last executing test programs: 17m37.366893754s ago: executing program 32 (id=567): syz_usb_connect$cdc_ncm(0x4, 0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="1201500202000902710002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d1524120004a317a88b045e4f01a607c0ffcb7e392a09058103000258057f0904010000020d00000904010102020d"], 0x0) socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe2$9p(&(0x7f0000000240), 0x800) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000001c0), 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x78, 0x0, @multicast1=0xe0000300}}}}}, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @empty}}) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) 17m9.943284298s ago: executing program 2 (id=642): modify_ldt$write(0x1, &(0x7f0000000040)={0x401, 0x1000, 0x4000, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1}, 0x10) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, &(0x7f00000000c0)={&(0x7f0000000000)=""/120, 0x78}) 17m8.951648122s ago: executing program 2 (id=643): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000008000000"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 17m7.358983448s ago: executing program 2 (id=647): r0 = socket$packet(0x11, 0x2, 0x300) recvmmsg(r0, &(0x7f0000000480), 0x0, 0x10022, 0x0) 17m7.15590865s ago: executing program 2 (id=649): getpid() setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@mangle={'mangle\x00', 0x1f, 0x6, 0x438, 0x0, 0x1f0, 0xc0, 0x158, 0x158, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, &(0x7f00000000c0), {[{{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xdb}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x5, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010100, @private=0xa010101, 0xff, 0xffffffff, 'veth0_macvtap\x00', 'ip6_vti0\x00', {}, {}, 0x16, 0x2, 0x10}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x81, 0x1}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0xff000000, 'veth0_to_bridge\x00', 'ip6_vti0\x00', {}, {0xff}, 0x5e, 0x1, 0x8}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr=0x64010101, @rand_addr=0x64010100, 0xff000000, 0x0, 'ipvlan0\x00', 'bridge0\x00', {0xff}, {}, 0x16, 0x3, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x80, 0x802, 0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = gettid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(r0, &(0x7f0000000140)='net/mcfilter6\x00') 17m5.717664538s ago: executing program 2 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setrlimit(0xa, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 17m3.637634778s ago: executing program 2 (id=653): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x7c84, 0x26, 0x3, 0x4, 0xbf9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16m50.363647564s ago: executing program 33 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x5) setresuid(r2, 0x0, 0xee01) getuid() sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1313}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) 16m48.250732397s ago: executing program 34 (id=651): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000f00000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 16m47.194001121s ago: executing program 35 (id=653): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x7c84, 0x26, 0x3, 0x4, 0xbf9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m46.757196074s ago: executing program 5 (id=596): recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/26, 0x1a}, 0x12}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4ff1, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)=ANY=[@ANYBLOB="8c050000130001002bbd7000fb0e0025080054"], 0x58c}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x7c84, 0x26, 0x3, 0x4, 0xbf9]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15m43.449492572s ago: executing program 5 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYBLOB="030704707900000000000100040004"], 0x18}}, 0x0) 15m38.143808728s ago: executing program 5 (id=739): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresuid(0x0, 0xee01, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 15m36.532250449s ago: executing program 5 (id=743): socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x8000000, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) 15m35.63241809s ago: executing program 5 (id=748): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15m26.016016402s ago: executing program 7 (id=765): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0xb2, 0xc5, 0x3c, 0x8, 0x7c9, 0x10, 0xa5f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x40, 0x0, 0x0, 0xff, 0xff, 0x0, 0x2c}}]}}]}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000001c0)="6fdcaffa7b970b6e93", 0x9}], 0x2}}], 0x1, 0x20000804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0xffffffffffffffff, 0x2e, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c0000002300090425bd70000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x40042, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="dc000000150020002abd7000ffdbdf2511000000d3e776bb78090e57ade7bb1be560ace8fdbb164c93d2971da1fcfc23bf6a337a2465e2607572594697f897938ab5bcf0161ea441844a6436d9cc05d78260e29940edf92dc5fe09fb8a39194302b0a98fe929c5c28c6d8c91fe7e71ed0a6f89653b1484c7564cc4ebca4eb793fa25c9e75080f4e96f9e1b8072deabf78c9e38698437f72d19f587c5e0ccc89611009e2282152d889df82620d35c2cea2c93f7974f267637788a9461a1da0d10e503681e2c364739d2840800b700ac1e00010800e600", @ANYRES32=r5, @ANYBLOB="000005e10986185393d38329f886a81783d4e634720287e32e20c0fd47dfa01054a61be795ceb7c72545d0851eb85bb7a4c597025eee4092d190b6af72d262f4a3bf"], 0xdc}, 0x1, 0x0, 0x0, 0x4004890}, 0x840) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000080)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='GPL\x00', 0x9, 0xb3, &(0x7f0000000100)=""/179, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000002c0)=[{0x1, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x0, 0xa}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xf, 0x9}, {0x3, 0x4, 0x4, 0x7}, {0x3, 0x1, 0xd, 0x5}, {0x4, 0x3, 0x9, 0x9}, {0x0, 0x3, 0x8, 0x3}], 0x10, 0x7}, 0x94) 15m20.407123272s ago: executing program 36 (id=748): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 15m20.308833342s ago: executing program 7 (id=772): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) 15m19.722284729s ago: executing program 7 (id=773): r0 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000280), &(0x7f0000000a80)=@udp6, 0x2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000080)) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x1ffffffffffffe, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r7, &(0x7f0000000100)={0x7, 0x1b, 0x1}, 0x7) r8 = eventfd2(0xffff5faa, 0x80000) close(0x3) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ftruncate(r10, 0x1000) sendfile(r8, r10, 0x0, 0x10000000000c352) splice(r6, 0x0, r5, 0x0, 0x100, 0x0) 15m18.140280248s ago: executing program 7 (id=775): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/cgroup.procs\x00', 0x2, 0x0) read(r1, &(0x7f0000000080)=""/1, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0x65, 0x0, &(0x7f00000000c0)) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mount(0x0, 0x0, &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2e40ab, &(0x7f0000000200)=ANY=[@ANYBLOB]) r6 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r7 = io_uring_setup(0x7d3, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c00000000000000000000000700000089"], 0x40}, 0x20000000) close_range(r7, r7, 0x0) clock_nanosleep(0xfffffff2, 0x0, &(0x7f0000000140)={0x77359400}, &(0x7f0000000040)) close_range(r6, 0xffffffffffffffff, 0x0) add_key$fscrypt_v1(0x0, &(0x7f0000000300)={'fscrypt:', @desc4}, 0x0, 0x0, 0xffffffffffffffff) close_range(r0, 0xffffffffffffffff, 0x0) 15m17.067878038s ago: executing program 7 (id=780): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_pid(r3, &(0x7f0000000000)=0xffffffffffffffff, 0x12) sched_setaffinity(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) capset(0x0, &(0x7f0000000040)={0x200000, 0x200000, 0x2, 0x0, 0x400000}) openat$dir(0xffffffffffffff9c, 0x0, 0x800, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101701) ioctl$USBDEVFS_CLEAR_HALT(r4, 0x80045515, &(0x7f0000000040)={0x1, 0x1}) keyctl$chown(0x4, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d00000000"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) getpid() r5 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r5, &(0x7f0000000000)={0xa0000001}) 15m14.365324552s ago: executing program 7 (id=783): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) r5 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 15m1.349527335s ago: executing program 6 (id=808): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x123a00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000180), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 15m1.134678785s ago: executing program 6 (id=809): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x2, 0x40, 0x9}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 15m0.727415491s ago: executing program 6 (id=810): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x110, 0xb2, 0xc5, 0x3c, 0x8, 0x7c9, 0x10, 0xa5f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0xf, "", [{{0x9, 0x4, 0x40, 0x0, 0x0, 0xff, 0xff, 0x0, 0x2c}}]}}]}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}, {&(0x7f00000001c0)="6fdcaffa7b970b6e93", 0x9}], 0x2}}], 0x1, 0x20000804) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) add_key(&(0x7f0000000000)='.dead\x00', 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x2dc}}, 0x4008000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0xffffffffffffffff, 0x2e, 0x1, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)=ANY=[@ANYBLOB="1c0000002300090425bd70000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000480), 0x40042, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000640)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004890}, 0x840) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000200)={{0x1, 0x1, 0x18, r3, {0x1}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x2, &(0x7f0000000080)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}], &(0x7f00000000c0)='GPL\x00', 0x9, 0xb3, &(0x7f0000000100)=""/179, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x3, 0x7}, 0x10, 0x0, 0x0, 0x8, 0x0, &(0x7f00000002c0)=[{0x1, 0x5, 0x7, 0x9}, {0x4, 0x4, 0x0, 0xa}, {0x3, 0x3, 0x1, 0x3}, {0x4, 0x2, 0xf, 0x9}, {0x3, 0x4, 0x4, 0x7}, {0x3, 0x1, 0xd, 0x5}, {0x4, 0x3, 0x9, 0x9}, {0x0, 0x3, 0x8, 0x3}], 0x10, 0x7}, 0x94) 14m59.248520173s ago: executing program 37 (id=783): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x890) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=@delsa={0x28, 0x11, 0x1, 0x70bd28, 0x25dfdbfe, {@in=@rand_addr=0x64010100, 0x4d5, 0x2}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) madvise(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x15) r5 = syz_io_uring_setup(0x2532, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x3, 0x20e}, &(0x7f0000000080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 14m56.515043465s ago: executing program 6 (id=816): socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000040)='rootmode', 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x9f9ec54af98ce9ae}, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0208000004000000010000000900eccb000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 14m55.804017974s ago: executing program 6 (id=819): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x2, 0x40, 0x9}) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 14m54.022727787s ago: executing program 6 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) sendto$packet(r4, &(0x7f0000000380)='\x00', 0x1, 0x40000c5, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0x2f, 0x6, @random="52a929fe9c6c"}, 0x14) 14m38.607945391s ago: executing program 38 (id=824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket$packet(0x11, 0x3, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) sendto$packet(r4, &(0x7f0000000380)='\x00', 0x1, 0x40000c5, &(0x7f00000001c0)={0x11, 0xf7, 0x0, 0x1, 0x2f, 0x6, @random="52a929fe9c6c"}, 0x14) 13m47.470780414s ago: executing program 8 (id=924): r0 = fsopen(&(0x7f00000000c0)='devpts\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000040)='ro\x00', 0x0, 0x0) 13m46.439824772s ago: executing program 8 (id=926): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) openat$urandom(0xffffffffffffff9c, &(0x7f0000000500), 0x123a00, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) pipe2(&(0x7f0000000040), 0x0) pipe2$9p(&(0x7f0000000180), 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 13m45.013303902s ago: executing program 8 (id=928): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000e00)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000200)="cd", 0x1}], 0x1}}], 0x3, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000000c0)={0x10, 0x4, 0x2, 0xa87, 0xa, 0x69, 0x9bd4, 0x81, r2}, 0x20) 13m44.938488257s ago: executing program 8 (id=929): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000140)={0x0}) 13m44.819885026s ago: executing program 8 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0\x00') 13m44.79670321s ago: executing program 8 (id=931): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 13m29.466806977s ago: executing program 39 (id=931): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) 2m44.413718606s ago: executing program 4 (id=2389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = mq_open(&(0x7f0000000240)='kdn\x00\xb4lb0\x00\xb2\x0e\xe5\xff\xb9', 0x40, 0x40, &(0x7f00000000c0)={0x3, 0x10098, 0xfffffffffffffff8, 0x1}) mq_notify(r1, &(0x7f0000000180)={0x0, 0x2d, 0x0, @thr={&(0x7f0000000280)="7d01a4e134ea95f80275099a1bca71597acc0f6c8a8f7ebcd061934de6b717cd36fe8cef35b6ef6f742d350f1bb0d22b82865cc88de20fab8becb05597a4ec4a276ec87580e7f8c5ec2acd868e278c11dc8f443c3fbb194f26a4a73c323e36f55b151ef52c5e8f636c0e4bfbb024d744760570384f6987bee49bf1810ae1f954c05b30e6db0b742864ad16cda0343dbf3b4847f8be1e0bd89d89f845f9dfdde79cd43a24db0fc0b064bee7ad01eb381748bc2a2ca618ee0847e67b2b09550068b0a972e0645021a22fd0c4963aacfa63321bc279a99aba651a4ce06645", &(0x7f0000000380)}}) socket$netlink(0x10, 0x3, 0x0) socket(0x2c, 0x800, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$instantiate(0xc, 0x0, 0x0, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448e6, &(0x7f0000000500)="d7") sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) 2m43.1909433s ago: executing program 4 (id=2390): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) timer_create(0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket(0xa, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r4) sendmsg$kcm(r4, 0x0, 0x886f5cad098f3d1) r5 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) readlinkat(r5, 0x0, &(0x7f0000000140)=""/189, 0xbd) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000020c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000002100)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0xffffffd7, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r6, 0x7ffe}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='projid_map\x00') preadv(r7, 0x0, 0x0, 0x10, 0xffffffff) 2m41.269400781s ago: executing program 4 (id=2392): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) openat$sysfs(0xffffffffffffff9c, 0x0, 0x12400, 0x49) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 2m39.316611661s ago: executing program 4 (id=2394): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x7b1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0xfe, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0xf, 0xfd}}}}}]}}]}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m29.508030581s ago: executing program 4 (id=2412): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r2, 0x29, 0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m27.703018089s ago: executing program 4 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getrlimit(0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) 2m18.933600941s ago: executing program 3 (id=2428): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) 2m17.466698074s ago: executing program 3 (id=2431): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) close(0x3) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000000)=0x4) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m12.401845832s ago: executing program 40 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getrlimit(0x2, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0) 2m11.59019496s ago: executing program 3 (id=2440): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf01b}, {0x0}], 0x2) syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x8, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private=0xf5}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x12}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x4305000f}}}}}}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x3284b164842c97f7, 0x8014) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r3, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) ftruncate(0xffffffffffffffff, 