last executing test programs: 10m55.508559226s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 10m53.398140437s ago: executing program 0 (id=8): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) getsockname(r3, &(0x7f0000000240)=@hci, &(0x7f0000000180)=0x80) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r5) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 10m38.043023557s ago: executing program 32 (id=8): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0xa, 0x0, @remote}, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r0, 0x1, 0x70bd28, 0x1, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x2c}}, 0x80) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) getsockname(r3, &(0x7f0000000240)=@hci, &(0x7f0000000180)=0x80) r5 = add_key$keyring(&(0x7f00000005c0), &(0x7f0000001100)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, r5) r6 = socket(0x10, 0x2, 0x0) write(r6, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r6, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000ffff27bd7000f7dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda45d0521860000140012800c0001006d616376746170", @ANYRES32, @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000080)={@local, @random="7c44a8d5ef31", @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local, {[@ra={0x94, 0x4}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) unshare(0x62040200) syz_usb_connect(0x2, 0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000084a48e08d112f74247aa000000010902"], 0x0) socket$inet(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 9m30.0034054s ago: executing program 1 (id=86): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) msgget$private(0x0, 0x31) syz_emit_ethernet(0x46, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0e000000040000000400000006"], 0x50) syz_emit_ethernet(0x334, &(0x7f0000000a80)=ANY=[@ANYBLOB="0180c2000000bbbbbbbbbbbb8100100086dd6003000002fa3afffe8000000000000000000000000000bbff020000000000000000000000000001860090780008030000000000000000000009a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15000010000050000000000260004000018e3906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a775fecb4e2ec0dd9776220a59249877edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a1800c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fed0e94222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000517dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb21906b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a02744000000eaff18103f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b83"], 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xa, 0x14, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6", @ANYRES32], &(0x7f0000000180)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="fdfc19f52a929e03000000000000", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1}, 0x50) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0xff, @private0, 0x7fff}}, 0x0, 0x0, 0x47, 0x0, "d97ecad505a019c1cfa0bfe0202a941714c7df589f0090ffb99793d8aac23f0232c87e617d084cc67def1cce92dd9ddd05331278cc4cd334b74ef9615cdfd96549594f3b8efb54859d4a8f0fe1e1b249"}, 0xd8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000780)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x1, 0x7fff0000}]}) accept4$vsock_stream(r3, &(0x7f00000020c0)={0x28, 0x0, 0x0, @hyper}, 0x10, 0x800) 9m25.934820416s ago: executing program 1 (id=90): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x14f) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x200, 0xdd) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x7f, 0x7, r8}, &(0x7f00000001c0)=0x10) sendmmsg(0xffffffffffffffff, &(0x7f000000ec40), 0x0, 0x8000) write$binfmt_elf64(r0, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], &(0x7f0000000240), 0x0, 0x1}}, 0x40) 9m23.957625266s ago: executing program 1 (id=92): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 9m21.899428598s ago: executing program 1 (id=94): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x20, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040887}, 0x0) 9m21.379763828s ago: executing program 1 (id=97): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b61", 0x3e, 0x5, 0xd7}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb410df0a4c2e54ec355436d7cf998", 0xe0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3", 0x18, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xbad}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m18.34197675s ago: executing program 1 (id=101): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001600010325"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/22, 0xffffffffff408000, 0x1000, 0xb, 0x1}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xffff) write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) keyctl$session_to_parent(0x12) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) unshare(0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(0x0, 0x78b5, 0x80) ioctl$I2C_RDWR(r5, 0x707, 0x0) 9m2.572366947s ago: executing program 33 (id=101): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001600010325"], 0x1c}, 0x1, 0x0, 0x0, 0x440d3}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r3, 0x851, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/22, 0xffffffffff408000, 0x1000, 0xb, 0x1}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc01c5868, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, 0x0) exit(0xffff) write$binfmt_format(r4, &(0x7f0000000300)='1\x00', 0x2) keyctl$session_to_parent(0x12) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40) unshare(0x40000000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r5 = syz_open_dev$I2C(0x0, 0x78b5, 0x80) ioctl$I2C_RDWR(r5, 0x707, 0x0) 2m17.378518489s ago: executing program 5 (id=744): syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x0, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x33, &(0x7f00000190c0)=0x5, 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f08100000009837a0324d7df546bcb8e8c94efe76cef3e200000000", 0x1d) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(r0, &(0x7f0000019080)='net/protocols\x00') setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x7, 0x2}]}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r6, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x31, &(0x7f0000000640), 0x4) 2m15.674708497s ago: executing program 5 (id=746): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b61", 0x3e, 0x5, 0xd7}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e20fb", 0xd2, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3", 0x18, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348", 0xf}], 0x2, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m11.355715684s ago: executing program 5 (id=753): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x24, &(0x7f0000000980)=ANY=[], 0x0) 2m6.866061122s ago: executing program 5 (id=763): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {&(0x7f0000000100), 0x0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x10}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2m5.053141425s ago: executing program 5 (id=765): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf25020000000000000510000000050016002c000000d34513539afc0826d8d8b368e8ababbfe02dfa29a00418b9d01ef21c267e7226a0680367bc799790e642229a774dc397f54a9cfce77d30892988f0daf3bc77f295bc7ec73aa92439fa58f0c248535543f2e1a5aeda41"], 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) 1m54.517374824s ago: executing program 5 (id=784): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) 1m37.172421187s ago: executing program 34 (id=784): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) 20.500947228s ago: executing program 4 (id=893): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400def9b1f652d8b6c900001000010000000000000000000000000a24000000060a0904000000000000000002000000040004800900020073797a32000000"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed947272bccd0e3fce596720cbcd51b7dc569212f46cfbecd"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 16.98909423s ago: executing program 3 (id=894): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) read$dsp(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x67) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$sock_int(r5, 0x1, 0x1d, &(0x7f0000000000)=0x3, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008ff4b0000340000000000019078ac1e0001ac1414aa8617000000030611848a83989c24887c"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000040)={0xe0000012}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) 15.816878599s ago: executing program 4 (id=897): socket$inet6(0xa, 0x3, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup(0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000a80)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0xff, @local, @mcast2, {[], @param_prob={0x4, 0x1, 0x0, 0x1, {0x3, 0x6, '|6M', 0x6, 0x2f, 0xff, @mcast2, @empty, [@fragment={0x33, 0x0, 0x1a, 0x0, 0x0, 0x8, 0x66}]}}}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2e, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0xb, 0x100, @void}}}}}}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000040601020000e9ffffffe7000a0000050500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x28000080) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='nfs4\x00', 0x0, 0x0) 12.756708651s ago: executing program 4 (id=899): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf25020000000000000510000000050016002c000000d34513539afc0826d8d8b368e8ababbfe02dfa29a00418b9d01ef21c267e7226a0680367bc799790e642229a774dc397f54a9cfce77d30892988f0daf3bc77f295bc7ec73aa92439fa58f0c248535543f2e1a5aeda4177"], 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 12.441439642s ago: executing program 2 (id=900): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0) r4 = open(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x11) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r3, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x2) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, 0x0, 0x0) 11.959524197s ago: executing program 6 (id=901): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e000900270970000000002204"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.077297049s ago: executing program 2 (id=902): pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000200001000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x8001, 0xd) 10.482146694s ago: executing program 6 (id=903): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000701fefffff8ff000000017c0000040042800c000180060006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdb"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, &(0x7f0000000c80)={&(0x7f00000008c0)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRES8, @ANYRES32, @ANYBLOB="400001801400020070696d36726567300000", @ANYBLOB="b39487ce57695430d927980302b4cc2b384450befffac2d74e7f09b6eab8c401"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9.752732994s ago: executing program 2 (id=904): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8d}, 0x0) getrlimit(0x5, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="02c93012000e00050014fd0a000800970800060001"], 0x17) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000000300)=ANY=[@ANYRES8=r1], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0xfffffffc}, 0x10}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x51b, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000001300)={0x1d, r4}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0xf, 0x4}, {0x3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) 9.751047464s ago: executing program 3 (id=905): shutdown(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001b40)={0x2c, 0x25, 0x109, 0x70bd2c, 0xfffffff9, {0x2}, [@nested={0x5, 0x59, 0x0, 0x1, [@generic='\b']}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}, @typed={0x8, 0x3f, 0x0, 0x0, @fd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 8.581049661s ago: executing program 3 (id=906): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400def9b1f652d8b6c900001000010000000000000000000000000a24000000060a0904000000000000000002000000040004800900020073797a32000000"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed947272bccd0e3fce596720cbcd51b7dc569212f46cfbecd"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 8.550923341s ago: executing program 4 (id=907): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x6, 0x24, &(0x7f0000000980)=ANY=[], 0x0) 8.272755636s ago: executing program 6 (id=908): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x40000000}) 8.074637682s ago: executing program 2 (id=909): syz_open_dev$sndctrl(0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x0, "1f1f758a517ac2afb617707a659039f0aa79253dd2e6ec53cfd8915ab1f2eb2d9eab6a44988b9cca3beaf0b8db297ec526ea0c178c23db4616a845473010137c", 0x12}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xd8) r5 = add_key(0x0, &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r5, 0xffffffffffffffff, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x10, 0x700, 0x4, 0x8001, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x67, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010102, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x700, 0x20, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x25, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}}}}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x50) mq_open(&(0x7f00000001c0)='nl80211\x00', 0x8c0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0xfffff5a7, 0x7fffffff, 0x0, [{0x1, 0x81, 0xfd, '\x00', 0x4}, {0x7, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0x6, '\x00', 0x2}, {0xd, 0x1, 0xf9, '\x00', 0x3}, {0x2, 0xa, 0x7, '\x00', 0x6}, {0x8, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x45, 0x51, 0x6}, {0xe, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x5, '\x00', 0xb}, {0xd, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x6}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0xb, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x7}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x21, 0x4, '\x00', 0x7}, {0x8, 0x9, 0x0, '\x00', 0x6}]}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 8.00725813s ago: executing program 3 (id=910): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed947"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.424650632s ago: executing program 6 (id=911): socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r4, &(0x7f0000000240)='keyring\x00', &(0x7f0000000340)={'syz', 0x2}, r4) close(0xffffffffffffffff) ioctl$RTC_UIE_ON(r0, 0x7003) 4.708334085s ago: executing program 4 (id=912): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000002e000900270970000000002204"], 0x28}, 0x1, 0x0, 0x0, 0x42804}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.276158457s ago: executing program 6 (id=913): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000200001000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x8001, 0xd) 1.648961376s ago: executing program 2 (id=914): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x4, 0x42}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x470243, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000400)=""/6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) 1.588979367s ago: executing program 3 (id=915): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x48800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000180)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x1, 0xc6fe2, 0x11403f}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x28, 0x42, 0x1, 0xffffffff, 0x25dfdbfd, {0x4}, [@nested={0x4, 0x42}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0xc, 0xc8, 0x0, 0x0, @u64=0x200000000000002}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x4) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x470243, 0x0) ioctl$TUNGETFILTER(r7, 0x801054db, &(0x7f0000000400)=""/6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) 1.509247166s ago: executing program 6 (id=916): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) fsopen(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x1, 0x16, 0xb4, 0x7f}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) socketpair$unix(0x1, 0x1, 0x0, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket(0x3, 0x1, 0x8) setitimer(0x2, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xb4, 0x4}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002240)=ANY=[@ANYBLOB="24000000200001032cbd7000ffdbdf25020000000000000510000000050016002c000000d34513539afc0826d8d8b368e8ababbfe02dfa29a00418b9d01ef21c267e7226a0680367bc799790e642229a774dc397f54a9cfce77d30892988f0daf3bc77f295bc7ec73aa92439fa58f0c248535543f2e1a5aeda4177"], 0x24}}, 0x8800) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 1.342840921s ago: executing program 4 (id=917): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e000100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x8800}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@tracing={0x0, 0x5}}, 0x20) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x73, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 773.001µs ago: executing program 2 (id=918): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000)="6509534a17aa723cba21a9d63c6a556b30b910a580cb50d65e9fab1ed59a7eb00a7109e4a355bed417bce60d6a5baab4bbecc5b2faaf2eba28c331345b612f1f4cbfdfa7bcb9bd2a0fbc8d7786bb68cff61167b98ef0adfbb79545bbb2c409be3adb3b54846920f1b194db5258279e8d06b863d51c0f90cd79ecb1", 0x7b, 0x5, 0xd7}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a268179439f62e", 0xd0, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {&(0x7f0000000340)="8c4e55be8948c65379def4df90ce301f71e7d4e4921490b3aacd4082ccf6531bb82dbd4d13dbfbeb16dd11b3c041c780b7caed488a35c2a00906fbd0e2fa", 0x3e, 0x100, 0x9}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x2, 0xfffffffffffffffa}], 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)="0c74c75350f4a590", 0x8}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=919): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400def9b1f652d8b6c900001000010000000000000000000000000a24000000060a0904000000000000000002000000040004800900020073797a32000000"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10010002}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008004}, 0x20000802) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendto$inet(0xffffffffffffffff, &(0x7f0000000300)="ab", 0x1, 0x0, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x50, 0x40488c2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000000000000000000000850000006300000095000000000000000419a78ee8d717b618661dd84873751e0b6c3adad6c884d956271446757b583ed947272bccd0e3fce596720cbcd51b7dc569212f46cfbecd"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 281.176658][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.248273][ T5921] usb 5-1: config 0 descriptor?? [ 281.251283][ T6871] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 281.339031][ T5921] gspca_main: sq930x-2.14.0 probing 041e:403c [ 281.619271][ T5893] usb 4-1: USB disconnect, device number 20 [ 281.851340][ T5921] gspca_sq930x: reg_r 001f failed -110 [ 281.851412][ T5921] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 282.325926][ T1383] team0 (unregistering): Port device team_slave_1 removed [ 282.448535][ T1383] team0 (unregistering): Port device team_slave_0 removed [ 283.044435][ T6700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.272621][ T820] usb 5-1: USB disconnect, device number 6 [ 283.360977][ T6700] team0: Port device team_slave_0 added [ 283.427593][ T6700] team0: Port device team_slave_1 added [ 283.609077][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.609090][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.609109][ T6700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.662983][ T6700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.662998][ T6700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 283.663019][ T6700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.545204][ T5624] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 286.650640][ T6700] hsr_slave_0: entered promiscuous mode [ 286.662037][ T6700] hsr_slave_1: entered promiscuous mode [ 286.667223][ T6700] debugfs: 'hsr0' already exists in 'hsr' [ 286.667296][ T6700] Cannot create hsr debugfs directory [ 286.698115][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.698150][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.698191][ T5624] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 286.698216][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.757620][ T5624] usb 5-1: config 0 descriptor?? [ 286.993390][ T5624] usbhid 5-1:0.0: can't add hid device: -71 [ 286.993639][ T5624] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 287.116556][ T5624] usb 5-1: USB disconnect, device number 7 [ 287.977394][ T5624] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 288.158650][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.158678][ T5624] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.158706][ T5624] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 288.158722][ T5624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.238221][ T5624] usb 3-1: config 0 descriptor?? [ 288.333228][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 288.533229][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 288.617764][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 288.617793][ T10] usb 4-1: config 0 has no interface number 0 [ 288.618068][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 288.668494][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 