last executing test programs: 3m26.211797417s ago: executing program 1 (id=9): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) 3m16.464414718s ago: executing program 1 (id=24): r0 = fsopen(0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={0x0, 0x19c}, 0x1, 0x0, 0x0, 0x4000080}, 0x805) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='sour/8\x19\xd1[\xea\x82\tk\xc4ce', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xc6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\b\x00\x00\x00\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xeeEi|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1KO\x96\xc8ra,\br&\xb55\xea<\xe6\xd3\xaeX\xae\xce\x1fD\x16\x1c\xbc\xfb\xd9\x18-\a\xf6uX\x1f<\x05\xfb\xd26\xeb\xb5\"*\xb3x=\x11$1R2\xd5\x0e\nh\xea\x1b\x1f\xb6T)\xb1{\x85\x16]>B\x9a\xcb$\x9cz`)6\x84I#N\xb4\x10\xfa\xfa\x19\x04=\xbfzL.qy!E\xcb\xfa\x99\xbb\xd5oj.P\x87E', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xe9!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x1, 0x8a}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xcc) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000025300)=""/102392, 0x18ff8) r5 = creat(&(0x7f0000000000)='./file1\x00', 0xf8) r6 = fanotify_init(0xf00, 0x1) fanotify_mark(r6, 0x105, 0x40009975, r5, 0x0) fallocate(r3, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r3, 0x0) 3m15.212195677s ago: executing program 1 (id=26): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) socket(0x10, 0x803, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x600180, 0x0) fcntl$setlease(r0, 0x406, 0x3) fsopen(&(0x7f0000000080)='ext3\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x2e0880, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010100}, {0x2, 0x0, @rand_addr=0x64010100}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8, 0xfffc}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3m14.042556197s ago: executing program 1 (id=29): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0a03"], 0xd) 3m13.523614696s ago: executing program 1 (id=32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) fcntl$getownex(r0, 0x10, 0x0) pipe2$9p(0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7756a5e1, 0x3, 0x0, 0x9, 0x6, 0x9, 0x1, 0x3, 0x1}) vmsplice(r1, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE(r2, 0x4008ae61, &(0x7f00000004c0)={0x2, 0xffffffff}) 3m13.130128391s ago: executing program 4 (id=35): socket$inet6_udp(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x3fd4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioperm(0xa, 0x1, 0xffff) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0x8) mq_open(0x0, 0x800, 0x0, 0x0) 3m12.621269614s ago: executing program 1 (id=36): r0 = fsopen(0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={0x0, 0x19c}, 0x1, 0x0, 0x0, 0x4000080}, 0x805) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='sour/8\x19\xd1[\xea\x82\tk\xc4ce', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xc6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\b\x00\x00\x00\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xeeEi|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1KO\x96\xc8ra,\br&\xb55\xea<\xe6\xd3\xaeX\xae\xce\x1fD\x16\x1c\xbc\xfb\xd9\x18-\a\xf6uX\x1f<\x05\xfb\xd26\xeb\xb5\"*\xb3x=\x11$1R2\xd5\x0e\nh\xea\x1b\x1f\xb6T)\xb1{\x85\x16]>B\x9a\xcb$\x9cz`)6\x84I#N\xb4\x10\xfa\xfa\x19\x04=\xbfzL.qy!E\xcb\xfa\x99\xbb\xd5oj.P\x87E', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xe9!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x1, 0x8a}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xcc) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) 3m9.45387072s ago: executing program 2 (id=42): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create(0xd751) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x1}) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 3m9.140258327s ago: executing program 4 (id=43): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) 3m7.796017078s ago: executing program 4 (id=45): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000200)={0x0, 0x0, 0x9}, 0x8) 3m7.111239522s ago: executing program 4 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) fcntl$getownex(r0, 0x10, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f00000004c0)={0x2, 0xffffffff}) 3m7.048179228s ago: executing program 2 (id=47): setresuid(0x0, 0xee01, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) 3m6.232338307s ago: executing program 4 (id=49): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x0, 0x5}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x0, 0x4, 0x2000000000000000, 0x4000000000000000}, 0x0, 0x0, 0x0) 3m5.586597039s ago: executing program 4 (id=50): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa2240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x0, 0x4) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) 3m4.916304272s ago: executing program 2 (id=51): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) 3m2.960817345s ago: executing program 2 (id=53): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="020114008cdc18000e3580009f000114600003060600ac141414e0000003808a8972bd0b72e4a139697dd2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0ab42"], 0xdd12}], 0x1, 0x0, 0x0, 0x8050}, 0x20040051) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x38, 0x3e, 0x107, 0x70bd2b, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}, @nested={0x8, 0x2, 0x0, 0x1, [@generic="7235ab62"]}, @typed={0xc, 0x7, 0x0, 0x0, @u64=0x100}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2m59.892126877s ago: executing program 0 (id=57): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = epoll_create(0xd751) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0xef19, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x1}) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 2m58.558039512s ago: executing program 0 (id=59): mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x28) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) read$FUSE(r0, 0x0, 0x0) 2m57.910276667s ago: executing program 2 (id=61): setresuid(0x0, 0xee01, 0x0) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) 2m57.770422764s ago: executing program 0 (id=62): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0), 0x402, 0x0) write$vga_arbiter(r0, &(0x7f0000000140), 0xf) 2m57.247307182s ago: executing program 0 (id=64): r0 = syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x101800) ioctl$EVIOCSABS20(r0, 0x401845e0, 0x0) 2m56.844480776s ago: executing program 32 (id=36): r0 = fsopen(0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={0x0, 0x19c}, 0x1, 0x0, 0x0, 0x4000080}, 0x805) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000600)='sour/8\x19\xd1[\xea\x82\tk\xc4ce', &(0x7f00000004c0)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xc6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\b\x00\x00\x00\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xfe!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xeeEi|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1KO\x96\xc8ra,\br&\xb55\xea<\xe6\xd3\xaeX\xae\xce\x1fD\x16\x1c\xbc\xfb\xd9\x18-\a\xf6uX\x1f<\x05\xfb\xd26\xeb\xb5\"*\xb3x=\x11$1R2\xd5\x0e\nh\xea\x1b\x1f\xb6T)\xb1{\x85\x16]>B\x9a\xcb$\x9cz`)6\x84I#N\xb4\x10\xfa\xfa\x19\x04=\xbfzL.qy!E\xcb\xfa\x99\xbb\xd5oj.P\x87E', 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000040)='source', &(0x7f0000000780)='c:::/\x83\xc1\xcfD\xc4AO\x06)\xb03\xfcI\x95w\x96\x9b\xe9\xa6\x1a\x96\xael\x11\xa6\x06\xe3G\xb1\x1d$\xc2;\x8f\xf3\x13\xebB\x93\x94\x01\x8b\x88\xeb\xa3\x01\rx\x86bK&\x13a~\x04/\x18\x14ZM\xcb\xad\x92>\xe5\x01V\xdc\x05#\x13\xe9F\xa0\x1b\xf8\xe12\xe9\x80\x988\xd8?\x86\xe9i\x7f\xa8\xe0c\x94\xc1\xae\x9c\xba\x1c\xfa\xbc\xa8\xbf\xff\xfe\xe9!\x7f2\xf1\xc7P\x80A\x1c2k\xf6}P\x19\xee:i|0\x1c\x13u\xb0I\xaa\xe3\x14\x9a\x1f\x9f(\xd1$\x06\xa8&t&A0\xa7\xef\x9cL\x8e1K', 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) syz_emit_ethernet(0x32, 0x0, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x1, 0x8a}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x3, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0xcc) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000025300)=""/102392, 0x18ff8) 2m56.552871453s ago: executing program 0 (id=67): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x0, 0x0) 2m56.535096474s ago: executing program 2 (id=68): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) 2m55.889063166s ago: executing program 0 (id=70): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x400c000) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x8, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) mount$afs(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000200), 0x11048c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="666c6f636b3ddf8a7269"]) utime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000007280)=""/102397, 0x18ffd}], 0x8, 0xeffffffd, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) pipe(0x0) readv(0xffffffffffffffff, &(0x7f0000000640), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x6, 0x10, 0x0, {0xfffff001, 0x10000, 0x47504a4d, 0x1, 0xb7, 0x0, 0x1, 0x7}}) 2m50.475467068s ago: executing program 3 (id=75): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x2, 0x60b924, 0x25dfdc00, {0x0, 0x0, 0x0, 0x0, {0x2}, {0x5, 0xb}, {0xa, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2400c0e0}, 0x20000091) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0x4dcac099e9802ae0, &(0x7f0000000180)={0xd, 0x1}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) chdir(&(0x7f0000000400)='./file0\x00') semctl$GETZCNT(0x0, 0x2, 0xf, &(0x7f0000000300)=""/127) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='attr/exec\x00') writev(r3, &(0x7f0000000000)=[{0x0}], 0x1) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x884) write$RDMA_USER_CM_CMD_QUERY(r4, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) 2m50.276693816s ago: executing program 33 (id=50): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa2240, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1d) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_clone(0x2180, 0x0, 0xe4, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x15, 0x0, 0x4) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='smaps_rollup\x00') r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, 0x0) 2m48.881550413s ago: executing program 3 (id=77): r0 = syz_open_dev$loop(0x0, 0x12, 0x87c00) setresuid(0x0, 0xee01, 0x0) ioctl$IOC_PR_RESERVE(r0, 0x401070c9, 0x0) 2m48.10295546s ago: executing program 3 (id=78): r0 = socket$nl_route(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7e) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.380836163s ago: executing program 3 (id=79): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0a03"], 0xd) 2m46.605570728s ago: executing program 3 (id=80): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) r2 = epoll_create(0xd751) epoll_pwait(r2, 0x0, 0x0, 0xef19, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x1}) read$FUSE(r0, &(0x7f0000000480)={0x2020}, 0x2020) 2m45.908762461s ago: executing program 3 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r1 = socket(0x1d, 0x2, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x1000}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x40000, 0xe000, 0x5, 0x1c, 0x4d}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f00000001c0)) ioctl$KDSKBLED(r4, 0x4b65, 0x0) 2m40.767047601s ago: executing program 34 (id=68): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000a0000004200000040"], 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x3, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) 2m40.402785673s ago: executing program 35 (id=70): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x400c000) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_WRITE={0x17, 0x48, 0x4007, @fd_index=0x8, 0x22, 0x0, 0x0, 0x6, 0x1}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x63, 0x0, 0x0) r3 = landlock_create_ruleset(0x0, 0x0, 0x0) landlock_restrict_self(r3, 0x0) mount$afs(0x0, &(0x7f0000000280)='.