0xc17a) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r4, 0x28, 0x6, &(0x7f0000001680)=""/59, &(0x7f0000000000)=0x3b) 2m8.863341879s ago: executing program 3 (id=2442): sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r2, 0x80184132, &(0x7f0000000180)) 2m7.740528105s ago: executing program 3 (id=2444): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x8, 0x0, {}, {0x0, 0xe, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x100}) 2m4.772142914s ago: executing program 3 (id=2446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000054) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x4800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m49.578349747s ago: executing program 41 (id=2446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$netlink(0x10, 0x3, 0xc) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000054) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x4800) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 11.246305324s ago: executing program 0 (id=2674): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000110001000000", @ANYRES32=r2, @ANYBLOB="81020000000000000c001a8004000480"], 0x2c}}, 0x0) 9.308242887s ago: executing program 1 (id=2678): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1080, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@fd={0x23e65978, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x2, 0x2, 0x20, 0x10, 0x2e, 0x4, "a4e2221c"}, 0x8}) 7.909789538s ago: executing program 1 (id=2679): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = socket$inet(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x7151, 0x0) 7.700658386s ago: executing program 9 (id=2681): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r2 = dup3(r1, r0, 0x80000) write$cgroup_int(r2, &(0x7f0000000180)=0x7, 0x12) write$UHID_CREATE2(r1, &(0x7f0000000640)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x0, 0x2, 0x4, 0x6, 0x4, 0x882}}, 0x118) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendto$inet(r1, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 7.636634433s ago: executing program 9 (id=2682): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) 7.165402475s ago: executing program 9 (id=2683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 7.078849835s ago: executing program 0 (id=2684): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 5.848966256s ago: executing program 9 (id=2685): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000080)={0xf0f007, 0x3}) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 5.807041151s ago: executing program 0 (id=2686): r0 = syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) pread64(r2, &(0x7f00000000c0)=""/22, 0x16, 0x6) 5.109948351s ago: executing program 9 (id=2687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1080, 0x8000000000002}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0xfffffffffffffffa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) read$FUSE(r3, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r4 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_DQBUF(r4, 0xc0585611, &(0x7f0000000200)=@fd={0x23e65978, 0x1, 0x4, 0x4, 0x1, {0x77359400}, {0x2, 0x2, 0x20, 0x10, 0x2e, 0x4, "a4e2221c"}, 0x8}) 4.756378144s ago: executing program 0 (id=2688): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) rt_tgsigqueueinfo(0x0, 0x0, 0x7, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x1b, "8a6035ceeae3ecc42317afad010000000000000400"}) close(r1) 4.396785569s ago: executing program 1 (id=2689): futex(0x0, 0x8c, 0x1, 0x0, 0x0, 0x2) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x9}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) syz_clone(0x4000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x18, 0x0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x4}]}, 0x18}}, 0x0) io_submit(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 3.005546905s ago: executing program 9 (id=2690): r0 = fanotify_init(0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1000000000000000010010"], 0x10}}], 0x1, 0x4000001) write$binfmt_elf64(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4622"], 0x18) 2.891879796s ago: executing program 1 (id=2691): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000000) pipe2$watch_queue(0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x7000000}) 2.23752021s ago: executing program 1 (id=2692): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000110001000000", @ANYRES32=r2, @ANYBLOB="81020000000000000c001a8004000480"], 0x2c}}, 0x0) 2.152395785s ago: executing program 0 (id=2693): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) 918.963053ms ago: executing program 0 (id=2694): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x7, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 0s ago: executing program 1 (id=2695): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4000c00) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={@dev={0xfe, 0x80, '\x00', 0x20}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @loopback, 0x5, 0x0, 0x6, 0x500, 0xcbb0, 0x80100105, r3}) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) sendmmsg$inet(r4, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 39.972567][T10104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 739.984572][T10490] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.984887][T10490] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.985135][T10490] bridge_slave_0: entered allmulticast mode [ 740.012025][T10490] bridge_slave_0: entered promiscuous mode [ 740.078248][T10490] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.078408][T10490] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.078661][T10490] bridge_slave_1: entered allmulticast mode [ 740.083318][T10490] bridge_slave_1: entered promiscuous mode [ 740.271857][T10490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.303772][T10209] 8021q: adding VLAN 0 to HW filter on device team0 [ 740.357751][T10490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.616704][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.616971][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 740.620853][T10490] team0: Port device team_slave_0 added [ 740.674695][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.675974][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 740.683051][T10490] team0: Port device team_slave_1 added [ 740.809758][T10490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.809778][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.809806][T10490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.982355][T10490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.982369][T10490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.982385][T10490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.050172][T10490] hsr_slave_0: entered promiscuous mode [ 742.051670][T10490] hsr_slave_1: entered promiscuous mode [ 742.052837][T10490] debugfs: 'hsr0' already exists in 'hsr' [ 742.052865][T10490] Cannot create hsr debugfs directory [ 742.063198][T10104] veth0_vlan: entered promiscuous mode [ 742.616032][T10104] veth1_vlan: entered promiscuous mode [ 745.124813][T10104] veth0_macvtap: entered promiscuous mode [ 745.130241][T10298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.378717][ T6117] bridge_slave_1: left allmulticast mode [ 745.378746][ T6117] bridge_slave_1: left promiscuous mode [ 745.378995][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.557623][ T6117] bridge_slave_0: left allmulticast mode [ 745.557655][ T6117] bridge_slave_0: left promiscuous mode [ 745.557923][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.766396][ T6117] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.836375][ T6117] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.878937][ T6117] bond0 (unregistering): Released all slaves [ 747.112494][T10104] veth1_macvtap: entered promiscuous mode [ 747.435666][ T6117] hsr_slave_0: left promiscuous mode [ 747.480368][ T6117] hsr_slave_1: left promiscuous mode [ 747.481501][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.552663][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.552745][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.570336][ T6117] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.723156][ T6117] veth1_macvtap: left promiscuous mode [ 747.723280][ T6117] veth0_macvtap: left promiscuous mode [ 747.723576][ T6117] veth1_vlan: left promiscuous mode [ 747.723774][ T6117] veth0_vlan: left promiscuous mode [ 748.918100][ T6117] team0 (unregistering): Port device team_slave_1 removed [ 748.966202][ T6117] team0 (unregistering): Port device team_slave_0 removed [ 749.236750][T10298] 8021q: adding VLAN 0 to HW filter on device team0 [ 749.377021][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.379439][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.413329][T10209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 749.439875][T10104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 749.492917][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.493071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.529189][T10104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 749.825109][ T6118] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.852553][ T6118] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.866198][ T6118] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 749.873560][ T6118] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 750.854492][T10209] veth0_vlan: entered promiscuous mode [ 751.128242][T10209] veth1_vlan: entered promiscuous mode [ 751.182492][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 751.215974][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 751.219259][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 751.235584][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 751.253889][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 751.382348][T10490] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 751.449169][T10490] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 751.514769][T10490] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 751.623986][T10490] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 752.289877][T10209] veth0_macvtap: entered promiscuous mode [ 752.368589][T10209] veth1_macvtap: entered promiscuous mode [ 753.044386][ T1508] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.169410][T10298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 753.307208][ T5800] Bluetooth: hci0: command tx timeout [ 753.492488][ T1508] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 753.638624][T10209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 753.999661][ T1508] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.117856][T10209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 754.434100][ T1508] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 754.544643][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.575895][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.597186][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.628490][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 754.850089][T10690] chnl_net:caif_netlink_parms(): no params data found [ 755.400059][ T5800] Bluetooth: hci0: command tx timeout [ 756.336769][T10490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 756.338396][ T6117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 756.338418][ T6117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 756.344832][T10298] veth0_vlan: entered promiscuous mode [ 756.346886][T10690] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.347084][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.347284][T10690] bridge_slave_0: entered allmulticast mode [ 756.350703][T10690] bridge_slave_0: entered promiscuous mode [ 756.371121][T10690] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.371245][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.371470][T10690] bridge_slave_1: entered allmulticast mode [ 756.374105][T10690] bridge_slave_1: entered promiscuous mode [ 756.377500][ T1508] bridge_slave_1: left allmulticast mode [ 756.377525][ T1508] bridge_slave_1: left promiscuous mode [ 756.377733][ T1508] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.519178][ T1508] bridge_slave_0: left allmulticast mode [ 756.519211][ T1508] bridge_slave_0: left promiscuous mode [ 756.519505][ T1508] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.433734][ T1508] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.484014][ T5800] Bluetooth: hci0: command tx timeout [ 757.492707][ T1508] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.539718][ T1508] bond0 (unregistering): Released all slaves [ 757.751122][T10690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.792824][T10690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.000274][T10298] veth1_vlan: entered promiscuous mode [ 758.003188][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.003210][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.217181][T10490] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.227876][T10690] team0: Port device team_slave_0 added [ 758.370742][T10690] team0: Port device team_slave_1 added [ 759.687376][ T5800] Bluetooth: hci0: command tx timeout [ 759.757224][ T1508] hsr_slave_0: left promiscuous mode [ 759.815782][ T1508] hsr_slave_1: left promiscuous mode [ 759.819144][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 759.819177][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.887758][ T1508] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 759.887790][ T1508] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.967381][ T1508] veth1_macvtap: left promiscuous mode [ 759.967468][ T1508] veth0_macvtap: left promiscuous mode [ 759.967747][ T1508] veth1_vlan: left promiscuous mode [ 759.967936][ T1508] veth0_vlan: left promiscuous mode [ 760.786217][ T1508] team0 (unregistering): Port device team_slave_1 removed [ 760.846367][ T1508] team0 (unregistering): Port device team_slave_0 removed [ 761.288301][ T6118] bridge0: port 1(bridge_slave_0) entered blocking state [ 761.288698][ T6118] bridge0: port 1(bridge_slave_0) entered forwarding state [ 761.311161][T10690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.311180][T10690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.311205][T10690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.357668][T10690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.357686][T10690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.357711][T10690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.407828][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 761.408124][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 761.640400][T10690] hsr_slave_0: entered promiscuous mode [ 761.642051][T10690] hsr_slave_1: entered promiscuous mode [ 761.647086][T10690] debugfs: 'hsr0' already exists in 'hsr' [ 761.647112][T10690] Cannot create hsr debugfs directory [ 761.959694][T10298] veth0_macvtap: entered promiscuous mode [ 762.045616][T10298] veth1_macvtap: entered promiscuous mode [ 762.441555][T10298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.626386][T10298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.773764][ T8663] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.831495][ T8663] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.105763][ T8663] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.109768][ T8663] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 764.380738][ T6117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.380763][ T6117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.474857][T10490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.591819][ T6117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.591842][ T6117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 764.849212][T10490] veth0_vlan: entered promiscuous mode [ 765.167253][T10490] veth1_vlan: entered promiscuous mode [ 765.376665][T10690] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 765.956474][T10690] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 767.620621][T10690] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 767.815682][T10690] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 768.066203][T10490] veth0_macvtap: entered promiscuous mode [ 768.166626][T10490] veth1_macvtap: entered promiscuous mode [ 768.435596][T10490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.521908][T10490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 769.687803][ T56] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.756609][T10922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1138'. [ 769.776735][ T56] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.782724][T10922] bond_slave_0: entered promiscuous mode [ 769.782752][T10922] bond_slave_0: entered allmulticast mode [ 769.793495][T10922] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1138'. [ 769.800068][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 769.812523][T10922] bond_slave_0: left promiscuous mode [ 769.812551][T10922] bond_slave_0: left allmulticast mode [ 769.817243][ T56] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 