288.668528][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.668549][ T10] usb 4-1: Product: syz [ 288.668565][ T10] usb 4-1: Manufacturer: syz [ 288.668640][ T10] usb 4-1: SerialNumber: syz [ 288.791573][ T10] usb 4-1: config 0 descriptor?? [ 289.026955][ T5624] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 289.027056][ T5624] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 289.027090][ T5624] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 289.027116][ T5624] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 289.027198][ T5624] playstation 0003:054C:0DF2.0005: unknown main item tag 0x0 [ 289.419578][ T5624] playstation 0003:054C:0DF2.0005: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 289.465270][ T6928] netlink: 'syz.4.174': attribute type 1 has an invalid length. [ 289.498504][ T5624] playstation 0003:054C:0DF2.0005: Invalid byte count transferred, expected 64 got 0 [ 289.498534][ T5624] playstation 0003:054C:0DF2.0005: Failed to retrieve DualSense firmware info: -22 [ 289.498649][ T5624] playstation 0003:054C:0DF2.0005: Failed to get firmware info from DualSense [ 289.498665][ T5624] playstation 0003:054C:0DF2.0005: Failed to create dualsense. [ 289.629742][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.4.174'. [ 289.752979][ T5624] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22 [ 290.306412][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 290.310143][ T6928] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 290.486789][ T5742] usb 3-1: USB disconnect, device number 12 [ 290.815909][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.872717][ T10] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 290.872774][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 290.872792][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 290.872881][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 292.490085][ T6954] netlink: 'syz.4.177': attribute type 1 has an invalid length. [ 292.554261][ T6955] netlink: 52 bytes leftover after parsing attributes in process `syz.4.177'. [ 292.612313][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.4.177'. [ 293.069628][ T5893] usb 4-1: USB disconnect, device number 21 [ 293.296790][ T6954] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 293.385990][ T4919] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.443010][ T4919] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.448712][ T4919] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.479362][ T4919] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.480437][ T4919] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 294.143306][ T5624] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 294.335950][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.335987][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.336027][ T5624] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 294.336052][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.383271][ T5624] usb 5-1: config 0 descriptor?? [ 294.878029][ T5624] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 294.878060][ T5624] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 294.878081][ T5624] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 294.878102][ T5624] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 294.878122][ T5624] playstation 0003:054C:0DF2.0006: unknown main item tag 0x0 [ 295.035464][ T5624] playstation 0003:054C:0DF2.0006: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 295.095564][ T5624] playstation 0003:054C:0DF2.0006: Invalid reportID received, expected 9 got 0 [ 295.095593][ T5624] playstation 0003:054C:0DF2.0006: Failed to retrieve DualSense pairing info: -22 [ 295.095644][ T5624] playstation 0003:054C:0DF2.0006: Failed to get MAC address from DualSense [ 295.095659][ T5624] playstation 0003:054C:0DF2.0006: Failed to create dualsense. [ 295.234716][ T5624] playstation 0003:054C:0DF2.0006: probe with driver playstation failed with error -22 [ 295.553421][ T4919] Bluetooth: hci1: command tx timeout [ 296.925544][ T5893] usb 5-1: USB disconnect, device number 8 [ 297.634295][ T4919] Bluetooth: hci1: command tx timeout [ 299.414837][ T5742] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 299.500207][ T7035] netlink: 'syz.4.186': attribute type 1 has an invalid length. [ 299.553725][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.4.186'. [ 299.553749][ T7036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.186'. [ 299.573575][ T5742] usb 3-1: Using ep0 maxpacket: 8 [ 299.637088][ T7037] netlink: 4 bytes leftover after parsing attributes in process `syz.4.186'. [ 299.665163][ T5742] usb 3-1: config 2 has an invalid interface number: 31 but max is 0 [ 299.665193][ T5742] usb 3-1: config 2 has no interface number 0 [ 299.665240][ T5742] usb 3-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.665263][ T5742] usb 3-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.665296][ T5742] usb 3-1: config 2 interface 31 has no altsetting 0 [ 299.671881][ T5742] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 299.671912][ T5742] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.671932][ T5742] usb 3-1: Product: syz [ 299.671947][ T5742] usb 3-1: Manufacturer: syz [ 299.671962][ T5742] usb 3-1: SerialNumber: syz [ 299.719513][ T4919] Bluetooth: hci1: command tx timeout [ 299.780755][ T5742] ch9200 3-1:2.31: probe with driver ch9200 failed with error -22 [ 299.983725][ T7031] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 300.009520][ T7037] bond1 (unregistering): Released all slaves [ 300.040735][ T5742] usb 3-1: USB disconnect, device number 13 [ 300.187781][ T6700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 300.275101][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 300.281149][ T6700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 300.364346][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 300.547772][ T6700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 300.592159][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 300.630896][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.187'. [ 300.651569][ T6700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.587992][ T6700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 301.793302][ T4919] Bluetooth: hci1: command tx timeout [ 302.385122][ T5741] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 302.558476][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.558512][ T5741] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.558558][ T5741] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 302.558575][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.760171][ T5741] usb 4-1: config 0 descriptor?? [ 303.280329][ T5741] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 303.280366][ T5741] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 303.280389][ T5741] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 303.280413][ T5741] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 303.280438][ T5741] playstation 0003:054C:0DF2.0007: unknown main item tag 0x0 [ 303.342775][ T5741] playstation 0003:054C:0DF2.0007: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 303.462563][ T5741] playstation 0003:054C:0DF2.0007: Invalid reportID received, expected 9 got 0 [ 303.462590][ T5741] playstation 0003:054C:0DF2.0007: Failed to retrieve DualSense pairing info: -22 [ 303.462626][ T5741] playstation 0003:054C:0DF2.0007: Failed to get MAC address from DualSense [ 303.462637][ T5741] playstation 0003:054C:0DF2.0007: Failed to create dualsense. [ 303.581135][ T5741] playstation 0003:054C:0DF2.0007: probe with driver playstation failed with error -22 [ 304.246337][ T1424] bridge_slave_1: left allmulticast mode [ 304.246377][ T1424] bridge_slave_1: left promiscuous mode [ 304.246707][ T1424] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.500039][ T1424] bridge_slave_0: left allmulticast mode [ 304.500069][ T1424] bridge_slave_0: left promiscuous mode [ 304.501689][ T1424] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.176758][ T5742] usb 4-1: USB disconnect, device number 22 [ 306.957857][ T1424] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.014210][ T1424] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.066896][ T1424] bond0 (unregistering): Released all slaves [ 307.139986][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 307.287594][ T7100] syzkaller0: entered promiscuous mode [ 307.287615][ T7100] syzkaller0: entered allmulticast mode [ 307.833303][ T5742] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 308.003291][ T5742] usb 4-1: Using ep0 maxpacket: 8 [ 308.121680][ T5742] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 308.121711][ T5742] usb 4-1: config 2 has no interface number 0 [ 308.122405][ T5742] usb 4-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.122424][ T5742] usb 4-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 308.122441][ T5742] usb 4-1: config 2 interface 31 has no altsetting 0 [ 308.766780][ T5742] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 308.766813][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.766834][ T5742] usb 4-1: Product: syz [ 308.766849][ T5742] usb 4-1: Manufacturer: syz [ 308.766865][ T5742] usb 4-1: SerialNumber: syz [ 308.835698][ T5742] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 309.037185][ T7116] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 309.076046][ T1424] hsr_slave_0: left promiscuous mode [ 309.114845][ T1424] hsr_slave_1: left promiscuous mode [ 309.115888][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.166765][ T1424] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.251783][ T5893] usb 4-1: USB disconnect, device number 23 [ 310.885043][ T1424] team0 (unregistering): Port device team_slave_1 removed [ 310.943949][ T1424] team0 (unregistering): Port device team_slave_0 removed [ 311.479937][ T7125] netlink: 4 bytes leftover after parsing attributes in process `syz.4.199'. [ 311.745264][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.745402][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.747334][ T6968] bridge_slave_0: entered allmulticast mode [ 311.785716][ T6968] bridge_slave_0: entered promiscuous mode [ 311.807398][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.808205][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.808423][ T6968] bridge_slave_1: entered allmulticast mode [ 311.811343][ T6968] bridge_slave_1: entered promiscuous mode [ 312.025132][ T6700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.052853][ T6968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.126284][ T6968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.457548][ T6968] team0: Port device team_slave_0 added [ 312.479995][ T6968] team0: Port device team_slave_1 added [ 312.642686][ T7153] sg_write: data in/out 294912/136 bytes for SCSI command 0x0-- guessing data in; [ 312.642686][ T7153] program syz.4.205 not setting count and/or reply_len properly [ 313.161797][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.161815][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.161843][ T6968] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.224766][ T6700] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.232840][ T6968] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.232854][ T6968] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.232874][ T6968] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.419539][ T1513] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.424933][ T1513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.593301][ T5624] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 313.593578][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 313.692469][ T7165] overlayfs: failed to resolve './file1': -2 [ 313.723908][ T5624] usb 4-1: device descriptor read/64, error -32 [ 313.812075][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.812214][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.963209][ T5624] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 313.996066][ T6968] hsr_slave_0: entered promiscuous mode [ 313.999711][ T6968] hsr_slave_1: entered promiscuous mode [ 314.001788][ T6968] debugfs: 'hsr0' already exists in 'hsr' [ 314.001810][ T6968] Cannot create hsr debugfs directory [ 314.113370][ T5624] usb 4-1: Using ep0 maxpacket: 32 [ 314.139291][ T5624] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 314.139320][ T5624] usb 4-1: config 0 has no interface number 0 [ 314.139370][ T5624] usb 4-1: config 0 interface 12 has no altsetting 0 [ 314.172686][ T5624] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 314.172718][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.172739][ T5624] usb 4-1: Product: syz [ 314.172754][ T5624] usb 4-1: Manufacturer: syz [ 314.172769][ T5624] usb 4-1: SerialNumber: syz [ 314.370738][ T5624] usb 4-1: config 0 descriptor?? [ 315.030327][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 315.074572][ T1261] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 315.255331][ T1261] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 315.255353][ T1261] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 315.255415][ T1261] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 315.255452][ T1261] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.274183][ T1261] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 315.274215][ T1261] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 315.274309][ T1261] usb 3-1: Product: syz [ 315.274325][ T1261] usb 3-1: Manufacturer: syz [ 315.565481][ T1261] cdc_wdm 3-1:1.0: skipping garbage [ 315.565503][ T1261] cdc_wdm 3-1:1.0: skipping garbage [ 316.279122][ T1261] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 316.279152][ T1261] cdc_wdm 3-1:1.0: Unknown control protocol [ 316.350488][ T1261] usb 3-1: USB disconnect, device number 14 [ 316.528372][ T5624] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 316.528414][ T5624] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 316.528426][ T5624] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 316.528496][ T5624] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 317.424798][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.424872][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.326894][ T5741] usb 4-1: USB disconnect, device number 25 [ 320.249998][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.296085][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.319367][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.339688][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.350546][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.573260][ T5741] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 320.724705][ T5741] usb 4-1: Using ep0 maxpacket: 8 [ 320.742044][ T5741] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 320.742076][ T5741] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.742137][ T5741] usb 4-1: Product: syz [ 320.742153][ T5741] usb 4-1: Manufacturer: syz [ 320.742169][ T5741] usb 4-1: SerialNumber: syz [ 320.784467][ T5741] usb 4-1: config 0 descriptor?? [ 320.822105][ T5741] gspca_main: se401-2.14.0 probing 047d:5003 [ 321.353708][ T5741] gspca_se401: Bayer format not supported! [ 321.412478][ T7236] overlayfs: failed to resolve './file1': -2 [ 322.513671][ T4919] Bluetooth: hci5: command tx timeout [ 323.434773][ T5741] usb 4-1: USB disconnect, device number 26 [ 324.258063][ T7274] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 324.471914][ T7280] netlink: 'syz.2.223': attribute type 1 has an invalid length. [ 324.565714][ T7282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 324.604742][ T4919] Bluetooth: hci5: command tx timeout [ 324.632140][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 324.772127][ T7286] bond1 (unregistering): Released all slaves [ 326.673443][ T4919] Bluetooth: hci5: command tx timeout [ 326.701428][ T6968] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 326.776076][ T6968] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 326.833440][ T6968] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 326.900061][ T6968] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 326.928666][ T6968] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 326.970145][ T6968] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 327.020955][ T6968] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.145698][ T6968] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 327.882334][ T7338] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 328.763248][ T4919] Bluetooth: hci5: command tx timeout [ 330.085592][ T7216] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.085728][ T7216] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.085966][ T7216] bridge_slave_0: entered allmulticast mode [ 330.126749][ T7216] bridge_slave_0: entered promiscuous mode [ 330.187698][ T7216] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.187840][ T7216] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.188062][ T7216] bridge_slave_1: entered allmulticast mode [ 330.192608][ T7216] bridge_slave_1: entered promiscuous mode [ 330.665531][ T7216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.711767][ T7216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.845789][ T56] bridge_slave_1: left allmulticast mode [ 330.845829][ T56] bridge_slave_1: left promiscuous mode [ 330.846097][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.873187][ T5624] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 330.965317][ T56] bridge_slave_0: left allmulticast mode [ 330.965346][ T56] bridge_slave_0: left promiscuous mode [ 330.965596][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.023176][ T5624] usb 4-1: Using ep0 maxpacket: 32 [ 331.026830][ T5624] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 331.026851][ T5624] usb 4-1: config 0 has no interface number 0 [ 331.026883][ T5624] usb 4-1: config 0 interface 12 has no altsetting 0 [ 331.029455][ T5624] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 331.029477][ T5624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.029491][ T5624] usb 4-1: Product: syz [ 331.029502][ T5624] usb 4-1: Manufacturer: syz [ 331.029513][ T5624] usb 4-1: SerialNumber: syz [ 331.098323][ T5624] usb 4-1: config 0 descriptor?? [ 332.941878][ T5624] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 332.941937][ T5624] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 332.941955][ T5624] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 332.942053][ T5624] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 333.015546][ T5624] usb 4-1: USB disconnect, device number 27 [ 333.444994][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.526768][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.586925][ T56] bond0 (unregistering): Released all slaves [ 333.979959][ T7216] team0: Port device team_slave_0 added [ 333.985768][ T7216] team0: Port device team_slave_1 added [ 334.006773][ T6968] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.039580][ T5624] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 334.151911][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.151931][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 334.151960][ T7216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.195102][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.195137][ T5624] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.195177][ T5624] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 334.195202][ T5624] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.242183][ T5624] usb 5-1: config 0 descriptor?? [ 334.363273][ T56] hsr_slave_0: left promiscuous mode [ 334.393927][ T56] hsr_slave_1: left promiscuous mode [ 334.395075][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.437126][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.680591][ T5624] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 334.680628][ T5624] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 334.680655][ T5624] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 334.680681][ T5624] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 334.680706][ T5624] playstation 0003:054C:0DF2.0008: unknown main item tag 0x0 [ 334.762062][ T5624] playstation 0003:054C:0DF2.0008: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.4-1/input0 [ 335.091693][ T5624] playstation 0003:054C:0DF2.0008: Invalid byte count transferred, expected 64 got 48 [ 335.091724][ T5624] playstation 0003:054C:0DF2.0008: Failed to retrieve DualSense firmware info: -22 [ 335.091841][ T5624] playstation 0003:054C:0DF2.0008: Failed to get firmware info from DualSense [ 335.091858][ T5624] playstation 0003:054C:0DF2.0008: Failed to create dualsense. [ 335.158406][ T5624] playstation 0003:054C:0DF2.0008: probe with driver playstation failed with error -22 [ 335.574066][ T56] team0 (unregistering): Port device team_slave_1 removed [ 335.634544][ T56] team0 (unregistering): Port device team_slave_0 removed [ 335.956273][ T7216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.956287][ T7216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.956306][ T7216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.039608][ T820] usb 5-1: USB disconnect, device number 9 [ 336.301930][ T6968] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.418708][ T7216] hsr_slave_0: entered promiscuous mode [ 336.420385][ T7216] hsr_slave_1: entered promiscuous mode [ 336.421439][ T7216] debugfs: 'hsr0' already exists in 'hsr' [ 336.421463][ T7216] Cannot create hsr debugfs directory [ 336.580733][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.580892][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.691315][ T5921] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 336.703193][ T1261] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 336.766795][ T1180] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.767071][ T1180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.837649][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.837694][ T5921] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.837734][ T5921] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 336.837758][ T5921] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.943256][ T5921] usb 3-1: config 0 descriptor?? [ 336.966232][ T1261] usb 4-1: Using ep0 maxpacket: 32 [ 336.971029][ T1261] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 336.971058][ T1261] usb 4-1: config 0 has no interface number 0 [ 336.971106][ T1261] usb 4-1: config 0 interface 12 has no altsetting 0 [ 336.976760][ T1261] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 336.976791][ T1261] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.976811][ T1261] usb 4-1: Product: syz [ 336.976827][ T1261] usb 4-1: Manufacturer: syz [ 336.976870][ T1261] usb 4-1: SerialNumber: syz [ 337.178527][ T1261] usb 4-1: config 0 descriptor?? [ 337.517834][ T5921] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 337.517872][ T5921] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 337.517898][ T5921] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 337.517925][ T5921] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 337.517952][ T5921] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0 [ 337.595080][ T5921] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 337.670155][ T5921] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 9: -71 [ 337.670186][ T5921] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense pairing info: -71 [ 337.670237][ T5921] playstation 0003:054C:0DF2.0009: Failed to get MAC address from DualSense [ 337.670253][ T5921] playstation 0003:054C:0DF2.0009: Failed to create dualsense. [ 337.909778][ T5921] playstation 0003:054C:0DF2.0009: probe with driver playstation failed with error -71 [ 337.934883][ T5921] usb 3-1: USB disconnect, device number 15 [ 339.237809][ T1261] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 339.237871][ T1261] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 339.237889][ T1261] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 339.265823][ T1261] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 339.454849][ T5921] usb 4-1: USB disconnect, device number 28 [ 342.897434][ T6968] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.806846][ T7510] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 344.194026][ T7216] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 344.249089][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 344.252488][ T7216] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 344.366757][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.373343][ T7216] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 344.412491][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 344.440381][ T7216] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 344.484597][ T7216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 344.610028][ T6968] veth0_vlan: entered promiscuous mode [ 344.709477][ T6968] veth1_vlan: entered promiscuous mode [ 344.952128][ T6968] veth0_macvtap: entered promiscuous mode [ 345.016004][ T6968] veth1_macvtap: entered promiscuous mode [ 345.150057][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.246757][ T6968] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.318982][ T7216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.475343][ T66] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.492336][ T66] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.521038][ T1513] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.532976][ T1513] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.735325][ T7216] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.987514][ T3908] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.987759][ T3908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.161234][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.161368][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.177639][ T7545] netlink: 44 bytes leftover after parsing attributes in process `syz.4.260'. [ 347.968385][ T66] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.968405][ T66] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.866917][ T7549] netlink: 44 bytes leftover after parsing attributes in process `syz.4.261'. [ 349.268920][ T1513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.268950][ T1513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.868949][ T7216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.516211][ T7216] veth0_vlan: entered promiscuous mode [ 353.540262][ T7216] veth1_vlan: entered promiscuous mode [ 353.716167][ T7581] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 353.869753][ T7584] netlink: 4 bytes leftover after parsing attributes in process `syz.3.267'. [ 354.078521][ T7586] overlayfs: overlapping lowerdir path [ 354.246146][ T7587] overlayfs: overlapping lowerdir path [ 355.412562][ T7584] bond1 (unregistering): Released all slaves [ 355.498959][ T31] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 355.806541][ T31] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 355.806573][ T31] usb 3-1: config 0 has no interface number 0 [ 355.806621][ T31] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 355.884565][ T7216] veth0_macvtap: entered promiscuous mode [ 355.891128][ T31] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 355.891160][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.891181][ T31] usb 3-1: Product: syz [ 355.891195][ T31] usb 3-1: Manufacturer: syz [ 355.891209][ T31] usb 3-1: SerialNumber: syz [ 355.941057][ T31] usb 3-1: config 0 descriptor?? [ 355.942249][ T7594] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 355.959567][ T31] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 356.002411][ T7216] veth1_macvtap: entered promiscuous mode [ 356.035730][ T31] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 356.146749][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.295761][ T7216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.322304][ C1] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 356.474097][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.501874][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.517642][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.521575][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.562660][ T5742] usb 3-1: USB disconnect, device number 16 [ 356.631850][ T5742] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 356.658358][ T5742] cyberjack 3-1:0.69: device disconnected [ 360.295074][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.295096][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.748371][ T1383] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.748394][ T1383] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.113634][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 