\x00', &(0x7f0000000200), 0x11048c4, &(0x7f00000000c0)=ANY=[@ANYBLOB="666c6f636b3ddf8a7269"]) utime(0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000007280)=""/102397, 0x18ffd}], 0x8, 0xeffffffd, 0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0) pipe(0x0) readv(0xffffffffffffffff, &(0x7f0000000640), 0x0) ioctl$VIDIOC_G_FBUF(0xffffffffffffffff, 0x8030560a, &(0x7f0000000000)={0x6, 0x10, 0x0, {0xfffff001, 0x10000, 0x47504a4d, 0x1, 0xb7, 0x0, 0x1, 0x7}}) 2m29.973327137s ago: executing program 36 (id=81): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socket(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x48000) r1 = socket(0x1d, 0x2, 0x2) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x0) write$uinput_user_dev(r2, &(0x7f0000000ec0)={'syz0\x00', {}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffc, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d52c0], [0x0, 0x0, 0x2, 0xb16, 0x0, 0xffffffcb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xf, 0x1, 0x2, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfefffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf], [0x88000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x20000, 0xfffffffd, 0x2, 0xe, 0x1, 0x0, 0x0, 0x3c63, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4], [0x0, 0xfffffffc, 0xfffffffc, 0xc, 0x6, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x3, 0x2, 0x0, 0xe, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$uinput_user_dev(r2, &(0x7f0000000a40)={'syz1\x00', {}, 0x4d, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff], [0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x800, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8000000, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x6], [0x81, 0x0, 0x5d30, 0x0, 0x0, 0x0, 0xdbc1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1ff]}, 0x45c) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet6(r1, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xc0, 0x0, 0x1000}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_TRANSLATE(r3, 0xc018ae85, &(0x7f0000001280)={0x40000, 0xe000, 0x5, 0x1c, 0x4d}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x36, 0x0, &(0x7f00000001c0)) ioctl$KDSKBLED(r4, 0x4b65, 0x0) 11.241216675s ago: executing program 5 (id=374): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x18, 0x0, &(0x7f0000000200)=[@acquire_done={0x40106309, 0x3}, @exit_looper], 0x0, 0x0, 0x0}) 9.9612337s ago: executing program 6 (id=376): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000002400)={[{0xa, 0xce, 0xfa, 0x5, 0x7, 0x96, 0x9, 0x6, 0x75, 0x0, 0x2, 0x6, 0xffffffff}, {0x15, 0x1, 0x6, 0x2, 0x1, 0x6, 0xbb, 0x6, 0xb, 0x5, 0x4, 0x9, 0x1}, {0x2, 0x1000, 0x8, 0x52, 0x1, 0x2a, 0x6, 0x8, 0xe, 0x40, 0xf4, 0x4, 0x200}], 0x9}) 9.882010439s ago: executing program 5 (id=378): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) gettid() timer_create(0x9, 0x0, &(0x7f0000bbdffc)=0x0) timer_gettime(r3, 0x0) io_pgetevents(0x0, 0xe5, 0x0, 0x0, 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000480)='dns_resolver\x00', 0x0, &(0x7f0000000240), 0x0, r4) 9.754612726s ago: executing program 9 (id=379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa0000000060a0b0400000000000000000200000074000480540001800b0001006e756d67656e000044000280080004400000000408000240000000ff0800014000000016080001400000001008000340000000010800044000000002080002400000000108000340000000011c0001800a00010071756575650000000c00028008000440000000020900010073797a30000000000900020073797a320000000014"], 0xc8}}, 0x0) 9.126068826s ago: executing program 9 (id=380): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000001180)) 8.483887415s ago: executing program 9 (id=381): sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) 8.070582506s ago: executing program 7 (id=382): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c40) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 7.891340235s ago: executing program 9 (id=383): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, 0x0, 0x0) 7.784310073s ago: executing program 8 (id=384): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 7.581012202s ago: executing program 6 (id=385): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000540)}, {&(0x7f0000001400)="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", 0x89b}, {&(0x7f0000000600)="bbc6351d5b17d69316ec14fbebe6d4f456979602ad91ae24f9a1da6834e77a49a31a836afb32294cf8453b100f60525874c6dd34f59950a10b18499cd7", 0x3d}, {&(0x7f0000000680)="cc18101d6bec7dadde", 0x9}, {&(0x7f00000006c0)}, {0x0}], 0x6}, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000540)={0x0, 0x5c, "3dc3a18f60a038927bd526b8e8bd8ebc207869bb830be27d3d0d6bbcd9316dcd74e1d3b550d8f3888d704fe61fd9a4f20c6c1c78f3a33f8cf84e8c5df2984b5e0ba2f0ecfc8245f6f298ac4b221425630b0163e529c9ae3195ce5d30"}, &(0x7f0000000700)=0x64) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 7.142656512s ago: executing program 9 (id=386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x11e, 0x11, 0x0, 0x0) 7.024346259s ago: executing program 7 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000140)={0x0, 0xcf, 0x9e, 0x1, 0x6}) fcntl$lock(r5, 0x6, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r6, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) 6.02507069s ago: executing program 6 (id=388): syz_emit_ethernet(0x6e, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x11, 0x4, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x1b, 0x0, [{0x0, 0x5, "4eb8a6"}, {0x0, 0x10, "9606053d0006ff00800000b61af9"}]}, @lsrr={0x83, 0xf, 0x0, [@loopback, @loopback, @multicast2]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) 5.45852975s ago: executing program 7 (id=389): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'pimreg\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={r6, &(0x7f0000000300)="989f850dd518", &(0x7f00000005c0)=""/104}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000100)=0x1, 0x12) 5.147528397s ago: executing program 8 (id=390): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000aa0000000060a0b0400000000000000000200000074000480540001800b0001006e756d67656e000044000280080004400000000408000240000000ff0800014000000016080001400000001008000340000000010800044000000002080002400000000108000340000000011c0001800a00010071756575650000000c00028008000440000000020900010073797a30000000000900020073797a320000000014"], 0xc8}}, 0x0) 5.119762997s ago: executing program 6 (id=391): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002f40)=[{{&(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10, 0x0}}], 0x1, 0x0) r0 = socket(0x2, 0x80805, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000005c0)={r1, 0x5}, 0x8) 4.559134109s ago: executing program 6 (id=392): socket$inet6_sctp(0xa, 0x5, 0x84) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0xc001) unshare(0x6a040000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, 0x0, 0x2000c000) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 4.034835238s ago: executing program 5 (id=393): io_setup(0x3, &(0x7f0000000040)=0x0) r1 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0) io_submit(r0, 0x1, &(0x7f0000001700)=[0x0]) 3.938001767s ago: executing program 8 (id=394): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000003a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000400)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0x4, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000001, 0x56}, @timestamp={0x8, 0xa, 0x10000, 0xffffffff}, @window={0x3, 0x3, 0x5}, @sack={0x5, 0xa, [0x5, 0x1]}, @timestamp={0x8, 0xa, 0xee, 0x500000}, @sack={0x5, 0x16, [0x5, 0xfffff000, 0x9, 0xd, 0x80000001]}]}}}}}}}, 0x0) 3.652547441s ago: executing program 7 (id=395): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = io_uring_setup(0x5101, &(0x7f00000000c0)={0x0, 0x4, 0x3000}) io_uring_enter(r0, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) 3.182521793s ago: executing program 8 (id=396): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x10, 0x110, 0x1, "dc"}], 0x10}, 0x0) 3.182198128s ago: executing program 5 (id=397): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0xc0c40) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 2.628443427s ago: executing program 9 (id=398): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$tun(0xffffffffffffffff, &(0x7f0000000000)={@val={0x0, 0x886c}, @void, @eth={@random="000000f400", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@llc_tr={0x11, {@llc={0xaa, 0xe, "d8"}}}}}}, 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r4, 0x0, 0x0, 0x0, 0x4}, 0x50) gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000000)={0x44, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x18, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}}, 0x10004000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r8, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r9 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r9, 0xc0845657, &(0x7f00000002c0)={0x0, @reserved}) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r10, 0x8982, &(0x7f0000000080)={0x7, 'syz_tun\x00', {0x7fff}, 0x2}) remap_file_pages(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2800000, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r10) getsockname$packet(r10, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x6001}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r11}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x44}}, 0x40848c0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x19, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711811000000000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.496127167s ago: executing program 7 (id=399): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) 2.376076268s ago: executing program 6 (id=400): socket$vsock_stream(0x28, 0x1, 0x0) getrlimit(0x1d, 0x0) r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000c40)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x180c}}, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a0900000000000000001d020000000900010073797a30000000000900030073797a32"], 0x54}}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000100)={0x1, 0x6d, 0x2, &(0x7f0000000240)={0xa1, "1a9c66bf2f615e427b2644e953449f6c12f206b2855cd8c82b1b9951cf5a1dee93"}}) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000200)={@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffe, "a1e96e2678b0afa605953ab4536f70c05f8f3c96fc304c0472ec0a7f01a413b4", 0x1, 0x848, 0xff, 0x10001}, 0x3c) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f00000002c0)={0xfffff679, 0x6, 0x5, 0x1, 0x6, "b0cfc518474653f921e31ed71453439c21edd0", 0xfffffffa, 0xc}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40) 2.290522442s ago: executing program 8 (id=401): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x235, 0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) io_uring_enter(r2, 0x234f, 0x2d59, 0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0205710, &(0x7f0000000140)={0x0, 0xcf, 0x9e, 0x1, 0x6}) fcntl$lock(r5, 0x6, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r6, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f00000003c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, 0x0) 1.954704995s ago: executing program 5 (id=402): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be00442c", @ANYBLOB="34907a2b9719504bd49e509a020f787e39c0232be43e1745ed2301773fddd9d84a55e0c411"], 0xfdef) 337.401803ms ago: executing program 8 (id=403): r0 = syz_usb_connect(0x0, 0x202, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x2, 'Vx'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) 237.203734ms ago: executing program 7 (id=404): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES16], 0x0) 0s ago: executing program 5 (id=405): socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0x5) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.173' (ED25519) to the list of known hosts. [ 154.273886][ T5757] cgroup: Unknown subsys name 'net' [ 154.380460][ T5757] cgroup: Unknown subsys name 'cpuset' [ 154.396990][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.977612][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.231667][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.248755][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.257655][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.266196][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.275243][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.286647][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.298201][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 164.319755][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.339187][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.346971][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 164.355334][ T5781] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.366066][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 164.375959][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.405016][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 164.434860][ T5071] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 164.443626][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 164.459473][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 164.478745][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 164.500433][ T5791] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 164.508999][ T5791] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 164.518973][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 164.528817][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 164.536498][ T5791] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 164.552515][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 164.569152][ T5791] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 165.744234][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 165.846209][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 166.021230][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 166.255651][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 166.438250][ T5791] Bluetooth: hci0: command tx timeout [ 166.438285][ T5781] Bluetooth: hci1: command tx timeout [ 166.498279][ T5791] Bluetooth: hci3: command tx timeout [ 166.578167][ T5791] Bluetooth: hci2: command tx timeout [ 166.658201][ T5791] Bluetooth: hci4: command tx timeout [ 166.736577][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.744554][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.752468][ T5776] bridge_slave_0: entered allmulticast mode [ 166.760707][ T5776] bridge_slave_0: entered promiscuous mode [ 166.778543][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.786005][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.808631][ T5777] bridge_slave_0: entered allmulticast mode [ 166.829332][ T5777] bridge_slave_0: entered promiscuous mode [ 166.872616][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.880465][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.890146][ T5776] bridge_slave_1: entered allmulticast mode [ 166.899991][ T5776] bridge_slave_1: entered promiscuous mode [ 166.910844][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.918888][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.926390][ T5777] bridge_slave_1: entered allmulticast mode [ 166.935293][ T5777] bridge_slave_1: entered promiscuous mode [ 166.944966][ T5792] chnl_net:caif_netlink_parms(): no params data found [ 167.187688][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.197587][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.205679][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.213271][ T5784] bridge_slave_0: entered allmulticast mode [ 167.221807][ T5784] bridge_slave_0: entered promiscuous mode [ 