last executing test programs: 26.844460618s ago: executing program 1 (id=42): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c0e0000002b4eb1f61e86080000002f3df416546913bc6ebeee89e4f9183e4c11684dd767"], 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)="aadd85ede5d506c878ff0e9f7435aad2bc2875c9c2d84641974a995f09419a32ea1abcd2665c37f7ee823fd837bde27aeb867cf3da00"/63, 0x3f}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r5 = fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x6, 0xc0, 0x4, 0x1, 0x4, 0xa}) fanotify_mark(r5, 0x459, 0x10, r4, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 20.644694575s ago: executing program 2 (id=53): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) 18.339303021s ago: executing program 3 (id=55): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000035ffaa20cd0caf104a380102030109021b0001000010000904590201801e2a00090582"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000780)={0x44, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.117815552s ago: executing program 2 (id=57): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdc00, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040004}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 17.031320293s ago: executing program 2 (id=59): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x85, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x5, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x5, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x9, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xaca, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x4000, 0xa620, 0x1, 0x5, 0xffff, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf5, 0x803, 0x1, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.118899793s ago: executing program 1 (id=60): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x400, 0x3, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x48040, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x206e, &(0x7f0000002380)={0x0, 0x80023f8, 0x40}) unshare(0x2000400) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010000000000000000000a0000000400000008000500", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) 15.962258327s ago: executing program 2 (id=61): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.161628947s ago: executing program 3 (id=63): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, 0x0, 0x0) recvmsg(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001700)=""/4108, 0x100c}], 0x1}, 0x12040) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000300)={0x48}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000100)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x20, 0x4, [0x2, 0x0, 0x0, 0x100, 0x5, 0x0, 0x0, 0x2]}}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f00000001c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000000c0), 0x12) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) listen(0xffffffffffffffff, 0xda90) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r5, 0x100000000) 14.539169791s ago: executing program 1 (id=64): timer_create(0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.178429165s ago: executing program 2 (id=65): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050470100000fa000905820240a9e87d838ba3f0ea2287cf52b8"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) 11.061658775s ago: executing program 2 (id=70): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="bf16000000000000b70700000100000048700000e4ff0000bc701000000000009500faff000000008aa1210b29017b83c8e96e6405f798585fb5030b3388b0409a814343f1ae341b74efa745a12f5c0685e5261482e31e0cacc902c97e6145ef48004d26342c94f56a39359ba56724e4535d80ffbd6848d53382c26211a2b975eb4a9d08501c000c00000000000097e50f118c4a3b05489d1d1245cb774879b0070000000000008cca1a363b2b28add613658171122dc01e0a77d7c44b009fdac91fc827f5797532750d4d4639f11089feb3f25b4695c6dac2cabfa04e2c16fa741b0665bb33be6f0e742213d0bf5528a601b5934b867f39f7d776ac06a434949b4455b7c6c678de4d9740d8dff6169c664b55ce550fb4e686ae169d9f7abbeb08e02799374ae0081858bdf144d8c7fb67dcec5e43a0e8099e543116b1b7d144b5613845cca4388344d82de45f0c1b7d041db040fd777791232d5db32d14bc1c3d000000000000000000000016a1049b6f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040c41090ea80000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000880)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="400c0e0000002b4eb1f61e86080000002f3df416546913bc6ebeee89e4f9183e4c11684dd767"], 0x0, 0x0, 0x0, 0x0}) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)="aadd85ede5d506c878ff0e9f7435aad2bc2875c9c2d84641974a995f09419a32ea1abcd2665c37f7ee823fd837bde27aeb867cf3da00"/63, 0x3f}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x4}]}}}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4000058}, 0x20008844) syz_open_procfs(0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x400000, 0x0) r5 = fanotify_init(0x200, 0x0) dup(0xffffffffffffffff) readv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000080)=""/80, 0x50}], 0x1) r6 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r6, 0x40085112, &(0x7f0000000000)=@l={0x92, 0x6, 0xc0, 0x4, 0x1, 0x4, 0xa}) fanotify_mark(r5, 0x459, 0x10, r4, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) 10.753782679s ago: executing program 1 (id=71): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x85, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x5, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x5, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x9, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xaca, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x4000, 0xa620, 0x1, 0x5, 0xffff, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf5, 0x803, 0x1, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 9.86832975s ago: executing program 1 (id=73): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840) syz_usb_disconnect(r4) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000300)={0xb, @sdr={0x34565559, 0x2}}) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000001280), 0x0) poll(0x0, 0x0, 0x8) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendto(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x20000000, &(0x7f0000000280)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7110ac000000000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 9.868169428s ago: executing program 4 (id=74): connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x400, 0x3, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x48040, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x206e, &(0x7f0000002380)={0x0, 0x80023f8, 0x40}) unshare(0x2000400) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010000000000000000000a0000000400000008000500", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) 8.65660093s ago: executing program 0 (id=76): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="200f1100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) r3 = epoll_create(0x4) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0xc}) 8.473328667s ago: executing program 4 (id=77): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x7f}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x3e, &(0x7f0000000600)=[{&(0x7f0000001680)=""/100, 0x64}, {&(0x7f0000001880)=""/4093, 0xffd}, {&(0x7f0000000480)=""/73, 0x49}, {&(0x7f0000000100)=""/61, 0x3d}, {&(0x7f0000000000)=""/85, 0x48}, {&(0x7f0000000200)=""/26, 0x1a}, {&(0x7f0000000800)=""/154, 0xea}], 0x7}, 0xfffffffe}], 0x3, 0x2030, 0x0) 7.53734861s ago: executing program 4 (id=78): socket$kcm(0x10, 0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x129a82, 0x0) sendfile(r0, r0, 