last executing test programs: 21m32.298592252s ago: executing program 3 (id=118): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x141001, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0xfc}, @hci_rp_read_local_name={{0x7}, {0x3, "c8e02583b339773d08c31c8dc3baf8cd71b99273adc85506676bc88e1d4bd7c6a7c1c52337c53ea6003add9c5971882cf87f5b245b5f6431ea6f7ae44963187416ca6518ab8b290b7f7df55162bb7a233cd3867c96527d9efb182753a4df1ca4d096e0eb1db2a35bc6a341c7173f215c98a88b3b057e5ba890b1a18208f1ed863f037fb71b26682369323a35c82dcc7baf73fb3978d02d1c07d53f7db04e5c91f0b68204177b9533a1564bd76344a3cd7fd20f3ad58d2fde07ba525fbd5113dc00cda8cad3e3d850df398afff2a5b591be26a026a7afb7dfd5aa67e544d38e043d9b42cb896394bac88fe10948b122c2a23709816098282b"}}}}, 0xff) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x82, 0x0) write$binfmt_aout(r1, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r1, 0x540a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000, 0x1, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x4000000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) r4 = openat$dsp(0xffffff9c, &(0x7f0000000080), 0x82040, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000100)=0x9) 21m29.148036681s ago: executing program 3 (id=123): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, 0x0, 0x0) 21m26.804195969s ago: executing program 3 (id=126): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c0001400000000000000003200001800a00010071756f746100000010000280"], 0x110}}, 0x0) 21m25.30238785s ago: executing program 3 (id=127): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48c00, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) setrlimit(0x6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3a49f0d23cba354b, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x3ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000001c0)=""/4096) keyctl$set_timeout(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffe14) userfaultfd(0x80001) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={0x0, 0x0, 0x80800}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r2, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) 21m23.661414688s ago: executing program 3 (id=128): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={r3, 0x81}, 0x8) 21m21.869611102s ago: executing program 3 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0xfffffffd}}, 0xe8) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000a00)={0x1, 0x6, @status={[0x9, 0x2a, 0x0, 0x1000, 0x9, 0x6]}, [0xa, 0x2, 0x7837, 0x6, 0x8, 0x7f, 0xfffffffffffffff9, 0x40, 0x2d6a, 0x6, 0x0, 0x0, 0x5, 0x9, 0xfffffffffffffffd, 0x8c8b, 0x5, 0x80000000, 0x4, 0x7, 0x100, 0x7, 0xb, 0x9, 0x6, 0x2, 0xff, 0x40, 0x5, 0x8000, 0x8667, 0xffffffff, 0x100000001, 0x7f, 0x2, 0x493, 0x2, 0x1, 0x4, 0x8, 0x8, 0x6, 0x5, 0xa1, 0x0, 0x81, 0xfffffffffffffff0, 0x2, 0x5, 0x7, 0x1, 0x5, 0xc8, 0x1, 0x6, 0x952, 0x7, 0x6, 0x10, 0x4, 0x100, 0x8, 0x2, 0x3]}) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 21m6.62692702s ago: executing program 32 (id=130): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x80003, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7, 0xfffffffd}}, 0xe8) ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000a00)={0x1, 0x6, @status={[0x9, 0x2a, 0x0, 0x1000, 0x9, 0x6]}, [0xa, 0x2, 0x7837, 0x6, 0x8, 0x7f, 0xfffffffffffffff9, 0x40, 0x2d6a, 0x6, 0x0, 0x0, 0x5, 0x9, 0xfffffffffffffffd, 0x8c8b, 0x5, 0x80000000, 0x4, 0x7, 0x100, 0x7, 0xb, 0x9, 0x6, 0x2, 0xff, 0x40, 0x5, 0x8000, 0x8667, 0xffffffff, 0x100000001, 0x7f, 0x2, 0x493, 0x2, 0x1, 0x4, 0x8, 0x8, 0x6, 0x5, 0xa1, 0x0, 0x81, 0xfffffffffffffff0, 0x2, 0x5, 0x7, 0x1, 0x5, 0xc8, 0x1, 0x6, 0x952, 0x7, 0x6, 0x10, 0x4, 0x100, 0x8, 0x2, 0x3]}) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 18m19.126373503s ago: executing program 1 (id=354): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$join(0x1, 0x0) keyctl$session_to_parent(0x12) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r2, @ANYRES64=r0, @ANYRESOCT], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 18m16.976471355s ago: executing program 1 (id=356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=0x0) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x38) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000000000)) r7 = getuid() setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={r6, r7, 0xee00}, 0xc) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) 18m13.623681046s ago: executing program 1 (id=359): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x81000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, 0x0, 0x0) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, 0x0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}}) 18m10.083490632s ago: executing program 1 (id=365): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) 18m7.09766877s ago: executing program 1 (id=368): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 18m5.542124712s ago: executing program 1 (id=369): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3, &(0x7f0000000040)=0xf, 0x3, 0x0) 17m49.81618095s ago: executing program 33 (id=369): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mbind(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x3, &(0x7f0000000040)=0xf, 0x3, 0x0) 16m49.115306347s ago: executing program 0 (id=456): syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x81, 0x0, 0x0) 16m47.526444146s ago: executing program 0 (id=458): r0 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000380)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000003c0)=@mmap={0x0, 0x1, 0x4, 0x100000, 0x9, {}, {0x4, 0x0, 0x8, 0x2, 0x8, 0x7, "2622bf50"}, 0x1, 0x1, {}, 0xffffffff, 0x0, r1}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000002dc0)=@userptr={0x2, 0x1, 0x4, 0x0, 0x1, {}, {0x1, 0xc, 0x9, 0xc, 0x6, 0xa, "bf240fef"}, 0x3, 0x2, {&(0x7f00000002c0)}, 0x96000}) 16m46.425945371s ago: executing program 0 (id=460): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) 16m45.158701736s ago: executing program 0 (id=461): fcntl$notify(0xffffffffffffffff, 0x402, 0x8000003d) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kcmp(r2, r2, 0x4, 0xffffffffffffffff, r3) creat(0x0, 0xecf86c37d53049ce) 16m43.002284911s ago: executing program 0 (id=462): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x81000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) close(r0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f0000000680)='./file0\x00', &(0x7f0000000480), 0x14c98, &(0x7f00000006c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r4}}) 16m37.833993881s ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2ba}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params]}, 0x2c}}, 0x0) 16m22.733733616s ago: executing program 34 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2ba}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params]}, 0x2c}}, 0x0) 4m54.360210523s ago: executing program 4 (id=1694): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000580)={0x1, @pix_mp={0x0, 0x0, 0x34325842, 0x8, 0x0, [{0x9}, {}, {}, {}, {0x0, 0x5}, {0x0, 0x4}], 0x0, 0x0, 0x0, 0x1}}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x80000001, 0x1, 0x4}) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000001180)={0x7, 0x1, 0x1, "194019ac738c841b570441b549501eed8a63a5b9f2ce8906fd8e963e301cef69", 0x30314247}) 4m54.305016476s ago: executing program 4 (id=1695): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) timer_create(0x1, &(0x7f0000000080)={0x0, 0x12, 0x4}, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]}) 4m54.056523519s ago: executing program 4 (id=1696): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x48001) syz_usb_disconnect(r0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0x5501, 0x0) 4m50.937051915s ago: executing program 4 (id=1697): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x48090) 4m50.90080737s ago: executing program 4 (id=1698): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000102505a8a440000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x2, 0x862b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4m47.727642955s ago: executing program 4 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x3, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000900)="bada", 0x2, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m32.521156713s ago: executing program 35 (id=1710): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$kcm(0x10, 0x2, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x810) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x205, 0x1, 0xc}, 0xb, 0x1, 0x32, 0x5, 0x9, 0x3, 0x9, 0xd, 0x1, 0x1, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}}, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000000900)="bada", 0x2, 0x8040, &(0x7f00000001c0)={0x11, 0x88a8, r9, 0x1, 0xd8, 0x6, @multicast}, 0x14) 4m20.067421411s ago: executing program 6 (id=1772): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000004300)={&(0x7f0000000880)={0x24, r0, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c804}, 0x0) 4m19.862628174s ago: executing program 6 (id=1774): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_clone(0x80000080, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)) pread64(r0, &(0x7f0000000200)=""/102400, 0x19000, 0x1000000000) 4m19.536575082s ago: executing program 6 (id=1779): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) 4m18.839295833s ago: executing program 6 (id=1782): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) unshare(0x6020400) readlink(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)=""/168, 0xa8) 4m18.72385311s ago: executing program 6 (id=1783): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000093f000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m15.830791896s ago: executing program 6 (id=1796): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 4m15.621421665s ago: executing program 36 (id=1796): ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m39.514757652s ago: executing program 9 (id=2201): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m38.080339648s ago: executing program 9 (id=2202): r0 = syz_usb_connect(0x5, 0x35, &(0x7f0000000500)=ANY=[@ANYBLOB="120100004aaf36207205a5580a27010203010902230001000000000904010901a37d7e03090500004000020401080b"], 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[], 0x0) 1m31.887886875s ago: executing program 9 (id=2219): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m31.75666934s ago: executing program 9 (id=2220): socket$netlink(0x10, 0x3, 0x8000000004) socket$alg(0x26, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_usbip_server_init(0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 1m30.323018349s ago: executing program 9 (id=2228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setrlimit(0x3, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffa}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x1b}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r5 = fcntl$dupfd(r4, 0x0, r4) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13b}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r5, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x4, {0xa, 0x4e20, 0x8, @mcast1, 0xffffff88}, r6}}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) 1m28.735328562s ago: executing program 9 (id=2232): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = io_uring_setup(0x3111, 0x0) write$input_event(r0, &(0x7f0000000540)={{}, 0x1, 0x0, 0x4}, 0x18) close(r1) 1m13.42513776s ago: executing program 37 (id=2232): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x389, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xe], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x8000000], [0x8, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x9fb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000]}, 0x45c) ioctl$UI_SET_PROPBIT(r0, 0x5501, 0x0) write$input_event(r0, &(0x7f00000005c0), 0x200005d8) r1 = io_uring_setup(0x3111, 0x0) write$input_event(r0, &(0x7f0000000540)={{}, 0x1, 0x0, 0x4}, 0x18) close(r1) 1m4.258381391s ago: executing program 7 (id=2307): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 1m3.066639715s ago: executing program 7 (id=2309): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x109042, 0x108) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) connect$pppoe(r2, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) syz_open_dev$ptys(0xc, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0xb}, &(0x7f0000000240)=0x8) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$cgroup_pid(r2, &(0x7f0000000180), 0x12) 1m2.03118097s ago: executing program 8 (id=2314): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x18) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000001) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000218c0000000c0a01030000000000000000070000090900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000000c00014000"], 0x110}}, 0x0) 59.915321538s ago: executing program 7 (id=2317): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 59.040741722s ago: executing program 8 (id=2318): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) 57.234507286s ago: executing program 8 (id=2320): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x68}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 56.960835007s ago: executing program 7 (id=2324): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000880)="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", 0x15f}, {&(0x7f00000002c0)="ae49dd910000b57daa0c3360c4e7d86a52f38ac2dfb39657cbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867270f93838c52916e104aa848ca50a7a49e610c807b96eae4617639b498aec98ad751e6a920000000000000000000000080099c6cdf313c298206ecd708294a7cae68cecb0fd7f378e615d06e72ec3", 0x88}, {&(0x7f0000001740)="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", 0xd6e}], 0x3}, 0x44090) 55.77707838s ago: executing program 7 (id=2326): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 54.140808057s ago: executing program 8 (id=2329): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, 0x0, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{0x2, 0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, "771a16b92ea6656b"}, 0x10}, 0x1, 0x0, 0x0, 0x20048010}, 0xd209f6d814827b13) 53.207358524s ago: executing program 7 (id=2330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setrlimit(0x3, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffa}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13b}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x4, {0xa, 0x4e20, 0x8, @mcast1, 0xffffff88}, r4}}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) 52.878603693s ago: executing program 8 (id=2331): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$tty1(0xc, 0x4, 0x2) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 51.327376919s ago: executing program 8 (id=2332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f000000", @ANYRES32=r2, @ANYBLOB="30000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100760603e824000104080026006c09000008000c007006000008000d0001"], 0x68}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 37.555184352s ago: executing program 38 (id=2330): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setrlimit(0x3, &(0x7f0000000340)={0x8000000000000001, 0xfffffffffffffffa}) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4004550c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000003c0)={0xffffffffffffffff}, 0x13b}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000440)={0x10, 0x30, 0xfa00, {&(0x7f0000000380), 0x4, {0xa, 0x4e20, 0x8, @mcast1, 0xffffff88}, r4}}, 0x38) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0x4, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xe9}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) bind$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) 35.730446828s ago: executing program 39 (id=2332): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050026bd7000000000000f000000", @ANYRES32=r2, @ANYBLOB="30000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100760603e824000104080026006c09000008000c007006000008000d0001"], 0x68}, 0x1, 0x0, 0x0, 0x2400c004}, 0x20000014) 22.444863284s ago: executing program 2 (id=2372): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x7) sendto$inet(r0, &(0x7f0000000600)="1dc10d82169133231970fff95b36c7ad7d79a669adced5a683fdc4b69eff383d3646452a4f1f510b964e8d3e6f15e53eb680f519e7d653f4cc48ed54b45e0d3a95c5dc9ab872288196b7ae00eb569894096e9286e64772785e516ba622f0aa2de5d720c8dde11382c0aeb3f60b", 0x6d, 0x810, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='bbr', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 22.330607224s ago: executing program 2 (id=2374): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 21.154672032s ago: executing program 2 (id=2375): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80003, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) syz_usb_connect(0x3, 