167.261689][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.303327][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.346520][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.355101][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.364145][ T5784] bridge_slave_1: entered allmulticast mode [ 167.374255][ T5784] bridge_slave_1: entered promiscuous mode [ 167.384718][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.395342][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.403890][ T5778] bridge_slave_0: entered allmulticast mode [ 167.413486][ T5778] bridge_slave_0: entered promiscuous mode [ 167.430902][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.497631][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.505529][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.514221][ T5778] bridge_slave_1: entered allmulticast mode [ 167.524853][ T5778] bridge_slave_1: entered promiscuous mode [ 167.582218][ T5776] team0: Port device team_slave_0 added [ 167.710692][ T5777] team0: Port device team_slave_0 added [ 167.726434][ T5776] team0: Port device team_slave_1 added [ 167.741046][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.769600][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.786216][ T5777] team0: Port device team_slave_1 added [ 167.855778][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.872654][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.958738][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.965839][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 167.993488][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.098758][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.105832][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.131957][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.167680][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.175071][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.202215][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.275805][ T5792] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.283435][ T5792] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.291190][ T5792] bridge_slave_0: entered allmulticast mode [ 168.299589][ T5792] bridge_slave_0: entered promiscuous mode [ 168.311740][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.319265][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.347438][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.365775][ T5784] team0: Port device team_slave_0 added [ 168.379302][ T5778] team0: Port device team_slave_0 added [ 168.389549][ T5792] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.397098][ T5792] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.404912][ T5792] bridge_slave_1: entered allmulticast mode [ 168.413223][ T5792] bridge_slave_1: entered promiscuous mode [ 168.445500][ T5784] team0: Port device team_slave_1 added [ 168.457222][ T5778] team0: Port device team_slave_1 added [ 168.498151][ T5791] Bluetooth: hci0: command tx timeout [ 168.498490][ T5781] Bluetooth: hci1: command tx timeout [ 168.574738][ T5792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.584152][ T5781] Bluetooth: hci3: command tx timeout [ 168.633409][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.640590][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.666931][ T5781] Bluetooth: hci2: command tx timeout [ 168.667074][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.689901][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.696917][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.723816][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.738353][ T5781] Bluetooth: hci4: command tx timeout [ 168.744467][ T5792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.884249][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.891831][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.918383][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.951069][ T5777] hsr_slave_0: entered promiscuous mode [ 168.959932][ T5777] hsr_slave_1: entered promiscuous mode [ 169.010031][ T5776] hsr_slave_0: entered promiscuous mode [ 169.018546][ T5776] hsr_slave_1: entered promiscuous mode [ 169.026027][ T5776] debugfs: 'hsr0' already exists in 'hsr' [ 169.032206][ T5776] Cannot create hsr debugfs directory [ 169.044407][ T5792] team0: Port device team_slave_0 added [ 169.052596][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.061351][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.087622][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.170163][ T5792] team0: Port device team_slave_1 added [ 169.315358][ T5778] hsr_slave_0: entered promiscuous mode [ 169.323659][ T5778] hsr_slave_1: entered promiscuous mode [ 169.331563][ T5778] debugfs: 'hsr0' already exists in 'hsr' [ 169.337372][ T5778] Cannot create hsr debugfs directory [ 169.386799][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.394186][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.420588][ T5792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.486793][ T5792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.494329][ T5792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.520961][ T5792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.713555][ T5784] hsr_slave_0: entered promiscuous mode [ 169.721901][ T5784] hsr_slave_1: entered promiscuous mode [ 169.729929][ T5784] debugfs: 'hsr0' already exists in 'hsr' [ 169.735747][ T5784] Cannot create hsr debugfs directory [ 170.106177][ T5792] hsr_slave_0: entered promiscuous mode [ 170.114710][ T5792] hsr_slave_1: entered promiscuous mode [ 170.122720][ T5792] debugfs: 'hsr0' already exists in 'hsr' [ 170.128604][ T5792] Cannot create hsr debugfs directory [ 170.578518][ T5791] Bluetooth: hci0: command tx timeout [ 170.578729][ T5781] Bluetooth: hci1: command tx timeout [ 170.658190][ T5781] Bluetooth: hci3: command tx timeout [ 170.713039][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.738558][ T5781] Bluetooth: hci2: command tx timeout [ 170.750451][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.792960][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 170.824418][ T5781] Bluetooth: hci4: command tx timeout [ 170.846518][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.022008][ T5776] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.047076][ T5776] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.082439][ T5776] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.113615][ T5776] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.252112][ T5784] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.283861][ T5784] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.339978][ T5784] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.360117][ T5784] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.604772][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 171.623739][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 171.642685][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 171.667050][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 171.909626][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.996923][ T5792] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.046329][ T5792] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.076752][ T5792] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.124658][ T5792] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.195888][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.297284][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.304823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.364242][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.371592][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.396910][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.532770][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.642543][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.649994][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.659781][ T5781] Bluetooth: hci0: command tx timeout [ 172.660661][ T5791] Bluetooth: hci1: command tx timeout [ 172.707187][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.714537][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.739869][ T5791] Bluetooth: hci3: command tx timeout [ 172.772574][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.820355][ T5791] Bluetooth: hci2: command tx timeout [ 172.899388][ T5791] Bluetooth: hci4: command tx timeout [ 172.920454][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.995592][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.003125][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.112125][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.119646][ T1031] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.165557][ T5792] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.196838][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.503395][ T5792] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.520821][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.642761][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.650251][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.710000][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.717316][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.762160][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.769766][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.837395][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.844944][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.044721][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.413189][ T5792] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.546032][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.869172][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.060542][ T5777] veth0_vlan: entered promiscuous mode [ 175.293139][ T5776] veth0_vlan: entered promiscuous mode [ 175.440489][ T5777] veth1_vlan: entered promiscuous mode [ 175.561466][ T5776] veth1_vlan: entered promiscuous mode [ 175.595698][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.881616][ T5777] veth0_macvtap: entered promiscuous mode [ 175.935633][ T5777] veth1_macvtap: entered promiscuous mode [ 175.971368][ T5792] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.988054][ T5776] veth0_macvtap: entered promiscuous mode [ 176.063628][ T5776] veth1_macvtap: entered promiscuous mode [ 176.203231][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.236127][ T5778] veth0_vlan: entered promiscuous mode [ 176.323183][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.394256][ T5792] veth0_vlan: entered promiscuous mode [ 176.437464][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.457777][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.466673][ T5778] veth1_vlan: entered promiscuous mode [ 176.486359][ T5792] veth1_vlan: entered promiscuous mode [ 176.496194][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.512723][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.535421][ T5784] veth0_vlan: entered promiscuous mode [ 176.554014][ T57] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.622376][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.709247][ T57] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.723554][ T57] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.737281][ T5784] veth1_vlan: entered promiscuous mode [ 176.801442][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.820898][ T57] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.016905][ T5778] veth0_macvtap: entered promiscuous mode [ 177.065449][ T5792] veth0_macvtap: entered promiscuous mode [ 177.122824][ T5778] veth1_macvtap: entered promiscuous mode [ 177.246889][ T5792] veth1_macvtap: entered promiscuous mode [ 177.394841][ T5784] veth0_macvtap: entered promiscuous mode [ 177.463582][ T5784] veth1_macvtap: entered promiscuous mode [ 177.503597][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.582757][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.646730][ T5792] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.676572][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.785635][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.840635][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.887634][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.907815][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.942293][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.979512][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.033144][ T1132] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.068422][ T1132] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.120591][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.162189][ T1132] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.217016][ T1100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.264148][ T1132] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.298432][ T1132] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.328097][ T1132] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.780233][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.818359][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.020046][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.038619][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.198369][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.206394][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.293382][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.342011][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.784166][ T5777] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 183.424769][ T5963] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 