0x0, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) r1 = io_uring_setup(0x4dc2, &(0x7f0000000200)={0x0, 0x9153, 0x8, 0x2, 0x112}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0x41000, 0x8, 0x9, 0x3, 0xe4, 0x40, 0x3, 0x0, 0x30, 0x19}, {0x41000, 0x3000, 0xe, 0x0, 0x40, 0x5, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0xdddd1000, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x81}, {0x6000, 0x8000000, 0x3, 0x5d, 0x4, 0x43, 0x3, 0xfa, 0x80, 0x7, 0xe, 0x40}, {0x0, 0x9000, 0x10, 0x1, 0x3, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x8, 0x1, 0xd, 0x88, 0xf, 0x4, 0xfd}, {0x54000, 0x2, 0x4, 0x5, 0x7, 0x2, 0x2, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x6, 0x18, 0x2, 0x3, 0x7, 0x9}, {0xb000, 0x2d}, {0x10000, 0x7fff}, 0x80000031, 0x0, 0x6000, 0x42024, 0xb, 0x1, 0x3000, [0x6840000000000002, 0x3, 0x10de, 0xff]}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x18, &(0x7f0000000000), 0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000c00)='sit0\x00', 0x10) unshare(0x6020400) bind$xdp(0xffffffffffffffff, &(0x7f0000000d40)={0x2c, 0x3, 0x0, 0x2f}, 0x10) 6.381316899s ago: executing program 4 (id=79): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r2, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16df}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000004}, 0x4c050) 5.914076474s ago: executing program 3 (id=80): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001100)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000dc0)={0x20, 0x0, 0x4, {0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f00000005c0)={0x20, 0xbe9c2c1eddf788b6, 0x4, '\x00\x00XY'}, 0x0, 0x0, 0x0, 0x0}) 5.495430439s ago: executing program 4 (id=81): timer_create(0x0, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5f1000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) epoll_create1(0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.172862112s ago: executing program 0 (id=82): r0 = shmget$private(0x0, 0x800000, 0x0, &(0x7f0000173000/0x800000)=nil) shmat(r0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 3.493274628s ago: executing program 0 (id=83): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000300)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') read$eventfd(r0, &(0x7f0000000000), 0x8) 2.532024712s ago: executing program 3 (id=84): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x85, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x5, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x2, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x5, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x9, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xaca, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0x4000, 0xa620, 0x1, 0x5, 0xffff, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf5, 0x803, 0x1, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2.094330889s ago: executing program 0 (id=85): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@ipv6_newrule={0x30, 0x20, 0x1, 0x0, 0x25dfdc00, {0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}, [@FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040004}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0) 1.787718194s ago: executing program 3 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'hash\x00', 0x0, 0x0, 'wp256\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x80000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x2, 0x80805, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.348793213s ago: executing program 0 (id=87): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r0 = gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) sched_setattr(r0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x5, 0x400, 0x3, 0xfa11, 0xffffffff}, 0x0) open(0x0, 0x48040, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x6, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) unshare(0x2040400) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f00000004c0)=[@ioring_restriction_register_op={0x0, 0x9}], 0x1) io_uring_setup(0x206e, &(0x7f0000002380)={0x0, 0x80023f8, 0x40}) unshare(0x2000400) ioctl$F2FS_IOC_DECOMPRESS_FILE(0xffffffffffffffff, 0xf517, 0x0) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000001b00)={0x0, 0x34325842, 0x1, @discrete={0x1, 0x100}}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000006800010000000000000000000a0000000400000008000500", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = syz_open_procfs(0x0, &(0x7f00000190c0)='net/ip_tables_targets\x00') pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$nl_generic(0x10, 0x3, 0x10) 1.144058681s ago: executing program 4 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r5) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x38, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_ACT={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x5dc}], 0x1}, 0x4011) 1.044021539s ago: executing program 3 (id=89): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) socket$kcm(0x10, 0x2, 0x4) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffff9, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x2d, &(0x7f0000000280)=""/45, 0x40f00, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfef8, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x30}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r5, 0x0) syz_io_uring_setup(0x55d, &(0x7f0000000180)={0x0, 0x8c7, 0x4, 0x0, 0x3d7}, &(0x7f0000000200), &(0x7f0000000240), 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "220200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000140)=0x800) write$evdev(r6, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) syz_emit_ethernet(0x42, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x6071, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x100, 0x3}]}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x88}}, 0x20008844) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000200)={0x40, 0x15, 0xa2, "941339e399fb0d5322214275e2487f41868d71455aa0e63fe29305a5eb72b5e914051a41db7b9a1382cfabd01bb11311ad7b64a18f147e68dea2fbe048e73c578396e08f304687ce29f74da4509a83fc8f0cdca73eb9810591ba4f25b98a18d866a7733384eba09127db1f3785764c69f9943e63c8d1f21af5dc3bab5e1f29b0f302f60cb615ed790b5faf9fef85063dfaf3b21bcec5c914ce06caedd105670f1b1b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583"], 0x0) syz_usb_control_io$printer(r7, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000500)={0x20, 0x0, 0x10, "025b8c6f2261832b1a8d801657547f59"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r7, 0x0, 0x0) syz_usb_control_io$uac1(r7, 0x0, 0x0) 105.68939ms ago: executing program 1 (id=90): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 0s ago: executing program 0 (id=91): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000200000024000180060005004e230000060001000200051b08000300ac1414aa0800060021"], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.10' (ED25519) to the list of known hosts. [ 153.489084][ T5563] cgroup: Unknown subsys name 'net' [ 153.606858][ T5563] cgroup: Unknown subsys name 'cpuset' [ 153.622257][ T5563] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 159.216502][ T5563] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 163.356514][ T5584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 163.364675][ T5584] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.374504][ T5584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 163.384173][ T5584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 163.407821][ T5587] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.419038][ T5587] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 163.429541][ T5587] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.439651][ T5584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 163.454355][ T5587] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.471443][ T5587] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 163.603185][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 163.617389][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 163.636500][ T49] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 163.652089][ T5584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 163.663927][ T5584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 163.725806][ T5584] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.727826][ T4876] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 163.735266][ T5584] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.737157][ T5584] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.745722][ T5584] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.748096][ T4876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 163.756856][ T5584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.763790][ T4876] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 163.796888][ T4876] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 163.811704][ T4876] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.531746][ T49] Bluetooth: hci1: command tx timeout [ 165.537388][ T49] Bluetooth: hci0: command tx timeout [ 165.688480][ T4876] Bluetooth: hci2: command tx timeout [ 165.849188][ T4876] Bluetooth: hci4: command tx timeout [ 165.858963][ T4876] Bluetooth: hci3: command tx timeout [ 167.608896][ T4876] Bluetooth: hci0: command tx timeout [ 167.614574][ T49] Bluetooth: hci1: command tx timeout [ 167.666920][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.680484][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.701114][ T5595] bridge_slave_0: entered allmulticast mode [ 167.721529][ T5595] bridge_slave_0: entered promiscuous mode [ 167.769327][ T4876] Bluetooth: hci2: command tx timeout [ 167.777952][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.798790][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.819790][ T5595] bridge_slave_1: entered allmulticast mode [ 167.842967][ T5595] bridge_slave_1: entered promiscuous mode [ 167.856160][ T5581] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.866775][ T5581] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.876074][ T5581] bridge_slave_0: entered allmulticast mode [ 167.886099][ T5581] bridge_slave_0: entered promiscuous mode [ 167.938591][ T4876] Bluetooth: hci3: command tx timeout [ 167.944263][ T49] Bluetooth: hci4: command tx timeout [ 167.987707][ T5581] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.997660][ T5581] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.006869][ T5581] bridge_slave_1: entered allmulticast mode [ 168.020390][ T5581] bridge_slave_1: entered promiscuous mode [ 168.084531][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.136860][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.144825][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.152557][ T5596] bridge_slave_0: entered allmulticast mode [ 168.160515][ T5596] bridge_slave_0: entered promiscuous mode [ 168.201163][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.256440][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.264176][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.271900][ T5596] bridge_slave_1: entered allmulticast mode [ 168.280302][ T5596] bridge_slave_1: entered promiscuous mode [ 168.289685][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.297217][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.305011][ T5591] bridge_slave_0: entered allmulticast mode [ 168.313033][ T5591] bridge_slave_0: entered promiscuous mode [ 168.346168][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.353890][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.361829][ T5582] bridge_slave_0: entered allmulticast mode [ 168.370341][ T5582] bridge_slave_0: entered promiscuous mode [ 168.388614][ T5581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.429069][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.436560][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.444477][ T5591] bridge_slave_1: entered allmulticast mode [ 168.452801][ T5591] bridge_slave_1: entered promiscuous mode [ 168.484385][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.492033][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.499864][ T5582] bridge_slave_1: entered allmulticast mode [ 168.507891][ T5582] bridge_slave_1: entered promiscuous mode [ 168.523517][ T5581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.583377][ T5595] team0: Port device team_slave_0 added [ 168.704389][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.746510][ T5595] team0: Port device team_slave_1 added [ 168.781811][ T5581] team0: Port device team_slave_0 added [ 168.794416][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.812716][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.851251][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.867593][ T5581] team0: Port device team_slave_1 added [ 168.902189][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.940702][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.017231][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.024756][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.051123][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.113118][ T5596] team0: Port device team_slave_0 added [ 169.143611][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.151056][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.177338][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.213789][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.221200][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.247406][ T5581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.266463][ T5596] team0: Port device team_slave_1 added [ 169.278775][ T5591] team0: Port device team_slave_0 added [ 169.307925][ T5582] team0: Port device team_slave_0 added [ 169.315757][ T5581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.323266][ T5581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.349465][ T5581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.390696][ T5591] team0: Port device team_slave_1 added [ 169.405126][ T5582] team0: Port device team_slave_1 added [ 169.517265][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.524414][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.550860][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.631818][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.638922][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.665204][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.679187][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.686237][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.689597][ T4876] Bluetooth: hci1: command tx timeout [ 169.712453][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.728744][ T49] Bluetooth: hci0: command tx timeout [ 169.745068][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.752548][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.778818][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.830189][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.837285][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.863674][ T4876] Bluetooth: hci2: command tx timeout [ 169.869394][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.894141][ T5595] hsr_slave_0: entered promiscuous mode [ 169.902395][ T5595] hsr_slave_1: entered promiscuous mode [ 