771.053381][T10690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.108405][ T8663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.108426][ T8663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.505181][ T6118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.505205][ T6118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 772.570095][T10690] 8021q: adding VLAN 0 to HW filter on device team0 [ 773.589978][ T6808] bridge0: port 1(bridge_slave_0) entered blocking state [ 773.590280][ T6808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.175162][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.226352][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 774.618728][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 778.381083][T10690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.932926][T10690] veth0_vlan: entered promiscuous mode [ 779.031264][T10690] veth1_vlan: entered promiscuous mode [ 779.522454][T10690] veth0_macvtap: entered promiscuous mode [ 779.595227][T11004] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1161'. [ 779.598146][T10690] veth1_macvtap: entered promiscuous mode [ 779.631071][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1161'. [ 780.594809][T10646] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 780.824444][T10646] usb 2-1: unable to get BOS descriptor or descriptor too short [ 780.965633][T10646] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 780.966331][T10646] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.966400][T10646] usb 2-1: Product: syz [ 780.966458][T10646] usb 2-1: Manufacturer: syz [ 780.966474][T10646] usb 2-1: SerialNumber: syz [ 781.542243][T10690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.417306][T10690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.985183][ T68] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.998856][T10646] usb 2-1: Unsupported UAC3 BADD profile [ 784.005367][ T6117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.081275][ T6117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.110033][ T6117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.197586][T10646] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 784.237100][T10646] usb 2-1: USB disconnect, device number 5 [ 784.613345][T11012] udevd[11012]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 785.081712][ T6118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.081735][ T6118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 785.545437][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 785.545460][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 787.086068][ T36] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 787.598821][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 787.730327][ T36] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 787.730402][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 787.730461][ T36] usb 5-1: Product: syz [ 787.730478][ T36] usb 5-1: Manufacturer: syz [ 787.730538][ T36] usb 5-1: SerialNumber: syz [ 790.918001][ T36] usb 5-1: Unsupported UAC3 BADD profile [ 791.164274][ T36] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 791.180763][T11069] 9p: Bad value for 'wfdno' [ 791.250352][ T36] usb 5-1: USB disconnect, device number 5 [ 791.608779][T11027] udevd[11027]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 794.985684][ T808] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 795.707688][ T808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 795.708857][ T808] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 795.708898][ T808] usb 2-1: can't read configurations, error -71 [ 796.006473][T11123] 9p: Bad value for 'wfdno' [ 797.625761][ T36] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 798.006751][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 798.091663][ T36] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 798.091734][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.091794][ T36] usb 1-1: Product: syz [ 798.091851][ T36] usb 1-1: Manufacturer: syz [ 798.091868][ T36] usb 1-1: SerialNumber: syz [ 801.049499][T11149] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 801.529697][ T36] usb 1-1: Unsupported UAC3 BADD profile [ 805.613175][ T36] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 806.056137][T11175] 9p: Bad value for 'wfdno' [ 806.140277][ T36] usb 1-1: USB disconnect, device number 6 [ 807.265582][ T36] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 807.645108][ T36] usb 1-1: unable to get BOS descriptor or descriptor too short [ 808.090439][T11027] udevd[11027]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 808.304396][ T36] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 808.304425][ T36] usb 1-1: can't read configurations, error -71 [ 809.138082][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.138175][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.745809][T11205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1213'. [ 809.879295][T11205] erspan0: entered promiscuous mode [ 809.879598][T11205] macvtap1: entered promiscuous mode [ 809.905077][T11205] macvtap1: entered allmulticast mode [ 809.905131][T11205] erspan0: entered allmulticast mode [ 811.599511][T11230] 9p: Bad value for 'wfdno' [ 814.012737][T11249] kvm: requested 18438 ns i8254 timer period limited to 200000 ns [ 814.046866][T11249] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 814.060694][T11249] kvm: requested 55314 ns i8254 timer period limited to 200000 ns [ 814.063448][T11249] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 814.107608][T11249] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 814.108308][T11249] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 814.108960][T11249] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 814.154094][T11249] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 814.180149][T11249] kvm: requested 59504 ns i8254 timer period limited to 200000 ns [ 814.183459][T11249] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 818.437063][T11340] 9p: Bad value for 'wfdno' [ 819.281384][T11368] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1258'. [ 823.322732][T11395] 9p: Bad value for 'wfdno' [ 826.429756][ T5800] Bluetooth: hci1: command 0x0406 tx timeout [ 827.728664][T11472] create_pit_timer: 12 callbacks suppressed [ 827.728687][T11472] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 827.772609][T11472] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 827.782657][T11472] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 827.990459][T11472] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 828.006489][T11472] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 828.057787][T11472] kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 828.061719][T11472] kvm: requested 116495 ns i8254 timer period limited to 200000 ns [ 828.070542][T11472] kvm: requested 186895 ns i8254 timer period limited to 200000 ns [ 831.858959][T11551] fuse: Bad value for 'fd' [ 834.890343][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1313'. [ 836.665596][ T5800] Bluetooth: hci4: command 0x0406 tx timeout [ 839.590340][T11679] fuse: Bad value for 'group_id' [ 839.590364][T11679] fuse: Bad value for 'group_id' [ 839.768579][T11667] team0 (unregistering): Port device team_slave_0 removed [ 840.617277][T11667] team0 (unregistering): Port device team_slave_1 removed [ 844.752395][T11743] team0 (unregistering): Port device team_slave_0 removed [ 847.696935][T11743] team0 (unregistering): Port device team_slave_1 removed [ 849.566470][T11792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1359'. [ 852.605620][ T5866] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 852.931534][ T5866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 853.105611][ T5866] usb 2-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 853.105646][ T5866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.105668][ T5866] usb 2-1: Product: syz [ 853.105726][ T5866] usb 2-1: Manufacturer: syz [ 853.105790][ T5866] usb 2-1: SerialNumber: syz [ 853.532436][ T5866] usb 2-1: can't set config #1, error -71 [ 853.585745][ T5866] usb 2-1: USB disconnect, device number 8 [ 854.276902][T11838] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 856.577609][T11880] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 856.604158][T11880] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 856.618746][T11880] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 856.632389][T11880] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 856.634488][T11880] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 856.641967][T11880] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 856.644323][T11880] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 856.662115][T11880] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 856.666261][T11880] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 856.670612][T11880] kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 858.199814][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 858.807233][T11927] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1400'. [ 858.854039][T11931] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1401'. [ 862.397680][T11975] capability: warning: `syz.1.1411' uses 32-bit capabilities (legacy support in use) [ 862.420890][T11975] program syz.1.1411 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 862.785963][T11990] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1417'. [ 864.340298][T12013] program syz.4.1424 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.324860][T12058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1438'. [ 870.659858][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.659936][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 872.703568][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1459'. [ 878.361122][T12201] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1470'. [ 878.498200][T12201] erspan0: entered promiscuous mode [ 878.498451][T12201] macvtap1: entered promiscuous mode [ 878.498653][T12201] macvtap1: entered allmulticast mode [ 878.498667][T12201] erspan0: entered allmulticast mode [ 878.747870][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 878.773580][T12205] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1473'. [ 880.942773][T12241] netlink: 196 bytes leftover after parsing attributes in process `syz.9.1482'. [ 882.702153][T12274] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1490'. [ 884.611144][T12308] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1498'. [ 884.967353][T12311] create_pit_timer: 14 callbacks suppressed [ 884.967376][T12311] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 886.124610][T12322] program syz.1.1500 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 886.456634][T12325] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 886.468948][T12325] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 886.495918][T12325] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 886.501359][T12325] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 886.512450][T12325] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 886.522644][T12325] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 886.539008][T12325] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 886.554340][T12325] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 886.568181][T12325] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 886.895651][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1505'. [ 886.895689][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1505'. [ 889.006051][T12368] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1512'. [ 890.299697][T12384] netlink: 196 bytes leftover after parsing attributes in process `syz.9.1516'. [ 891.655865][T12396] program syz.4.1515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 892.295533][ T5906] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 892.498059][ T5906] usb 2-1: config 0 has an invalid interface number: 64 but max is 0 [ 892.498092][ T5906] usb 2-1: config 0 has no interface number 0 [ 892.521656][ T5906] usb 2-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 892.521690][ T5906] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.521711][ T5906] usb 2-1: Product: syz [ 892.521726][ T5906] usb 2-1: Manufacturer: syz [ 892.521741][ T5906] usb 2-1: SerialNumber: syz [ 892.583012][ T5906] usb 2-1: config 0 descriptor?? [ 892.807448][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 892.807479][T12422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1526'. [ 892.825555][T12408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 892.825601][T12408] netlink: 324 bytes leftover after parsing attributes in process `syz.1.1522'. [ 892.884933][T12424] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1522'. [ 892.911244][ T5906] ax88179_178a 2-1:0.64: probe with driver ax88179_178a failed with error -22 [ 892.957547][ T5906] usb 2-1: USB disconnect, device number 9 [ 893.244964][T12432] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1528'. [ 893.444209][T12433] create_pit_timer: 15 callbacks suppressed [ 893.444232][T12433] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 897.355413][T10584] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 897.508124][T10584] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 897.508156][T10584] usb 1-1: config 0 has no interface number 0 [ 897.512612][T10584] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 897.512655][T10584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.512674][T10584] usb 1-1: Product: syz [ 897.512689][T10584] usb 1-1: Manufacturer: syz [ 897.512703][T10584] usb 1-1: SerialNumber: syz [ 897.593374][T10584] usb 1-1: config 0 descriptor?? [ 897.613580][T12487] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1540'. [ 897.806511][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 897.806563][T12472] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1539'. [ 897.923625][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1539'. [ 898.969572][T10584] ax88179_178a 1-1:0.64: probe with driver ax88179_178a failed with error -22 [ 899.003198][T10584] usb 1-1: USB disconnect, device number 9 [ 899.148968][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 899.148997][T12501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1542'. [ 899.209992][T12505] 9p: Bad value for 'wfdno' [ 900.579456][T12533] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 900.580010][T12533] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 900.582330][T12532] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 900.582852][T12533] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 900.583489][T12533] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 900.583986][T12533] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 900.584598][T12533] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 900.597062][T12533] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 900.597813][T12533] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 900.598333][T12533] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 900.950106][T12550] netlink: 196 bytes leftover after parsing attributes in process `syz.9.1555'. [ 901.151488][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 901.976303][T12557] 9p: Bad value for 'wfdno' [ 902.451417][T10646] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 902.828217][T10646] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 902.828248][T10646] usb 1-1: config 0 has no interface number 0 [ 902.831401][T10646] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 902.831433][T10646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.831454][T10646] usb 1-1: Product: syz [ 902.831467][T10646] usb 1-1: Manufacturer: syz [ 902.831481][T10646] usb 1-1: SerialNumber: syz [ 902.839535][T10646] usb 1-1: config 0 descriptor?? [ 903.048163][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 903.048336][T12560] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1559'. [ 903.144685][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1559'. [ 903.247454][T10646] ax88179_178a 1-1:0.64: probe with driver ax88179_178a failed with error -22 [ 903.308748][T10646] usb 1-1: USB disconnect, device number 10 [ 904.556002][T12611] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1570'. [ 906.408289][T12631] 9p: Bad value for 'rfdno' [ 906.505110][T12629] create_pit_timer: 62 callbacks suppressed [ 906.505133][T12629] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 907.025372][T10646] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 907.180224][T10646] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 907.180257][T10646] usb 1-1: config 0 has no interface number 0 [ 907.188497][T10646] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 907.188527][T10646] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.188545][T10646] usb 1-1: Product: syz [ 907.188558][T10646] usb 1-1: Manufacturer: syz [ 907.188590][T10646] usb 1-1: SerialNumber: syz [ 907.219101][T10646] usb 1-1: config 0 descriptor?? [ 907.473453][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 