0x2d, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x4) 19.138423397s ago: executing program 5 (id=2378): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) socket$kcm(0x11, 0x3, 0x0) 18.876736086s ago: executing program 5 (id=2379): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, 0x0, 0x5, 0x70bd27, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="8b"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x30}}, 0x0) 18.784219937s ago: executing program 5 (id=2380): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000880)="27050200340f14000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b000000000000005743ce554b6df654cb0173677c4e2eaa2eb5035d135958831197684b763f499a2fafc724413afe7af5b53e61532895bae8d3f0f02cc4e729883f078a2552275a1486218834476323059f91a91c500e035c5c70afee9d16b5acd7cd4b94e3600c9c69aeb79e259488e089b1c59bc6fca826d38a7b3229ccd5b1bde01e63f1edd3c0f933e5c02936de55f2a4ee254bbe8aed1d2260c97783b615850d488b7f0c4a80715bed3cf1adb2dafbb7672328e2300fa2623704da7b9889a57e231be318f5eb6d294a302e753e75b741b63e898748f228e6752d15bf99e02c3d366fa091326029d899c493df701ad6c37c55598f3a19e748f58475398fda5f6153cb11a4ffde399dc21f96bed56d31fd6bfa0a75d0df449393", 0x15f}, {&(0x7f00000002c0)="ae49dd910000b57daa0c3360c4e7d86a52f38ac2dfb39657cbe70c4b01053f175c14d0139d4521b8458fcc5c4950702163dabc8596fafcbf867270f93838c52916e104aa848ca50a7a49e610c807b96eae4617639b498aec98ad751e6a920000000000000000000000080099c6cdf313c298206ecd708294a7cae68cecb0fd7f378e615d06e72ec3", 0x88}, {&(0x7f0000001740)="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", 0xd73}], 0x3}, 0x44090) 18.664354181s ago: executing program 5 (id=2381): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e01854282279") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @random="3958d82a1736", @private=0xa010100, @multicast, @private=0x1}}}}, 0x0) syz_open_dev$rtc(&(0x7f0000000080), 0x15e5, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.437725361s ago: executing program 5 (id=2382): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xd, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 17.190425742s ago: executing program 5 (id=2383): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4d}]}]}]}}]}, 0xa4}}, 0x0) 16.930012295s ago: executing program 2 (id=2384): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x35, 0x0, 0x1}, 0x28) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x6}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16.651005801s ago: executing program 2 (id=2385): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0) 15.507132451s ago: executing program 2 (id=2386): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) socket$kcm(0x11, 0x3, 0x0) 1.997006904s ago: executing program 40 (id=2383): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r1, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4d}]}]}]}}]}, 0xa4}}, 0x0) 0s ago: executing program 41 (id=2386): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020700000000000002030207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000100850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c7f9, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, 0xffffffffffffffff, 0x7}}, 0x48) socket$kcm(0x11, 0x3, 0x0) kernel console output (not intermixed with test programs): d: batadv_slave_1 [ 1142.134030][ T4126] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.160770][ T4063] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.162506][ T4063] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.162546][ T4063] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1142.188193][T12206] binder: 12203:12206 ioctl c0306201 0 returned -14 [ 1142.517914][ T4063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.517935][ T4063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1142.620337][ T6227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1142.620358][ T6227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1143.541410][T12235] capability: warning: `syz.6.385' uses 32-bit capabilities (legacy support in use) [ 1144.261471][ T5892] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1144.311299][T10523] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1144.323270][T10523] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1144.333895][T10523] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1144.335102][T10523] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1144.340788][T10523] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1144.391209][ T5892] usb 8-1: device descriptor read/64, error -71 [ 1144.644561][ T5892] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1144.771327][ T5892] usb 8-1: device descriptor read/64, error -71 [ 1144.893870][ T5892] usb usb8-port1: attempt power cycle [ 1145.231338][ T5892] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1145.253412][ T5892] usb 8-1: device descriptor read/8, error -71 [ 1145.378107][T12239] chnl_net:caif_netlink_parms(): no params data found [ 1145.501224][ T5892] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1145.521903][ T5892] usb 8-1: device descriptor read/8, error -71 [ 1145.631532][ T5892] usb usb8-port1: unable to enumerate USB device [ 1145.634262][T12239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.637997][T12239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1145.638232][T12239] bridge_slave_0: entered allmulticast mode [ 1145.642292][T12239] bridge_slave_0: entered promiscuous mode [ 1145.645470][T12239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.645655][T12239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1145.645834][T12239] bridge_slave_1: entered allmulticast mode [ 1145.648191][T12239] bridge_slave_1: entered promiscuous mode [ 1145.977557][T12282] input: syz1 as /devices/virtual/input/input9 [ 1145.992517][T12281] binder: BINDER_SET_CONTEXT_MGR already set [ 1145.992533][T12281] binder: 12279:12281 ioctl 4018620d 200000000040 returned -16 [ 1146.017016][T12239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1146.055488][T12239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1146.108372][ T6325] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1146.265857][ T6325] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1146.265885][ T6325] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1146.265905][ T6325] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1146.265952][ T6325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1146.265978][ T6325] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1146.267857][ T6325] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1146.267885][ T6325] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1146.267898][ T6325] usb 7-1: Product: syz [ 1146.267906][ T6325] usb 7-1: Manufacturer: syz [ 1146.355203][ T6325] cdc_wdm 7-1:1.0: skipping garbage [ 1146.355226][ T6325] cdc_wdm 7-1:1.0: skipping garbage [ 1146.386127][ T6325] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1146.386157][ T6325] cdc_wdm 7-1:1.0: Unknown control protocol [ 1146.503760][T10523] Bluetooth: hci4: command tx timeout [ 1146.567795][ T6325] usb 7-1: USB disconnect, device number 2 [ 1146.602290][T12239] team0: Port device team_slave_0 added [ 1146.610464][T12239] team0: Port device team_slave_1 added [ 1146.889873][T12239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1146.889888][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.889903][T12239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1146.935838][T12239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1146.935855][T12239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1146.935879][T12239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1147.297021][T12239] hsr_slave_0: entered promiscuous mode [ 1147.297861][T12239] hsr_slave_1: entered promiscuous mode [ 1147.298402][T12239] debugfs: 'hsr0' already exists in 'hsr' [ 1147.298416][T12239] Cannot create hsr debugfs directory [ 1147.646545][ T6325] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1147.774697][ T6325] usb 3-1: device descriptor read/64, error -71 [ 1147.975885][T12239] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.021479][ T6325] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1148.151263][ T6325] usb 3-1: device descriptor read/64, error -71 [ 1148.261806][ T6325] usb usb3-port1: attempt power cycle [ 1148.368460][T12239] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.582974][T10523] Bluetooth: hci4: command tx timeout [ 1148.601649][ T6325] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1148.623656][ T6325] usb 3-1: device descriptor read/8, error -71 [ 1148.745616][T12239] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1148.861295][ T6325] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1148.886235][ T6325] usb 3-1: device descriptor read/8, error -71 [ 1148.930352][T12355] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1149.014166][ T6325] usb usb3-port1: unable to enumerate USB device [ 1149.071724][T12239] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.373685][T12370] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1573'. [ 1149.449446][T12370] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1573'. [ 1149.468668][T12370] bridge0: port 2(bridge_slave_1) entered disabled state [ 1149.563905][ T6325] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1149.605059][T12239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1149.647694][T12239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1149.675626][T12239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1149.711153][ T6325] usb 6-1: Using ep0 maxpacket: 8 [ 1149.716691][ T6325] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1149.716749][ T6325] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1149.716762][ T6325] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1149.716775][ T6325] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1149.716788][ T6325] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1149.716812][ T6325] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1149.716824][ T6325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1149.720629][T12239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1149.936225][ T6325] usb 6-1: usb_control_msg returned -32 [ 1149.936258][ T6325] usbtmc 6-1:16.0: can't read capabilities [ 1150.107636][T12239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1150.177394][T12239] 8021q: adding VLAN 0 to HW filter on device team0 [ 1150.204713][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.209309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1150.228264][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.250751][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1150.375051][T12391] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1150.638094][T12394] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1150.661216][T10523] Bluetooth: hci4: command tx timeout [ 1151.300024][T12239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.881538][ T56] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1151.893919][T12239] veth0_vlan: entered promiscuous mode [ 1151.918769][T12239] veth1_vlan: entered promiscuous mode [ 1152.031480][ T56] usb 8-1: device descriptor read/64, error -71 [ 1152.032567][T12239] veth0_macvtap: entered promiscuous mode [ 1152.064412][T12239] veth1_macvtap: entered promiscuous mode [ 1152.124173][T12239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.185665][T12239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.226830][ T999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.247187][ T999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.250851][ T999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.275149][ T56] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1152.293131][ T999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.437838][ T56] usb 8-1: device descriptor read/64, error -71 [ 1152.541930][ T56] usb usb8-port1: attempt power cycle [ 1152.741148][T10523] Bluetooth: hci4: command tx timeout [ 1152.780922][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.780944][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.891759][ T56] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1152.896696][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.896716][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.933488][ T56] usb 8-1: device descriptor read/8, error -71 [ 1153.181154][ T56] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1153.201882][ T56] usb 8-1: device descriptor read/8, error -71 [ 1153.311924][ T56] usb usb8-port1: unable to enumerate USB device [ 1155.387412][T12388] usbtmc 6-1:16.0: usb_control_msg returned -110 [ 1155.405700][ T56] usb 6-1: USB disconnect, device number 2 [ 1155.895100][T12525] Bluetooth: MGMT ver 1.23 [ 1156.441137][ T5892] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1156.591197][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 1156.594054][ T5892] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1156.594149][ T5892] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1156.594172][ T5892] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1156.594198][ T5892] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1156.594222][ T5892] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1156.594265][ T5892] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1156.594288][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.826067][T12557] input: syz0 as /devices/virtual/input/input10 [ 1156.842980][ T5892] usb 7-1: usb_control_msg returned -32 [ 1156.843009][ T5892] usbtmc 7-1:16.0: can't read capabilities [ 1156.846253][T12544] kvm: kvm [12543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb135 [ 1156.846293][T12544] kvm: kvm [12543]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xb136 [ 1156.879669][T12544] kvm: kvm [12543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x7993 [ 1156.879721][T12544] kvm: kvm [12543]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0x7994 [ 1156.891441][T12544] kvm: kvm [12543]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe1ee [ 1156.891495][T12544] kvm: kvm [12543]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0xe1ef [ 1159.563746][T12597] KVM: debugfs: duplicate directory 12597-4 [ 1160.741200][ T6057] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1160.881225][ T6057] usb 8-1: device descriptor read/64, error -71 [ 1161.121328][ T6057] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1161.251222][ T6057] usb 8-1: device descriptor read/64, error -71 [ 1161.361688][ T6057] usb usb8-port1: attempt power cycle [ 1161.713619][ T6057] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 1161.736104][ T6057] usb 8-1: device descriptor read/8, error -71 [ 1161.971217][ T6057] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1161.994554][ T6057] usb 8-1: device descriptor read/8, error -71 [ 1162.101722][ T6057] usb usb8-port1: unable to enumerate USB device [ 1162.341473][T12568] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 1162.377346][ T31] usb 7-1: USB disconnect, device number 3 [ 1163.043365][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1163.073888][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1163.094355][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1163.096486][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1163.100130][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1163.621282][ T31] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1163.771132][ T31] usb 7-1: Using ep0 maxpacket: 8 [ 1163.795141][ T31] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1163.795203][ T31] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1163.795227][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1163.795252][ T31] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1163.795277][ T31] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.795322][ T31] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1163.795345][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.803289][T12668] chnl_net:caif_netlink_parms(): no params data found [ 1164.044298][ T56] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 1164.145024][ T31] usb 7-1: usb_control_msg returned -32 [ 1164.145073][ T31] usbtmc 7-1:16.0: can't read capabilities [ 1164.201132][ T6057] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1164.204676][ T56] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1164.204752][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1164.204778][ T56] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.204803][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1164.204828][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1164.206103][ T56] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1164.206154][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1164.206180][ T56] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.206207][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1164.206233][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1164.325808][ T56] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 1164.325869][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1164.325897][ T56] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1164.325920][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1164.325945][ T56] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1164.329380][ T56] usb 6-1: string descriptor 0 read error: -22 [ 1164.329538][ T56] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1164.329561][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.373704][ T6057] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1164.373734][ T6057] usb 8-1: config 4 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1164.373756][ T6057] usb 8-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1164.384966][ T6057] usb 8-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 1164.384997][ T6057] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.385017][ T6057] usb 8-1: Product: syz [ 1164.385031][ T6057] usb 8-1: Manufacturer: syz [ 1164.385045][ T6057] usb 8-1: SerialNumber: syz [ 1164.536953][ T56] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1164.574399][ T6057] usblp0: Disabling reads from problematic bidirectional printer [ 1165.101630][T12237] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1165.141453][ T5119] Bluetooth: hci1: command tx timeout [ 1165.213655][ T8224] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.261184][T12237] usb 5-1: device descriptor read/64, error -71 [ 1165.501144][T12237] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1165.626635][ T8224] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.631774][T12237] usb 5-1: device descriptor read/64, error -71 [ 1165.684844][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.685076][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 1165.685321][T12668] bridge_slave_0: entered allmulticast mode [ 1165.687950][T12668] bridge_slave_0: entered promiscuous mode [ 1165.691684][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.692291][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.692488][T12668] bridge_slave_1: entered allmulticast mode [ 1165.696019][T12668] bridge_slave_1: entered promiscuous mode [ 1165.741966][T12237] usb usb5-port1: attempt power cycle [ 1165.986175][ T8224] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.101418][T12237] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1166.122780][T12237] usb 5-1: device descriptor read/8, error -71 [ 1166.316482][ T8224] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.364771][T12237] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1166.384129][T12237] usb 5-1: device descriptor read/8, error -71 [ 1166.384557][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1166.389240][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1166.492510][T12237] usb usb5-port1: unable to enumerate USB device [ 1166.588371][T12668] team0: Port device team_slave_0 added [ 1166.598822][T12668] team0: Port device team_slave_1 added [ 1166.755838][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.755947][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.755970][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.759173][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.759184][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.759210][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1167.037999][T12668] hsr_slave_0: entered promiscuous mode [ 1167.039165][T12668] hsr_slave_1: entered promiscuous mode [ 1167.039902][T12668] debugfs: 'hsr0' already exists in 'hsr' [ 1167.039918][T12668] Cannot create hsr debugfs directory [ 1167.221378][ T5119] Bluetooth: hci1: command tx timeout [ 1167.504374][ T8224] bridge_slave_1: left allmulticast mode [ 1167.504401][ T8224] bridge_slave_1: left promiscuous mode [ 1167.504626][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1167.583261][ T8224] bridge_slave_0: left allmulticast mode [ 1167.583340][ T8224] bridge_slave_0: left promiscuous mode [ 1167.583737][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1168.091314][ T6131] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1168.273134][ T6131] usb 5-1: Using ep0 maxpacket: 16 [ 1168.289939][ T6131] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1168.289969][ T6131] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1168.290052][ T6131] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.290081][ T6131] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1168.332606][ T6131] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1168.332625][ T6131] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.332635][ T6131] usb 5-1: Product: syz [ 1168.332678][ T6131] usb 5-1: Manufacturer: syz [ 1168.332687][ T6131] usb 5-1: SerialNumber: syz [ 1169.311446][ T5119] Bluetooth: hci1: command tx timeout [ 1169.621317][T12703] usbtmc 7-1:16.0: usb_control_msg returned -110 [ 1169.662775][ T6057] usblp 8-1:4.0: usblp2: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x03F0 pid 0x0004 [ 1169.667305][ T6131] usblp 5-1:1.0: usblp3: USB Unidirectional printer dev 43 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1169.691731][ T5892] usb 7-1: USB disconnect, device number 4 [ 1169.752513][ T6057] usb 8-1: USB disconnect, device number 14 [ 1169.760095][ T6057] usblp2: removed [ 1169.834460][ T6021] usb 6-1: USB disconnect, device number 3 [ 1170.343959][ T8224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1170.432014][ T8224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1170.474372][ T8224] bond0 (unregistering): Released all slaves [ 1170.631193][ T6131] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1170.803566][ T6131] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 1170.803596][ T6131] usb 8-1: config 0 has no interface number 0 [ 1170.803641][ T6131] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1170.803669][ T6131] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1170.803703][ T6131] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1170.803744][ T6131] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1170.803766][ T6131] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.814795][ T6131] usb 8-1: config 0 descriptor?? [ 1170.837920][T12750] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1170.857894][ T6057] usb 5-1: USB disconnect, device number 43 [ 1170.899535][ T6057] usblp3: removed [ 1170.963089][ T6131] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input11 [ 1171.122177][ C1] usbtouchscreen 8-1:0.120: usbtouch_irq - usb_submit_urb failed with result: -1 [ 1171.145521][ T6131] usb 8-1: USB disconnect, device number 15 [ 1171.381123][ T5119] Bluetooth: hci1: command tx timeout [ 1172.051617][T12771] syzkaller0: entered promiscuous mode [ 1172.051643][T12771] syzkaller0: entered allmulticast mode [ 1177.244554][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.244663][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.064825][T12819] syzkaller0: entered promiscuous mode [ 1186.064850][T12819] syzkaller0: entered allmulticast mode [ 1186.194458][ T31] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1186.343666][ T31] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 1186.343694][ T31] usb 8-1: config 0 has no interface number 0 [ 1186.343739][ T31] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1186.343766][ T31] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1186.343793][ T31] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1186.343841][ T31] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1186.343864][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.353106][ T31] usb 8-1: config 0 descriptor?? [ 1186.402886][T12840] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1186.463988][T10523] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1186.470186][ T31] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.120/input/input12 [ 1186.481161][T10523] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1186.483452][T10523] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1186.490536][T10523] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1186.526967][T10523] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1186.634331][ T31] usb 8-1: USB disconnect, device number 16 [ 1186.991151][ T8224] hsr_slave_0: left promiscuous mode [ 1187.011181][ T6021] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1187.031300][ T8224] hsr_slave_1: left promiscuous mode [ 1187.031967][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.031983][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.072551][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.072577][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.141966][ T6021] usb 6-1: device descriptor read/64, error -71 [ 1187.159716][ T8224] veth1_macvtap: left promiscuous mode [ 1187.159820][ T8224] veth0_macvtap: left promiscuous mode [ 1187.160085][ T8224] veth1_vlan: left promiscuous mode [ 1187.160258][ T8224] veth0_vlan: left promiscuous mode [ 1187.381204][ T6021] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1187.512633][ T6021] usb 6-1: device descriptor read/64, error -71 [ 1187.625942][ T6021] usb usb6-port1: attempt power cycle [ 1188.001140][ T6021] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1188.022436][ T6021] usb 6-1: device descriptor read/8, error -71 [ 1188.281907][ T6021] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1188.304120][ T6021] usb 6-1: device descriptor read/8, error -71 [ 1188.413037][ T6021] usb usb6-port1: unable to enumerate USB device [ 1188.589092][T10523] Bluetooth: hci2: command tx timeout [ 1189.912355][ T8224] team0 (unregistering): Port device team_slave_1 removed [ 1190.161660][ T8224] team0 (unregistering): Port device team_slave_0 removed [ 1190.661427][T10523] Bluetooth: hci2: command tx timeout [ 1192.726941][T12851] netdevsim netdevsim6: Direct firmware load for . failed with error -2 [ 1192.726963][T12851] netdevsim netdevsim6: Falling back to sysfs fallback for: . [ 1192.761074][T10523] Bluetooth: hci2: command tx timeout [ 1193.027151][T12858] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1731'. [ 1193.140948][T12870] netlink: 'syz.7.1736': attribute type 1 has an invalid length. [ 1193.148957][T12870] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1736'. [ 1193.231551][ T6021] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1193.411076][ T6021] usb 7-1: Using ep0 maxpacket: 32 [ 1193.415485][ T6021] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1193.415511][ T6021] usb 7-1: config 0 has no interface number 0 [ 1193.415544][ T6021] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1193.418951][ T6021] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1193.418979][ T6021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.418998][ T6021] usb 7-1: Product: syz [ 1193.419006][ T6021] usb 7-1: Manufacturer: syz [ 1193.419014][ T6021] usb 7-1: SerialNumber: syz [ 1193.481786][ T6021] usb 7-1: config 0 descriptor?? [ 1193.488603][ T6021] f81534 7-1:0.12: required endpoints missing [ 1193.702148][ T31] usb 7-1: USB disconnect, device number 5 [ 1194.847235][T10523] Bluetooth: hci2: command tx timeout [ 1194.951360][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1744'. [ 1195.041177][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1195.203299][ T9] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1195.203328][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1195.203347][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1195.203394][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.205359][ T9] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1195.205376][ T9] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1195.205387][ T9] usb 6-1: Product: syz [ 1195.205395][ T9] usb 6-1: Manufacturer: syz [ 1195.229571][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1195.229591][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 1195.229686][ T9] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1195.282454][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 1195.414653][ T6325] usb 6-1: USB disconnect, device number 8 [ 1195.521601][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 1195.620258][ T1913] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1195.620368][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1745'. [ 1195.834792][ T8224] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.054467][ T1913] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1196.060852][ T1913] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1196.377084][ T8224] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.485678][ T1913] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1196.653715][T12668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1196.871144][ T6325] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1197.058286][ T8224] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.078998][ T6325] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 1197.079061][ T6325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1197.081802][ T6325] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1197.081830][ T6325] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1197.081849][ T6325] usb 6-1: Manufacturer: syz [ 1197.132699][ T6325] usb 6-1: config 0 descriptor?? [ 1197.275323][T12668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1197.321255][ T6325] rc_core: IR keymap rc-hauppauge not found [ 1197.321275][ T6325] Registered IR keymap rc-empty [ 1197.371894][ T6325] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1197.375232][ T6325] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input13 [ 1197.448292][ T6325] usb 6-1: USB disconnect, device number 9 [ 1197.451400][T12668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1197.814802][ T8224] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1197.910254][T12668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1198.200957][T12846] chnl_net:caif_netlink_parms(): no params data found [ 1198.332753][T12992] 9pnet_virtio: no channels available for device syz [ 1199.345171][T12846] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.345926][T12846] bridge0: port 1(bridge_slave_0) entered disabled state [ 1199.346147][T12846] bridge_slave_0: entered allmulticast mode [ 1199.349030][T12846] bridge_slave_0: entered promiscuous mode [ 1199.439489][T12846] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.439623][T12846] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.439848][T12846] bridge_slave_1: entered allmulticast mode [ 1199.450081][T12846] bridge_slave_1: entered promiscuous mode [ 1199.589428][ T8224] bridge_slave_1: left allmulticast mode [ 1199.589457][ T8224] bridge_slave_1: left promiscuous mode [ 1199.589703][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1199.672783][ T8224] bridge_slave_0: left allmulticast mode [ 1199.672812][ T8224] bridge_slave_0: left promiscuous mode [ 1199.673487][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1201.159907][T13078] No control pipe specified [ 1201.221186][ T9] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1201.421132][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 1201.423167][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1201.423225][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1201.423247][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1201.423271][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1201.423285][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1201.423310][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1201.423322][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1201.657085][ T9] usb 8-1: usb_control_msg returned -32 [ 1201.657131][ T9] usbtmc 8-1:16.0: can't read capabilities [ 1201.708356][T10523] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1201.708663][T10523] Bluetooth: hci5: Injecting HCI hardware error event [ 1201.712474][T10523] Bluetooth: hci5: hardware error 0x00 [ 1202.186220][ T8224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1202.241947][ T8224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1202.285625][ T8224] bond0 (unregistering): Released all slaves [ 1202.739270][T12846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1203.107291][T12846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1203.254470][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1203.258535][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1203.270190][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1203.284085][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1203.284796][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1203.796200][T12846] team0: Port device team_slave_0 