169.912744][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.920215][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.946764][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.008637][ T4876] Bluetooth: hci3: command tx timeout [ 170.009109][ T5581] hsr_slave_0: entered promiscuous mode [ 170.014261][ T49] Bluetooth: hci4: command tx timeout [ 170.023413][ T5581] hsr_slave_1: entered promiscuous mode [ 170.032632][ T5581] debugfs: 'hsr0' already exists in 'hsr' [ 170.038551][ T5581] Cannot create hsr debugfs directory [ 170.277512][ T5591] hsr_slave_0: entered promiscuous mode [ 170.285715][ T5591] hsr_slave_1: entered promiscuous mode [ 170.293506][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 170.299401][ T5591] Cannot create hsr debugfs directory [ 170.337910][ T5596] hsr_slave_0: entered promiscuous mode [ 170.346238][ T5596] hsr_slave_1: entered promiscuous mode [ 170.354049][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 170.359932][ T5596] Cannot create hsr debugfs directory [ 170.424862][ T5582] hsr_slave_0: entered promiscuous mode [ 170.433003][ T5582] hsr_slave_1: entered promiscuous mode [ 170.440895][ T5582] debugfs: 'hsr0' already exists in 'hsr' [ 170.446703][ T5582] Cannot create hsr debugfs directory [ 171.602945][ T5581] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.629358][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.642712][ T5581] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.661489][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.671477][ T5581] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.687276][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.710976][ T5581] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.730594][ T5581] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 171.768675][ T4876] Bluetooth: hci1: command tx timeout [ 171.774312][ T49] Bluetooth: hci0: command tx timeout [ 171.818103][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 171.850717][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.860610][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 171.882662][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.894717][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 171.911438][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 171.921514][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 171.928653][ T4876] Bluetooth: hci2: command tx timeout [ 171.944496][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.090118][ T4876] Bluetooth: hci3: command tx timeout [ 172.095790][ T49] Bluetooth: hci4: command tx timeout [ 172.122096][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 172.144411][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.157769][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 172.177619][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.197541][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 172.220927][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.253287][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 172.271227][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.514645][ T5591] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.533815][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.544328][ T5591] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.563614][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.590842][ T5591] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.609118][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.658148][ T5591] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.677930][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.865072][ T5582] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 172.884181][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 172.904969][ T5581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.929493][ T5582] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 172.947810][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 172.975056][ T5582] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 172.992806][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 173.004975][ T5582] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 173.020317][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 173.145994][ T5581] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.201728][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.209123][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.286952][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.304021][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.311341][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.486730][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.583993][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.627482][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.634859][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.707455][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.715185][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.797820][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.947002][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.954552][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.039564][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.047038][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.115853][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.298935][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.350304][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.403976][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.411471][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.521552][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.529058][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.797300][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.935887][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.943396][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.125360][ T83] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.132911][ T83] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.451441][ T5581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.148695][ T5581] veth0_vlan: entered promiscuous mode [ 176.275696][ T5581] veth1_vlan: entered promiscuous mode [ 176.755603][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.841129][ T5581] veth0_macvtap: entered promiscuous mode [ 176.947349][ T5581] veth1_macvtap: entered promiscuous mode [ 177.245081][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.367680][ T5581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.485570][ T141] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.516479][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.553420][ T141] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.577145][ T141] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.901723][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.581789][ T5596] veth0_vlan: entered promiscuous mode [ 178.615817][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.685568][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.771122][ T5596] veth1_vlan: entered promiscuous mode [ 178.927468][ T5595] veth0_vlan: entered promiscuous mode [ 179.092759][ T5595] veth1_vlan: entered promiscuous mode [ 179.227255][ T5591] veth0_vlan: entered promiscuous mode [ 179.260683][ T5596] veth0_macvtap: entered promiscuous mode [ 179.374479][ T5596] veth1_macvtap: entered promiscuous mode [ 179.391210][ T5582] veth0_vlan: entered promiscuous mode [ 179.408961][ T5591] veth1_vlan: entered promiscuous mode [ 179.539384][ T5582] veth1_vlan: entered promiscuous mode [ 179.581019][ T5595] veth0_macvtap: entered promiscuous mode [ 179.657079][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.694394][ T5595] veth1_macvtap: entered promiscuous mode [ 179.750256][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.840757][ T5732] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.871511][ T5732] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.920912][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.944670][ T5732] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.957140][ T5732] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.035207][ T5591] veth0_macvtap: entered promiscuous mode [ 180.067438][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.186239][ T5591] veth1_macvtap: entered promiscuous mode [ 180.219216][ T47] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.243643][ T47] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.270190][ T5582] veth0_macvtap: entered promiscuous mode [ 180.306856][ T47] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.403537][ T47] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.437998][ T5582] veth1_macvtap: entered promiscuous mode [ 180.526587][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.726358][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.855390][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.944346][ T75] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.961840][ T75] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.990194][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.008668][ T75] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.045771][ T75] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.263107][ T83] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.280771][ T83] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.361051][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.386728][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.516254][ T5732] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.566442][ T5732] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.818930][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.836950][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.461256][ T5581] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 185.321707][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.363151][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.563273][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.620122][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.797201][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.841157][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.017409][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.062063][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.688715][ T5677] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 186.738727][ T5681] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 186.874869][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.895481][ T5677] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.920870][ T5677] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.930634][ T5681] usb 1-1: Using ep0 maxpacket: 32 [ 186.935600][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.967180][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.982125][ T5677] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.996118][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.014326][ T5677] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.022498][ T5681] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.022678][ T5681] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 187.070401][ T5677] usb 4-1: config 0 descriptor?? [ 187.076513][ T5681] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.156163][ T5681] usb 1-1: config 0 descriptor?? [ 187.214544][ T5681] hub 1-1:0.0: USB hub found [ 187.336358][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.384772][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.418813][ T5681] hub 1-1:0.0: 1 port detected [ 187.437481][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.494746][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.780455][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.802685][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.834106][ T5677] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 187.957593][ T5677] usb 4-1: USB disconnect, device number 2 [ 188.052397][ T5681] hub 1-1:0.0: activate --> -90 [ 188.669019][ T5681] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 188.676356][ T5679] usb 1-1: USB disconnect, device number 2 [ 188.704683][ T5681] usb 1-1-port1: connect-debounce failed [ 188.721513][ T29] audit: type=1800 audit(1780633997.336:2): pid=5867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.10" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 188.887157][ T5863] fido_id[5863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 188.938481][ T5677] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 189.165226][ T5677] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 189.189979][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.351950][ T5677] usb 3-1: config 0 descriptor?? [ 189.412769][ T5677] pwc: Samsung MPC-C10 USB webcam detected. [ 189.696804][ T5677] pwc: send_video_command error -71 [ 189.726214][ T5677] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 189.756546][ T5677] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 189.845087][ T5677] usb 3-1: USB disconnect, device number 2 [ 190.259606][ T5677] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 190.464708][ T5677] usb 3-1: New USB device found, idVendor=055d, idProduct=9000, bcdDevice=31.44 [ 190.500601][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.576277][ T5677] usb 3-1: config 0 descriptor?? [ 190.589598][ T5679] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 190.679570][ T5677] pwc: Samsung MPC-C10 USB webcam detected. [ 190.857289][ T5868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.918128][ T5679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.943078][ T5868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.957375][ T5679] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.971964][ T5679] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 190.987223][ T5679] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.027591][ T5679] usb 1-1: config 0 descriptor?? [ 191.233885][ T5677] pwc: recv_control_msg error -32 req 02 val 2b00 [ 191.282373][ T5677] pwc: recv_control_msg error -32 req 02 val 2700 [ 191.317654][ T5677] pwc: recv_control_msg error -32 req 04 val 1700 [ 191.351104][ T5677] pwc: recv_control_msg error -32 req 02 val 2c00 [ 191.358394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 191.392866][ T5677] pwc: recv_control_msg error -32 req 04 val 1000 [ 191.406817][ T5677] pwc: recv_control_msg error -32 req 04 val 1300 [ 191.420440][ T5677] pwc: recv_control_msg error -32 req 04 val 1400 [ 191.433253][ T5677] pwc: recv_control_msg error -32 req 02 val 2000 [ 191.649927][ T5677] pwc: recv_control_msg error -71 req 02 val 2200 [ 191.713277][ T5677] pwc: recv_control_msg error -71 req 06 val 0600 [ 191.740446][ T5677] pwc: recv_control_msg error -71 req 04 val 1500 [ 191.780455][ T5677] pwc: recv_control_msg error -71 req 02 val 2500 [ 191.807879][ T5677] pwc: recv_control_msg error -71 req 02 val 2400 [ 191.832726][ T5677] pwc: recv_control_msg error -71 req 02 val 2600 [ 191.882941][ T5677] pwc: recv_control_msg error -71 req 02 val 2900 [ 191.954674][ T5677] pwc: recv_control_msg error -71 req 02 val 2800 [ 192.028763][ T5677] pwc: recv_control_msg error -71 req 04 val 1100 [ 192.055410][ T5677] pwc: recv_control_msg error -71 req 04 val 1200 [ 192.099436][ T5677] pwc: Registered as video103. [ 192.155512][ T5677] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 192.324392][ T5677] usb 3-1: USB disconnect, device number 3 [ 194.078714][ T5681] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 194.268568][ T5681] usb 5-1: Using ep0 maxpacket: 32 [ 194.295620][ T5907] random: crng reseeded on system resumption [ 194.311848][ T5681] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 194.364097][ T5681] usb 5-1: config 0 has no interface number 0 [ 194.385007][ T5681] usb 5-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.447332][ T5681] usb 5-1: config 0 interface 89 has no altsetting 0 [ 194.514174][ T5681] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 194.557840][ T5681] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.604351][ T5681] usb 5-1: Product: syz [ 194.633754][ T5681] usb 5-1: Manufacturer: syz [ 194.670021][ T5909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 194.676693][ T5909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 194.735481][ T5681] usb 5-1: SerialNumber: syz [ 194.779932][ T5681] usb 5-1: config 0 descriptor?? [ 194.892504][ T5909] vhci_hcd vhci_hcd.0: Device attached [ 194.915313][ T5681] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 194.961395][ T5681] em28xx 5-1:0.89: Video interface 89 found: [ 195.090139][ T5677] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 195.192045][ T5677] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 195.520040][ T5681] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 195.678971][ T5910] vhci_hcd: connection reset by peer [ 195.728045][ T141] vhci_hcd vhci_hcd.2: stop threads [ 195.750231][ T141] vhci_hcd vhci_hcd.2: release socket [ 195.799340][ T141] vhci_hcd vhci_hcd.2: disconnect device [ 196.431394][ T5681] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 196.482595][ T5681] em28xx 5-1:0.89: board has no eeprom [ 196.580742][ T5681] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 196.625980][ T5681] em28xx 5-1:0.89: analog set to bulk mode. [ 196.669668][ T30] em28xx 5-1:0.89: Registering V4L2 extension [ 196.737581][ T5681] usb 5-1: USB disconnect, device number 2 [ 196.800503][ T5681] em28xx 5-1:0.89: Disconnecting em28xx [ 196.825366][ T5679] usbhid 1-1:0.0: can't add hid device: -32 [ 196.840804][ T5679] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 196.859320][ T5700] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 197.099265][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.141536][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.203835][ T5700] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 197.267450][ T5700] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 197.322123][ T30] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 197.329526][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.360258][ T30] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 197.386177][ T5700] usb 3-1: config 0 descriptor?? [ 197.414055][ T30] em28xx 5-1:0.89: No AC97 audio processor [ 197.485950][ T30] usb 5-1: Decoder not found [ 197.523975][ T30] em28xx 5-1:0.89: failed to create media graph [ 197.575907][ T30] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 197.644731][ T30] em28xx 5-1:0.89: Registering snapshot button... [ 197.690321][ T30] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input6 [ 197.733077][ T30] em28xx 5-1:0.89: Remote control support is not available for this card. [ 197.742338][ T5681] em28xx 5-1:0.89: Closing input extension [ 197.751102][ T5681] em28xx 5-1:0.89: Deregistering snapshot button [ 197.823991][ T5681] em28xx 5-1:0.89: Freeing device [ 198.057380][ T5700] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 198.160923][ T5700] usb 3-1: USB disconnect, device number 4 [ 199.095956][ T5933] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 199.107739][ T11] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 199.275261][ T5929] fido_id[5929]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 199.340021][ T11] usb 5-1: Using ep0 maxpacket: 32 [ 199.386176][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.433838][ T11] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.520537][ T11] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 199.564191][ T11] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.626698][ T11] usb 5-1: config 0 descriptor?? [ 199.681608][ T11] hub 5-1:0.0: USB hub found [ 199.917386][ T11] hub 5-1:0.0: 1 port detected [ 200.195943][ T5684] usb 1-1: USB disconnect, device number 3 [ 200.327830][ T5677] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 200.549298][ T11] hub 5-1:0.0: activate --> -90 [ 200.675983][ T5947] fuse: Unknown parameter 'ù' [ 200.885755][ T5700] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 200.958678][ T5681] usb 5-1: USB disconnect, device number 3 [ 201.104723][ T5700] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 201.124809][ T5700] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 201.150191][ T5700] usb 1-1: Product: syz [ 201.157775][ T5700] usb 1-1: SerialNumber: syz [ 201.174046][ T5700] usb 1-1: config 0 descriptor?? [ 201.429462][ T30] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 201.451274][ T5700] hso 1-1:0.0: Failed to find BULK eps [ 201.609176][ T30] usb 2-1: Using ep0 maxpacket: 16 [ 201.640518][ T30] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 201.694441][ T30] usb 2-1: config 1 has no interface number 0 [ 201.720054][ T30] usb 2-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 43328, setting to 1024 [ 201.771147][ T30] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 201.819405][ T30] usb 2-1: config 1 interface 105 has no altsetting 0 [ 201.854889][ T30] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 201.887298][ T30] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 201.932658][ T30] usb 2-1: Product: syz [ 201.948180][ T30] usb 2-1: Manufacturer: syz [ 201.967110][ T30] usb 2-1: SerialNumber: syz [ 202.029693][ T5956] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 202.299008][ T30] aqc111 2-1:1.105: probe with driver aqc111 failed with error -22 [ 202.505185][ T30] usb 2-1: USB disconnect, device number 2 [ 202.904489][ T5970] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 202.928791][ T5700] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 203.118845][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.150617][ T5700] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.177629][ T5700] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.212080][ T5700] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.252969][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.319486][ T5700] usb 4-1: config 0 descriptor?? [ 203.810838][ T5700] usbhid 4-1:0.0: can't add hid device: -71 [ 203.835667][ T5700] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 203.890422][ T5700] usb 4-1: USB disconnect, device number 3 [ 203.953537][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.962678][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.027696][ T11] usb 1-1: USB disconnect, device number 4 [ 204.218915][ T5677] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 204.488178][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.525798][ T5677] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.578115][ T5677] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 204.606597][ T5677] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.666313][ T5677] usb 2-1: config 0 descriptor?? [ 206.279255][ T5700] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 