907.473501][T12640] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1578'. [ 907.538186][T12654] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1578'. [ 907.594137][T10646] ax88179_178a 1-1:0.64: probe with driver ax88179_178a failed with error -22 [ 907.705799][T10646] usb 1-1: USB disconnect, device number 11 [ 908.283151][T12671] 9p: Bad value for 'rfdno' [ 908.779474][T12678] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 908.802610][T12678] kvm: requested 186057 ns i8254 timer period limited to 200000 ns [ 908.821251][T12678] kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 908.823304][T12678] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 908.842787][T12678] kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 908.863367][T12678] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 908.864137][T12678] kvm: requested 166781 ns i8254 timer period limited to 200000 ns [ 908.866858][T12678] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 908.873567][T12678] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 910.156121][T10584] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 910.310116][T10584] usb 10-1: config 0 has an invalid interface number: 64 but max is 0 [ 910.310148][T10584] usb 10-1: config 0 has no interface number 0 [ 910.320618][T10584] usb 10-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 910.320649][T10584] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.320666][T10584] usb 10-1: Product: syz [ 910.320679][T10584] usb 10-1: Manufacturer: syz [ 910.320692][T10584] usb 10-1: SerialNumber: syz [ 910.342438][T10584] usb 10-1: config 0 descriptor?? [ 910.561167][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1600'. [ 910.561381][T12716] netlink: 324 bytes leftover after parsing attributes in process `syz.9.1600'. [ 910.664095][T12716] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1600'. [ 910.684168][T10584] ax88179_178a 10-1:0.64: probe with driver ax88179_178a failed with error -22 [ 910.764654][T10584] usb 10-1: USB disconnect, device number 2 [ 913.363472][T12774] 9p: Bad value for 'rfdno' [ 914.195457][ T5866] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 914.362967][ T5866] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 914.362999][ T5866] usb 1-1: config 0 has no interface number 0 [ 914.392101][ T5866] usb 1-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 914.392133][ T5866] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.392152][ T5866] usb 1-1: Product: syz [ 914.392166][ T5866] usb 1-1: Manufacturer: syz [ 914.392181][ T5866] usb 1-1: SerialNumber: syz [ 914.444148][ T5866] usb 1-1: config 0 descriptor?? [ 914.676163][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 914.676315][T12785] netlink: 324 bytes leftover after parsing attributes in process `syz.0.1619'. [ 914.719691][T12785] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1619'. [ 914.748672][ T5866] ax88179_178a 1-1:0.64: probe with driver ax88179_178a failed with error -22 [ 914.805850][ T5866] usb 1-1: USB disconnect, device number 12 [ 914.844101][T12812] 9p: Bad value for 'rfdno' [ 923.264553][T10584] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 923.420356][T10584] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 923.420389][T10584] usb 4-1: config 0 has no interface number 0 [ 923.441400][T10584] usb 4-1: New USB device found, idVendor=07c9, idProduct=0010, bcdDevice=a5.f0 [ 923.441433][T10584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.441455][T10584] usb 4-1: Product: syz [ 923.441470][T10584] usb 4-1: Manufacturer: syz [ 923.441485][T10584] usb 4-1: SerialNumber: syz [ 923.499055][T10584] usb 4-1: config 0 descriptor?? [ 923.625030][T12901] program syz.4.1653 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 925.147525][T10584] ax88179_178a 4-1:0.64: probe with driver ax88179_178a failed with error -22 [ 925.247076][T10584] usb 4-1: USB disconnect, device number 4 [ 925.354326][T12911] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 928.311244][T12949] program syz.4.1664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 930.005966][T13007] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1682'. [ 932.023882][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.027115][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 943.797170][T13142] create_pit_timer: 16 callbacks suppressed [ 943.797196][T13142] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 943.831337][T13142] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 943.923296][T13142] kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 962.930577][T13306] hub 9-0:1.0: USB hub found [ 962.948268][T13306] hub 9-0:1.0: 1 port detected [ 965.739917][ T5800] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 965.755775][ T5800] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 965.758507][ T5800] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 965.775833][ T5800] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 965.786293][ T5800] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 965.998417][T13325] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1750'. [ 966.138414][T13325] tipc: Failed to remove unknown binding: 66,1,1/0:3212187504/3212187506 [ 968.002832][T13359] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 968.675266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 968.715278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 968.755258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 968.816200][ T5114] Bluetooth: hci2: command tx timeout [ 971.908168][T11863] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.171275][ T5114] Bluetooth: hci2: command tx timeout [ 973.542014][T11863] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 974.201339][ T5114] Bluetooth: hci2: command tx timeout [ 975.135364][T10646] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 975.181831][T11863] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 975.215376][T10584] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 975.291081][T10646] usb 4-1: config 1 has no interfaces? [ 975.291126][T10646] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 975.291151][T10646] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.601682][T13343] chnl_net:caif_netlink_parms(): no params data found [ 975.627721][T10584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 975.627777][T10584] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 975.627801][T10584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.561878][ T5114] Bluetooth: hci2: command tx timeout [ 976.580469][T10584] usb 1-1: config 0 descriptor?? [ 976.694794][T10646] usb 4-1: string descriptor 0 read error: -71 [ 976.730317][T10646] usb 4-1: USB disconnect, device number 5 [ 976.840946][T13412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.843938][T13412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.920393][T10584] usbhid 1-1:0.0: can't add hid device: -71 [ 976.920543][T10584] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 976.946106][T10584] usb 1-1: USB disconnect, device number 13 [ 977.108449][T11863] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 977.485349][T10584] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 977.645685][T10584] usb 1-1: Using ep0 maxpacket: 16 [ 977.654470][T10584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 977.654526][T10584] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.40 [ 977.684313][T10584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.796984][T13438] ALSA: mixer_oss: invalid OSS volume 'w' [ 977.819322][T10584] usb 1-1: config 0 descriptor?? [ 979.076056][T10584] mcp2221 0003:04D8:00DD.0001: unknown main item tag 0x0 [ 979.078012][T10584] mcp2221 0003:04D8:00DD.0001: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 980.299799][T13454] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 980.439784][T13453] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 980.606782][T13343] bridge0: port 1(bridge_slave_0) entered blocking state [ 980.606926][T13343] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.607192][T13343] bridge_slave_0: entered allmulticast mode [ 980.610169][T13343] bridge_slave_0: entered promiscuous mode [ 980.613565][T13343] bridge0: port 2(bridge_slave_1) entered blocking state [ 980.613710][T13343] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.613928][T13343] bridge_slave_1: entered allmulticast mode [ 980.681008][T13343] bridge_slave_1: entered promiscuous mode [ 980.769091][T10584] usb 1-1: USB disconnect, device number 14 [ 981.104892][ T37] audit: type=1326 audit(1774498828.229:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13467 comm="syz.9.1778" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f40eec1c799 code=0x0 [ 982.675638][T10584] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 982.717576][T13343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.849758][T13343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.051034][T10584] usb 1-1: unable to get BOS descriptor or descriptor too short [ 983.544775][T10584] usb 1-1: config 192 has an invalid interface number: 40 but max is 1 [ 983.544807][T10584] usb 1-1: config 192 has an invalid interface number: 172 but max is 1 [ 983.544828][T10584] usb 1-1: config 192 has an invalid interface number: 172 but max is 1 [ 983.544849][T10584] usb 1-1: config 192 has no interface number 0 [ 983.544866][T10584] usb 1-1: config 192 has no interface number 1 [ 983.544931][T10584] usb 1-1: config 192 interface 172 altsetting 5 has a duplicate endpoint with address 0x7, skipping [ 983.544956][T10584] usb 1-1: config 192 interface 172 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 983.544991][T10584] usb 1-1: config 192 interface 172 altsetting 118 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 983.545017][T10584] usb 1-1: config 192 interface 40 has no altsetting 0 [ 983.545036][T10584] usb 1-1: config 192 interface 172 has no altsetting 0 [ 983.545055][T10584] usb 1-1: config 192 interface 172 has no altsetting 1 [ 984.392803][T13495] lo speed is unknown, defaulting to 1000 [ 984.398651][T13495] lo speed is unknown, defaulting to 1000 [ 984.475974][T13495] lo speed is unknown, defaulting to 1000 [ 984.528713][T13495] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 984.544407][T13495] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 984.561335][T13488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 984.915268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 984.925285][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 984.935270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 984.945275][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 984.955270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 984.965267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 985.003355][T13495] lo speed is unknown, defaulting to 1000 [ 985.006754][T13495] lo speed is unknown, defaulting to 1000 [ 985.009788][T13495] lo speed is unknown, defaulting to 1000 [ 985.012599][T13495] lo speed is unknown, defaulting to 1000 [ 985.015179][T13495] lo speed is unknown, defaulting to 1000 [ 985.017775][T13495] lo speed is unknown, defaulting to 1000 [ 985.935724][T10584] usb 1-1: string descriptor 0 read error: -71 [ 985.935903][T10584] usb 1-1: New USB device found, idVendor=125f, idProduct=a94a, bcdDevice= 1.60 [ 985.935929][T10584] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.037328][T10584] usb 1-1: can't set config #192, error -71 [ 986.040432][T10584] usb 1-1: USB disconnect, device number 15 [ 986.249556][T13343] team0: Port device team_slave_0 added [ 986.275565][T13343] team0: Port device team_slave_1 added [ 986.378021][T11863] bridge_slave_1: left allmulticast mode [ 986.378054][T11863] bridge_slave_1: left promiscuous mode [ 986.378357][T11863] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.415642][T10584] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 986.729926][T11863] bridge_slave_0: left allmulticast mode [ 986.729961][T11863] bridge_slave_0: left promiscuous mode [ 986.730232][T11863] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.864793][T10584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 987.864833][T10584] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 987.887423][T10584] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 987.887460][T10584] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 987.887480][T10584] usb 1-1: Manufacturer: syz [ 987.932962][T10584] usb 1-1: config 0 descriptor?? [ 988.102384][ T5114] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 988.859172][T10584] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 988.859244][T10584] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 988.859262][T10584] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 988.859341][T10584] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 988.859459][T10584] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 989.172027][T10584] usb 1-1: USB disconnect, device number 16 [ 989.806139][T11863] erspan0 (unregistering): left allmulticast mode [ 990.386034][T11863] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.547121][T11863] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.598768][T11863] bond0 (unregistering): Released all slaves [ 991.652236][T13343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 991.652257][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.652287][T13343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 991.720226][T13519] warning: `syz.3.1791' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 991.818045][T13343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 991.818064][T13343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 991.818094][T13343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.228574][T13343] hsr_slave_0: entered promiscuous mode [ 992.273573][T13343] hsr_slave_1: entered promiscuous mode [ 992.281972][T13343] debugfs: 'hsr0' already exists in 'hsr' [ 992.282003][T13343] Cannot create hsr debugfs directory [ 993.248220][ T808] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 994.035872][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.035911][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.044888][ T808] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 994.044922][ T808] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 994.044943][ T808] usb 10-1: Manufacturer: syz [ 994.131656][ T808] usb 10-1: config 0 descriptor?? [ 994.229913][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.229977][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.533388][ T808] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 995.534729][ T808] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 995.534778][ T808] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 995.534863][ T808] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 995.625399][ T808] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 995.911254][ T808] usb 10-1: USB disconnect, device number 3 [ 996.187090][T13609] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1815'. [ 996.512648][T13614] hugetlbfs: syz.1.1816 (13614): Using mlock ulimits for SHM_HUGETLB is obsolete [ 997.125248][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 999.098906][T11863] hsr_slave_0: left promiscuous mode [ 999.347996][T11863] hsr_slave_1: left promiscuous mode [ 999.349171][T11863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 999.349199][T11863] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.179375][T11863] veth1_macvtap: left promiscuous mode [ 1002.179500][T11863] veth0_macvtap: left promiscuous mode [ 1003.715363][ T808] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1003.881361][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.881398][ T808] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.882774][ T808] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1003.882803][ T808] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1003.882822][ T808] usb 10-1: Manufacturer: syz [ 1003.944774][ T808] usb 10-1: config 0 descriptor?? [ 1004.055363][T10584] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 1004.252309][T10584] usb 1-1: config 1 has no interfaces? [ 1004.252354][T10584] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1004.252441][T10584] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.525017][T10584] usb 1-1: string descriptor 0 read error: -71 [ 1004.584581][T10584] usb 1-1: USB disconnect, device number 17 [ 1004.793414][ T808] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 1004.793483][ T808] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 1004.793501][ T808] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 1004.793606][ T808] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 1004.793729][ T808] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 1004.897987][ T808] usb 10-1: USB disconnect, device number 4 [ 1004.938906][T13689] netlink: 'syz.1.1827': attribute type 10 has an invalid length. [ 1004.999385][T11863] team0 (unregistering): Port device team_slave_1 removed [ 1005.056644][T11863] team0 (unregistering): Port