183.531071][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.569138][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.039016][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.056554][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.212892][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.233417][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.510561][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.579335][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.648395][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.656376][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.026020][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.036221][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.701507][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 186.149313][ T5791] Bluetooth: hci2: Invalid connection link type handle 0x00c9 [ 186.428449][ T5765] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 186.598199][ T5765] usb 5-1: Using ep0 maxpacket: 8 [ 186.616693][ T5765] usb 5-1: unable to get BOS descriptor or descriptor too short [ 186.664404][ T5765] usb 5-1: config 12 has an invalid descriptor of length 0, skipping remainder of the config [ 186.685508][ T5765] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 186.751536][ T5765] usb 5-1: config 12 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.798112][ T5765] usb 5-1: config 12 interface 0 has no altsetting 0 [ 186.863783][ T5765] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 186.879873][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.923569][ T5765] usb 5-1: Product: syz [ 186.947770][ T5765] usb 5-1: Manufacturer: syz [ 186.952740][ T5765] usb 5-1: SerialNumber: syz [ 187.597664][ T5765] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 187.621553][ T5765] usb 5-1: selecting invalid altsetting 0 [ 188.391478][ T5765] usb 5-1: USB disconnect, device number 2 [ 188.874025][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 189.008162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 189.333381][ T5992] udevd[5992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.388230][ T5405] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 190.588326][ T5405] usb 1-1: Using ep0 maxpacket: 32 [ 190.644839][ T5405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.708560][ T5405] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.779697][ T5405] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 190.810361][ T5405] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.825171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 190.877631][ T5405] usb 1-1: config 0 descriptor?? [ 191.170362][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 191.238051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 191.589430][ T5405] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 191.622031][ T5405] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 191.725512][ T5405] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 191.842974][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 191.938110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 192.286665][ T5405] usb 1-1: USB disconnect, device number 2 [ 192.393750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 192.538457][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 193.268330][ T5405] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 193.489798][ T5405] usb 3-1: Using ep0 maxpacket: 8 [ 193.504333][ T5405] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 193.562471][ T5405] usb 3-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 193.589872][ T5405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.678530][ T5405] usb 3-1: config 0 descriptor?? [ 194.260023][ T5405] logitech 0003:046D:C24F.0002: item fetching failed at offset 3/5 [ 194.373692][ T5405] logitech 0003:046D:C24F.0002: parse failed [ 194.421576][ T5405] logitech 0003:046D:C24F.0002: probe with driver logitech failed with error -22 [ 194.494882][ T5405] usb 3-1: USB disconnect, device number 2 [ 194.518269][ T5921] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 194.764227][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.809074][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.842901][ T5921] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 194.858192][ T39] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 194.887225][ T5921] usb 1-1: New USB device found, idVendor=0c70, idProduct=f012, bcdDevice= 0.00 [ 194.909334][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.943087][ T5921] usb 1-1: config 0 descriptor?? [ 195.135817][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.182451][ T39] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 195.260234][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.364152][ T39] usb 4-1: config 0 descriptor?? [ 195.488663][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.496907][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.562747][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.657435][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.692894][ T39] usbhid 4-1:0.0: can't add hid device: -71 [ 195.707358][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.756895][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.771099][ T39] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 195.810412][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 195.848309][ T39] usb 4-1: USB disconnect, device number 2 [ 195.858645][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: unknown main item tag 0x0 [ 196.006782][ T5921] aquacomputer_d5next 0003:0C70:F012.0003: hidraw0: USB HID v0.00 Device [HID 0c70:f012] on usb-dummy_hcd.0-1/input0 [ 196.243020][ T5921] usb 1-1: USB disconnect, device number 3 [ 196.294207][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 196.608154][ T39] usb 4-1: Using ep0 maxpacket: 16 [ 196.639301][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.705046][ T39] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 196.771149][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.813802][ T6025] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 196.928632][ T39] usb 4-1: config 0 descriptor?? [ 197.124955][ T6023] fido_id[6023]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 197.348489][ T5765] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 197.500679][ T39] kye 0003:0458:5016.0004: control desc unexpectedly large [ 197.558556][ T5765] usb 3-1: Using ep0 maxpacket: 32 [ 197.606265][ T39] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0004/input/input5 [ 197.608290][ T5765] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 197.689732][ T5765] usb 3-1: config 0 has no interface number 0 [ 197.735547][ T5765] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 197.789216][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.819973][ T39] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.0004/input/input6 [ 197.848338][ T5765] usb 3-1: Product: syz [ 197.852867][ T5765] usb 3-1: Manufacturer: syz [ 197.857610][ T5765] usb 3-1: SerialNumber: syz [ 198.031957][ T5765] usb 3-1: config 0 descriptor?? [ 198.148244][ T39] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0 [ 198.442095][ T5765] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 198.479242][ T39] usb 4-1: USB disconnect, device number 3 [ 198.618488][ T5765] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 198.789471][ T5765] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 198.874230][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 198.940477][ T5765] usb 3-1: USB disconnect, device number 3 [ 199.007164][ T5765] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 199.179188][ T5765] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 199.208837][ T6035] fido_id[6035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 199.261534][ T5765] quatech2 3-1:0.51: device disconnected [ 199.653926][ T6041] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 199.691957][ T6041] Bluetooth: MGMT ver 1.23 [ 200.552398][ T39] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.759374][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 200.773840][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 200.816081][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 200.826645][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.875580][ T39] usb 4-1: config 0 descriptor?? [ 201.337518][ T39] logitech 0003:046D:C24F.0005: item fetching failed at offset 3/5 [ 201.395986][ T39] logitech 0003:046D:C24F.0005: parse failed [ 201.431649][ T39] logitech 0003:046D:C24F.0005: probe with driver logitech failed with error -22 [ 201.564555][ T39] usb 4-1: USB disconnect, device number 4 [ 203.228249][ T39] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 203.448469][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 203.495938][ T39] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 203.535306][ T39] usb 4-1: config 0 has no interface number 0 [ 203.629551][ T39] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 203.676103][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.738654][ T39] usb 4-1: Product: syz [ 203.744116][ T39] usb 4-1: Manufacturer: syz [ 203.763954][ T39] usb 4-1: SerialNumber: syz [ 203.811103][ T39] usb 4-1: config 0 descriptor?? [ 203.868754][ T39] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 203.957267][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.977877][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.243100][ T39] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 204.350451][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 204.465723][ T39] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 204.558763][ T39] usb 4-1: USB disconnect, device number 5 [ 204.610867][ T39] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 204.740410][ T39] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 204.831236][ T39] quatech2 4-1:0.51: device disconnected [ 207.760750][ T5765] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 207.949011][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 207.987193][ T5765] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 208.018889][ T5765] usb 1-1: config 0 has no interface number 0 [ 208.056903][ T5765] usb 1-1: config 0 interface 132 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.148447][ T5765] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 208.182506][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.201810][ T5765] usb 1-1: Product: syz [ 208.206156][ T5765] usb 1-1: Manufacturer: syz [ 208.213259][ T5765] usb 1-1: SerialNumber: syz [ 208.254371][ T5765] usb 1-1: config 0 descriptor?? [ 208.331302][ T6098] binder: 6097:6098 ioctl 4018620d 0 returned -22 [ 210.745277][ T5921] usb 1-1: USB disconnect, device number 4 [ 212.178511][ T5921] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 212.361696][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 212.392571][ T5921] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 212.412098][ T5921] usb 4-1: config 0 has no interface number 0 [ 212.478298][ T5921] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 212.495685][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.518261][ T5921] usb 4-1: Product: syz [ 212.530736][ T5921] usb 4-1: Manufacturer: syz [ 212.547266][ T5921] usb 4-1: SerialNumber: syz [ 212.590895][ T5921] usb 4-1: config 0 descriptor?? [ 212.642035][ T5921] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 212.928082][ T5765] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 212.965734][ T5921] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 213.028177][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 213.102677][ T5921] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 213.201423][ T5921] usb 4-1: USB disconnect, device number 6 [ 213.208804][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 213.265846][ T5921] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 213.286910][ T5765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.318067][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.335502][ T5921] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 213.358513][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.406352][ T5921] quatech2 4-1:0.51: device disconnected [ 213.418674][ T5765] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.464572][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.510219][ T5765] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.527058][ T5765] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.565147][ T5765] usb 3-1: Manufacturer: syz [ 213.585524][ T5765] usb 3-1: config 0 descriptor?? [ 214.219363][ T5765] rc_core: IR keymap rc-hauppauge not found [ 214.225370][ T5765] Registered IR keymap rc-empty [ 214.288720][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.353234][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.413845][ T5765] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 214.512392][ T5765] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 214.617767][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.731664][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.762663][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.825915][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.873328][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.943217][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 214.978647][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.075223][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.148598][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.193084][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 215.292834][ T5765] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 215.325737][ T5765] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 215.378405][ T5765] usb 3-1: USB disconnect, device number 4 [ 216.049821][ T6134] overlayfs: missing 'lowerdir' [ 218.455216][ T5781] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 218.489573][ T5781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 218.506391][ T5781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 218.518766][ T6160] ======================================================= [ 218.518766][ T6160] WARNING: The mand mount option has been deprecated and [ 218.518766][ T6160] and is ignored by this kernel. Remove the mand [ 218.518766][ T6160] option from the mount to silence this warning. [ 218.518766][ T6160] ======================================================= [ 218.557497][ T5781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 218.578972][ T5781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 219.425924][ T1031] Bluetooth: (null): Invalid header checksum [ 220.191290][ T6169] syzkaller0: entered promiscuous mode [ 220.204139][ T6169] syzkaller0: entered allmulticast mode [ 220.598634][ T6157] chnl_net:caif_netlink_parms(): no params data found [ 220.658503][ T5781] Bluetooth: hci5: command tx timeout [ 220.847847][ T6173] overlayfs: missing 'lowerdir' [ 222.268258][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.309757][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.317380][ T6157] bridge_slave_0: entered allmulticast mode [ 222.371476][ T6157] bridge_slave_0: entered promiscuous mode [ 222.446038][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.479941][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.501883][ T6157] bridge_slave_1: entered allmulticast mode [ 222.559019][ T6157] bridge_slave_1: entered promiscuous mode [ 222.739176][ T5781] Bluetooth: hci5: command tx timeout [ 222.856314][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.865955][ T6183] netdevsim netdevsim3: Direct firmware load for / [ 222.865955][ T6183] failed with error -2 [ 222.886368][ T6183] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 222.886368][ T6183] [ 223.010129][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.537843][ T6157] team0: Port device team_slave_0 added [ 223.650575][ T6157] team0: Port device team_slave_1 added [ 224.742789][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.818477][ T5781] Bluetooth: hci5: command tx timeout [ 224.841757][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.335947][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.454431][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.625130][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.896642][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.605695][ T5791] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 226.634206][ T5791] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 226.643671][ T5791] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 226.662425][ T5791] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 226.672340][ T5791] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 226.909198][ T5791] Bluetooth: hci5: command tx timeout [ 227.124640][ T6157] hsr_slave_0: entered promiscuous mode [ 227.184786][ T6157] hsr_slave_1: entered promiscuous mode [ 227.293054][ T6157] debugfs: 'hsr0' already exists in 'hsr' [ 227.328298][ T6157] Cannot create hsr debugfs directory [ 228.749093][ T5791] Bluetooth: hci6: command tx timeout [ 229.043465][ T6201] input: syz0 as /devices/virtual/input/input8 [ 230.423765][ T1031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.839214][ T5791] Bluetooth: hci6: command tx timeout [ 230.867413][ T1031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.122958][ T1031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.543635][ T1031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.855931][ T6157] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 231.966763][ T6157] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.240163][ T6157] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.314799][ T6192] chnl_net:caif_netlink_parms(): no params data found [ 232.508122][ T6157] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.912773][ T5791] Bluetooth: hci6: command tx timeout [ 233.887065][ T1031] bridge_slave_1: left allmulticast mode [ 234.022228][ T1031] bridge_slave_1: left promiscuous mode [ 234.128765][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.226569][ T1031] bridge_slave_0: left allmulticast mode [ 234.259668][ T1031] bridge_slave_0: left promiscuous mode [ 234.265839][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.979158][ T5791] Bluetooth: hci6: command tx timeout [ 235.266233][ T5781] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 235.275460][ T5781] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 235.291638][ T5781] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 235.321458][ T5781] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 235.348921][ T5781] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 235.501749][ T5781] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 235.531954][ T5781] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 235.544460][ T5781] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 235.573822][ T5781] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 235.602941][ T5781] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 235.945256][ T1031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.010608][ T1031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.051647][ T1031] bond0 (unregistering): Released all slaves [ 237.458121][ T5781] Bluetooth: hci2: command tx timeout [ 237.709028][ T5781] Bluetooth: hci7: command tx timeout [ 237.948366][ T6192] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.955658][ T6192] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.003849][ T6192] bridge_slave_0: entered allmulticast mode [ 238.044595][ T6192] bridge_slave_0: entered promiscuous mode [ 238.572906][ T6192] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.621022][ T6192] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.681653][ T6192] bridge_slave_1: entered allmulticast mode [ 238.715271][ T6192] bridge_slave_1: entered promiscuous mode [ 239.235006][ T1031] hsr_slave_0: left promiscuous mode [ 239.278910][ T1031] hsr_slave_1: left promiscuous mode [ 239.313805][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.359727][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.450441][ T1031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.496963][ T1031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.538204][ T5781] Bluetooth: hci2: command tx timeout [ 239.639942][ T1031] veth1_macvtap: left promiscuous mode [ 239.645549][ T1031] veth0_macvtap: left promiscuous mode [ 239.702118][ T1031] veth1_vlan: left promiscuous mode [ 239.707540][ T1031] veth0_vlan: left promiscuous mode [ 239.796076][ T5781] Bluetooth: hci7: command tx timeout [ 241.419955][ T1031] team0 (unregistering): Port device team_slave_1 removed [ 241.518347][ T1031] team0 (unregistering): Port device team_slave_0 removed [ 241.618416][ T5781] Bluetooth: hci2: command tx timeout [ 241.868523][ T5781] Bluetooth: hci7: command tx timeout [ 242.422500][ T6192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.663664][ T6192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.106224][ T6192] team0: Port device team_slave_0 added [ 243.149330][ T6192] team0: Port device team_slave_1 added [ 243.285830][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.708183][ T5781] Bluetooth: hci2: command tx timeout [ 243.794408][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.805850][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.832709][ T6192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.938241][ T5781] Bluetooth: hci7: command tx timeout [ 243.949885][ T85] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.054265][ T6192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.061978][ T6192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.128540][ T6192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.298353][ T85] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.402389][ T6157] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.694039][ T85] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.895375][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 244.932639][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 244.944307][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 244.959812][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 244.970198][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 245.312309][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.319861][ T1031] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.392978][ T85] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.450889][ T6213] chnl_net:caif_netlink_parms(): no params data found [ 245.580364][ T6215] chnl_net:caif_netlink_parms(): no params data found [ 245.725491][ T6192] hsr_slave_0: entered promiscuous mode [ 245.749398][ T6192] hsr_slave_1: entered promiscuous mode [ 245.756961][ T6192] debugfs: 'hsr0' already exists in 'hsr' [ 245.774196][ T6192] Cannot create hsr debugfs directory [ 246.412094][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.419431][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.063881][ T5781] Bluetooth: hci0: command tx timeout [ 247.992891][ T6215] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.003185][ T6215] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.011075][ T6215] bridge_slave_0: entered allmulticast mode [ 248.019410][ T6215] bridge_slave_0: entered promiscuous mode [ 248.078817][ T6213] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.086256][ T6213] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.094955][ T6213] bridge_slave_0: entered allmulticast mode [ 248.107109][ T6213] bridge_slave_0: entered promiscuous mode [ 248.143061][ T85] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.182654][ T6215] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.190600][ T6215] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.204426][ T6215] bridge_slave_1: entered allmulticast mode [ 248.212947][ T6215] bridge_slave_1: entered promiscuous mode [ 248.275579][ T6213] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.286653][ T6213] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.294772][ T6213] bridge_slave_1: entered allmulticast mode [ 248.303254][ T6213] bridge_slave_1: entered promiscuous mode [ 248.386798][ T85] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.566957][ T85] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.597082][ T6215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.629286][ T6215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.655555][ T85] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.687326][ T6213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.841950][ T6213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.929129][ T6213] team0: Port device team_slave_0 added [ 248.943124][ T6215] team0: Port device team_slave_0 added [ 249.010331][ T6213] team0: Port device team_slave_1 added [ 249.034296][ T6215] team0: Port device team_slave_1 added [ 249.138260][ T5781] Bluetooth: hci0: command tx timeout [ 249.178213][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.194285][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.220914][ T6215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.304801][ T6192] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 249.326150][ T6215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.334486][ T6215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.361183][ T6215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.461535][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.469196][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.500072][ T6213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.518967][ T6213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.526040][ T6213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 249.554513][ T6213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.567393][ T6192] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 249.794854][ T6192] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 249.899127][ T6215] hsr_slave_0: entered promiscuous mode [ 249.912660][ T6215] hsr_slave_1: entered promiscuous mode [ 249.922822][ T6215] debugfs: 'hsr0' already exists in 'hsr' [ 249.929686][ T6215] Cannot create hsr debugfs directory [ 249.939846][ T6246] chnl_net:caif_netlink_parms(): no params data found [ 249.966284][ T6192] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.189807][ T85] bridge_slave_1: left allmulticast mode [ 250.195645][ T85] bridge_slave_1: left promiscuous mode [ 250.221352][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.246593][ T85] bridge_slave_0: left allmulticast mode [ 250.256912][ T85] bridge_slave_0: left promiscuous mode [ 250.265088][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.284983][ T85] bridge_slave_1: left allmulticast mode [ 250.294753][ T85] bridge_slave_1: left promiscuous mode [ 250.306478][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.334881][ T85] bridge_slave_0: left allmulticast mode [ 250.341602][ T85] bridge_slave_0: left promiscuous mode [ 250.349590][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.788255][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.803334][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.815894][ T85] bond0 (unregistering): Released all slaves [ 251.010674][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.024694][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.046606][ T85] bond0 (unregistering): Released all slaves [ 251.218368][ T5781] Bluetooth: hci0: command tx timeout [ 251.244221][ T6213] hsr_slave_0: entered promiscuous mode [ 251.254037][ T6213] hsr_slave_1: entered promiscuous mode [ 251.262312][ T6213] debugfs: 'hsr0' already exists in 'hsr' [ 251.269733][ T6213] Cannot create hsr debugfs directory [ 252.202597][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.303121][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.319614][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.327314][ T6246] bridge_slave_0: entered allmulticast mode [ 252.351767][ T6246] bridge_slave_0: entered promiscuous mode [ 252.466509][ T85] hsr_slave_0: left promiscuous mode [ 252.474405][ T85] hsr_slave_1: left promiscuous mode [ 252.487297][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.495675][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.510469][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.518375][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.542852][ T85] hsr_slave_0: left promiscuous mode [ 252.550783][ T85] hsr_slave_1: left promiscuous mode [ 252.560317][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.567841][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.586967][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.594870][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.631862][ T85] veth1_macvtap: left promiscuous mode [ 252.637536][ T85] veth0_macvtap: left promiscuous mode [ 252.645118][ T85] veth1_vlan: left promiscuous mode [ 252.651545][ T85] veth0_vlan: left promiscuous mode [ 252.663663][ T85] veth1_macvtap: left promiscuous mode [ 252.669426][ T85] veth0_macvtap: left promiscuous mode [ 252.675244][ T85] veth1_vlan: left promiscuous mode [ 252.681203][ T85] veth0_vlan: left promiscuous mode [ 253.291977][ T85] team0 (unregistering): Port device team_slave_1 removed [ 253.300934][ T5781] Bluetooth: hci0: command tx timeout [ 253.352928][ T85] team0 (unregistering): Port device team_slave_0 removed [ 253.727796][ T85] team0 (unregistering): Port device team_slave_1 removed [ 253.764189][ T85] team0 (unregistering): Port device team_slave_0 removed [ 253.973555][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.981108][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.988850][ T6246] bridge_slave_1: entered allmulticast mode [ 253.997017][ T6246] bridge_slave_1: entered promiscuous mode [ 254.219370][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.316641][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.472799][ T6246] team0: Port device team_slave_0 added [ 254.505541][ T6246] team0: Port device team_slave_1 added [ 254.716170][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.739267][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.773310][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.791828][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.799048][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 254.848522][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.118671][ T6215] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.148874][ T6215] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.246408][ T6246] hsr_slave_0: entered promiscuous mode [ 255.267758][ T6246] hsr_slave_1: entered promiscuous mode [ 255.300777][ T6215] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.371783][ T85] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.447094][ T6215] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.586926][ T85] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.836675][ T6192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.926105][ T85] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.028114][ T6157] veth0_vlan: entered promiscuous mode [ 256.067252][ T6213] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.131602][ T85] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.147452][ T6213] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.210993][ T6213] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.234378][ T6213] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.264490][ T6157] veth1_vlan: entered promiscuous mode [ 256.508940][ T6192] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.700029][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.707372][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.822168][ T85] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.912744][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.920087][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.991387][ T85] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.070454][ T85] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.152886][ T6246] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 257.205964][ T85] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.241264][ T6157] veth0_macvtap: entered promiscuous mode [ 257.262133][ T6246] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 257.333962][ T6157] veth1_macvtap: entered promiscuous mode [ 257.346020][ T6246] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 257.371324][ T6246] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 257.863408][ T85] bridge_slave_1: left allmulticast mode [ 257.869372][ T85] bridge_slave_1: left promiscuous mode [ 257.875769][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.902382][ T85] bridge_slave_0: left allmulticast mode [ 257.909348][ T85] bridge_slave_0: left promiscuous mode [ 257.915743][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.937353][ T85] bridge_slave_1: left allmulticast mode [ 257.945972][ T85] bridge_slave_1: left promiscuous mode [ 257.966783][ T85] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.981812][ T85] bridge_slave_0: left allmulticast mode [ 257.987697][ T85] bridge_slave_0: left promiscuous mode [ 258.000013][ T85] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.393075][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.411193][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.427633][ T85] bond0 (unregistering): Released all slaves [ 258.593677][ T85] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.610191][ T85] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.627086][ T85] bond0 (unregistering): Released all slaves [ 258.657632][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.796155][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.860915][ T6215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.048369][ T1031] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.077438][ T1031] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.260156][ T1031] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.277184][ T1031] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.496218][ T6213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.695812][ T6215] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.825412][ T6213] 8021q: adding VLAN 0 to HW filter on device team0 [ 259.919436][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.926858][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.052960][ T85] hsr_slave_0: left promiscuous mode [ 260.071254][ T85] hsr_slave_1: left promiscuous mode [ 260.091987][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.108102][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.143106][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.155795][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.189268][ T85] hsr_slave_0: left promiscuous mode [ 260.196808][ T85] hsr_slave_1: left promiscuous mode [ 260.223201][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.231035][ T85] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.250619][ T85] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.268131][ T85] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.324709][ T85] veth1_macvtap: left promiscuous mode [ 260.330949][ T85] veth0_macvtap: left promiscuous mode [ 260.336775][ T85] veth1_vlan: left promiscuous mode [ 260.343165][ T85] veth0_vlan: left promiscuous mode [ 260.364871][ T85] veth1_macvtap: left promiscuous mode [ 260.370959][ T85] veth0_macvtap: left promiscuous mode [ 260.376890][ T85] veth1_vlan: left promiscuous mode [ 260.382660][ T85] veth0_vlan: left promiscuous mode [ 261.078034][ T85] team0 (unregistering): Port device team_slave_1 removed [ 261.099192][ T85] team0 (unregistering): Port device team_slave_0 removed [ 261.487201][ T85] team0 (unregistering): Port device team_slave_1 removed [ 261.536422][ T85] team0 (unregistering): Port device team_slave_0 removed [ 261.787972][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.795405][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.823083][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.830580][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.008385][ T6192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.054824][ T1151] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.062496][ T1151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.320775][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.626983][ T6246] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.800448][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.808018][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.903888][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.911394][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.014288][ T6213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.567817][ T6246] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 264.327228][ T6192] veth0_vlan: entered promiscuous mode [ 264.566412][ T6192] veth1_vlan: entered promiscuous mode [ 264.737690][ T6215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.057206][ T6213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.126216][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.142907][ T6192] veth0_macvtap: entered promiscuous mode [ 265.183771][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.352308][ T6192] veth1_macvtap: entered promiscuous mode [ 265.399843][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.406498][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.489526][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.548252][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.556240][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.794094][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.902327][ T6192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.056544][ T1151] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.099667][ T1151] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.147169][ T1151] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.192733][ T1151] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.414775][ T6215] veth0_vlan: entered promiscuous mode [ 267.584497][ T6215] veth1_vlan: entered promiscuous mode [ 268.015310][ T6213] veth0_vlan: entered promiscuous mode [ 268.206514][ T6213] veth1_vlan: entered promiscuous mode [ 268.499006][ T6246] veth0_vlan: entered promiscuous mode [ 268.508487][ T6215] veth0_macvtap: entered promiscuous mode [ 268.681646][ T6215] veth1_macvtap: entered promiscuous mode [ 268.760166][ T6246] veth1_vlan: entered promiscuous mode [ 269.051147][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.074433][ T6213] veth0_macvtap: entered promiscuous mode [ 269.182110][ T6215] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.303247][ T6213] veth1_macvtap: entered promiscuous mode [ 269.407518][ T1132] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.458958][ T1151] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.638322][ T1151] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.650328][ T1151] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.696119][ T6246] veth0_macvtap: entered promiscuous mode [ 269.807391][ T6246] veth1_macvtap: entered promiscuous mode [ 270.022167][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.142075][ T6213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.306191][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.342298][ T1031] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.377650][ T1031] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.393432][ T1031] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.428278][ T1031] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.592476][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.815339][ T57] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.970346][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.991848][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.033578][ T1100] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.279734][ T71] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.677205][ T71] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.964959][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.995412][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.438214][ T5845] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 274.661207][ T5845] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.698270][ T5845] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 274.754355][ T5845] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 274.818638][ T5845] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.870946][ T5845] usb 6-1: config 0 descriptor?? [ 275.406095][ T5845] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0 [ 275.610786][ T5921] usb 6-1: USB disconnect, device number 2 [ 276.041415][ T6486] fido_id[6486]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 277.735376][ T1031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.798667][ T1031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.041887][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.087120][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.516604][ T1031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.594943][ T1031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.012861][ T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.069183][ T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.414712][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.443948][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.822200][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.848083][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.910089][ T6537] overlayfs: missing 'lowerdir' [ 