added [ 1203.816970][T12846] team0: Port device team_slave_1 added [ 1203.941122][T10523] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1204.040953][ T31] usb 8-1: USB disconnect, device number 17 [ 1204.087138][T12846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1204.087155][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1204.087179][T12846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1204.245525][T13104] No control pipe specified [ 1204.282300][ T8224] hsr_slave_0: left promiscuous mode [ 1204.321272][ T8224] hsr_slave_1: left promiscuous mode [ 1204.322328][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1204.322353][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1204.372288][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1204.372314][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1204.478204][ T8224] veth1_macvtap: left promiscuous mode [ 1204.478309][ T8224] veth0_macvtap: left promiscuous mode [ 1204.478552][ T8224] veth1_vlan: left promiscuous mode [ 1204.478741][ T8224] veth0_vlan: left promiscuous mode [ 1204.531122][ T31] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 1204.684908][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1204.684988][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1204.685016][ T31] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.685042][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1204.685069][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1204.686233][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1204.686284][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1204.686311][ T31] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.686337][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1204.686362][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1204.687509][ T31] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1204.687561][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 1204.687589][ T31] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1204.687614][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1204.687641][ T31] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 1204.690909][ T31] usb 8-1: string descriptor 0 read error: -22 [ 1204.856680][ T31] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1204.856700][ T31] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.910119][ T31] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1205.120542][ T5892] usb 8-1: USB disconnect, device number 18 [ 1205.461312][T10523] Bluetooth: hci0: command tx timeout [ 1206.784544][T13124] No control pipe specified [ 1207.103652][T13131] random: crng reseeded on system resumption [ 1207.120518][ T8224] team0 (unregistering): Port device team_slave_1 removed [ 1207.166694][T13131] Restarting kernel threads ... [ 1207.167643][T13131] Done restarting kernel threads. [ 1207.435088][ T8224] team0 (unregistering): Port device team_slave_0 removed [ 1207.541780][T10523] Bluetooth: hci0: command tx timeout [ 1209.621255][T10523] Bluetooth: hci0: command tx timeout [ 1210.272260][T12846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.272272][T12846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.272288][T12846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.434133][T13156] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1821'. [ 1210.434156][T13156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1821'. [ 1210.738370][T12846] hsr_slave_0: entered promiscuous mode [ 1210.739712][T12846] hsr_slave_1: entered promiscuous mode [ 1210.780250][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1211.033913][T13175] overlayfs: workdir and upperdir must reside under the same mount [ 1211.377653][T13179] kvm: kvm [13178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7800 [ 1211.377705][T13179] kvm: kvm [13178]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x7800 [ 1211.387004][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 1211.425979][T13179] kvm: kvm [13178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x8000 [ 1211.426031][T13179] kvm: kvm [13178]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc1) = 0x8000 [ 1211.429959][T13179] kvm: kvm [13178]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x8000 [ 1211.430008][T13179] kvm: kvm [13178]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x8000 [ 1211.459856][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.460895][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1211.558323][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.558446][ T7752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1211.701333][T10523] Bluetooth: hci0: command tx timeout [ 1212.050191][T13094] chnl_net:caif_netlink_parms(): no params data found [ 1212.938073][ T8224] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.104896][T13225] netlink: 'syz.5.1835': attribute type 10 has an invalid length. [ 1213.304222][ T8224] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.522809][T13248] 9pnet_virtio: no channels available for device syz [ 1213.846009][ T8224] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.936413][T13094] bridge0: port 1(bridge_slave_0) entered blocking state [ 1213.936616][T13094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1213.936834][T13094] bridge_slave_0: entered allmulticast mode [ 1213.939360][T13094] bridge_slave_0: entered promiscuous mode [ 1213.959120][T13094] bridge0: port 2(bridge_slave_1) entered blocking state [ 1213.959264][T13094] bridge0: port 2(bridge_slave_1) entered disabled state [ 1213.959457][T13094] bridge_slave_1: entered allmulticast mode [ 1213.962456][T13094] bridge_slave_1: entered promiscuous mode [ 1214.114670][T12846] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1214.594267][ T8224] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.651781][T12846] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1214.717259][T13094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.733126][T13094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.733212][T12846] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1214.914753][T12846] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1215.146957][T13094] team0: Port device team_slave_0 added [ 1215.166727][T13094] team0: Port device team_slave_1 added [ 1215.499504][T13094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.499520][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.499546][T13094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.561447][T13094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.561464][T13094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.561490][T13094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.650438][T13300] 9pnet_virtio: no channels available for device syz [ 1215.979343][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1215.997009][T13094] hsr_slave_0: entered promiscuous mode [ 1215.997911][T13094] hsr_slave_1: entered promiscuous mode [ 1215.998467][T13094] debugfs: 'hsr0' already exists in 'hsr' [ 1215.998482][T13094] Cannot create hsr debugfs directory [ 1216.128585][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.194528][ T8224] bridge_slave_0: left allmulticast mode [ 1216.194558][ T8224] bridge_slave_0: left promiscuous mode [ 1216.197969][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1218.451798][ T8224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.544230][ T8224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.567640][ T8224] bond0 (unregistering): Released all slaves [ 1219.721226][ T5892] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1219.851227][ T5892] usb 8-1: device descriptor read/64, error -71 [ 1220.091543][ T5892] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1220.131168][ T8224] hsr_slave_0: left promiscuous mode [ 1220.151305][ T8224] hsr_slave_1: left promiscuous mode [ 1220.152868][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1220.152884][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1220.192191][ T8224] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1220.192217][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1220.222187][ T5892] usb 8-1: device descriptor read/64, error -71 [ 1220.265556][ T8224] veth1_macvtap: left promiscuous mode [ 1220.265623][ T8224] veth0_macvtap: left promiscuous mode [ 1220.265762][ T8224] veth1_vlan: left promiscuous mode [ 1220.265892][ T8224] veth0_vlan: left promiscuous mode [ 1220.336742][ T5892] usb usb8-port1: attempt power cycle [ 1220.379431][T13347] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1220.379448][T13347] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1220.406287][T13347] vhci_hcd vhci_hcd.0: Device attached [ 1220.437259][T13348] vhci_hcd: connection closed [ 1220.455536][ T3523] vhci_hcd vhci_hcd.5: stop threads [ 1220.456570][ T3523] vhci_hcd vhci_hcd.5: release socket [ 1220.456700][ T3523] vhci_hcd vhci_hcd.5: disconnect device [ 1220.681303][ T5892] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1220.701760][ T5892] usb 8-1: device descriptor read/8, error -71 [ 1220.941236][ T5892] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 1220.966192][ T5892] usb 8-1: device descriptor read/8, error -71 [ 1221.072908][ T5892] usb usb8-port1: unable to enumerate USB device [ 1222.558780][T13365] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1222.558808][T13365] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1222.558932][T13365] vhci_hcd vhci_hcd.0: Device attached [ 1222.591821][T13366] vhci_hcd: connection closed [ 1222.592510][ T1169] vhci_hcd vhci_hcd.7: stop threads [ 1222.592533][ T1169] vhci_hcd vhci_hcd.7: release socket [ 1222.592569][ T1169] vhci_hcd vhci_hcd.7: disconnect device [ 1222.791898][ T8224] team0 (unregistering): Port device team_slave_1 removed [ 1223.042985][ T8224] team0 (unregistering): Port device team_slave_0 removed [ 1223.369381][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1223.419681][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1223.425771][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1223.427130][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1223.427860][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1223.971181][ T6021] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1224.122811][ T6021] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 1224.122841][ T6021] usb 8-1: config 0 has no interface number 0 [ 1224.122879][ T6021] usb 8-1: config 0 interface 120 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1224.122908][ T6021] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1224.122921][ T6021] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.126318][ T6021] usb 8-1: config 0 descriptor?? [ 1224.336755][ T6131] usb 8-1: USB disconnect, device number 23 [ 1225.015419][T13382] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1225.015440][T13382] overlayfs: failed to set xattr on upper [ 1225.015445][T13382] overlayfs: ...falling back to redirect_dir=nofollow. [ 1225.015450][T13382] overlayfs: ...falling back to index=off. [ 1225.015454][T13382] overlayfs: ...falling back to uuid=null. [ 1225.461277][T10523] Bluetooth: hci4: command tx timeout [ 1225.541279][T12237] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1225.667392][T13363] warning: `syz.5.1875' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1225.685187][T12237] usb 8-1: device descriptor read/64, error -71 [ 1225.929053][T12237] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1225.994264][T12846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.071358][T12237] usb 8-1: device descriptor read/64, error -71 [ 1226.181762][T12237] usb usb8-port1: attempt power cycle [ 1226.264806][T13403] 9pnet_virtio: no channels available for device syz [ 1226.532615][T12237] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1226.555664][T12237] usb 8-1: device descriptor read/8, error -71 [ 1226.822515][T12237] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1226.843992][T12237] usb 8-1: device descriptor read/8, error -71 [ 1226.977618][T12237] usb usb8-port1: unable to enumerate USB device [ 1227.059314][T12846] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.097541][T13094] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1227.143889][T10889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.144089][T10889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.144715][T13094] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1227.249702][T13094] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1227.295964][T13094] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1227.329971][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.330060][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.541309][T10523] Bluetooth: hci4: command tx timeout [ 1227.718407][T13372] chnl_net:caif_netlink_parms(): no params data found [ 1229.621208][T10523] Bluetooth: hci4: command tx timeout [ 1230.014213][T13372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1230.014490][T13372] bridge0: port 1(bridge_slave_0) entered disabled state [ 1230.014663][T13372] bridge_slave_0: entered allmulticast mode [ 1230.016046][T13372] bridge_slave_0: entered promiscuous mode [ 1230.035492][T13372] bridge0: port 2(bridge_slave_1) entered blocking state [ 1230.035718][T13372] bridge0: port 2(bridge_slave_1) entered disabled state [ 1230.035938][T13372] bridge_slave_1: entered allmulticast mode [ 1230.038343][T13372] bridge_slave_1: entered promiscuous mode [ 1230.131487][T12237] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1230.371689][T12237] usb 8-1: device descriptor read/64, error -71 [ 1231.301164][T12237] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1231.335952][T13372] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1231.412658][T13372] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1231.461191][T12237] usb 8-1: device descriptor read/64, error -71 [ 1231.581602][T12237] usb usb8-port1: attempt power cycle [ 1231.701209][T10523] Bluetooth: hci4: command tx timeout [ 1231.872146][T13094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.874607][T13372] team0: Port device team_slave_0 added [ 1231.880863][T13372] team0: Port device team_slave_1 added [ 1231.921227][T12237] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1231.942115][T12237] usb 8-1: device descriptor read/8, error -71 [ 1232.010915][T12846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1232.178631][T13372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1232.178648][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.178671][T13372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.181233][T12237] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1232.211808][T12237] usb 8-1: device descriptor read/8, error -71 [ 1232.221891][T13372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.221907][T13372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.221932][T13372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.321593][T12237] usb usb8-port1: unable to enumerate USB device [ 1232.488340][T13094] 8021q: adding VLAN 0 to HW filter on device team0 [ 1232.750488][ T2224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1232.766366][ T2224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1232.789306][T13372] hsr_slave_0: entered promiscuous mode [ 1232.796391][T13372] hsr_slave_1: entered promiscuous mode [ 1232.800763][T13372] debugfs: 'hsr0' already exists in 'hsr' [ 1232.800789][T13372] Cannot create hsr debugfs directory [ 1232.949585][ T6227] bridge0: port 2(bridge_slave_1) entered blocking state [ 1232.949752][ T6227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1233.436749][T13526] input: syz0 as /devices/virtual/input/input14 [ 1233.482609][ T8224] bridge_slave_1: left allmulticast mode [ 1233.482639][ T8224] bridge_slave_1: left promiscuous mode [ 1233.482883][ T8224] bridge0: port 2(bridge_slave_1) entered disabled state [ 1233.584214][ T8224] bridge_slave_0: left allmulticast mode [ 1233.584244][ T8224] bridge_slave_0: left promiscuous mode [ 1233.584484][ T8224] bridge0: port 1(bridge_slave_0) entered disabled state [ 1234.815634][T13535] fuse: Bad value for 'group_id' [ 1234.815655][T13535] fuse: Bad value for 'group_id' [ 1235.634110][T10523] Bluetooth: hci3: command 0x0406 tx timeout [ 1236.496489][ T8224] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1236.561856][ T8224] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1236.595847][ T8224] bond0 (unregistering): Released all slaves [ 1236.839802][ T6131] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1237.132131][ T6131] usb 6-1: device descriptor read/64, error -71 [ 1237.439533][ T6131] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1237.641773][ T6131] usb 6-1: device descriptor read/64, error -71 [ 1237.756480][ T6131] usb usb6-port1: attempt power cycle [ 1238.241920][ T8224] hsr_slave_0: left promiscuous mode [ 1238.264062][T13554] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1914'. [ 1238.291265][ T8224] hsr_slave_1: left promiscuous mode [ 1238.293610][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1238.315870][ T8224] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1238.361201][ T6131] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1238.389203][ T6131] usb 6-1: device descriptor read/8, error -71 [ 1238.621208][ T6131] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1238.642170][ T6131] usb 6-1: device descriptor read/8, error -71 [ 1238.666792][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.751996][ T6131] usb usb6-port1: unable to enumerate USB device [ 1239.603259][ T8224] team0 (unregistering): Port device team_slave_1 removed [ 1239.611152][T13556] netlink: 256 bytes leftover after parsing attributes in process `syz.5.1915'. [ 1239.675982][T13558] input: syz0 as /devices/virtual/input/input15 [ 1239.971899][ T8224] team0 (unregistering): Port device team_slave_0 removed [ 1243.905733][T12846] veth0_vlan: entered promiscuous mode [ 1244.419292][ T5893] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1244.495527][T12846] veth1_vlan: entered promiscuous mode [ 1244.669592][T12846] veth0_macvtap: entered promiscuous mode [ 1244.725603][T12846] veth1_macvtap: entered promiscuous mode [ 1244.741226][ T5893] usb 8-1: device descriptor read/64, error -71 [ 1244.986598][ T5893] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1245.021354][T12846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1245.060848][T12846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1245.121126][ T5893] usb 8-1: device descriptor read/64, error -71 [ 1245.216539][T13598] input: syz0 as /devices/virtual/input/input16 [ 1245.236656][ T5893] usb usb8-port1: attempt power cycle [ 1245.285952][ T6227] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.286052][ T6227] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.286090][ T6227] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.286125][ T6227] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1245.571128][ T5893] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1245.591808][ T5893] usb 8-1: device descriptor read/8, error -71 [ 1245.619185][T13094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1245.836884][ T5893] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1245.865882][ T5893] usb 8-1: device descriptor read/8, error -71 [ 1246.018761][ T5893] usb usb8-port1: unable to enumerate USB device [ 1246.285730][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.285751][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.533527][T13372] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1246.619355][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.619376][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.626714][T13372] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1246.660352][T13372] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1246.730736][T13372] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1247.020374][T13094] veth0_vlan: entered promiscuous mode [ 1247.073997][T13094] veth1_vlan: entered promiscuous mode [ 1247.299832][T13094] veth0_macvtap: entered promiscuous mode [ 1247.363059][T13631] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1925'. [ 1247.422262][T13094] veth1_macvtap: entered promiscuous mode [ 1247.572871][T10523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1247.577200][T10523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1247.611498][T10523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1247.618965][T10523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1247.619666][T10523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1247.725206][T13094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1247.780179][T13372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1247.789388][T13094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1247.942156][T13538] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1248.471963][T13538] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.048850][T13538] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.104848][T13372] 8021q: adding VLAN 0 to HW filter on device team0 [ 1249.131556][T13538] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1249.573730][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.582277][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1249.701243][T10523] Bluetooth: hci1: command tx timeout [ 1250.417672][T13538] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.630490][ T7752] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.630650][ T7752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.856581][T13538] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.196026][T13538] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.529298][T13538] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1251.580874][ T8224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.580896][ T8224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.619736][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1933'. [ 1251.781179][T10523] Bluetooth: hci1: command tx timeout [ 1251.901571][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.901592][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.908441][T13633] chnl_net:caif_netlink_parms(): no params data found [ 1251.949285][T13675] binder: BINDER_SET_CONTEXT_MGR already set [ 1251.949301][T13675] binder: 13674:13675 ioctl 4018620d 200000004a80 returned -16 [ 1252.096292][T13685] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1937'. [ 1252.266297][T13689] input: syz0 as /devices/virtual/input/input17 [ 1252.293492][ T1169] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.388030][ T1169] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.486405][ T1169] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.568903][ T1169] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1252.844363][T13538] bridge_slave_1: left allmulticast mode [ 1252.844391][T13538] bridge_slave_1: left promiscuous mode [ 1252.844629][T13538] bridge0: port 2(bridge_slave_1) entered disabled state [ 1252.882262][T13711] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1942'. [ 1252.942261][T13538] bridge_slave_0: left allmulticast mode [ 1252.942281][T13538] bridge_slave_0: left promiscuous mode [ 1252.942515][T13538] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.861107][T10523] Bluetooth: hci1: command tx timeout [ 1254.853065][T13538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.943524][T13538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.965861][T13538] bond0 (unregistering): Released all slaves [ 1255.006785][T13633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.006880][T13633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.007073][T13633] bridge_slave_0: entered allmulticast mode [ 1255.010893][T13633] bridge_slave_0: entered promiscuous mode [ 1255.045943][T13633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.046026][T13633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1255.046190][T13633] bridge_slave_1: entered allmulticast mode [ 1255.047562][T13633] bridge_slave_1: entered promiscuous mode [ 1255.942446][T10523] Bluetooth: hci1: command tx timeout [ 1256.105835][T13633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.285518][T13633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.718720][T13734] kvm_intel: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x68ce [ 1257.747264][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x298e [ 1257.747319][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x298f [ 1257.747596][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf183 [ 1257.747645][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xf184 [ 1257.749204][T13734] kvm_intel: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa1ef [ 1257.790240][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf237 [ 1257.790294][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xf238 [ 1257.795458][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x89c7 [ 1257.795507][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x89c8 [ 1257.797831][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xb23b [ 1257.797875][T13734] kvm: kvm [13733]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xb23c [ 1258.020311][T13633] team0: Port device team_slave_0 added [ 1258.027336][T13633] team0: Port device team_slave_1 added [ 1259.587991][T13745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1953'. [ 1259.791073][T13538] hsr_slave_0: left promiscuous mode [ 1259.831212][T13538] hsr_slave_1: left promiscuous mode [ 1259.832376][T13538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.832400][T13538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.882546][T13538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.882575][T13538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.027994][T13538] veth1_macvtap: left promiscuous mode [ 1260.028056][T13538] veth0_macvtap: left promiscuous mode [ 1260.029926][T13538] veth1_vlan: left promiscuous mode [ 1260.030093][T13538] veth0_vlan: left promiscuous mode [ 1260.886999][T13754] binder: BINDER_SET_CONTEXT_MGR already set [ 1260.887010][T13754] binder: 13753:13754 ioctl 4018620d 200000004a80 returned -16 [ 1262.532490][T13538] team0 (unregistering): Port device team_slave_1 removed [ 1262.832497][T13538] team0 (unregistering): Port device team_slave_0 removed [ 1265.555049][T13633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1265.555067][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.555093][T13633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1265.566836][T13372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1265.569518][T13633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1265.569533][T13633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1265.569558][T13633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1268.178858][T13769] trusted_key: encrypted_key: master key parameter is missing [ 1268.310470][T13633] hsr_slave_0: entered promiscuous mode [ 1268.322517][T13633] hsr_slave_1: entered promiscuous mode [ 1269.330356][T13780] binder: BINDER_SET_CONTEXT_MGR already set [ 1269.330372][T13780] binder: 13779:13780 ioctl 4018620d 200000004a80 returned -16 [ 1269.735179][T13792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1966'. [ 1270.966532][T13372] veth0_vlan: entered promiscuous mode [ 1271.159830][T13372] veth1_vlan: entered promiscuous mode [ 1271.753448][T13372] veth0_macvtap: entered promiscuous mode [ 1271.777288][T13372] veth1_macvtap: entered promiscuous mode [ 1272.428954][T13372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1272.458444][T13372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1272.533465][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.542261][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.542842][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.542899][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1272.695148][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1972'. [ 1272.803999][T13538] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.804047][T13538] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.804083][T13538] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.804117][T13538] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1272.981829][T13849] binder: BINDER_SET_CONTEXT_MGR already set [ 1272.981843][T13849] binder: 13847:13849 ioctl 4018620d 200000004a80 returned -16 [ 1273.410829][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1977'. [ 1274.607843][T13866] overlayfs: failed to resolve './file1': -2 [ 1274.892090][T13538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1274.892116][T13538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.261043][T13633] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1275.361192][T13633] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1275.414470][ T3481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1275.414492][ T3481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1275.456722][T13633] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1275.562437][T13633] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1276.159165][T13633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.233568][T13633] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.277635][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.277758][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.320845][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.320925][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.615244][T13633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1276.724658][T13904] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1276.724685][T13904] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1277.411348][T13926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1990'. [ 1277.497004][T13633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.133043][T13931] hfs: can't find a HFS filesystem on dev nullb0 [ 1278.781713][T13935] fuse: Unknown parameter 'group_id00000000000000000000' [ 1280.051505][T13633] veth0_vlan: entered promiscuous mode [ 1280.071747][T13633] veth1_vlan: entered promiscuous mode [ 1280.263276][T13633] veth0_macvtap: entered promiscuous mode [ 1280.287449][T13633] veth1_macvtap: entered promiscuous mode [ 1280.326878][T13633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.395415][T13633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.445473][ T2224] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.445525][ T2224] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.445553][ T2224] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.445572][ T2224] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.080619][T13969] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 1282.080646][T13969] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1282.129577][ T3523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.129598][ T3523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.239971][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1282.239992][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1282.845375][T13988] fuse: Unknown parameter 'group_id00000000000000000000' [ 1284.151362][T13741] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1284.324233][T13741] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1284.324272][T13741] usb 9-1: can't read configurations, error -61 [ 1284.451194][T13741] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1284.719272][T13741] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1284.719310][T13741] usb 9-1: can't read configurations, error -61 [ 1284.720457][T13741] usb usb9-port1: attempt power cycle [ 1285.721130][T13741] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1285.747370][T13741] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1285.747407][T13741] usb 9-1: can't read configurations, error -61 [ 1285.871117][T13741] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1285.901493][T13741] usb 9-1: unable to read config index 0 descriptor/start: -61 [ 1285.901531][T13741] usb 9-1: can't read configurations, error -61 [ 1285.901898][T13741] usb usb9-port1: unable to enumerate USB device [ 1288.822265][T14041] fuse: Unknown parameter 'group_id00000000000000000000' [ 1289.126846][T14050] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 1289.126874][T14050] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1290.755359][T14061] syz.7.2008 (14061) used greatest stack depth: 18456 bytes left [ 1292.661623][ T6021] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1293.298840][T14089] nbd: socks must be embedded in a SOCK_ITEM attr [ 1293.413912][ T6021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1293.413950][ T6021] usb 10-1: can't read configurations, error -61 [ 1293.543545][ T6021] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1294.671951][ T6021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1294.671992][ T6021] usb 10-1: can't read configurations, error -61 [ 1294.672361][ T6021] usb usb10-port1: attempt power cycle [ 1295.111074][ T6021] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1295.137498][ T6021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1295.137534][ T6021] usb 10-1: can't read configurations, error -61 [ 1295.271150][ T6021] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1295.336686][ T6021] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 1295.336724][ T6021] usb 10-1: can't read configurations, error -61 [ 1295.337094][ T6021] usb usb10-port1: unable to enumerate USB device [ 1300.116712][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.425579][T14164] fuse: Bad value for 'user_id' [ 1300.425592][T14164] fuse: Bad value for 'user_id' [ 1303.551168][T13741] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1303.831967][T13741] usb 8-1: Using ep0 maxpacket: 8 [ 1304.467431][T13741] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1304.467462][T13741] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.467516][T13741] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1304.467539][T13741] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1304.467563][T13741] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1304.467606][T13741] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1304.467629][T13741] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.560116][T13741] usbtmc 8-1:16.0: bulk endpoints not found [ 1304.698404][T14206] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1304.698475][T14206] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1304.801523][T14208] fuse: Bad value for 'fd' [ 1304.907274][ T6021] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1305.079343][ T6021] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 1305.079372][ T6021] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.079392][ T6021] usb 6-1: config 0 has no interface number 0 [ 1305.079425][ T6021] usb 6-1: config 0 interface 255 has no altsetting 0 [ 1305.079459][ T6021] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1305.079483][ T6021] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1305.109293][ T6021] usb 6-1: config 0 descriptor?? [ 1306.559204][T13900] usb 6-1: USB disconnect, device number 14 [ 1306.646675][ T5955] usb 8-1: USB disconnect, device number 36 [ 1307.813155][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2057'. [ 1307.813507][T14235] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2057'. [ 1307.814366][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2057'. [ 1312.252218][T14272] fuse: Bad value for 'fd' [ 1313.556829][T14281] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1313.556858][T14281] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1313.557016][T14281] vhci_hcd vhci_hcd.0: Device attached [ 1313.616650][T14284] vhci_hcd: connection closed [ 1313.625009][T13538] vhci_hcd vhci_hcd.2: stop threads [ 1313.625035][T13538] vhci_hcd vhci_hcd.2: release socket [ 1313.625074][T13538] vhci_hcd vhci_hcd.2: disconnect device [ 1315.606312][T13900] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1315.771146][T13900] usb 6-1: Using ep0 maxpacket: 8 [ 1315.778318][T13900] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1315.778380][T13900] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.778518][T13900] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1315.778555][T13900] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1315.778618][T13900] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1315.778695][T13900] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1315.778719][T13900] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.457536][T13900] usbtmc 6-1:16.0: bulk endpoints not found [ 1318.954232][T12237] usb 6-1: USB disconnect, device number 15 [ 1320.497518][T14337] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1320.497547][T14337] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1320.497690][T14337] vhci_hcd vhci_hcd.0: Device attached [ 1320.526506][T14338] vhci_hcd: connection closed [ 1320.526801][ T1913] vhci_hcd vhci_hcd.9: stop threads [ 1320.526825][ T1913] vhci_hcd vhci_hcd.9: release socket [ 1320.526861][ T1913] vhci_hcd vhci_hcd.9: disconnect device [ 1322.579796][T14356] fuse: Bad value for 'fd' [ 1324.311383][T12237] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1324.571097][T12237] usb 9-1: Using ep0 maxpacket: 8 [ 1324.573510][T12237] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1324.573567][T12237] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1324.573591][T12237] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1324.573614][T12237] usb 9-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1324.573636][T12237] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1324.573679][T12237] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1324.573703][T12237] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.666262][T12237] usbtmc 9-1:16.0: bulk endpoints not found [ 1325.197440][T14383] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1325.197460][T14383] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1325.197636][T14383] vhci_hcd vhci_hcd.0: Device attached [ 1325.253738][T14384] vhci_hcd: connection closed [ 1325.255680][ T2224] vhci_hcd vhci_hcd.9: stop threads [ 1325.255704][ T2224] vhci_hcd vhci_hcd.9: release socket [ 1325.255741][ T2224] vhci_hcd vhci_hcd.9: disconnect device [ 1325.273204][T14390] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2091'. [ 1325.371046][T12237] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1325.514681][T14395] fuse: Bad value for 'fd' [ 1325.521108][T12237] usb 3-1: Using ep0 maxpacket: 16 [ 1325.526019][T12237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1325.527294][T12237] usb 3-1: config 13 has an invalid interface number: 50 but max is 0 [ 1325.527319][T12237] usb 3-1: config 13 has an invalid descriptor of length 0, skipping remainder of the config [ 1325.527338][T12237] usb 3-1: config 13 has no interface number 0 [ 1325.527381][T12237] usb 3-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1325.527406][T12237] usb 3-1: config 13 interface 50 has no altsetting 0 [ 1325.531242][T12237] usb 3-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1325.531269][T12237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1325.531288][T12237] usb 3-1: Product: syz [ 1325.531303][T12237] usb 3-1: Manufacturer: syz [ 1325.531317][T12237] usb 3-1: SerialNumber: syz [ 1326.317191][T14381] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1326.417828][T14399] overlayfs: missing 'workdir' [ 1326.555264][T12237] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1326.555326][T12237] usb 3-1: MIDIStreaming interface descriptor not found [ 1326.685347][T12237] usb 3-1: USB disconnect, device number 27 [ 1326.798207][T14194] udevd[14194]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:13.50/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1326.867417][ T6848] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1326.881100][ T6021] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1327.013973][ T6848] usb 10-1: Using ep0 maxpacket: 16 [ 1327.016542][ T6848] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1327.016595][ T6848] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1327.016619][ T6848] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1327.062419][ T6021] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 1327.062478][ T6021] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1327.063781][ T6021] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1327.063807][ T6021] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1327.063827][ T6021] usb 8-1: Manufacturer: syz [ 1327.067376][ T6848] usb 10-1: config 0 descriptor?? [ 1327.133366][ T6021] usb 8-1: config 0 descriptor?? [ 1327.211059][ T6021] rc_core: IR keymap rc-hauppauge not found [ 1327.211080][ T6021] Registered IR keymap rc-empty [ 1327.215566][ T6021] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 1327.220714][ T6021] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input18 [ 1327.343495][ T6325] usb 8-1: USB disconnect, device number 37 [ 1327.514677][ T6848] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1327.514705][ T6848] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1327.514722][ T6848] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1327.514738][ T6848] mcp2221 0003:04D8:00DD.0003: unknown main item tag 0x0 [ 1327.515326][ T6848] mcp2221 0003:04D8:00DD.0003: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.9-1/input0 [ 1327.708411][ C0] usb 10-1: input irq status -75 received [ 1327.754938][ T6325] usb 9-1: USB disconnect, device number 6 [ 1327.919660][ T6848] usb 10-1: USB disconnect, device number 6 [ 1327.977160][T14424] blktrace: Concurrent blktraces are not allowed on loop4 [ 1328.026005][T10523] Bluetooth: hci0: command 0x0406 tx timeout [ 1328.068692][T14427] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2109'. [ 1328.148692][T14431] fuse: Bad value for 'fd' [ 1328.215145][T14433] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1328.215172][T14433] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1328.227938][T14433] vhci_hcd vhci_hcd.0: Device attached [ 1328.271091][T14434] vhci_hcd: connection closed [ 1328.275481][ T1913] vhci_hcd vhci_hcd.7: stop threads [ 1328.275506][ T1913] vhci_hcd vhci_hcd.7: release socket [ 1328.275542][ T1913] vhci_hcd vhci_hcd.7: disconnect device [ 1328.309682][T14439] overlayfs: missing 'workdir' [ 1328.836128][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2120'. [ 1328.836380][T14455] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2120'. [ 1328.852079][T14455] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2120'. [ 1328.900345][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2121'. [ 1328.982317][T10523] Bluetooth: hci2: command 0x1003 tx timeout [ 1328.982646][ T5119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1330.511257][T14474] trusted_key: encrypted_key: keylen parameter is missing [ 1330.565100][T14478] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 1330.565128][T14478] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1330.565330][T14478] vhci_hcd vhci_hcd.0: Device attached [ 1330.832466][T14481] vhci_hcd: connection closed [ 1330.843306][T13538] vhci_hcd vhci_hcd.2: stop threads [ 1330.843330][T13538] vhci_hcd vhci_hcd.2: release socket [ 1330.854660][T13538] vhci_hcd vhci_hcd.2: disconnect device [ 1330.900326][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 1332.813651][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2132'. [ 1332.813914][T14493] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2132'. [ 1332.814729][T14493] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2132'. [ 1333.392926][T14495] hfs: can't find a HFS filesystem on dev nullb0 [ 1333.829094][ T1913] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.867092][ T43] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.867137][ T43] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1333.867175][ T43] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1334.159993][T14505] fuse: Bad value for 'fd' [ 1334.308960][T14509] overlayfs: missing 'lowerdir' [ 1334.510149][T14514] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1334.510183][T14514] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1334.527567][T14514] vhci_hcd vhci_hcd.0: Device attached [ 1334.543760][T14516] vhci_hcd: connection closed [ 1334.544011][ T999] vhci_hcd vhci_hcd.8: stop threads [ 1334.544034][ T999] vhci_hcd vhci_hcd.8: release socket [ 1334.544070][ T999] vhci_hcd vhci_hcd.8: disconnect device [ 1334.553901][T14520] trusted_key: encrypted_key: keylen parameter is missing [ 1337.101915][T14536] hfs: can't find a HFS filesystem on dev nullb0 [ 1338.221840][ T3481] Bluetooth: hci2: Frame reassembly failed (-84) [ 1338.617241][T14550] fuse: Invalid rootmode [ 1338.824341][T14552] input: syz0 as /devices/virtual/input/input21 [ 1340.331500][T10523] Bluetooth: hci2: command 0x1003 tx timeout [ 1340.357076][ T5119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1343.886944][T14581] fuse: Invalid rootmode [ 1346.086035][T14594] input: syz0 as /devices/virtual/input/input22 [ 1346.109285][T14593] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1346.109310][T14593] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1346.109422][T14593] vhci_hcd vhci_hcd.0: Device attached [ 1346.150712][T14598] vhci_hcd: connection closed [ 1346.164071][ T2224] vhci_hcd vhci_hcd.8: stop threads [ 1346.164096][ T2224] vhci_hcd vhci_hcd.8: release socket [ 1346.164133][ T2224] vhci_hcd vhci_hcd.8: disconnect device [ 1348.701679][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 1349.231151][T14605] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1349.242057][T14615] netlink: 'syz.2.2173': attribute type 12 has an invalid length. [ 1349.242077][T14615] netlink: 'syz.2.2173': attribute type 29 has an invalid length. [ 1349.242090][T14615] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2173'. [ 1349.280826][T14615] netlink: 39 bytes leftover after parsing attributes in process `syz.2.2173'. [ 1349.431046][T14605] usb 9-1: Using ep0 maxpacket: 16 [ 1349.436910][T14605] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1349.437827][T14605] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1349.437857][T14605] usb 9-1: can't read configurations, error -71 [ 1351.877114][T14637] input: syz0 as /devices/virtual/input/input23 [ 1351.948284][T13538] Bluetooth: hci2: Frame reassembly failed (-84) [ 1352.419520][ T3481] Bluetooth: hci6: Frame reassembly failed (-84) [ 1352.419612][ T3481] Bluetooth: hci6: Frame reassembly failed (-84) [ 1352.419686][ T3481] Bluetooth: hci6: Frame reassembly failed (-84) [ 1352.419768][ T3481] Bluetooth: hci6: Frame reassembly failed (-84) [ 1352.419840][ T3481] Bluetooth: hci6: Frame reassembly failed (-84) [ 1352.419911][ T3481] Bluetooth: hci6: Frame reassembly failed (-84) [ 1353.290793][T14657] netlink: 'syz.7.2184': attribute type 12 has an invalid length. [ 1353.290815][T14657] netlink: 'syz.7.2184': attribute type 29 has an invalid length. [ 1353.290828][T14657] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2184'. [ 1353.290853][T14657] netlink: 39 bytes leftover after parsing attributes in process `syz.7.2184'. [ 1354.031122][T10523] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1355.061468][ T5119] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1356.491081][T12237] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1356.781121][T12237] usb 3-1: Using ep0 maxpacket: 16 [ 1356.906187][T12237] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1356.907022][T12237] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1356.907043][T12237] usb 3-1: can't read configurations, error -71 [ 1357.925486][T14688] netlink: 'syz.9.2195': attribute type 12 has an invalid length. [ 1357.925509][T14688] netlink: 'syz.9.2195': attribute type 29 has an invalid length. [ 1357.925523][T14688] netlink: 148 bytes leftover after parsing attributes in process `syz.9.2195'. [ 1357.925549][T14688] netlink: 39 bytes leftover after parsing attributes in process `syz.9.2195'. [ 1357.951024][T12237] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1358.102771][T12237] usb 3-1: Using ep0 maxpacket: 8 [ 1358.105057][T12237] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1358.105122][T12237] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1358.105146][T12237] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1358.105172][T12237] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1358.105197][T12237] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1358.105239][T12237] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1358.105263][T12237] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1358.381020][T12237] usb 3-1: usb_control_msg returned -32 [ 1358.381065][T12237] usbtmc 3-1:16.0: can't read capabilities [ 1358.533506][T14697] input: syz0 as /devices/virtual/input/input24 [ 1359.215947][T14711] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 1361.887635][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.984104][ T6848] usb 3-1: USB disconnect, device number 29 [ 1362.976883][T14727] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6) [ 1362.976912][T14727] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1362.977078][T14727] vhci_hcd vhci_hcd.0: Device attached [ 1363.013216][T14728] vhci_hcd: connection closed [ 1363.013419][ T1414] vhci_hcd vhci_hcd.7: stop threads [ 1363.013441][ T1414] vhci_hcd vhci_hcd.7: release socket [ 1363.013478][ T1414] vhci_hcd vhci_hcd.7: disconnect device [ 1363.481152][T14605] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1363.637565][T14605] usb 10-1: Using ep0 maxpacket: 32 [ 1363.645936][T14605] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1363.645963][T14605] usb 10-1: config 0 has no interface number 0 [ 1363.646008][T14605] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1363.646030][T14605] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1363.668872][T14605] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1363.668900][T14605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.668920][T14605] usb 10-1: Product: syz [ 1363.668933][T14605] usb 10-1: Manufacturer: syz [ 1363.668948][T14605] usb 10-1: SerialNumber: syz [ 1363.712776][T14605] usb 10-1: config 0 descriptor?? [ 1363.827510][T14741] netlink: 'syz.8.2206': attribute type 12 has an invalid length. [ 1363.827534][T14741] netlink: 'syz.8.2206': attribute type 29 has an invalid length. [ 1363.827548][T14741] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2206'. [ 1363.876123][T14742] overlayfs: missing 'lowerdir' [ 1363.933819][T14605] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1363.933851][T14605] cx231xx 10-1:0.1: Not found matching IAD interface [ 1363.979675][T14605] usb 10-1: USB disconnect, device number 7 [ 1364.452733][T14605] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1364.471056][T13616] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1364.601075][T14605] usb 10-1: Using ep0 maxpacket: 32 [ 1364.604393][T14605] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 1364.604421][T14605] usb 10-1: config 0 has no interface number 0 [ 1364.604467][T14605] usb 10-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 1364.604489][T14605] usb 10-1: config 0 interface 1 has no altsetting 0 [ 1364.618592][T14605] usb 10-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1364.618621][T14605] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1364.618641][T14605] usb 10-1: Product: syz [ 1364.618655][T14605] usb 10-1: Manufacturer: syz [ 1364.618669][T14605] usb 10-1: SerialNumber: syz [ 1364.621052][T13616] usb 9-1: Using ep0 maxpacket: 8 [ 1364.627310][T13616] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1364.627365][T13616] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1364.627387][T13616] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1364.627437][T13616] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1364.627463][T13616] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1364.627503][T13616] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1364.627525][T13616] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.644065][T14605] usb 10-1: config 0 descriptor?? [ 1364.875758][T14605] cx231xx 10-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1364.875792][T14605] cx231xx 10-1:0.1: Not found matching IAD interface [ 1364.946749][T14605] usb 10-1: USB disconnect, device number 8 [ 1364.986728][T13616] usb 9-1: usb_control_msg returned -32 [ 1364.986774][T13616] usbtmc 9-1:16.0: can't read capabilities [ 1366.902777][T14765] usbtmc 9-1:16.0: usb_control_msg returned -32 [ 1367.707843][T14770] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 1367.707870][T14770] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1367.708011][T14770] vhci_hcd vhci_hcd.0: Device attached [ 1367.729746][T14771] vhci_hcd: connection closed [ 1367.762478][ T1209] vhci_hcd vhci_hcd.9: stop threads [ 1367.762503][ T1209] vhci_hcd vhci_hcd.9: release socket [ 1367.762539][ T1209] vhci_hcd vhci_hcd.9: disconnect device [ 1367.898356][T14776] netlink: 'syz.5.2222': attribute type 12 has an invalid length. [ 1367.898376][T14776] netlink: 'syz.5.2222': attribute type 29 has an invalid length. [ 1367.898390][T14776] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2222'. [ 1367.953621][T14626] usb 9-1: USB disconnect, device number 9 [ 1368.014593][T14779] overlayfs: missing 'lowerdir' [ 1370.025931][T14807] input: syz0 as /devices/virtual/input/input25 [ 1370.160825][T14809] netlink: 'syz.5.2234': attribute type 12 has an invalid length. [ 1370.160847][T14809] netlink: 'syz.5.2234': attribute type 29 has an invalid length. [ 1370.169408][T14809] netlink: 148 bytes leftover after parsing attributes in process `syz.5.2234'. [ 1370.617103][T14817] overlayfs: missing 'lowerdir' [ 1370.631050][ T6325] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1370.781017][ T6325] usb 8-1: Using ep0 maxpacket: 8 [ 1370.783380][ T6325] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1370.783532][ T6325] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1370.783555][ T6325] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1370.783580][ T6325] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1370.783605][ T6325] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.783647][ T6325] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1370.783669][ T6325] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1371.079447][ T6325] usb 8-1: usb_control_msg returned -32 [ 1371.079496][ T6325] usbtmc 8-1:16.0: can't read capabilities [ 1371.353289][T14826] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1371.353317][T14826] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1371.353505][T14826] vhci_hcd vhci_hcd.0: Device attached [ 1371.386239][T14827] vhci_hcd: connection closed [ 1371.391565][ T1169] vhci_hcd vhci_hcd.5: stop threads [ 1371.391588][ T1169] vhci_hcd vhci_hcd.5: release socket [ 1371.391624][ T1169] vhci_hcd vhci_hcd.5: disconnect device [ 1372.874691][T14835] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 1373.951755][ T5892] usb 8-1: USB disconnect, device number 38 [ 1375.588673][ T5814] Bluetooth: hci1: command 0x0406 tx timeout [ 1377.385761][T14866] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1377.385789][T14866] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1377.386227][T14866] vhci_hcd vhci_hcd.0: Device attached [ 1377.446704][T14867] vhci_hcd: connection closed [ 1377.459103][ T2224] vhci_hcd vhci_hcd.5: stop threads [ 1377.459126][ T2224] vhci_hcd vhci_hcd.5: release socket [ 1377.459162][ T2224] vhci_hcd vhci_hcd.5: disconnect device [ 1378.115862][T14877] overlayfs: missing 'lowerdir' [ 1379.721065][T13616] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1379.871102][T13616] usb 6-1: Using ep0 maxpacket: 8 [ 1379.873121][T13616] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1379.873177][T13616] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1379.873200][T13616] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1379.873226][T13616] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1379.873249][T13616] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1379.873291][T13616] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1379.873314][T13616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1380.198026][T13616] usb 6-1: usb_control_msg returned -32 [ 1380.198077][T13616] usbtmc 6-1:16.0: can't read capabilities [ 1380.904924][T14898] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1383.126131][ T5814] Bluetooth: hci2: command 0x1003 tx timeout [ 1383.126957][ T5119] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1383.244849][T14320] usb 6-1: USB disconnect, device number 16 [ 1383.357011][T14908] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 1383.357039][T14908] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1383.357221][T14908] vhci_hcd vhci_hcd.0: Device attached [ 1383.445998][T14909] vhci_hcd: connection closed [ 1383.481250][T13538] vhci_hcd vhci_hcd.5: stop threads [ 1383.481269][T13538] vhci_hcd vhci_hcd.5: release socket [ 1383.481292][T13538] vhci_hcd vhci_hcd.5: disconnect device [ 1385.080065][T14918] overlayfs: missing 'workdir' [ 1385.571051][T11175] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1385.645346][ T5814] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1385.661253][ T5814] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1385.674590][ T5814] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1385.683398][ T5814] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1385.684748][ T5814] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1385.733480][T11175] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1385.733508][T11175] usb 6-1: config 0 has no interface number 0 [ 1385.733554][T11175] usb 6-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1385.733598][T11175] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1385.733621][T11175] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.738807][T11175] usb 6-1: config 0 descriptor?? [ 1385.946200][ T56] usb 6-1: USB disconnect, device number 17 [ 1386.406305][T11175] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1386.522631][T14946] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 1386.522658][T14946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1386.524942][T14946] vhci_hcd vhci_hcd.0: Device attached [ 1386.562281][T14948] vhci_hcd: connection closed [ 1386.562476][ T69] vhci_hcd vhci_hcd.8: stop threads [ 1386.562498][ T69] vhci_hcd vhci_hcd.8: release socket [ 1386.562536][ T69] vhci_hcd vhci_hcd.8: disconnect device [ 1386.591130][T11175] usb 8-1: Using ep0 maxpacket: 8 [ 1386.593434][T11175] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1386.593491][T11175] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1386.593514][T11175] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1386.593540][T11175] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1386.593563][T11175] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.593606][T11175] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1386.593628][T11175] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.929614][T11175] usb 8-1: usb_control_msg returned -32 [ 1386.929665][T11175] usbtmc 8-1:16.0: can't read capabilities [ 1387.665465][T14963] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 1387.783513][ T5119] Bluetooth: hci2: command tx timeout [ 1388.281821][T14969] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2280'. [ 1388.415302][T14961] netdevsim netdevsim5: Direct firmware load for . failed with error -2 [ 1388.415331][T14961] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1388.473707][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2280'. [ 1388.509623][T14967] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2280'. [ 1388.785086][ T69] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1388.785109][ T69] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.005067][T14926] chnl_net:caif_netlink_parms(): no params data found [ 1389.153481][ T6131] usb 8-1: USB disconnect, device number 39 [ 1389.237197][T14989] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1389.237227][T14989] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1389.239467][T14989] vhci_hcd vhci_hcd.0: Device attached [ 1389.278722][T14990] vhci_hcd: connection closed [ 1389.279753][T14600] vhci_hcd vhci_hcd.7: stop threads [ 1389.279777][T14600] vhci_hcd vhci_hcd.7: release socket [ 1389.279813][T14600] vhci_hcd vhci_hcd.7: disconnect device [ 1389.332993][ T69] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1389.333015][ T69] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.361063][ T6848] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1389.544392][ T6848] usb 6-1: config 0 has an invalid interface number: 120 but max is 0 [ 1389.544420][ T6848] usb 6-1: config 0 has no interface number 0 [ 1389.544465][ T6848] usb 6-1: config 0 interface 120 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1389.544509][ T6848] usb 6-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 1389.544533][ T6848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.861420][ T5119] Bluetooth: hci2: command tx timeout [ 1390.196232][ T6848] usb 6-1: config 0 descriptor?? [ 1390.364218][T15002] netdevsim netdevsim7: Direct firmware load for . failed with error -2 [ 1390.364245][T15002] netdevsim netdevsim7: Falling back to sysfs fallback for: . [ 1390.408011][ T6848] usb 6-1: USB disconnect, device number 18 [ 1390.959185][ T69] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1390.959220][ T69] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.075940][T15017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1391.117538][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1391.137323][ T43] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.138813][ T43] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.138853][ T43] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.138888][ T43] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1391.142376][T15014] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2294'. [ 1391.512143][ T69] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.512178][ T69] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.625263][T15032] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1391.625291][T15032] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1391.627561][T15032] vhci_hcd vhci_hcd.0: Device attached [ 1391.664672][T15033] vhci_hcd: connection closed [ 1391.664855][ T43] vhci_hcd vhci_hcd.7: stop threads [ 1391.664878][ T43] vhci_hcd vhci_hcd.7: release socket [ 1391.664913][ T43] vhci_hcd vhci_hcd.7: disconnect device [ 1391.671083][ T6848] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1391.821043][ T6848] usb 6-1: Using ep0 maxpacket: 8 [ 1391.824095][ T6848] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1391.824152][ T6848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1391.824175][ T6848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1391.824200][ T6848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1391.824225][ T6848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1391.824267][ T6848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1391.824291][ T6848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.014682][ T5119] Bluetooth: hci2: command tx timeout [ 1392.053653][ T6848] usb 6-1: usb_control_msg returned -32 [ 1392.053703][ T6848] usbtmc 6-1:16.0: can't read capabilities [ 1392.083178][T14926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1392.085006][T14926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1392.085336][T14926] bridge_slave_0: entered allmulticast mode [ 1392.087890][T14926] bridge_slave_0: entered promiscuous mode [ 1392.881539][T14926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.881735][T14926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.882001][T14926] bridge_slave_1: entered allmulticast mode [ 1392.884612][T14926] bridge_slave_1: entered promiscuous mode [ 1393.339377][T15055] usbtmc 6-1:16.0: usb_control_msg returned -32 [ 1393.377977][T14926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1393.445843][T15053] netdevsim netdevsim8: Direct firmware load for . failed with error -2 [ 1393.445974][T15053] netdevsim netdevsim8: Falling back to sysfs fallback for: . [ 1394.113619][T10523] Bluetooth: hci2: command tx timeout [ 1394.155698][ T999] Bluetooth: hci0: Frame reassembly failed (-84) [ 1394.207746][T14926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1394.359515][T15059] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2306'. [ 1394.440200][T13900] usb 6-1: USB disconnect, device number 19 [ 1395.724498][T15067] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1395.724525][T15067] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1395.724703][T15067] vhci_hcd vhci_hcd.0: Device attached [ 1395.751582][T15068] vhci_hcd: connection closed [ 1395.751984][ T43] vhci_hcd vhci_hcd.8: stop threads [ 1395.752005][ T43] vhci_hcd vhci_hcd.8: release socket [ 1395.752040][ T43] vhci_hcd vhci_hcd.8: disconnect device [ 1395.758515][T14926] team0: Port device team_slave_0 added [ 1395.835389][T14926] team0: Port device team_slave_1 added [ 1395.861304][ T5119] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1396.407649][T14926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1396.407664][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.407686][T14926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1396.430662][T14926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1396.430678][T14926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1396.430703][T14926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1396.493268][ T69] bridge_slave_1: left allmulticast mode [ 1396.493295][ T69] bridge_slave_1: left promiscuous mode [ 1396.494714][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.672140][ T69] bridge_slave_0: left allmulticast mode [ 1396.672168][ T69] bridge_slave_0: left promiscuous mode [ 1396.672391][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.811065][ T5892] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1399.961112][ T5892] usb 8-1: Using ep0 maxpacket: 8 [ 1399.978154][ T5892] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1399.978210][ T5892] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1399.978223][ T5892] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1399.978236][ T5892] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1399.978249][ T5892] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1399.978278][ T5892] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1399.978290][ T5892] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1400.210081][ T5892] usb 8-1: usb_control_msg returned -32 [ 1400.210111][ T5892] usbtmc 8-1:16.0: can't read capabilities [ 1400.921674][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1400.981834][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.992080][T15102] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 1401.013381][ T69] bond0 (unregistering): Released all slaves [ 1401.134335][T15087] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 1401.134362][T15087] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1401.143027][ T9] usb 8-1: USB disconnect, device number 40 [ 1401.293462][T15105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2319'. [ 1404.639684][T14926] hsr_slave_0: entered promiscuous mode [ 1404.664258][T14926] hsr_slave_1: entered promiscuous mode [ 1404.665342][T14926] debugfs: 'hsr0' already exists in 'hsr' [ 1404.665368][T14926] Cannot create hsr debugfs directory [ 1405.835598][ T69] hsr_slave_0: left promiscuous mode [ 1405.884062][ T69] hsr_slave_1: left promiscuous mode [ 1405.895825][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.895852][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1408.827609][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1408.827631][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1409.250672][ T69] veth1_macvtap: left promiscuous mode [ 1409.250776][ T69] veth0_macvtap: left promiscuous mode [ 1409.267101][ T69] veth1_vlan: left promiscuous mode [ 1409.267284][ T69] veth0_vlan: left promiscuous mode [ 1413.262586][T15186] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2332'. [ 1413.411036][ T6848] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1413.602543][ T6848] usb 6-1: Using ep0 maxpacket: 8 [ 1413.604833][ T6848] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1413.604889][ T6848] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1413.604913][ T6848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1413.604939][ T6848] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1413.604963][ T6848] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1413.605005][ T6848] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1413.605034][ T6848] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1413.918603][ T6848] usb 6-1: usb_control_msg returned -32 [ 1413.918648][ T6848] usbtmc 6-1:16.0: can't read capabilities [ 1416.276924][ T5955] usb 6-1: USB disconnect, device number 20 [ 1419.622020][ T69] team0 (unregistering): Port device team_slave_1 removed [ 1421.231899][ T69] team0 (unregistering): Port device team_slave_0 removed [ 1421.282545][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1421.298041][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1421.305865][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1421.311791][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1421.313310][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1422.318677][ T57] Bluetooth: hci6: Frame reassembly failed (-84) [ 1422.989414][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.096707][T10523] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1423.116956][T10523] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1423.118486][T10523] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1423.119557][T10523] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1423.120289][T10523] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1423.411087][T10523] Bluetooth: hci0: command tx timeout [ 1424.261298][ T5814] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1425.221045][T10523] Bluetooth: hci7: command tx timeout [ 1425.484237][T10523] Bluetooth: hci0: command tx timeout [ 1426.007552][T14262] Bluetooth: hci5: Frame reassembly failed (-84) [ 1427.313328][ T5814] Bluetooth: hci7: command tx timeout [ 1427.551792][ T5814] Bluetooth: hci0: command tx timeout [ 1427.943591][T15256] kvm_intel: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x68ce [ 1427.947648][T15256] kvm_pr_unimpl_wrmsr: 4 callbacks suppressed [ 1427.947659][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x298e [ 1427.947689][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0x298f [ 1427.947899][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf183 [ 1427.947928][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xf184 [ 1427.949193][T15256] kvm_intel: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xa1ef [ 1427.954069][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xf237 [ 1427.954115][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xf238 [ 1427.957432][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x89c7 [ 1427.957478][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x186) = 0x89c8 [ 1427.959942][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xb23b [ 1427.959988][T15256] kvm: kvm [15255]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xb23c [ 1427.969584][T15256] kvm_intel: kvm [15255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x606a [ 1428.031173][T10523] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1429.516061][ T5814] Bluetooth: hci7: command tx timeout [ 1429.638334][ T5814] Bluetooth: hci0: command tx timeout [ 1431.541604][ T5814] Bluetooth: hci7: command tx timeout [ 1434.334998][T15292] cifs: Unknown parameter 'mode' [ 1434.335061][T15292] CIFS mount error: No usable UNC path provided in device string! [ 1434.335061][T15292] [ 1434.335099][T15292] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1436.089836][T15306] hugetlbfs: Bad value 'ßø' for mount option 'size' [ 1436.089836][T15306] [ 1438.495545][ T8224] Bluetooth: hci1: Frame reassembly failed (-84) [ 1440.088160][ T69] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1440.088183][ T69] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1440.136567][T15230] chnl_net:caif_netlink_parms(): no params data found [ 1440.252780][T15220] chnl_net:caif_netlink_parms(): no params data found [ 1441.373237][T10523] Bluetooth: hci1: command 0x1003 tx timeout [ 1441.375776][ T5814] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 1441.714576][ T69] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1441.714611][ T69] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1442.633243][T15366] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 1442.634294][T15366] cramfs: wrong magic [ 1443.334824][ T69] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1443.334847][ T69] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.826276][T10523] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1445.856760][T10523] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1445.873092][T10523] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1445.874666][T10523] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1445.879813][T10523] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1447.941234][T10523] Bluetooth: hci1: command tx timeout [ 1450.021045][T10523] Bluetooth: hci1: command tx timeout [ 1452.101006][T10523] Bluetooth: hci1: command tx timeout [ 1454.181291][T10523] Bluetooth: hci1: command tx timeout [ 1456.899090][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1456.929545][ T5814] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1456.941474][ T5814] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1456.943195][ T5814] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1456.949604][ T5814] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1458.857979][T10523] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1458.875919][T10523] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1458.878218][T10523] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1458.879498][T10523] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1458.917307][T10523] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1459.061052][ T5814] Bluetooth: hci5: command tx timeout [ 1460.981217][ T5814] Bluetooth: hci6: command tx timeout [ 1461.141125][ T5814] Bluetooth: hci5: command tx timeout [ 1463.060954][ T5814] Bluetooth: hci6: command tx timeout [ 1463.222564][ T5814] Bluetooth: hci5: command tx timeout [ 1465.141018][ T5814] Bluetooth: hci6: command tx timeout [ 1465.300978][ T5814] Bluetooth: hci5: command tx timeout [ 1467.221143][ T5814] Bluetooth: hci6: command tx timeout [ 1481.517733][T10523] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1481.535620][T10523] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1481.536983][T10523] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1481.539974][T10523] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1481.565971][T10523] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1483.357272][ T5814] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1483.375200][ T5814] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1483.380698][ T5814] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1483.399625][ T5814] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1483.408246][ T5814] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1483.621355][ T5814] Bluetooth: hci8: command tx timeout [ 1484.433296][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.460998][ T5814] Bluetooth: hci9: command tx timeout [ 1485.702711][T10523] Bluetooth: hci8: command tx timeout [ 1487.541137][ T5814] Bluetooth: hci9: command tx timeout [ 1487.781400][ T5814] Bluetooth: hci8: command tx timeout [ 1489.620968][ T5814] Bluetooth: hci9: command tx timeout [ 1489.861245][ T5814] Bluetooth: hci8: command tx timeout [ 1491.700983][ T5814] Bluetooth: hci9: command tx timeout [ 1506.062282][T10523] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1506.066360][T10523] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1506.085255][T10523] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1506.088207][T10523] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1506.089033][T10523] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1508.181043][T10523] Bluetooth: hci10: command tx timeout [ 1510.260991][T10523] Bluetooth: hci10: command tx timeout [ 1512.351121][T10523] Bluetooth: hci10: command tx timeout [ 1514.421125][T10523] Bluetooth: hci10: command tx timeout [ 1517.938412][ T5814] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1517.963694][ T5814] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1517.984031][ T5814] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1517.985319][ T5814] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1517.986835][ T5814] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1519.392288][T10523] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1519.432140][T10523] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1519.433704][T10523] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1519.434944][T10523] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1519.435760][T10523] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1520.101516][T10523] Bluetooth: hci11: command tx timeout [ 1521.541251][T10523] Bluetooth: hci12: command tx timeout [ 1522.181808][T10523] Bluetooth: hci11: command tx timeout [ 1523.621092][T10523] Bluetooth: hci12: command tx timeout [ 1524.261525][T10523] Bluetooth: hci11: command tx timeout [ 1525.701197][T10523] Bluetooth: hci12: command tx timeout [ 1526.343494][T10523] Bluetooth: hci11: command tx timeout [ 1527.781030][T10523] Bluetooth: hci12: command tx timeout [ 1541.878166][ T5814] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1541.896627][ T5814] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1541.898168][ T5814] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1541.899423][ T5814] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1541.923072][ T5814] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1543.414887][T10523] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1543.433519][T10523] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1543.435016][T10523] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1543.436271][T10523] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1543.437741][T10523] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1544.021170][T10523] Bluetooth: hci13: command tx timeout [ 1545.461007][T10523] Bluetooth: hci14: command tx timeout [ 1545.868410][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.101001][T10523] Bluetooth: hci13: command tx timeout [ 1547.540962][T10523] Bluetooth: hci14: command tx timeout [ 1548.181028][T10523] Bluetooth: hci13: command tx timeout [ 1549.620934][T10523] Bluetooth: hci14: command tx timeout [ 1550.261048][T10523] Bluetooth: hci13: command tx timeout [ 1551.700962][T10523] Bluetooth: hci14: command tx timeout [ 1564.820834][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1564.820853][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P29 [ 1564.820882][ C1] rcu: (detected by 1, t=10502 jiffies, g=84453, q=3632 ncpus=2) [ 1564.820901][ C1] task:ktimers/1 state:R running task stack:22880 pid:29 tgid:29 ppid:2 task_flags:0x4208040 flags:0x00080000 [ 1564.820961][ C1] Call Trace: [ 1564.820973][ C1] [ 1564.820982][ C1] sched_show_task+0x49d/0x630 [ 1564.821009][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1564.821024][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1564.821050][ C1] ? wq_watchdog_touch+0x100/0x160 [ 1564.821066][ C1] print_other_cpu_stall+0xf78/0x1340 [ 1564.821086][ C1] ? __timekeeping_advance+0xc7c/0x10d0 [ 1564.821121][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1564.821162][ C1] rcu_sched_clock_irq+0x9a9/0x1140 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1564.821193][ C1] update_process_times+0x235/0x2d0 [ 1564.821211][ C1] tick_nohz_handler+0x3e9/0x710 [ 1564.821227][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1564.821240][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1564.821251][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1564.821264][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1564.821275][ C1] __hrtimer_run_queues+0x4f6/0xd00 [ 1564.821294][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1564.821303][ C1] ? read_tsc+0x9/0x20 [ 1564.821316][ C1] hrtimer_interrupt+0x45d/0xa90 [ 1564.821339][ C1] __sysvec_apic_timer_interrupt+0x102/0x3e0 [ 1564.821352][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1564.821364][ C1] [ 1564.821368][ C1] [ 1564.821372][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1564.821383][ C1] RIP: 0010:lock_acquire+0x222/0x340 [ 1564.821396][ C1] Code: ff ff ff e8 d0 80 35 09 f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 aa bf 16 10 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 4f 3f 39 09 cc 48 8d 3d a7 d6 41 [ 1564.821405][ C1] RSP: 0018:ffffc90000a3f8e0 EFLAGS: 00000282 [ 1564.821413][ C1] RAX: 44c50bd0e83b0c00 RBX: 0000000000000000 RCX: 0000000000000046 [ 1564.821420][ C1] RDX: 00000000ec1a1bfd RSI: ffffffff8cfe08a2 RDI: ffffffff8b3f5be0 [ 1564.821427][ C1] RBP: ffffffff8ad45021 R08: ffffffff8ad45021 R09: ffffffff8d5ae940 [ 1564.821434][ C1] R10: dffffc0000000000 R11: fffffbfff1db686f R12: 0000000000000002 [ 1564.821441][ C1] R13: ffffffff8d5ae940 R14: 0000000000000000 R15: 0000000000000246 [ 1564.821449][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 1564.821463][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 1564.821481][ C1] rt_spin_lock+0x1dd/0x3e0 [ 1564.821493][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 1564.821506][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 1564.821518][ C1] ? do_raw_spin_lock+0x121/0x290 [ 1564.821529][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1564.821541][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1564.821555][ C1] advance_sched+0xca/0xc90 [ 1564.821569][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1564.821585][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1564.821598][ C1] ? __pfx_advance_sched+0x10/0x10 [ 1564.821610][ C1] __hrtimer_run_queues+0x542/0xd00 [ 1564.821629][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1564.821638][ C1] ? read_tsc+0x9/0x20 [ 1564.821650][ C1] hrtimer_run_softirq+0x1a3/0x2e0 [ 1564.821663][ C1] handle_softirqs+0x1df/0x650 [ 1564.821678][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1564.821689][ C1] run_ktimerd+0x69/0x100 [ 1564.821701][ C1] smpboot_thread_fn+0x542/0xa60 [ 1564.821713][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 1564.821728][ C1] kthread+0x711/0x8a0 [ 1564.821743][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1564.821754][ C1] ? __pfx_kthread+0x10/0x10 [ 1564.821765][ C1] ? rt_spin_unlock+0x150/0x200 [ 1564.821780][ C1] ? rt_spin_unlock+0x161/0x200 [ 1564.821791][ C1] ? __pfx_kthread+0x10/0x10 [ 1564.821804][ C1] ret_from_fork+0x510/0xa50 [ 1564.821816][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1564.821825][ C1] ? __switch_to+0xc9e/0x1480 [ 1564.821841][ C1] ? __pfx_kthread+0x10/0x10 [ 1564.821854][ C1] ret_from_fork_asm+0x1a/0x30 [ 1564.821876][ C1] [ 1566.903659][ T5119] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1566.922809][ T5119] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1566.961366][ T5119] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1566.962728][ T5119] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1567.135079][ T5119] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1568.420928][T10523] Bluetooth: hci1: command 0x0406 tx timeout [ 1569.380981][T10523] Bluetooth: hci15: command tx timeout [ 1571.462053][T10523] Bluetooth: hci15: command tx timeout [ 1573.540945][T10523] Bluetooth: hci15: command tx timeout [ 1575.620935][T10523] Bluetooth: hci15: command tx timeout