device team_slave_0 removed [ 1008.249836][T13675] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1008.315815][T13675] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1008.621521][T13689] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1009.553046][T10584] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 1009.575398][ T1229] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1009.701479][T10584] usb 4-1: config 1 has no interfaces? [ 1009.701522][T10584] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1009.701546][T10584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.753690][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.753728][ T1229] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.781861][ T1229] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1009.781895][ T1229] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1009.781915][ T1229] usb 2-1: Manufacturer: syz [ 1009.876658][ T1229] usb 2-1: config 0 descriptor?? [ 1010.045668][T10584] usb 4-1: string descriptor 0 read error: -71 [ 1010.055575][T10584] usb 4-1: USB disconnect, device number 6 [ 1011.052944][ T1229] uclogic 0003:256C:006D.0005: failed retrieving Huion firmware version: -71 [ 1011.053009][ T1229] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 1011.053126][ T1229] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 1011.201713][ T1229] usb 2-1: USB disconnect, device number 10 [ 1013.299242][T13766] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1854'. [ 1013.331221][T13343] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1013.697583][T13343] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1014.088896][T13343] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1014.430481][T13766] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1014.743034][T13343] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1014.965305][T13794] hub 9-0:1.0: USB hub found [ 1014.967328][T13794] hub 9-0:1.0: 1 port detected [ 1015.083958][ T1229] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 1015.237810][ T1229] usb 10-1: config 1 has no interfaces? [ 1015.237855][ T1229] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1015.237879][ T1229] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.311167][T13343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.325315][ T808] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1015.439532][T13343] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.467630][ T1508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.470517][ T1508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.495445][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.495485][ T808] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.495527][ T808] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1015.495552][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1015.532265][ T1229] usb 10-1: string descriptor 0 read error: -71 [ 1015.545645][ T1229] usb 10-1: USB disconnect, device number 5 [ 1015.577178][ T808] usb 1-1: config 0 descriptor?? [ 1015.606678][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.610576][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.666050][ T5906] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1015.838019][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1015.838058][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1015.842052][ T5906] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1015.842071][ T5906] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1015.842091][ T5906] usb 4-1: Manufacturer: syz [ 1015.866523][ T5906] usb 4-1: config 0 descriptor?? [ 1015.904133][ T36] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1016.065895][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 1016.083530][ T36] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1016.083625][ T36] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1016.083650][ T36] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1016.083679][ T36] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1016.106188][ T36] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 1016.106278][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.106309][ T36] usb 2-1: Product: syz [ 1016.106324][ T36] usb 2-1: Manufacturer: syz [ 1016.106337][ T36] usb 2-1: SerialNumber: syz [ 1016.211094][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.211134][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.211160][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.211185][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.211207][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.211231][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.211255][ T808] pyra 0003:1E7D:2CF6.0006: unknown main item tag 0x0 [ 1016.354829][ T808] pyra 0003:1E7D:2CF6.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 1016.395786][ T808] usb 1-1: USB disconnect, device number 18 [ 1016.849023][ T5906] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 1016.849098][ T5906] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 1016.849213][ T5906] uclogic 0003:256C:006D.0007: probe with driver uclogic failed with error -71 [ 1016.921381][T13810] fido_id[13810]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1016.990674][ T5906] usb 4-1: USB disconnect, device number 7 [ 1017.062027][ T36] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 1017.168516][ T36] usb 2-1: USB disconnect, device number 11 [ 1017.237947][ T36] usblp0: removed [ 1017.804786][T13343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1019.340995][T13855] hub 9-0:1.0: USB hub found [ 1019.350149][T13855] hub 9-0:1.0: 1 port detected [ 1020.540076][ T37] audit: type=1326 audit(1774498867.659:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13865 comm="syz.3.1875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f197eadc799 code=0x0 [ 1020.579603][T13343] veth0_vlan: entered promiscuous mode [ 1020.654145][T13343] veth1_vlan: entered promiscuous mode [ 1020.888219][T13343] veth0_macvtap: entered promiscuous mode [ 1020.923656][T13343] veth1_macvtap: entered promiscuous mode [ 1020.984345][T13343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1021.022834][T13343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1021.057711][ T68] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.059893][ T68] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.059942][ T68] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.059979][ T68] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1021.747120][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.747144][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.843204][T11801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1021.843230][T11801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1021.918579][ T5906] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1022.027161][ T5805] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 1022.558761][ T5805] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1022.558800][ T5805] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1022.558861][ T5805] usb 10-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1022.558886][ T5805] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1022.742707][ T5805] usb 10-1: config 0 descriptor?? [ 1023.010474][ T5805] usbhid 10-1:0.0: can't add hid device: -71 [ 1023.010624][ T5805] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1023.032590][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1023.032628][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.056382][ T5906] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1023.056415][ T5906] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1023.056435][ T5906] usb 4-1: Manufacturer: syz [ 1023.062924][ T5805] usb 10-1: USB disconnect, device number 6 [ 1023.441532][ T5906] usb 4-1: config 0 descriptor?? [ 1024.487720][ T5114] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 1024.811464][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1886'. [ 1024.955072][T13921] hub 9-0:1.0: USB hub found [ 1024.961384][T13921] hub 9-0:1.0: 1 port detected [ 1025.755427][ T5906] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 1025.755488][ T5906] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 1025.755605][ T5906] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 1025.790691][ T5906] usb 4-1: USB disconnect, device number 8 [ 1025.963954][ T37] audit: type=1326 audit(1774498873.099:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13927 comm="syz.4.1888" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f806674c799 code=0x0 [ 1028.544847][ T5114] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1028.555879][ T5114] Bluetooth: hci5: Injecting HCI hardware error event [ 1028.602943][ T5114] Bluetooth: hci5: hardware error 0x00 [ 1031.385488][ T5114] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1031.747615][T13982] hub 9-0:1.0: USB hub found [ 1031.761810][T13982] hub 9-0:1.0: 1 port detected [ 1032.737959][ T5114] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 1034.308615][ T5805] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 1034.477927][ T5805] usb 5-1: config 1 has no interfaces? [ 1034.477970][ T5805] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1034.477994][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.564929][ T5114] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1034.723480][ T5805] usb 5-1: string descriptor 0 read error: -71 [ 1034.741389][ T5805] usb 5-1: USB disconnect, device number 6 [ 1036.339496][ T5906] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1036.516850][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 1036.519282][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.519308][ T5906] usb 1-1: config 0 has no interfaces? [ 1036.522330][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.522347][ T5906] usb 1-1: config 0 has no interfaces? [ 1036.525496][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.525521][ T5906] usb 1-1: config 0 has no interfaces? [ 1036.528548][ T5906] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1036.528570][ T5906] usb 1-1: config 0 has no interfaces? [ 1036.528601][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a [ 1036.528622][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.755313][ T5906] usb 1-1: config 0 descriptor?? [ 1038.575410][ T5805] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1038.738159][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1038.738197][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1038.770743][ T5805] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1038.770776][ T5805] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1038.770798][ T5805] usb 5-1: Manufacturer: syz [ 1038.842709][ T5805] usb 5-1: config 0 descriptor?? [ 1039.534231][ T5805] usbhid 5-1:0.0: can't add hid device: -71 [ 1039.534359][ T5805] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1039.572007][ T5805] usb 5-1: USB disconnect, device number 7 [ 1039.681499][T11027] udevd[11027]: setting owner of /dev/bus/usb/005/007 to uid=0, gid=0 failed: No such file or directory [ 1041.687167][ T5114] Bluetooth: hci4: ISO packet for unknown connection handle 0 [ 1041.810722][ T5906] usb 1-1: can't set config #0, error -110 [ 1042.141824][ T36] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 1042.298295][ T36] usb 5-1: config 1 has no interfaces? [ 1042.298338][ T36] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1042.298363][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1042.815366][ T36] usb 5-1: string descriptor 0 read error: -71 [ 1042.832911][ T36] usb 5-1: USB disconnect, device number 8 [ 1044.935521][ T36] usb 1-1: USB disconnect, device number 19 [ 1045.873261][ T36] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1047.106409][ T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1047.106448][ T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1047.376795][ T36] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1047.376831][ T36] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1047.376851][ T36] usb 10-1: Manufacturer: syz [ 1047.848246][ T36] usb 10-1: config 0 descriptor?? [ 1048.745878][ T36] usb 10-1: can't set config #0, error -71 [ 1048.796351][ T36] usb 10-1: USB disconnect, device number 7 [ 1050.185367][ T8679] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 1050.357921][ T8679] usb 10-1: config 1 has no interfaces? [ 1050.357966][ T8679] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1050.357990][ T8679] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.699793][ T8679] usb 10-1: string descriptor 0 read error: -71 [ 1050.722425][ T8679] usb 10-1: USB disconnect, device number 8 [ 1052.410841][ T5114] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1053.022316][T14146] siw: device registration error -23 [ 1053.152300][T14133] ALSA: mixer_oss: invalid OSS volume '' [ 1054.415607][ T36] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 1054.569285][ T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.569322][ T36] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.570864][ T36] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1054.570892][ T36] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1054.570912][ T36] usb 10-1: Manufacturer: syz [ 1054.650603][ T36] usb 10-1: config 0 descriptor?? [ 1054.862720][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.863728][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.729284][ C1] raw-gadget.0 gadget.9: ignoring, device is not running [ 1055.729955][ T36] usbhid 10-1:0.0: can't add hid device: -71 [ 1055.730040][ T36] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1055.845128][ T36] usb 10-1: USB disconnect, device number 9 [ 1056.272607][ T5114] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 1056.595444][ T8947] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 1057.694746][ T8947] usb 5-1: config 1 has no interfaces? [ 1057.694788][ T8947] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1057.694813][ T8947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.094027][ T8947] usb 5-1: string descriptor 0 read error: -71 [ 1058.397861][ T8947] usb 5-1: USB disconnect, device number 9 [ 1063.445892][T14247] blktrace: Concurrent blktraces are not allowed on loop6 [ 1064.505298][ T808] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 1065.627735][ T808] usb 10-1: config 1 has no interfaces? [ 1065.627781][ T808] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1065.627805][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1066.482826][ T808] usb 10-1: string descriptor 0 read error: -71 [ 1066.503483][ T808] usb 10-1: USB disconnect, device number 10 [ 1067.413029][T14282] overlayfs: missing 'lowerdir' [ 1070.580356][T14300] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 1, id = 0 [ 1072.415382][ T1229] usb 2-1: new low-speed USB device number 12 using dummy_hcd [ 1072.568753][ T1229] usb 2-1: config 1 has no interfaces? [ 1072.568798][ T1229] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1072.568822][ T1229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1073.969818][ T1229] usb 2-1: string descriptor 0 read error: -71 [ 1073.985731][ T1229] usb 2-1: USB disconnect, device number 12 [ 1080.285376][ T36] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 1080.449514][ T36] usb 5-1: config 0 has no interfaces? [ 1080.449558][ T36] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1080.449583][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.495924][ T36] usb 5-1: config 0 descriptor?? [ 1080.729772][ T1229] usb 5-1: USB disconnect, device number 10 [ 1087.590335][ T36] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 1088.109182][ T36] usb 4-1: config 0 has no interfaces? [ 1088.109226][ T36] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1088.109251][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.163546][ T36] usb 4-1: config 0 descriptor?? [ 1089.368542][ T8947] usb 4-1: USB disconnect, device number 9 [ 1093.433886][ T5800] Bluetooth: hci2: command 0x0406 tx timeout [ 1094.752173][ T36] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 1098.555284][ T36] usb 1-1: device not accepting address 21, error -71 [ 1111.825310][T10689] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 1113.985396][ T808] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 1114.138776][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1114.138818][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1114.138866][ T808] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1114.138890][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1114.258616][ T808] usb 4-1: config 0 descriptor?? [ 1116.327163][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.327245][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.131413][ T808] usb 4-1: can't set config #0, error -71 [ 1117.141859][ T808] usb 4-1: USB disconnect, device number 10 [ 1122.325326][ T8679] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 1123.889739][ T8679] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1123.889782][ T8679] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1123.889829][ T8679] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1123.889852][ T8679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.133554][ T8679] usb 2-1: config 0 descriptor?? [ 1125.212669][ T8679] usbhid 2-1:0.0: can't add hid device: -71 [ 1125.212758][ T8679] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1125.422844][ T8679] usb 2-1: USB disconnect, device number 13 [ 1125.935325][ T8947] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 1127.008912][ T8947] usb 4-1: config 0 has no interfaces? [ 1127.008957][ T8947] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1127.008983][ T8947] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.054526][ T8947] usb 4-1: config 0 descriptor?? [ 1127.330476][ T5906] usb 4-1: USB disconnect, device number 11 [ 1130.005494][ T808] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 1130.909263][ T808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1130.920121][ T808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1130.920250][ T808] usb 4-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1130.920306][ T808] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.451182][ T808] usb 4-1: config 0 descriptor?? [ 1132.901366][ T808] usb 4-1: can't set config #0, error -71 [ 1132.927974][ T808] usb 4-1: USB disconnect, device number 12 [ 1135.402146][ T36] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1136.110529][ T36] usb 5-1: device descriptor read/64, error -71 [ 1136.405312][ T36] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1136.535328][ T36] usb 5-1: device descriptor read/64, error -71 [ 1137.575312][ T36] usb usb5-port1: attempt power cycle [ 1142.108756][ T36] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 1145.144560][T14797] hub 9-0:1.0: USB hub found [ 1145.147560][T14797] hub 9-0:1.0: 1 port detected [ 1145.643603][T14806] blktrace: Concurrent blktraces are not allowed on loop6 [ 1146.705352][ T5809] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1146.915275][ T5809] usb 4-1: device descriptor read/64, error -71 [ 1147.155562][ T5809] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1147.305476][ T8947] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1147.776430][ T8947] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1147.776468][ T8947] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1147.776498][ T8947] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1147.776511][ T8947] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.815342][ T5809] usb 4-1: device descriptor read/64, error -71 [ 1147.853045][ T8947] usb 5-1: config 0 descriptor?? [ 1147.935762][ T5809] usb usb4-port1: attempt power cycle [ 1148.295103][ T8947] usbhid 5-1:0.0: can't add hid device: -71 [ 1148.295300][ T8947] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1148.299503][ T8947] usb 5-1: USB disconnect, device number 15 [ 1148.889470][ T5809] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1148.906569][ T5809] usb 4-1: device descriptor read/8, error -71 [ 1148.988568][T14843] hub 9-0:1.0: USB hub found [ 1148.988867][T14843] hub 9-0:1.0: 1 port detected [ 1149.594534][ T5809] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1150.450671][ T5809] usb 4-1: device descriptor read/8, error -71 [ 1150.555672][ T5809] usb usb4-port1: unable to enumerate USB device [ 1152.515312][ T5809] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 1152.669716][ T5809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1152.669755][ T5809] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1152.669798][ T5809] usb 10-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1152.669820][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.764904][ T5809] usb 10-1: config 0 descriptor?? [ 1152.986309][ T5809] usbhid 10-1:0.0: can't add hid device: -71 [ 1152.986457][ T5809] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1153.012494][ T5809] usb 10-1: USB disconnect, device number 11 [ 1156.615332][T14883] hub 9-0:1.0: USB hub found [ 1156.615776][T14883] hub 9-0:1.0: 1 port detected [ 1157.085355][ T8947] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1157.215292][ T8947] usb 10-1: device descriptor read/64, error -71 [ 1157.455365][ T8947] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1157.597374][ T8947] usb 10-1: device descriptor read/64, error -71 [ 1157.707564][ T8947] usb usb10-port1: attempt power cycle [ 1158.085316][ T8947] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1158.106366][ T8947] usb 10-1: device descriptor read/8, error -71 [ 1158.345297][ T8947] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1158.365869][ T8947] usb 10-1: device descriptor read/8, error -71 [ 1158.475811][ T8947] usb usb10-port1: unable to enumerate USB device [ 1160.383290][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 1160.383406][T14910] netlink: 'syz.3.2185': attribute type 5 has an invalid length. [ 1160.795533][T10584] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1161.104696][T10584] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1161.104773][T10584] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1161.104907][T10584] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1161.104996][T10584] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.318659][T10584] usb 5-1: config 0 descriptor?? [ 1162.506728][T14910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 1162.635084][T11863] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.639538][ T1880] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.639588][ T1880] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.639628][ T1880] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1162.728074][T10584] usbhid 5-1:0.0: can't add hid device: -71 [ 1162.728212][T10584] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1162.781854][T10584] usb 5-1: USB disconnect, device number 16 [ 1163.185481][T14923] hub 9-0:1.0: USB hub found [ 1163.185745][T14923] hub 9-0:1.0: 1 port detected [ 1164.615785][T14940] blktrace: Concurrent blktraces are not allowed on loop6 [ 1166.757137][ T5866] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1166.933514][ T5866] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.933546][ T5866] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1166.935073][ T5866] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1166.935103][ T5866] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1166.962239][ T5866] usb 5-1: Manufacturer: syz [ 1166.998173][ T5866] usb 5-1: config 0 descriptor?? [ 1170.055628][ T5809] usb 5-1: USB disconnect, device number 17 [ 1172.958181][T14982] blktrace: Concurrent blktraces are not allowed on loop8 [ 1177.665001][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.665052][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.223130][T15065] hub 9-0:1.0: USB hub found [ 1188.226745][T15065] hub 9-0:1.0: 1 port detected [ 1196.664001][T15109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1199.497894][T15135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2245'. [ 1201.285261][ T8679] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1202.865207][ T8679] usb 5-1: Using ep0 maxpacket: 8 [ 1202.867896][ T8679] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.867942][ T8679] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1202.867992][ T8679] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1202.868020][ T8679] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1202.868044][ T8679] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1202.868073][ T8679] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1202.871285][ T8679] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.871327][ T8679] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1202.871370][ T8679] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1202.871397][ T8679] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1202.871420][ T8679] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1202.871449][ T8679] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1202.874921][ T8679] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.874968][ T8679] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1202.875024][ T8679] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 1202.875051][ T8679] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1202.875074][ T8679] usb 5-1: config 168 interface 0 altsetting 188 has 1 endpoint descriptor, different from the interface descriptor's value: 100 [ 1202.877325][ T8679] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1202.889074][ T8679] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1202.889104][ T8679] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.889122][ T8679] usb 5-1: Product: syz [ 1202.889135][ T8679] usb 5-1: Manufacturer: syz [ 1202.889149][ T8679] usb 5-1: SerialNumber: syz [ 1203.225610][T15156] syz.9.2249 uses obsolete (PF_INET,SOCK_PACKET) [ 1203.432334][ T8679] adutux 5-1:168.0: interrupt endpoints not found [ 1203.485701][ T8679] usb 5-1: USB disconnect, device number 18 [ 1206.841397][T15172] hub 9-0:1.0: USB hub found [ 1206.853168][T15172] hub 9-0:1.0: 1 port detected [ 1209.071287][T15182] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2257'. [ 1220.034196][T15239] hub 9-0:1.0: USB hub found [ 1220.043268][T15239] hub 9-0:1.0: 1 port detected [ 1220.792198][T15246] Device name cannot be null; rc = [-22] [ 1222.075812][ T1229] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1222.519676][ T1229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1222.519709][ T1229] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1222.521616][ T1229] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1222.521646][ T1229] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1222.521716][ T1229] usb 1-1: Product: syz [ 1222.521732][ T1229] usb 1-1: SerialNumber: syz [ 1222.611057][ T1229] usb 1-1: config 0 descriptor?? [ 1222.850752][T15245] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2273'. [ 1223.953407][ T8679] usb 1-1: USB disconnect, device number 23 [ 1229.087168][T15297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2287'. [ 1229.702869][T15309] hub 9-0:1.0: USB hub found [ 1229.703979][T15309] hub 9-0:1.0: 1 port detected [ 1230.666502][ T5866] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1231.004679][ T5866] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1231.004714][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1231.004736][ T5866] usb 5-1: Product: syz [ 1231.004750][ T5866] usb 5-1: SerialNumber: syz [ 1231.348028][ T5866] usb 5-1: config 0 descriptor?? [ 1231.363298][ T5866] hso 5-1:0.0: Not our interface [ 1233.079567][ T8679] usb 5-1: USB disconnect, device number 19 [ 1236.332323][T15346] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 1238.191900][T15358] siw: device registration error -23 [ 1239.653642][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.653726][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.137918][T15380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2311'. [ 1245.593512][T15400] hub 9-0:1.0: USB hub found [ 1245.603870][T15400] hub 9-0:1.0: 1 port detected [ 1247.981899][T15409] siw: device registration error -23 [ 1248.057461][T15416] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'. [ 1249.679844][T15430] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2326'. [ 1254.032162][T15451] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2332'. [ 1255.428372][T15465] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2338'. [ 1259.994208][T15496] siw: device registration error -23 [ 1260.765481][T15499] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'. [ 1261.819104][T15512] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2350'. [ 1265.073872][T15543] siw: device registration error -23 [ 1265.093481][T15540] team0: Port device team_slave_1 removed [ 1265.393136][T15545] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2359'. [ 1266.895439][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2362'. [ 1270.199249][T15572] vivid-003: disconnect [ 1270.555504][T15568] vivid-003: reconnect [ 1272.051007][T15576] Malformed UNC in devname [ 1272.051007][T15576] [ 1272.051302][T15576] CIFS: VFS: Malformed UNC in devname [ 1274.005487][T15587] hub 9-0:1.0: USB hub found [ 1274.062599][T15587] hub 9-0:1.0: 1 port detected [ 1274.578573][T15591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2370'. [ 1275.587382][T15602] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2373'. [ 1284.795199][ T5866] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1284.880915][T15646] trusted_key: encrypted_key: insufficient parameters specified [ 1285.755260][ T5866] usb 4-1: Using ep0 maxpacket: 16 [ 1285.758626][ T5866] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1285.758661][ T5866] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1285.758685][ T5866] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1285.758714][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1285.758749][ T5866] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1285.758773][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.784726][ T5866] usb 4-1: config 0 descriptor?? [ 1286.703470][ T5866] hid (null): unknown global tag 0xc [ 1286.703489][ T5866] hid (null): report_id 49667 is invalid [ 1286.703498][ T5866] hid (null): global environment stack underflow [ 1286.895001][ T5866] usb 4-1: USB disconnect, device number 18 [ 1291.619315][T15676] input: syz1 as /devices/virtual/input/input5 [ 1297.035215][ T36] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1297.185219][ T36] usb 10-1: Using ep0 maxpacket: 16 [ 1297.192954][ T36] usb 10-1: unable to get BOS descriptor or descriptor too short [ 1297.210916][ T36] usb 10-1: New USB device found, idVendor=17cc, idProduct=baff, bcdDevice= 0.40 [ 1297.210949][ T36] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.210971][ T36] usb 10-1: Product: syz [ 1297.210986][ T36] usb 10-1: Manufacturer: syz [ 1297.211000][ T36] usb 10-1: SerialNumber: syz [ 1297.295274][ T5866] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1297.464755][ T5866] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1297.464795][ T5866] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1297.464842][ T5866] usb 5-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1297.464867][ T5866] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.518240][ T5866] usb 5-1: config 0 descriptor?? [ 1297.555599][ T36] usb 10-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1297.744125][ T5866] usbhid 5-1:0.0: can't add hid device: -71 [ 1297.744211][ T5866] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1297.771965][ T5866] usb 5-1: USB disconnect, device number 20 [ 1299.341003][ T36] usb 10-1: selecting invalid altsetting 1 [ 1299.341029][ T36] snd-usb-caiaq 10-1:1.2: can't set alt interface. [ 1299.341042][ T36] usb 10-1: unable to init card! (ret=-5) [ 1299.342045][ T36] snd-usb-caiaq 10-1:1.2: probe with driver snd-usb-caiaq failed with error -5 [ 1299.428975][ T36] usb 10-1: USB disconnect, device number 16 [ 1300.492589][T15718] udevd[15718]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1300.517177][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.517225][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1317.288925][T15813] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1317.327618][T15813] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1317.330215][T15813] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1317.365904][T15813] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1317.369690][T15813] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1319.879731][ T5114] Bluetooth: hci3: command tx timeout [ 1320.139278][T15812] lo speed is unknown, defaulting to 1000 [ 1321.957085][ T5114] Bluetooth: hci3: command tx timeout [ 1324.026070][ T5114] Bluetooth: hci3: command tx timeout [ 1324.794283][ T6389] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.335216][ T5809] usb 10-1: new full-speed USB device number 17 using dummy_hcd [ 1325.497955][ T5809] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1325.497995][ T5809] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1325.498038][ T5809] usb 10-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1325.498061][ T5809] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1325.561752][ T5809] usb 10-1: config 0 descriptor?? [ 1325.783400][ T6389] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.806210][ T5809] usbhid 10-1:0.0: can't add hid device: -71 [ 1325.806362][ T5809] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1325.852867][ T5809] usb 10-1: USB disconnect, device number 17 [ 1326.109421][ T5114] Bluetooth: hci3: command tx timeout [ 1326.684872][ T6389] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.328422][ T6389] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1329.009316][T15869] bridge0: port 3(syz_tun) entered blocking state [ 1329.012039][T15869] bridge0: port 3(syz_tun) entered disabled state [ 1329.016812][T15869] syz_tun: entered allmulticast mode [ 1329.027069][T15869] syz_tun: entered promiscuous