283.109183][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.118490][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.468219][ T5845] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 283.717017][ T5845] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 283.756713][ T5845] usb 7-1: config 0 interface 0 has no altsetting 0 [ 283.813016][ T5845] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 283.854411][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 283.894249][ T5845] usb 7-1: Product: syz [ 283.923840][ T5845] usb 7-1: Manufacturer: syz [ 283.952442][ T5845] usb 7-1: SerialNumber: syz [ 284.010882][ T5845] usb 7-1: config 0 descriptor?? [ 284.114498][ T5845] usb 7-1: selecting invalid altsetting 0 [ 284.553135][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.602052][ T6577] overlayfs: missing 'lowerdir' [ 284.681371][ T5845] usb 7-1: USB disconnect, device number 2 [ 284.691076][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.085845][ T6579] udevd[6579]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.158075][ T1031] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.212084][ T1031] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.272113][ T1100] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.308320][ T1100] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.185897][ T6594] netlink: 132 bytes leftover after parsing attributes in process `syz.8.110'. [ 287.928173][ T794] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 288.156427][ T794] usb 7-1: config 1 has an invalid interface number: 177 but max is 1 [ 288.188174][ T794] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 288.225187][ T794] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.265780][ T794] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.299385][ T794] usb 7-1: config 1 has no interface number 0 [ 288.332112][ T794] usb 7-1: config 1 interface 177 altsetting 7 endpoint 0xF has invalid maxpacket 512, setting to 0 [ 288.374808][ T794] usb 7-1: config 1 interface 177 altsetting 7 endpoint 0xC has invalid maxpacket 16, setting to 8 [ 288.426069][ T794] usb 7-1: config 1 interface 177 altsetting 7 endpoint 0x8 has invalid maxpacket 48, setting to 8 [ 288.472724][ T794] usb 7-1: config 1 interface 177 altsetting 7 endpoint 0x7 is Bulk; changing to Interrupt [ 288.515127][ T794] usb 7-1: config 1 interface 177 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 288.557802][ T794] usb 7-1: config 1 interface 177 altsetting 7 endpoint 0x86 has invalid maxpacket 1023, setting to 8 [ 288.602285][ T794] usb 7-1: config 1 interface 177 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 288.658089][ T794] usb 7-1: config 1 interface 177 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 288.708064][ T794] usb 7-1: config 1 interface 177 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 288.790777][ T794] usb 7-1: config 1 interface 177 altsetting 7 has a duplicate endpoint with address 0x8, skipping [ 288.852342][ T794] usb 7-1: config 1 interface 177 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 288.905785][ T794] usb 7-1: config 1 interface 177 altsetting 7 has 11 endpoint descriptors, different from the interface descriptor's value: 16 [ 288.998196][ T794] usb 7-1: config 1 interface 177 has no altsetting 0 [ 289.038846][ T794] usb 7-1: string descriptor 0 read error: -22 [ 289.057662][ T794] usb 7-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice=bd.75 [ 289.098325][ T794] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.146539][ T6600] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 289.509484][ T10] usb 7-1: USB disconnect, device number 3 [ 293.517155][ T6650] 9p: Bad value for 'rfdno' [ 294.410114][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.130'. [ 296.606389][ T6689] 9p: Bad value for 'rfdno' [ 301.240870][ T6720] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 301.303185][ T6720] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 304.801386][ T6739] kAFS: unable to lookup cell '(,c¾Ì' [ 312.404981][ T6798] netlink: 60 bytes leftover after parsing attributes in process `syz.6.170'. [ 314.767295][ T5781] Bluetooth: Wrong link type (-71) [ 316.336089][ T6846] netlink: 20 bytes leftover after parsing attributes in process `syz.7.185'. [ 316.693287][ T6853] netlink: 20 bytes leftover after parsing attributes in process `syz.5.187'. [ 319.097772][ T6881] netlink: 60 bytes leftover after parsing attributes in process `syz.6.197'. [ 321.255731][ T6908] syz_tun: entered promiscuous mode [ 321.288849][ T6908] syz_tun: left promiscuous mode [ 325.318840][ T5832] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 325.524401][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.594788][ T5832] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 325.672544][ T5832] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 325.708034][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.772508][ T5832] usb 6-1: config 0 descriptor?? [ 326.304392][ T5832] usbhid 6-1:0.0: can't add hid device: -71 [ 326.350978][ T5832] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 326.448505][ T5832] usb 6-1: USB disconnect, device number 3 [ 326.654687][ T29] audit: type=1326 audit(1771729458.702:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.679990][ T6960] mmap: syz.8.219 (6960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 326.725347][ T6955] program syz.8.219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 326.874730][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 326.874966][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.876839][ T29] audit: type=1326 audit(1771729458.702:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.877040][ T29] audit: type=1326 audit(1771729458.762:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=257 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.877243][ T29] audit: type=1326 audit(1771729458.772:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.877432][ T29] audit: type=1326 audit(1771729458.802:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.877622][ T29] audit: type=1326 audit(1771729458.912:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.877811][ T29] audit: type=1326 audit(1771729458.912:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.881095][ T29] audit: type=1326 audit(1771729458.912:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 326.881237][ T29] audit: type=1326 audit(1771729458.912:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 327.076473][ T29] audit: type=1326 audit(1771729459.152:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6951 comm="syz.8.219" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc7f6c code=0x7ffc0000 [ 331.951117][ T6995] overlayfs: missing 'workdir' [ 333.038254][ T5832] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 333.227991][ T5832] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.300367][ T5832] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 333.378718][ T5832] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 333.448788][ T5832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.493433][ T5832] usb 10-1: config 0 descriptor?? [ 333.954354][ T5832] usbhid 10-1:0.0: can't add hid device: -71 [ 333.984134][ T5832] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 334.042310][ T5832] usb 10-1: USB disconnect, device number 2 [ 335.344927][ T7033] random: crng reseeded on system resumption [ 337.938856][ T5832] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 338.148741][ T5832] usb 10-1: Using ep0 maxpacket: 8 [ 338.171909][ T5832] usb 10-1: config 0 has an invalid interface number: 173 but max is 0 [ 338.183850][ T5832] usb 10-1: config 0 has no interface number 0 [ 338.240639][ T5832] usb 10-1: config 0 interface 173 has no altsetting 0 [ 338.361823][ T5832] usb 10-1: New USB device found, idVendor=0421, idProduct=04ce, bcdDevice=dd.8d [ 338.423959][ T5832] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.468129][ T5832] usb 10-1: Product: syz [ 338.508099][ T5832] usb 10-1: Manufacturer: syz [ 338.527278][ T5832] usb 10-1: SerialNumber: syz [ 338.563502][ T5832] usb 10-1: config 0 descriptor?? [ 338.867597][ T5832] usb 10-1: bad CDC descriptors [ 338.900169][ T5832] cdc_acm 10-1:0.173: Zero length descriptor references [ 338.920845][ T5832] cdc_acm 10-1:0.173: probe with driver cdc_acm failed with error -22 [ 338.958467][ T794] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 338.972615][ T5832] usb 10-1: USB disconnect, device number 3 [ 339.078513][ T7071] process 'syz.8.251' launched '/dev/fd/4' with NULL argv: empty string added [ 339.191627][ T794] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.274233][ T794] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 339.332524][ T794] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 339.378105][ T794] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.441800][ T794] usb 8-1: config 0 descriptor?? [ 339.882873][ T794] usbhid 8-1:0.0: can't add hid device: -71 [ 339.922579][ T794] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 339.991355][ T794] usb 8-1: USB disconnect, device number 2 [ 344.264669][ T5791] Bluetooth: hci5: command 0x0406 tx timeout [ 345.929533][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.7.267'. [ 345.972254][ T7140] bond0: option resend_igmp: invalid value (11272192) [ 346.013425][ T7140] bond0: option resend_igmp: allowed values 0 - 255 [ 349.384165][ T5791] Bluetooth: hci6: command 0x0406 tx timeout [ 355.258356][ T5845] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 355.468107][ T5845] usb 10-1: Using ep0 maxpacket: 16 [ 355.523428][ T5845] usb 10-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 355.559476][ T5845] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.592705][ T5845] usb 10-1: Product: syz [ 355.615399][ T5845] usb 10-1: Manufacturer: syz [ 355.631076][ T5845] usb 10-1: SerialNumber: syz [ 355.923772][ T5845] usb 10-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 355.977238][ T5845] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.040319][ T5845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 356.065931][ T5845] usb 10-1: media controller created [ 356.413849][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.648290][ T5845] zl10353_read_register: readreg error (reg=127, ret==-71) [ 357.386109][ T5845] dvb_usb_gl861 10-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 357.469366][ T5845] usb 10-1: USB disconnect, device number 4 [ 358.252874][ T7265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 359.618525][ T5788] Bluetooth: hci2: command 0x0406 tx timeout [ 359.625074][ T5786] Bluetooth: hci7: command 0x0406 tx timeout [ 360.856212][ T7299] program syz.6.312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 361.028457][ T5845] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 361.245978][ T5845] usb 6-1: Using ep0 maxpacket: 16 [ 361.308699][ T5845] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 361.338075][ T5845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.346268][ T5845] usb 6-1: Product: syz [ 361.388190][ T5845] usb 6-1: Manufacturer: syz [ 361.392982][ T5845] usb 6-1: SerialNumber: syz [ 361.669116][ T5845] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 361.714940][ T5845] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 361.768852][ T5845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 361.788241][ T794] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 361.808877][ T5845] usb 6-1: media controller created [ 361.968311][ T794] usb 7-1: Using ep0 maxpacket: 16 [ 361.996834][ T794] usb 7-1: config index 0 descriptor too short (expected 65, got 36) [ 362.045877][ T794] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 362.080080][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 362.102400][ T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 362.145310][ T794] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 362.176612][ T794] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 362.208242][ T794] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 362.226753][ T794] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.227283][ T5845] zl10353_read_register: readreg error (reg=127, ret==-71) [ 362.256297][ T794] usb 7-1: config 0 descriptor?? [ 362.291869][ T794] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input9 [ 362.321030][ T5116] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 362.383617][ T5116] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 362.426818][ T5116] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 362.463587][ T5116] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 362.548789][ T5832] usb 7-1: USB disconnect, device number 4 [ 362.783777][ T5845] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 362.835087][ T5845] usb 6-1: USB disconnect, device number 4 [ 366.618038][ T5845] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 366.811175][ T5845] usb 8-1: Using ep0 maxpacket: 16 [ 366.897364][ T5845] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 366.938067][ T5845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.007108][ T5845] usb 8-1: Product: syz [ 367.033768][ T5845] usb 8-1: Manufacturer: syz [ 367.097620][ T5845] usb 8-1: SerialNumber: syz [ 367.377067][ T5845] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 367.513101][ T5845] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 367.593843][ T5845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 367.639293][ T5845] usb 8-1: media controller created [ 368.297788][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.629992][ T5845] zl10353_read_register: readreg error (reg=127, ret==-71) [ 369.419692][ T5845] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 369.551058][ T5845] usb 8-1: USB disconnect, device number 3 [ 369.721900][ T7390] overlayfs: overlapping lowerdir path [ 369.866583][ T5781] Bluetooth: hci0: command 0x0406 tx timeout [ 373.857459][ T7439] overlayfs: overlapping lowerdir path [ 373.870923][ T24] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 374.098371][ T24] usb 9-1: Using ep0 maxpacket: 16 [ 374.167265][ T24] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 374.220507][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.261074][ T24] usb 9-1: Product: syz [ 374.265428][ T24] usb 9-1: Manufacturer: syz [ 374.281816][ T24] usb 9-1: SerialNumber: syz [ 374.574624][ T24] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 374.653450][ T24] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 374.721103][ T24] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 374.788024][ T24] usb 9-1: media controller created [ 375.082441][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.776816][ T24] zl10353_read_register: readreg error (reg=127, ret==-71) [ 376.713462][ T24] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 376.908808][ T24] usb 9-1: USB disconnect, device number 2 [ 379.036392][ T7494] overlayfs: overlapping lowerdir path [ 380.586344][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.7.367'. [ 380.728216][ T794] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 380.918360][ T794] usb 6-1: Using ep0 maxpacket: 16 [ 380.978128][ T794] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 380.987400][ T794] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.073587][ T794] usb 6-1: Product: syz [ 381.088240][ T794] usb 6-1: Manufacturer: syz [ 381.093159][ T794] usb 6-1: SerialNumber: syz [ 381.425975][ T794] usb 6-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 381.501535][ T794] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 381.565425][ T794] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 381.660339][ T794] usb 6-1: media controller created [ 382.026782][ T794] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 382.293554][ T794] zl10353_read_register: readreg error (reg=127, ret==-71) [ 383.158278][ T794] dvb_usb_gl861 6-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 383.191415][ T794] usb 6-1: USB disconnect, device number 5 [ 386.992604][ T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 387.198168][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 387.258678][ T10] usb 9-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 387.305605][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.325694][ T10] usb 9-1: Product: syz [ 387.353966][ T10] usb 9-1: Manufacturer: syz [ 387.373567][ T10] usb 9-1: SerialNumber: syz [ 387.674074][ T10] usb 9-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 387.763960][ T10] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 387.823944][ T10] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 387.851428][ T10] usb 9-1: media controller created [ 388.060685][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.294163][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.316697][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.450514][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 389.151960][ T10] dvb_usb_gl861 9-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 389.279119][ T10] usb 9-1: USB disconnect, device number 3 [ 392.229058][ T7645] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3) [ 392.235779][ T7645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.301580][ T7649] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(6) [ 392.308312][ T7649] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 392.378667][ T7645] vhci_hcd vhci_hcd.0: Device attached [ 392.426429][ T7649] vhci_hcd vhci_hcd.0: Device attached [ 392.482447][ T7655] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(5) [ 392.489161][ T7655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.546232][ T7655] vhci_hcd vhci_hcd.0: Device attached [ 392.719408][ T794] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 392.742211][ T7645] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(8) [ 392.748925][ T7645] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 392.779598][ T7645] vhci_hcd vhci_hcd.0: Device attached [ 392.842906][ T7657] vhci_hcd: connection closed [ 392.844503][ T34] vhci_hcd vhci_hcd.7: stop threads [ 392.864836][ T7666] vhci_hcd: connection closed [ 392.893247][ T7650] vhci_hcd: connection closed [ 392.918409][ T7646] vhci_hcd: connection reset by peer [ 392.931907][ T34] vhci_hcd vhci_hcd.7: release socket [ 392.950200][ T5845] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 392.976573][ T34] vhci_hcd vhci_hcd.7: disconnect device [ 393.046045][ T34] vhci_hcd vhci_hcd.7: stop threads [ 393.062490][ T34] vhci_hcd vhci_hcd.7: release socket [ 393.081611][ T34] vhci_hcd vhci_hcd.7: disconnect device [ 393.117028][ T34] vhci_hcd vhci_hcd.7: stop threads [ 393.165955][ T34] vhci_hcd vhci_hcd.7: release socket [ 393.209062][ T5845] usb 7-1: Using ep0 maxpacket: 16 [ 393.229743][ T34] vhci_hcd vhci_hcd.7: disconnect device [ 393.392247][ T34] vhci_hcd vhci_hcd.7: stop threads [ 393.397640][ T34] vhci_hcd vhci_hcd.7: release socket [ 393.445913][ T34] vhci_hcd vhci_hcd.7: disconnect device [ 393.481827][ T5845] usb 7-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 393.630140][ T5845] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.686024][ T5845] usb 7-1: Product: syz [ 393.749408][ T5845] usb 7-1: Manufacturer: syz [ 393.786062][ T5845] usb 7-1: SerialNumber: syz [ 393.928927][ T7642] syz.9.398 (7642) used greatest stack depth: 2280 bytes left [ 394.053676][ T5845] usb 7-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 394.191942][ T5845] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 394.238872][ T5845] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 394.279784][ T5845] usb 7-1: media controller created [ 394.472743][ T5834] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 394.568228][ T5921] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 394.587021][ T5845] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 394.650840][ T7680] ===================================================== [ 394.658367][ T7680] BUG: KMSAN: uninit-value in erspan_build_header+0x167/0x2f0 [ 394.666180][ T7680] erspan_build_header+0x167/0x2f0 [ 394.668117][ T5834] usb 9-1: device descriptor read/64, error -71 [ 394.671603][ T7680] erspan_xmit+0x12e8/0x1ed0 [ 394.682629][ T7680] dev_hard_start_xmit+0x24e/0xad0 [ 394.688121][ T7680] sch_direct_xmit+0x3b2/0xcf0 [ 394.693044][ T7680] __dev_queue_xmit+0x3016/0x5a50 [ 394.698361][ T7680] __bpf_redirect+0x162e/0x1760 [ 394.703492][ T7680] bpf_clone_redirect+0x4a6/0x6c0 [ 394.708803][ T7680] ___bpf_prog_run+0x12af/0xeb60 [ 394.713881][ T7680] __bpf_prog_run32+0xc2/0xf0 [ 394.717746][ T5845] zl10353_read_register: readreg error (reg=127, ret==-71) [ 394.726088][ T7680] bpf_test_run+0x493/0xdf0 [ 394.730890][ T7680] bpf_prog_test_run_skb+0x22a5/0x3050 [ 394.736521][ T7680] bpf_prog_test_run+0x5bb/0x9f0 [ 394.741730][ T7680] __sys_bpf+0x925/0xee0 [ 394.746081][ T7680] __ia32_sys_bpf+0xa4/0xf0 [ 394.746175][ T7680] ia32_sys_call+0x33e7/0x4360 [ 394.746266][ T7680] __do_fast_syscall_32+0x17f/0x3f0 [ 394.761007][ T7680] do_fast_syscall_32+0x37/0x80 [ 394.765983][ T7680] do_SYSENTER_32+0x1f/0x30 [ 394.770747][ T7680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.777241][ T7680] [ 394.779745][ T7680] Uninit was created at: [ 394.784201][ T7680] kmem_cache_alloc_node_noprof+0x3cd/0x12d0 [ 394.790479][ T7680] pskb_expand_head+0x2ef/0x1fb0 [ 394.795589][ T7680] erspan_xmit+0x9c3/0x1ed0 [ 394.800354][ T7680] dev_hard_start_xmit+0x24e/0xad0 [ 394.805629][ T7680] sch_direct_xmit+0x3b2/0xcf0 [ 394.810675][ T7680] __dev_queue_xmit+0x3016/0x5a50 [ 394.815867][ T7680] __bpf_redirect+0x162e/0x1760 [ 394.820987][ T7680] bpf_clone_redirect+0x4a6/0x6c0 [ 394.826179][ T7680] ___bpf_prog_run+0x12af/0xeb60 [ 394.831381][ T7680] __bpf_prog_run32+0xc2/0xf0 [ 394.836190][ T7680] bpf_test_run+0x493/0xdf0 [ 394.840968][ T7680] bpf_prog_test_run_skb+0x22a5/0x3050 [ 394.846593][ T7680] bpf_prog_test_run+0x5bb/0x9f0 [ 394.851807][ T7680] __sys_bpf+0x925/0xee0 [ 394.856176][ T7680] __ia32_sys_bpf+0xa4/0xf0 [ 394.860914][ T7680] ia32_sys_call+0x33e7/0x4360 [ 394.865806][ T7680] __do_fast_syscall_32+0x17f/0x3f0 [ 394.871269][ T7680] do_fast_syscall_32+0x37/0x80 [ 394.876254][ T7680] do_SYSENTER_32+0x1f/0x30 [ 394.881087][ T7680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 394.887583][ T7680] [ 394.890153][ T7680] CPU: 0 UID: 0 PID: 7680 Comm: syz.5.405 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.901196][ T7680] Tainted: [L]=SOFTLOCKUP [ 394.905589][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.915903][ T7680] ===================================================== [ 394.922996][ T7680] Disabling lock debugging due to kernel taint [ 394.929357][ T7680] Kernel panic - not syncing: kmsan.panic set ... [ 394.935896][ T7680] CPU: 0 UID: 0 PID: 7680 Comm: syz.5.405 Tainted: G B L syzkaller #0 PREEMPT(full) [ 394.946841][ T7680] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 394.952464][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.962641][ T7680] Call Trace: [ 394.966009][ T7680] [ 394.969015][ T7680] __dump_stack+0x26/0x30 [ 394.973510][ T7680] dump_stack_lvl+0x50/0x1c0 [ 394.978254][ T7680] ? dump_stack+0x12/0x25 [ 394.982751][ T7680] dump_stack+0x1e/0x25 [ 394.987054][ T7680] vpanic+0x7b4/0x1430 [ 394.991312][ T7680] panic+0x15d/0x160 [ 394.995436][ T7680] kmsan_report+0x31a/0x320 [ 395.000122][ T7680] ? __msan_warning+0x1b/0x30 [ 395.004954][ T7680] ? erspan_build_header+0x167/0x2f0 [ 395.010389][ T7680] ? erspan_xmit+0x12e8/0x1ed0 [ 395.015301][ T7680] ? dev_hard_start_xmit+0x24e/0xad0 [ 395.020763][ T7680] ? sch_direct_xmit+0x3b2/0xcf0 [ 395.025852][ T7680] ? __dev_queue_xmit+0x3016/0x5a50 [ 395.031220][ T7680] ? __bpf_redirect+0x162e/0x1760 [ 395.036415][ T7680] ? bpf_clone_redirect+0x4a6/0x6c0 [ 395.041790][ T7680] ? ___bpf_prog_run+0x12af/0xeb60 [ 395.047042][ T7680] ? __bpf_prog_run32+0xc2/0xf0 [ 395.052031][ T7680] ? bpf_test_run+0x493/0xdf0 [ 395.056874][ T7680] ? bpf_prog_test_run_skb+0x22a5/0x3050 [ 395.062685][ T7680] ? bpf_prog_test_run+0x5bb/0x9f0 [ 395.067951][ T7680] ? __sys_bpf+0x925/0xee0 [ 395.072500][ T7680] ? __ia32_sys_bpf+0xa4/0xf0 [ 395.077298][ T7680] ? ia32_sys_call+0x33e7/0x4360 [ 395.082360][ T7680] ? __do_fast_syscall_32+0x17f/0x3f0 [ 395.087873][ T7680] ? do_fast_syscall_32+0x37/0x80 [ 395.093026][ T7680] ? do_SYSENTER_32+0x1f/0x30 [ 395.097835][ T7680] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.104508][ T7680] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 395.110754][ T7680] ? kfree+0x793/0x1130 [ 395.115072][ T7680] ? pskb_expand_head+0x823/0x1fb0 [ 395.120380][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.125682][ T7680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 395.131684][ T7680] ? pskb_expand_head+0x1ce4/0x1fb0 [ 395.137080][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.142387][ T7680] __msan_warning+0x1b/0x30 [ 395.147061][ T7680] erspan_build_header+0x167/0x2f0 [ 395.152346][ T7680] erspan_xmit+0x12e8/0x1ed0 [ 395.157121][ T7680] ? __pfx_erspan_xmit+0x10/0x10 [ 395.162210][ T7680] dev_hard_start_xmit+0x24e/0xad0 [ 395.167515][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.172821][ T7680] sch_direct_xmit+0x3b2/0xcf0 [ 395.177742][ T7680] ? kmsan_get_metadata+0x146/0x160 [ 395.183125][ T7680] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 395.189652][ T7680] __dev_queue_xmit+0x3016/0x5a50 [ 395.194855][ T7680] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 395.201279][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.206581][ T7680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 395.212579][ T7680] ? __dev_queue_xmit+0x280/0x5a50 [ 395.217903][ T7680] __bpf_redirect+0x162e/0x1760 [ 395.222938][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.228238][ T7680] bpf_clone_redirect+0x4a6/0x6c0 [ 395.233478][ T7680] ___bpf_prog_run+0x12af/0xeb60 [ 395.238605][ T7680] __bpf_prog_run32+0xc2/0xf0 [ 395.243424][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.248741][ T7680] ? __pfx___bpf_prog_run32+0x10/0x10 [ 395.254265][ T7680] ? __pfx___bpf_prog_run32+0x10/0x10 [ 395.259784][ T7680] bpf_test_run+0x493/0xdf0 [ 395.264472][ T7680] ? csum_partial+0x424/0x480 [ 395.269301][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.274621][ T7680] ? bpf_test_run+0x2f4/0xdf0 [ 395.279505][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.284800][ T7680] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 395.290804][ T7680] bpf_prog_test_run_skb+0x22a5/0x3050 [ 395.296453][ T7680] ? kmsan_get_metadata+0xf1/0x160 [ 395.301820][ T7680] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 395.307812][ T7680] bpf_prog_test_run+0x5bb/0x9f0 [ 395.312926][ T7680] __sys_bpf+0x925/0xee0 [ 395.317354][ T7680] __ia32_sys_bpf+0xa4/0xf0 [ 395.322015][ T7680] ia32_sys_call+0x33e7/0x4360 [ 395.326921][ T7680] __do_fast_syscall_32+0x17f/0x3f0 [ 395.332288][ T7680] do_fast_syscall_32+0x37/0x80 [ 395.337286][ T7680] do_SYSENTER_32+0x1f/0x30 [ 395.341928][ T7680] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 395.348447][ T7680] RIP: 0023:0xf7f83f6c [ 395.352630][ T7680] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 58 b8 77 00 00 00 cd 80 0f 0b 90 90 90 90 90 90 b8 ad [ 395.372393][ T7680] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 395.380962][ T7680] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00000000800003c0 [ 395.389036][ T7680] RDX: 0000000000000050 RSI: 0000000000000000 RDI: 0000000000000000 [ 395.397096][ T7680] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 395.405244][ T7680] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 395.413307][ T7680] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 395.421410][ T7680] [ 395.424857][ T7680] Kernel Offset: disabled [ 395.429221][ T7680] Rebooting in 86400 seconds..