206.469014][ T5700] usb 3-1: Using ep0 maxpacket: 32 [ 206.532986][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.576853][ T5700] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.621953][ T5700] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 206.662052][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.717868][ T5700] usb 3-1: config 0 descriptor?? [ 206.784838][ T5700] hub 3-1:0.0: USB hub found [ 207.158977][ T5700] hub 3-1:0.0: 1 port detected [ 207.900538][ T5700] hub 3-1:0.0: activate --> -90 [ 208.102466][ T5992] syz.0.48 uses obsolete (PF_INET,SOCK_PACKET) [ 208.367577][ T11] usb 3-1: USB disconnect, device number 5 [ 208.799439][ T6000] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 209.909186][ T6002] binder: 5991:6002 ioctl c0306201 0 returned -14 [ 209.948730][ T11] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 210.150798][ T11] usb 4-1: Using ep0 maxpacket: 16 [ 210.181587][ T11] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 210.210307][ T11] usb 4-1: config 1 has no interface number 0 [ 210.232352][ T11] usb 4-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 43328, setting to 1024 [ 210.267324][ T11] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 210.304355][ T11] usb 4-1: config 1 interface 105 has no altsetting 0 [ 210.343594][ T5677] usbhid 2-1:0.0: can't add hid device: -32 [ 210.357605][ T11] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 210.373410][ T5677] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 210.397582][ T11] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 210.424802][ T11] usb 4-1: Product: syz [ 210.438584][ T11] usb 4-1: Manufacturer: syz [ 210.457380][ T11] usb 4-1: SerialNumber: syz [ 210.508712][ T6004] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 210.772979][ T11] aqc111 4-1:1.105: probe with driver aqc111 failed with error -22 [ 211.006420][ T11] usb 4-1: USB disconnect, device number 4 [ 212.412403][ T5700] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 212.628916][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 212.670504][ T5700] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 212.711696][ T5700] usb 4-1: config 0 has no interface number 0 [ 212.733857][ T5700] usb 4-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 212.765789][ T5700] usb 4-1: config 0 interface 89 has no altsetting 0 [ 212.806617][ T5700] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 212.832259][ T5700] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.846281][ T5700] usb 4-1: Product: syz [ 212.874388][ T5700] usb 4-1: Manufacturer: syz [ 212.898809][ T5700] usb 4-1: SerialNumber: syz [ 212.921785][ T5700] usb 4-1: config 0 descriptor?? [ 212.969461][ T11] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 212.970788][ T5700] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 213.015706][ T5700] em28xx 4-1:0.89: Video interface 89 found: [ 213.258714][ T11] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 213.288718][ T11] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 213.328879][ T11] usb 1-1: Product: syz [ 213.343297][ T11] usb 1-1: SerialNumber: syz [ 213.388163][ T11] usb 1-1: config 0 descriptor?? [ 213.558163][ T5700] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 213.697897][ T11] hso 1-1:0.0: Failed to find BULK eps [ 213.851517][ T30] usb 2-1: USB disconnect, device number 3 [ 214.252916][ T5700] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 214.299228][ T5700] em28xx 4-1:0.89: board has no eeprom [ 214.378837][ T5700] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 214.410199][ T5700] em28xx 4-1:0.89: analog set to bulk mode. [ 214.431797][ T30] em28xx 4-1:0.89: Registering V4L2 extension [ 214.465100][ T5700] usb 4-1: USB disconnect, device number 5 [ 214.531883][ T5700] em28xx 4-1:0.89: Disconnecting em28xx [ 214.776686][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.60'. [ 214.795366][ T6027] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 214.843301][ T30] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 214.871464][ T30] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 214.893669][ T30] em28xx 4-1:0.89: No AC97 audio processor [ 214.938510][ T30] usb 4-1: Decoder not found [ 214.958600][ T30] em28xx 4-1:0.89: failed to create media graph [ 214.987988][ T30] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 215.039461][ T30] em28xx 4-1:0.89: Registering snapshot button... [ 215.088479][ T30] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input7 [ 215.103764][ T6029] Zero length message leads to an empty skb [ 215.150446][ T30] em28xx 4-1:0.89: Remote control support is not available for this card. [ 215.200979][ T5700] em28xx 4-1:0.89: Closing input extension [ 215.225227][ T5700] em28xx 4-1:0.89: Deregistering snapshot button [ 215.273047][ T5700] em28xx 4-1:0.89: Freeing device [ 216.162362][ T11] usb 1-1: USB disconnect, device number 5 [ 216.722495][ T5700] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 216.909611][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 216.991425][ T5700] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 217.041241][ T5700] usb 3-1: config 1 has no interface number 0 [ 217.131279][ T5700] usb 3-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid maxpacket 43328, setting to 1024 [ 217.179933][ T5700] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1024 [ 217.204857][ T5700] usb 3-1: config 1 interface 105 has no altsetting 0 [ 217.264702][ T5700] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 217.307905][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 217.321098][ T5700] usb 3-1: Product: syz [ 217.337582][ T5700] usb 3-1: Manufacturer: syz [ 217.354572][ T5700] usb 3-1: SerialNumber: syz [ 217.418523][ T6043] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 217.816444][ T5700] aqc111 3-1:1.105: probe with driver aqc111 failed with error -22 [ 218.039696][ T5700] usb 3-1: USB disconnect, device number 6 [ 219.398793][ T29] audit: type=1800 audit(1780634028.006:3): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.69" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 220.849300][ T5677] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 221.995953][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.014706][ T5677] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.025211][ T5677] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 222.076227][ T5677] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.117653][ T5677] usb 3-1: config 0 descriptor?? [ 222.194286][ T11] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 222.426540][ T11] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 222.458835][ T11] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 222.498980][ T11] usb 1-1: Product: syz [ 222.515623][ T11] usb 1-1: SerialNumber: syz [ 222.611928][ T11] usb 1-1: config 0 descriptor?? [ 223.010032][ T11] hso 1-1:0.0: Failed to find BULK eps [ 224.919115][ T11] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 225.119166][ T11] usb 4-1: Using ep0 maxpacket: 32 [ 225.153094][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.207133][ T11] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.225500][ T5684] usb 1-1: USB disconnect, device number 6 [ 225.271163][ T11] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.300728][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.394999][ T11] usb 4-1: config 0 descriptor?? [ 225.443563][ T11] hub 4-1:0.0: USB hub found [ 225.658053][ T11] hub 4-1:0.0: 1 port detected [ 226.367022][ T29] audit: type=1800 audit(1780634034.976:4): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.82" name="SYSV00000000" dev="tmpfs" ino=1 