mode [ 1329.031995][T15869] bridge0: port 3(syz_tun) entered blocking state [ 1329.034400][T15869] bridge0: port 3(syz_tun) entered forwarding state [ 1329.205604][T15812] chnl_net:caif_netlink_parms(): no params data found [ 1331.735341][T15812] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.757926][T15812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.758132][T15812] bridge_slave_0: entered allmulticast mode [ 1331.783586][T15812] bridge_slave_0: entered promiscuous mode [ 1331.802780][T15812] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.802870][T15812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1331.803066][T15812] bridge_slave_1: entered allmulticast mode [ 1331.837214][T15812] bridge_slave_1: entered promiscuous mode [ 1332.039075][ T6389] bridge_slave_1: left allmulticast mode [ 1332.039108][ T6389] bridge_slave_1: left promiscuous mode [ 1332.039381][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.296915][ T6389] bridge_slave_0: left allmulticast mode [ 1332.296939][ T6389] bridge_slave_0: left promiscuous mode [ 1332.297136][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1334.805311][ T36] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1334.975734][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1334.975774][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1334.975819][ T36] usb 2-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00 [ 1334.975843][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.991508][ T36] usb 2-1: config 0 descriptor?? [ 1335.271683][ T36] usbhid 2-1:0.0: can't add hid device: -71 [ 1335.271816][ T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1335.300229][ T36] usb 2-1: USB disconnect, device number 14 [ 1336.226560][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1336.306463][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1336.351759][ T6389] bond0 (unregistering): Released all slaves [ 1336.501940][T15812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1336.544992][T15812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1336.828482][T15812] team0: Port device team_slave_0 added [ 1336.852318][T15812] team0: Port device team_slave_1 added [ 1336.984880][T15812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1336.984901][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1336.984930][T15812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1337.039815][T15812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1337.039835][T15812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1337.039864][T15812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1337.294420][T15812] hsr_slave_0: entered promiscuous mode [ 1337.306316][T15812] hsr_slave_1: entered promiscuous mode [ 1337.307378][T15812] debugfs: 'hsr0' already exists in 'hsr' [ 1337.307404][T15812] Cannot create hsr debugfs directory [ 1337.349104][ T6389] IPVS: stopping master sync thread 14300 ... [ 1339.964123][T15813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1339.990780][T15813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1339.992644][T15813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1339.996825][T15813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1339.997638][T15813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1341.265211][ T808] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1341.429754][ T808] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1341.429787][ T808] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1341.429807][ T808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1341.429862][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1341.429889][ T808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1341.432292][ T808] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1341.432319][ T808] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1341.432339][ T808] usb 2-1: Product: syz [ 1341.432354][ T808] usb 2-1: Manufacturer: syz [ 1341.573754][ T808] cdc_wdm 2-1:1.0: skipping garbage [ 1341.573776][ T808] cdc_wdm 2-1:1.0: skipping garbage [ 1342.103991][T15861] Set syz1 is full, maxelem 65536 reached [ 1342.130960][ T808] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1342.130977][ T808] cdc_wdm 2-1:1.0: Unknown control protocol [ 1342.152895][ T808] usb 2-1: USB disconnect, device number 15 [ 1342.345681][T15813] Bluetooth: hci2: command tx timeout [ 1342.591175][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.620631][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.637129][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.642338][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1342.939071][T15953] lo speed is unknown, defaulting to 1000 [ 1343.159868][ T6389] hsr_slave_0: left promiscuous mode [ 1343.842217][ T6389] hsr_slave_1: left promiscuous mode [ 1343.845154][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1343.845184][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1344.696368][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1344.696400][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1344.805218][T15813] Bluetooth: hci2: command tx timeout [ 1344.930313][ T6389] veth1_macvtap: left promiscuous mode [ 1344.930437][ T6389] veth0_macvtap: left promiscuous mode [ 1344.930736][ T6389] veth1_vlan: left promiscuous mode [ 1344.930936][ T6389] veth0_vlan: left promiscuous mode [ 1346.825376][ T5114] Bluetooth: hci2: command tx timeout [ 1348.908019][ T5114] Bluetooth: hci2: command tx timeout [ 1352.486025][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 1352.549945][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 1362.887349][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.887403][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.975439][T10689] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1363.125182][T10689] usb 1-1: Using ep0 maxpacket: 32 [ 1363.128030][T10689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1363.128065][T10689] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1363.128107][T10689] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1363.128131][T10689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.180489][T10689] usb 1-1: config 0 descriptor?? [ 1363.195932][T10689] hub 1-1:0.0: USB hub found [ 1363.486057][T10689] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1364.019252][T10689] hid-generic 0003:046D:C31C.000A: unknown main item tag 0x0 [ 1364.173243][T10689] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 1364.336967][T10689] usb 1-1: USB disconnect, device number 24 [ 1364.477951][T15953] chnl_net:caif_netlink_parms(): no params data found [ 1365.463512][T16177] fido_id[16177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 1365.593839][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1365.593869][T16187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2529'. [ 1368.677128][ T5866] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1369.657114][ T5866] usb 2-1: Using ep0 maxpacket: 32 [ 1369.664422][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.664452][ T5866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.664480][ T5866] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1369.664494][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.721761][ T5866] usb 2-1: config 0 descriptor?? [ 1369.739106][ T5866] hub 2-1:0.0: USB hub found [ 1369.852931][ T6389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1369.853746][ T6389] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1370.040601][ T5866] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1371.085642][T15953] bridge0: port 1(bridge_slave_0) entered blocking state [ 1371.085788][T15953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.086075][T15953] bridge_slave_0: entered allmulticast mode [ 1371.089187][T15953] bridge_slave_0: entered promiscuous mode [ 1371.092355][T15953] bridge0: port 2(bridge_slave_1) entered blocking state [ 1371.092469][T15953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.092664][T15953] bridge_slave_1: entered allmulticast mode [ 1371.121820][T15953] bridge_slave_1: entered promiscuous mode [ 1371.282757][ T5866] hid-generic 0003:046D:C31C.000B: unknown main item tag 0x0 [ 1371.342858][ T5866] hid-generic 0003:046D:C31C.000B: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 1371.595699][ T5866] usb 2-1: USB disconnect, device number 16 [ 1371.670255][ T6389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1371.670292][ T6389] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.767004][T15953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1373.246284][T15953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1373.700627][ T6389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1373.700655][ T6389] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.816445][T15953] team0: Port device team_slave_0 added [ 1373.820030][T15812] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1373.877807][T15953] team0: Port device team_slave_1 added [ 1373.881958][T15812] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1374.295641][ T808] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1374.941925][ T808] usb 10-1: config 0 has no interfaces? [ 1374.941967][ T808] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1374.941993][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.978951][ T808] usb 10-1: config 0 descriptor?? [ 1375.200690][T10689] usb 10-1: USB disconnect, device number 18 [ 1375.324936][ T6389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1375.324973][ T6389] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1375.462498][T15812] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1376.218529][T15812] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1376.293582][T15953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1376.293601][T15953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.293628][T15953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1376.376494][T15953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1376.376513][T15953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1376.376543][T15953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1376.759820][T15953] hsr_slave_0: entered promiscuous mode [ 1376.766115][T15953] hsr_slave_1: entered promiscuous mode [ 1376.787426][T15953] debugfs: 'hsr0' already exists in 'hsr' [ 1376.787457][T15953] Cannot create hsr debugfs directory [ 1376.906205][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2569'. [ 1376.906230][T16323] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2569'. [ 1377.847684][T15813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1377.878785][T15813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1377.881620][T15813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1377.883855][T15813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1377.907975][T15813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1378.979169][ T6389] bridge_slave_1: left allmulticast mode [ 1378.979200][ T6389] bridge_slave_1: left promiscuous mode [ 1378.979705][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.076270][ T6389] bridge_slave_0: left allmulticast mode [ 1379.076293][ T6389] bridge_slave_0: left promiscuous mode [ 1379.077923][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1380.093712][T16335] Bluetooth: hci0: command tx timeout [ 1380.324571][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 1380.324599][T16364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2582'. [ 1383.054324][T16335] Bluetooth: hci0: command tx timeout [ 1385.121491][T16335] Bluetooth: hci0: command tx timeout [ 1385.502341][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1385.612711][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1385.653919][ T6389] bond0 (unregistering): Released all slaves [ 1386.128863][T16329] lo speed is unknown, defaulting to 1000 [ 1386.749278][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1386.749307][T16412] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2595'. [ 1388.225187][T16335] Bluetooth: hci0: command tx timeout [ 1390.488304][ T36] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 1390.657304][ T36] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1390.657331][ T36] usb 2-1: can't read configurations, error -61 [ 1390.786962][ T36] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 1390.937492][ T36] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1390.937518][ T36] usb 2-1: can't read configurations, error -61 [ 1390.938503][ T36] usb usb2-port1: attempt power cycle [ 1391.295207][ T36] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1391.324992][ T36] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1391.325498][ T36] usb 2-1: can't read configurations, error -61 [ 1391.459740][ T36] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 1391.507025][ T36] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1391.507052][ T36] usb 2-1: can't read configurations, error -61 [ 1391.507573][ T36] usb usb2-port1: unable to enumerate USB device [ 1392.215184][ T5866] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1392.312802][ T6389] hsr_slave_0: left promiscuous mode [ 1392.367346][ T6389] hsr_slave_1: left promiscuous mode [ 1392.368053][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1392.368070][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1392.370456][ T5866] usb 10-1: Using ep0 maxpacket: 32 [ 1392.372236][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1392.372256][ T5866] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1392.372280][ T5866] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1392.372293][ T5866] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1392.447279][ T5866] usb 10-1: config 0 descriptor?? [ 1392.497294][ T5866] hub 10-1:0.0: USB hub found [ 1392.502768][ T6389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1392.502788][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1392.659343][ T5866] hub 10-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1392.734303][ T6389] veth1_macvtap: left promiscuous mode [ 1392.743385][ T6389] veth0_macvtap: left promiscuous mode [ 1392.754501][ T6389] veth1_vlan: left promiscuous mode [ 1392.754968][ T6389] veth0_vlan: left promiscuous mode [ 1393.090497][ T5866] hid-generic 0003:046D:C31C.000C: unknown main item tag 0x0 [ 1393.205619][ T5866] hid-generic 0003:046D:C31C.000C: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0 [ 1393.351253][ T5866] usb 10-1: USB disconnect, device number 19 [ 1393.589339][T16458] fido_id[16458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1397.927937][ T8679] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 1398.138301][ T8679] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1398.138344][ T8679] usb 2-1: can't read configurations, error -61 [ 1398.285186][ T8679] usb 2-1: new low-speed USB device number 22 using dummy_hcd [ 1398.485264][ T5866] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1398.513037][ T8679] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1398.513082][ T8679] usb 2-1: can't read configurations, error -61 [ 1398.513565][ T8679] usb usb2-port1: attempt power cycle [ 1398.637917][ T5866] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1398.637977][ T5866] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1398.643072][ T5866] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1398.643105][ T5866] usb 10-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1398.643125][ T5866] usb 10-1: Manufacturer: syz [ 1398.703146][ T5866] usb 10-1: config 0 descriptor?? [ 1398.733068][ T5866] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1398.784049][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 1398.905170][ T8679] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 1398.930321][ T8679] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1398.930372][ T8679] usb 2-1: can't read configurations, error -61 [ 1399.055381][ T8679] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 1399.086803][ T8679] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1399.086845][ T8679] usb 2-1: can't read configurations, error -61 [ 1399.087271][ T8679] usb usb2-port1: unable to enumerate USB device [ 1399.235427][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1399.235449][T16503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2605'. [ 1401.446531][ T5800] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1401.495258][ T5800] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1401.497063][ T5800] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1401.530321][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1401.533023][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1401.754067][ T808] usb 10-1: USB disconnect, device number 20 [ 1402.035244][ T36] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1402.185269][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 1402.187898][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1402.187940][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1402.187982][ T36] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1402.188006][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.253261][ T36] usb 2-1: config 0 descriptor?? [ 1402.272570][ T36] hub 2-1:0.0: USB hub found [ 1402.295151][ T808] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1402.450079][ T808] usb 10-1: Using ep0 maxpacket: 32 [ 1402.475171][ T808] usb 10-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1402.475206][ T808] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1402.484580][ T808] usb 10-1: config 0 descriptor?? [ 1402.503732][ T36] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1402.548252][ T808] as10x_usb: device has been detected [ 1402.549675][ T808] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1402.659601][ T808] usb 10-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1402.774046][ T808] as10x_usb: error during firmware upload part1 [ 1402.774904][ T808] Registered device nBox DVB-T Dongle [ 1402.802593][ T808] usb 10-1: USB disconnect, device number 21 [ 1402.898275][ T808] Unregistered device nBox DVB-T Dongle [ 1402.904559][ T808] as10x_usb: device has been disconnected [ 1402.936495][ T36] usbhid 2-1:0.0: can't add hid device: -71 [ 1402.936630][ T36] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1402.996087][ T36] usb 2-1: USB disconnect, device number 25 [ 1403.180613][T16329] chnl_net:caif_netlink_parms(): no params data found [ 1403.221437][T16511] lo speed is unknown, defaulting to 1000 [ 1403.637936][ T5800] Bluetooth: hci3: command tx timeout [ 1405.705200][ T5800] Bluetooth: hci3: command tx timeout [ 1406.927364][T16329] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.927477][T16329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1406.927676][T16329] bridge_slave_0: entered allmulticast mode [ 1406.929237][T16329] bridge_slave_0: entered promiscuous mode [ 1407.918994][ T5800] Bluetooth: hci3: command tx timeout [ 1408.187869][T16329] bridge0: port 2(bridge_slave_1) entered blocking state [ 1408.187954][T16329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1408.188140][T16329] bridge_slave_1: entered allmulticast mode [ 1408.189718][T16329] bridge_slave_1: entered promiscuous mode [ 1408.451150][T16329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1408.579086][ T808] usb 1-1: new low-speed USB device number 25 using dummy_hcd [ 1408.737670][ T808] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1408.737714][ T808] usb 1-1: can't read configurations, error -61 [ 1408.885281][ T808] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 1408.894201][T16329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1409.048503][ T808] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1409.048547][ T808] usb 1-1: can't read configurations, error -61 [ 1409.048987][ T808] usb usb1-port1: attempt power cycle [ 1409.087812][T16329] team0: Port device team_slave_0 added [ 1409.109393][T16329] team0: Port device team_slave_1 added [ 1409.395299][ T808] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 1409.444609][ T808] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1409.444653][ T808] usb 1-1: can't read configurations, error -61 [ 1409.518698][T16329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1409.518718][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.518748][T16329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1409.566524][T16329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1409.566539][T16329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1409.566556][T16329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1409.605261][ T808] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 1409.638554][ T808] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1409.638580][ T808] usb 1-1: can't read configurations, error -61 [ 1409.638842][ T808] usb usb1-port1: unable to enumerate USB device [ 1409.729357][T16511] chnl_net:caif_netlink_parms(): no params data found [ 1409.792541][T16329] hsr_slave_0: entered promiscuous mode [ 1409.795552][T16329] hsr_slave_1: entered promiscuous mode [ 1409.796257][T16329] debugfs: 'hsr0' already exists in 'hsr' [ 1409.796273][T16329] Cannot create hsr debugfs directory [ 1409.945973][ T5800] Bluetooth: hci3: command tx timeout [ 1410.516390][T16511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.516613][T16511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.516851][T16511] bridge_slave_0: entered allmulticast mode [ 1410.519756][T16511] bridge_slave_0: entered promiscuous mode [ 1410.892358][T16511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.892528][T16511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.892809][T16511] bridge_slave_1: entered allmulticast mode [ 1410.919424][T16511] bridge_slave_1: entered promiscuous mode [ 1413.185430][T16511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1413.875760][T16511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1415.907884][T16511] team0: Port device team_slave_0 added [ 1415.910312][T16511] team0: Port device team_slave_1 added [ 1416.013449][T16511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1416.013469][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.013498][T16511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1416.026777][T16511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1416.026794][T16511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1416.026819][T16511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1416.085306][T10689] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 1416.163539][T16511] hsr_slave_0: entered promiscuous mode [ 1416.165878][T16511] hsr_slave_1: entered promiscuous mode [ 1416.170137][T16511] debugfs: 'hsr0' already exists in 'hsr' [ 1416.170163][T16511] Cannot create hsr debugfs directory [ 1416.246999][T10689] usb 10-1: config 1 has no interfaces? [ 1416.247026][T10689] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1416.247060][T10689] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1416.468296][T10689] usb 10-1: string descriptor 0 read error: -71 [ 1416.469989][T10689] usb 10-1: USB disconnect, device number 22 [ 1417.088865][ T6389] bridge_slave_1: left allmulticast mode [ 1417.088886][ T6389] bridge_slave_1: left promiscuous mode [ 1417.089063][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1417.617052][ T6389] bridge_slave_0: left allmulticast mode [ 1417.617086][ T6389] bridge_slave_0: left promiscuous mode [ 1417.617396][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1419.187489][ T6389] bridge_slave_1: left allmulticast mode [ 1419.187522][ T6389] bridge_slave_1: left promiscuous mode [ 1419.187793][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1419.268034][ T6389] bridge_slave_0: left allmulticast mode [ 1419.268057][ T6389] bridge_slave_0: left promiscuous mode [ 1419.268237][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.186145][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.306399][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1421.539428][ T6389] bond0 (unregistering): Released all slaves [ 1421.837685][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1421.957231][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.041061][ T6389] bond0 (unregistering): Released all slaves [ 1422.708334][ T36] usb 10-1: new low-speed USB device number 23 using dummy_hcd [ 1423.392745][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.392830][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.015307][ T36] usb 10-1: config 1 has no interfaces? [ 1424.015377][ T36] usb 10-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1424.015403][ T36] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1425.225779][ T36] usb 10-1: string descriptor 0 read error: -71 [ 1425.229880][ T36] usb 10-1: USB disconnect, device number 23 [ 1426.936001][ T6389] hsr_slave_0: left promiscuous mode [ 1426.977561][ T6389] hsr_slave_1: left promiscuous mode [ 1426.978775][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.021787][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1427.216281][ T6389] hsr_slave_0: left promiscuous mode [ 1427.222395][T16748] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2658'. [ 1427.265551][ T6389] hsr_slave_1: left promiscuous mode [ 1427.266428][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1427.316025][ T6389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1429.830692][T16755] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 1432.014090][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 1432.154186][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 1434.951436][T16797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2667'. [ 1437.040323][T16335] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1437.045920][T16335] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1437.047466][T16335] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1437.049771][T16335] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1437.050645][T16335] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1437.641479][T16826] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2674'. [ 1437.642790][ T6389] team0 (unregistering): Port device team_slave_1 removed [ 1437.758054][ T6389] team0 (unregistering): Port device team_slave_0 removed [ 1439.216522][ T5800] Bluetooth: hci2: command tx timeout [ 1441.305550][ T5800] Bluetooth: hci2: command tx timeout [ 1443.435072][ T5800] Bluetooth: hci2: command tx timeout [ 1443.605239][T16819] lo speed is unknown, defaulting to 1000 [ 1445.767570][ T5800] Bluetooth: hci2: command tx timeout [ 1448.439008][T16896] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2692'. [ 1448.724122][ T5866] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1448.905176][ T5866] usb 1-1: Using ep0 maxpacket: 32 [ 1448.907876][ T5866] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1448.907905][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1448.914223][ T5866] usb 1-1: config 0 descriptor?? [ 1449.007827][ T5866] as10x_usb: device has been detected [ 1449.009252][ T5866] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1449.121999][T16905] netlink: 'syz.1.2695': attribute type 13 has an invalid length. [ 1449.165750][T16898] INFO: trying to register non-static key. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1449.165765][T16898] The code is fine but needs lockdep annotation, or maybe [ 1449.165774][T16898] you didn't initialize this object before use? [ 1449.165782][T16898] turning off the locking correctness validator. [ 1449.165801][T16898] CPU: 1 UID: 0 PID: 16898 Comm: syz.0.2694 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1449.165832][T16898] Tainted: [L]=SOFTLOCKUP [ 1449.165840][T16898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1449.165853][T16898] Call Trace: [ 1449.165860][T16898] [ 1449.165869][T16898] dump_stack_lvl+0xe8/0x150 [ 1449.165906][T16898] assign_lock_key+0x133/0x150 [ 1449.165932][T16898] register_lock_class+0xcc/0x2e0 [ 1449.165964][T16898] __lock_acquire+0xad/0x2cf0 [ 1449.165985][T16898] ? __lock_acquire+0x6b5/0x2cf0 [ 1449.166009][T16898] ? do_raw_spin_lock+0x12b/0x2f0 [ 1449.166042][T16898] lock_acquire+0xf0/0x2e0 [ 1449.166062][T16898] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1449.166088][T16898] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1449.166112][T16898] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1449.166133][T16898] mutex_lock_interruptible_nested+0x5a/0x1d0 [ 1449.166159][T16898] ? as102_dvb_dmx_start_feed+0x70/0x290 [ 1449.166178][T16898] ? lockdep_hardirqs_on+0x7a/0x110 [ 1449.166206][T16898] as102_dvb_dmx_start_feed+0x70/0x290 [ 1449.166230][T16898] dmx_section_feed_start_filtering+0x518/0x6c0 [ 1449.166266][T16898] dvb_dmxdev_filter_start+0xcf4/0x10e0 [ 1449.166295][T16898] ? dvb_dmxdev_filter_set+0x2d1/0x580 [ 1449.166322][T16898] dvb_demux_do_ioctl+0x473/0x540 [ 1449.166350][T16898] dvb_usercopy+0x199/0x2e0 [ 1449.166373][T16898] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1449.166398][T16898] ? __pfx_dvb_usercopy+0x10/0x10 [ 1449.166425][T16898] ? __fget_files+0x3a6/0x420 [ 1449.166452][T16898] ? __fget_files+0x2a/0x420 [ 1449.166477][T16898] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1449.166504][T16898] dvb_demux_ioctl+0x29/0x40 [ 1449.166529][T16898] __se_sys_ioctl+0xff/0x170 [ 1449.166562][T16898] do_syscall_64+0x14d/0xf80 [ 1449.166581][T16898] ? trace_irq_disable+0x3b/0x150 [ 1449.166606][T16898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.166628][T16898] ? clear_bhb_loop+0x40/0x90 [ 1449.166652][T16898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.166673][T16898] RIP: 0033:0x7f1f6a4fc799 [ 1449.166692][T16898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1449.166711][T16898] RSP: 002b:00007f1f6874e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1449.166736][T16898] RAX: ffffffffffffffda RBX: 00007f1f6a775fa0 RCX: 00007f1f6a4fc799 [ 1449.166761][T16898] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000004 [ 1449.166777][T16898] RBP: 00007f1f6a592c99 R08: 0000000000000000 R09: 0000000000000000 [ 1449.166791][T16898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.166804][T16898] R13: 00007f1f6a776038 R14: 00007f1f6a775fa0 R15: 00007ffea2022d58 [ 1449.166827][T16898] [ 1449.167280][ T5866] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1449.180103][T16819] chnl_net:caif_netlink_parms(): no params data found [ 1449.193671][ T5866] as10x_usb: error during firmware upload part1 [ 1449.194097][ T5866] Registered device nBox DVB-T Dongle [ 1449.255694][ T5866] usb 1-1: USB disconnect, device number 29 [ 1449.287583][ T5866] Unregistered device nBox DVB-T Dongle [ 1449.297463][ T5866] as10x_usb: device has been disconnected [ 1450.014066][T16905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.014320][T16905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.559641][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1450.562432][T16905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.425340][T16905] erspan0: left allmulticast mode [ 1452.058550][T16911] bridge0: port 3(syz_tun) entered disabled state [ 1452.137276][T16911] syz_tun (unregistering): left allmulticast mode [ 1452.137305][T16911] syz_tun (unregistering): left promiscuous mode [ 1452.137386][T16911] bridge0: port 3(syz_tun) entered disabled state [ 1452.356170][ T56] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1452.995399][ T56] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.045226][ T56] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1453.045708][ T56] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.666794][ T6389] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1455.920740][ T6389] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.166630][ T6389] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.406787][ T6389] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1456.819420][ T6389] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.016849][ T6389] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.236888][ T6389] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.479416][ T6389] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1457.748523][ T6389] bridge_slave_1: left allmulticast mode [ 1457.748553][ T6389] bridge_slave_1: left promiscuous mode [ 1457.748733][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1457.835800][ T6389] bridge_slave_0: left allmulticast mode [ 1457.835827][ T6389] bridge_slave_0: left promiscuous mode [ 1457.836020][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1457.927622][ T6389] bridge_slave_1: left allmulticast mode [ 1457.927642][ T6389] bridge_slave_1: left promiscuous mode [ 1457.927747][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.015541][ T6389] bridge_slave_0: left allmulticast mode [ 1458.015561][ T6389] bridge_slave_0: left promiscuous mode [ 1458.015673][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.086540][ T6389] bridge_slave_1: left allmulticast mode [ 1458.086560][ T6389] bridge_slave_1: left promiscuous mode [ 1458.086669][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.155606][ T6389] bridge_slave_0: left allmulticast mode [ 1458.155625][ T6389] bridge_slave_0: left promiscuous mode [ 1458.155736][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.227000][ T6389] bridge_slave_1: left allmulticast mode [ 1458.227020][ T6389] bridge_slave_1: left promiscuous mode [ 1458.227122][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.285644][ T6389] bridge_slave_0: left allmulticast mode [ 1458.285664][ T6389] bridge_slave_0: left promiscuous mode [ 1458.285776][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.347539][ T6389] bridge_slave_1: left allmulticast mode [ 1458.347569][ T6389] bridge_slave_1: left promiscuous mode [ 1458.347726][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 1458.435681][ T6389] bridge_slave_0: left allmulticast mode [ 1458.435701][ T6389] bridge_slave_0: left promiscuous mode [ 1458.435839][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.927200][ T6389] bond0 (unregistering): Released all slaves [ 1459.035573][ T6389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1459.115663][ T6389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface