191] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2053.812079][T17191] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 2053.846085][T17191] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2054.726504][T17236] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 2054.771348][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2054.829618][T17236] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 2054.899011][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2054.934626][T17236] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 2054.969150][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2055.017835][T17236] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 2055.066468][T17236] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2055.292164][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2055.319718][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2055.330979][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2055.361593][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2055.378455][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2055.677312][T17191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2055.917450][T17191] 8021q: adding VLAN 0 to HW filter on device team0 [ 2056.045626][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2056.053206][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2056.255156][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2056.262708][ T6600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2056.735708][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2057.108161][T17236] 8021q: adding VLAN 0 to HW filter on device team0 [ 2057.339838][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 2057.347392][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2057.461937][ T48] Bluetooth: hci1: command tx timeout [ 2057.641260][T13795] bridge0: port 2(bridge_slave_1) entered blocking state [ 2057.648882][T13795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2057.777130][T10973] bridge_slave_1: left allmulticast mode [ 2057.785176][T10973] bridge_slave_1: left promiscuous mode [ 2057.795901][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 2057.828160][T10973] bridge_slave_0: left allmulticast mode [ 2057.836344][T10973] bridge_slave_0: left promiscuous mode [ 2057.845361][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 2058.335917][T10973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2058.382015][T10973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2058.400646][T10973] bond0 (unregistering): Released all slaves [ 2058.652413][T10973] hsr_slave_0: left promiscuous mode [ 2058.663878][T10973] hsr_slave_1: left promiscuous mode [ 2058.673260][T10973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2058.688914][T10973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2059.329365][T10973] team0 (unregistering): Port device team_slave_1 removed [ 2059.366227][T10973] team0 (unregistering): Port device team_slave_0 removed [ 2059.538516][ T48] Bluetooth: hci1: command tx timeout [ 2061.068583][T17191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2061.621515][ T48] Bluetooth: hci1: command tx timeout [ 2061.778588][T17434] bridge0: port 1(bridge_slave_0) entered blocking state [ 2061.786388][T17434] bridge0: port 1(bridge_slave_0) entered disabled state [ 2061.810795][T17434] bridge_slave_0: entered allmulticast mode [ 2061.831597][T17434] bridge_slave_0: entered promiscuous mode [ 2061.877189][T17434] bridge0: port 2(bridge_slave_1) entered blocking state [ 2061.892171][T17434] bridge0: port 2(bridge_slave_1) entered disabled state [ 2061.901289][T17434] bridge_slave_1: entered allmulticast mode [ 2061.930431][T17434] bridge_slave_1: entered promiscuous mode [ 2062.150489][T17434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2062.222342][T17434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2062.423461][T17434] team0: Port device team_slave_0 added [ 2062.468030][T17434] team0: Port device team_slave_1 added [ 2062.649795][T17434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2062.656911][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2062.706738][T17434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2062.740374][T17434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2062.750889][T17434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2062.779265][T17434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2062.897017][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2062.976659][T17434] hsr_slave_0: entered promiscuous mode [ 2062.989768][T17434] hsr_slave_1: entered promiscuous mode [ 2063.003908][T17434] debugfs: 'hsr0' already exists in 'hsr' [ 2063.011457][T17434] Cannot create hsr debugfs directory [ 2063.699439][ T48] Bluetooth: hci1: command tx timeout [ 2063.849984][T17191] veth0_vlan: entered promiscuous mode [ 2063.963152][T17191] veth1_vlan: entered promiscuous mode [ 2064.394860][T17191] veth0_macvtap: entered promiscuous mode [ 2064.482832][T17191] veth1_macvtap: entered promiscuous mode [ 2064.713848][T17434] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2064.745133][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2064.755403][T17434] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2064.777866][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2064.796203][T17236] veth0_vlan: entered promiscuous mode [ 2064.825289][T17191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2064.841852][T17434] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2064.869935][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2064.899221][T17434] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2064.945616][T17434] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2064.991171][T17191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2065.005319][T17236] veth1_vlan: entered promiscuous mode [ 2065.159790][ T6352] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.172072][ T6352] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.206747][ T6352] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.217273][ T6352] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2065.445837][T17236] veth0_macvtap: entered promiscuous mode [ 2065.495102][T17236] veth1_macvtap: entered promiscuous mode [ 2065.806328][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2065.946872][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2066.075046][ T6600] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.087542][ T6600] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.133664][ T6600] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.142875][ T6600] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2066.306000][T17434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2066.573417][T17434] 8021q: adding VLAN 0 to HW filter on device team0 [ 2066.710114][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 2066.717735][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2066.871400][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 2066.879038][ T6600] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2069.996221][ T6352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.033005][ T6352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.233853][ T6353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.259833][ T6353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.453318][T17434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2070.900550][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2070.942927][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2070.979950][ T8895] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2071.122857][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2071.140027][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2071.178971][ T8895] usb 6-1: Using ep0 maxpacket: 16 [ 2071.228292][ T8895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2071.259506][ T8895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2071.277037][ T8895] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2071.307122][ T8895] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2071.328025][ T8895] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2071.367334][ T8895] usb 6-1: config 0 descriptor?? [ 2071.855169][ T8895] usbhid 6-1:0.0: can't add hid device: -71 [ 2071.879232][ T8895] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2071.918039][ T8895] usb 6-1: USB disconnect, device number 15 [ 2072.217673][T17434] veth0_vlan: entered promiscuous mode [ 2072.281113][T17434] veth1_vlan: entered promiscuous mode [ 2072.576455][T17434] veth0_macvtap: entered promiscuous mode [ 2072.642185][T17434] veth1_macvtap: entered promiscuous mode [ 2072.784032][T17434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2072.853664][T17434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2072.900133][ T35] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.911549][ T35] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.942046][ T35] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2072.953114][ T55] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2075.187848][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.220470][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2075.320816][ T6511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2075.332908][ T6511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2078.536849][ T5232] 8021q: adding VLAN 0 to HW filter on device eth21 [ 2079.427776][ T5232] 8021q: adding VLAN 0 to HW filter on device eth22 [ 2080.383546][ T5232] 8021q: adding VLAN 0 to HW filter on device eth23 [ 2081.276654][ T5232] 8021q: adding VLAN 0 to HW filter on device eth24 [ 2093.689549][T17986] ===================================================== [ 2093.696815][T17986] BUG: KMSAN: kernel-infoleak in irqentry_exit+0x48b/0xa00 [ 2093.704128][T17986] irqentry_exit+0x48b/0xa00 [ 2093.708825][T17986] exc_page_fault+0x7e/0xb0 [ 2093.713443][T17986] asm_exc_page_fault+0x2b/0x30 [ 2093.718463][T17986] [ 2093.720814][T17986] Local variable end_time.i.i created at: [ 2093.726560][T17986] __x64_sys_poll+0x87/0x540 [ 2093.731238][T17986] x64_sys_call+0x3130/0x3ea0 [ 2093.736026][T17986] [ 2093.738374][T17986] Bytes 0-3 of 4 are uninitialized [ 2093.743534][T17986] Memory access of size 4 starts at ffff88802fd17e88 [ 2093.750244][T17986] Data copied to user address 00007fe834d76ac0 [ 2093.756452][T17986] [ 2093.758864][T17986] CPU: 1 UID: 0 PID: 17986 Comm: dhcpcd-run-hook Not tainted syzkaller #0 PREEMPT(lazy) [ 2093.768807][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2093.779009][T17986] ===================================================== [ 2093.786023][T17986] Disabling lock debugging due to kernel taint [ 2093.792215][T17986] Kernel panic - not syncing: kmsan.panic set ... [ 2093.798686][T17986] CPU: 1 UID: 0 PID: 17986 Comm: dhcpcd-run-hook Tainted: G B syzkaller #0 PREEMPT(lazy) [ 2093.810151][T17986] Tainted: [B]=BAD_PAGE [ 2093.814341][T17986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2093.824505][T17986] Call Trace: [ 2093.827827][T17986] [ 2093.830793][T17986] __dump_stack+0x26/0x30 [ 2093.835201][T17986] dump_stack_lvl+0x50/0x1c0 [ 2093.839884][T17986] ? dump_stack+0x12/0x25 [ 2093.844294][T17986] dump_stack+0x1e/0x25 [ 2093.848517][T17986] vpanic+0x7b4/0x1430 [ 2093.852686][T17986] panic+0x15d/0x160 [ 2093.856687][T17986] kmsan_report+0x31a/0x320 [ 2093.861288][T17986] ? kmsan_get_metadata+0xf1/0x160 [ 2093.866495][T17986] ? kmsan_internal_check_memory+0x1e8/0x240 [ 2093.872564][T17986] ? kmsan_copy_to_user+0xef/0x190 [ 2093.877782][T17986] ? irqentry_exit+0x48b/0xa00 [ 2093.882683][T17986] ? exc_page_fault+0x7e/0xb0 [ 2093.887446][T17986] ? asm_exc_page_fault+0x2b/0x30 [ 2093.892566][T17986] ? handle_mm_fault+0x2eb0/0x6ee0 [ 2093.897921][T17986] ? kmsan_get_metadata+0xf1/0x160 [ 2093.903215][T17986] ? kmsan_get_metadata+0xf1/0x160 [ 2093.908425][T17986] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 2093.914845][T17986] kmsan_internal_check_memory+0x1e8/0x240 [ 2093.920781][T17986] kmsan_copy_to_user+0xef/0x190 [ 2093.925896][T17986] irqentry_exit+0x48b/0xa00 [ 2093.930608][T17986] exc_page_fault+0x7e/0xb0 [ 2093.935211][T17986] asm_exc_page_fault+0x2b/0x30 [ 2093.940139][T17986] RIP: 0033:0x7fe83506c134 [ 2093.944615][T17986] Code: 50 08 93 e8 0a 62 ff ff 48 8b 05 f7 3d 07 00 48 8b 38 e8 df 39 fc ff 09 c3 48 8b 44 24 08 88 18 48 8b 05 df 3d 07 00 48 8b 38 37 3b fc ff 48 8b 44 24 20 48 8b 54 24 08 48 89 05 76 42 07 00 [ 2093.964302][T17986] RSP: 002b:00007fff7ab1b3e0 EFLAGS: 00010202 [ 2093.970436][T17986] RAX: 00007fe8350116a8 RBX: 0000561f30dcf910 RCX: 0000000000000000 [ 2093.978474][T17986] RDX: 00007fe83506c03f RSI: 0000000000000001 RDI: 00007fe8350115c0 [ 2093.986553][T17986] RBP: 0000000000000001 R08: 00007fff7ab1b3e0 R09: 0000561f30dcfe60 [ 2093.994575][T17986] R10: 00007fe834fb6fe0 R11: 00007fe834fb78e0 R12: 0000561f30dd7ed0 [ 2094.002618][T17986] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 2094.010706][T17986] [ 2094.014114][T17986] Kernel Offset: disabled [ 2094.018488][T17986] Rebooting in 86400 seconds..