res=0 errno=0 [ 226.598864][ T11] hub 4-1:0.0: activate --> -90 [ 226.799406][ T30] usb 4-1: USB disconnect, device number 6 [ 228.261415][ T5677] usbhid 3-1:0.0: can't add hid device: -32 [ 228.290796][ T5677] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 229.370771][ T6105] netlink: 8 bytes leftover after parsing attributes in process `syz.0.87'. [ 229.539205][ T6114] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 229.838761][ T5677] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 230.046860][ T5677] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 230.122533][ T5677] usb 4-1: config 0 has no interface number 0 [ 230.162043][ T5677] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 28530, setting to 64 [ 230.232792][ T5677] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 230.287521][ T5677] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 230.318629][ T5677] usb 4-1: Manufacturer: syz [ 230.351048][ T5677] usb 4-1: SerialNumber: syz [ 230.491154][ T5677] usb 4-1: config 0 descriptor?? [ 230.516877][ T6114] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 230.627361][ T6123] ===================================================== [ 230.634861][ T6123] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 230.643514][ T6123] mptcp_established_options+0x112f/0x3530 [ 230.649925][ T6123] tcp_established_options+0x312/0xcc0 [ 230.655526][ T6123] __tcp_transmit_skb+0x5dc/0x5fe0 [ 230.660876][ T6123] __tcp_send_ack+0x967/0xad0 [ 230.665672][ T6123] tcp_send_ack+0x3d/0x60 [ 230.675033][ T6123] mptcp_subflow_shutdown+0x164/0x690 [ 230.681932][ T6123] mptcp_check_send_data_fin+0x31b/0x3d0 [ 230.687728][ T6123] __mptcp_close+0x860/0x1360 [ 230.696165][ T6123] mptcp_close+0x42/0x260 [ 230.700778][ T6123] inet_release+0x1ee/0x2a0 [ 230.705434][ T6123] sock_close+0xd6/0x2f0 [ 230.710011][ T6123] __fput+0x60e/0x1010 [ 230.714206][ T6123] ____fput+0x25/0x30 [ 230.718493][ T6123] task_work_run+0x208/0x2b0 [ 230.723212][ T6123] exit_to_user_mode_loop+0x505/0x2420 [ 230.728949][ T6123] __do_fast_syscall_32+0x2dc/0x470 [ 230.734263][ T6123] do_fast_syscall_32+0x37/0x80 [ 230.740719][ T6123] do_SYSENTER_32+0x1f/0x30 [ 230.745330][ T6123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.751930][ T6123] [ 230.754315][ T6123] Local variable opts created at: [ 230.759533][ T6123] __tcp_transmit_skb+0x4d/0x5fe0 [ 230.764698][ T6123] __tcp_send_ack+0x967/0xad0 [ 230.770265][ T6123] [ 230.776279][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.0.91 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.786869][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.787156][ T6120] syzkaller0: entered promiscuous mode [ 230.797214][ T6123] ===================================================== [ 230.797268][ T6123] Disabling lock debugging due to kernel taint [ 230.898744][ T6120] syzkaller0: entered allmulticast mode [ 230.902924][ T6123] Kernel panic - not syncing: kmsan.panic set ... [ 230.903007][ T6123] CPU: 1 UID: 0 PID: 6123 Comm: syz.0.91 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 230.903148][ T6123] Tainted: [B]=BAD_PAGE [ 230.903187][ T6123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.903256][ T6123] Call Trace: [ 230.903293][ T6123] [ 230.903331][ T6123] __dump_stack+0x26/0x30 [ 230.903455][ T6123] dump_stack_lvl+0x50/0x1c0 [ 230.903569][ T6123] ? dump_stack+0x12/0x25 [ 230.903686][ T6123] dump_stack+0x1e/0x25 [ 230.903796][ T6123] vpanic+0x7b4/0x1430 [ 230.903949][ T6123] panic+0x15d/0x160 [ 230.904126][ T6123] kmsan_report+0x31a/0x320 [ 230.904274][ T6123] ? __msan_warning+0x1b/0x30 [ 230.904410][ T6123] ? mptcp_established_options+0x112f/0x3530 [ 230.904563][ T6123] ? tcp_established_options+0x312/0xcc0 [ 230.904670][ T6123] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 230.904782][ T6123] ? __tcp_send_ack+0x967/0xad0 [ 230.999030][ T6123] ? tcp_send_ack+0x3d/0x60 [ 231.003727][ T6123] ? mptcp_subflow_shutdown+0x164/0x690 [ 231.009467][ T6123] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 231.015472][ T6123] ? __mptcp_close+0x860/0x1360 [ 231.020505][ T6123] ? mptcp_close+0x42/0x260 [ 231.025148][ T6123] ? inet_release+0x1ee/0x2a0 [ 231.029999][ T6123] ? sock_close+0xd6/0x2f0 [ 231.034558][ T6123] ? __fput+0x60e/0x1010 [ 231.038948][ T6123] ? ____fput+0x25/0x30 [ 231.043240][ T6123] ? task_work_run+0x208/0x2b0 [ 231.048130][ T6123] ? exit_to_user_mode_loop+0x505/0x2420 [ 231.053913][ T6123] ? __do_fast_syscall_32+0x2dc/0x470 [ 231.059438][ T6123] ? do_fast_syscall_32+0x37/0x80 [ 231.064600][ T6123] ? do_SYSENTER_32+0x1f/0x30 [ 231.069412][ T6123] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.076097][ T6123] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.082777][ T6123] ? kmsan_get_metadata+0xf1/0x160 [ 231.088090][ T6123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 231.094108][ T6123] ? filter_irq_stacks+0x49/0x190 [ 231.099281][ T6123] ? stack_depot_save_flags+0x35/0x790 [ 231.104890][ T6123] ? kmsan_get_metadata+0xf1/0x160 [ 231.110196][ T6123] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 231.116712][ T6123] ? kmsan_get_metadata+0xf1/0x160 [ 231.122023][ T6123] __msan_warning+0x1b/0x30 [ 231.126703][ T6123] mptcp_established_options+0x112f/0x3530 [ 231.132757][ T6123] tcp_established_options+0x312/0xcc0 [ 231.138394][ T6123] __tcp_transmit_skb+0x5dc/0x5fe0 [ 231.143682][ T6123] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 231.150042][ T6123] ? kmsan_get_metadata+0xf1/0x160 [ 231.155355][ T6123] ? kmsan_get_metadata+0xf1/0x160 [ 231.160662][ T6123] ? kmsan_get_metadata+0xf1/0x160 [ 231.165949][ T6123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 231.171942][ T6123] ? __alloc_skb+0xb7d/0x1190 [ 231.176794][ T6123] __tcp_send_ack+0x967/0xad0 [ 231.181625][ T6123] tcp_send_ack+0x3d/0x60 [ 231.186143][ T6123] mptcp_subflow_shutdown+0x164/0x690 [ 231.191717][ T6123] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 231.197722][ T6123] mptcp_check_send_data_fin+0x31b/0x3d0 [ 231.203548][ T6123] __mptcp_close+0x860/0x1360 [ 231.208420][ T6123] ? __pfx_mptcp_close+0x10/0x10 [ 231.213508][ T6123] mptcp_close+0x42/0x260 [ 231.217964][ T6123] ? __pfx_mptcp_close+0x10/0x10 [ 231.223048][ T6123] inet_release+0x1ee/0x2a0 [ 231.227731][ T6123] ? __pfx_inet_release+0x10/0x10 [ 231.232921][ T6123] sock_close+0xd6/0x2f0 [ 231.237307][ T6123] ? __pfx_sock_close+0x10/0x10 [ 231.242255][ T6123] __fput+0x60e/0x1010 [ 231.246500][ T6123] ? __pfx_____fput+0x10/0x10 [ 231.251292][ T6123] ____fput+0x25/0x30 [ 231.255401][ T6123] task_work_run+0x208/0x2b0 [ 231.260120][ T6123] exit_to_user_mode_loop+0x505/0x2420 [ 231.265757][ T6123] ? __ia32_sys_close_range+0x96/0xe0 [ 231.271273][ T6123] __do_fast_syscall_32+0x2dc/0x470 [ 231.276619][ T6123] do_fast_syscall_32+0x37/0x80 [ 231.281589][ T6123] do_SYSENTER_32+0x1f/0x30 [ 231.286226][ T6123] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 231.292739][ T6123] RIP: 0023:0xf7f9501c [ 231.296903][ T6123] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 231.316639][ T6123] RSP: 002b:00000000ff91c48c EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 231.325202][ T6123] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 231.333254][ T6123] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.341313][ T6123] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 231.349367][ T6123] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 231.357716][ T6123] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 231.365812][ T6123] [ 231.369211][ T6123] Kernel Offset: disabled [ 231.373588][ T6123] Rebooting in 86400 seconds..