362.394818][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 362.399723][ T10] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 362.399753][ T10] usb 6-1: config 0 has no interface number 0 [ 362.399802][ T10] usb 6-1: config 0 interface 12 has no altsetting 0 [ 362.519861][ T10] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 362.519892][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.519919][ T10] usb 6-1: Product: syz [ 362.519930][ T10] usb 6-1: Manufacturer: syz [ 362.519941][ T10] usb 6-1: SerialNumber: syz [ 362.573181][ T10] usb 6-1: config 0 descriptor?? [ 365.721729][ T10] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 365.721815][ T10] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 365.721829][ T10] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 365.721898][ T10] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 365.733299][ T1261] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 365.924024][ T1261] usb 7-1: Using ep0 maxpacket: 8 [ 365.929562][ T1261] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 365.929587][ T1261] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.929604][ T1261] usb 7-1: config 0 interface 0 has no altsetting 0 [ 365.929628][ T1261] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 365.929645][ T1261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.998114][ T1261] usb 7-1: config 0 descriptor?? [ 366.442994][ T1261] smartjoyplus 0003:6666:8804.000A: unknown main item tag 0x2 [ 366.444093][ T1261] smartjoyplus 0003:6666:8804.000A: item fetching failed at offset 4/5 [ 366.444734][ T1261] smartjoyplus 0003:6666:8804.000A: parse failed [ 366.444811][ T1261] smartjoyplus 0003:6666:8804.000A: probe with driver smartjoyplus failed with error -22 [ 366.919682][ T820] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 366.965693][ T5893] usb 7-1: USB disconnect, device number 2 [ 367.118830][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 367.187135][ T820] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 367.187158][ T820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.219489][ T820] usb 5-1: config 0 descriptor?? [ 367.276355][ T820] gspca_main: sq930x-2.14.0 probing 041e:403c [ 367.793432][ T820] gspca_sq930x: reg_r 001f failed -110 [ 367.793623][ T820] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 368.128139][ T5742] usb 6-1: USB disconnect, device number 2 [ 370.175776][ T7683] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 371.673730][ T820] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 372.285675][ T820] usb 4-1: Using ep0 maxpacket: 8 [ 372.424080][ T820] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 372.424111][ T820] usb 4-1: config 2 has no interface number 0 [ 372.424159][ T820] usb 4-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 372.424176][ T820] usb 4-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 372.424193][ T820] usb 4-1: config 2 interface 31 has no altsetting 0 [ 372.436052][ T820] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 372.436133][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.436188][ T820] usb 4-1: Product: syz [ 372.436222][ T820] usb 4-1: Manufacturer: syz [ 372.436264][ T820] usb 4-1: SerialNumber: syz [ 372.566950][ T820] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 372.686376][ T31] usb 5-1: USB disconnect, device number 10 [ 372.824430][ T7686] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 373.676549][ T5893] usb 4-1: USB disconnect, device number 29 [ 374.389842][ T7710] netlink: 'syz.4.298': attribute type 1 has an invalid length. [ 374.486098][ T7712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 376.922160][ T7712] bond1 (unregistering): Released all slaves [ 377.048289][ T7721] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 377.176934][ T7723] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 377.305874][ T7723] bond1 (unregistering): Released all slaves [ 379.021020][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.021095][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.946916][ T7736] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.643245][ T5742] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 380.817399][ T5742] usb 5-1: Using ep0 maxpacket: 32 [ 380.861639][ T5742] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.861674][ T5742] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 381.123232][ T31] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 381.296989][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.297066][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.297098][ T31] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 381.297114][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.329104][ T5742] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 381.329191][ T5742] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.329246][ T5742] usb 5-1: Product: syz [ 381.329286][ T5742] usb 5-1: Manufacturer: syz [ 381.329323][ T5742] usb 5-1: SerialNumber: syz [ 381.398878][ T31] usb 3-1: config 0 descriptor?? [ 381.402778][ T5742] usb 5-1: config 0 descriptor?? [ 381.996470][ T31] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 381.996574][ T31] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 381.996605][ T31] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 381.996637][ T31] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 381.996701][ T31] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0 [ 382.185628][ T31] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.2-1/input0 [ 382.283247][ T31] playstation 0003:054C:0DF2.000B: Invalid byte count transferred, expected 20 got 0 [ 382.283371][ T31] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense pairing info: -22 [ 382.284972][ T31] playstation 0003:054C:0DF2.000B: Failed to get MAC address from DualSense [ 382.285021][ T31] playstation 0003:054C:0DF2.000B: Failed to create dualsense. [ 382.529819][ T31] playstation 0003:054C:0DF2.000B: probe with driver playstation failed with error -22 [ 382.623580][ T31] usb 3-1: USB disconnect, device number 17 [ 382.972326][ T7756] fido_id[7756]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 388.731448][ T5715] usb 5-1: USB disconnect, device number 11 [ 388.924236][ T10] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 389.090672][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.090708][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.090754][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 389.090779][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.145086][ T10] usb 4-1: config 0 descriptor?? [ 389.585708][ T7793] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 390.210317][ T10] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 390.210356][ T10] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 390.210386][ T10] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 390.210412][ T10] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 390.210439][ T10] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0 [ 390.425790][ T10] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 392.881019][ T10] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 32: -71 [ 392.881048][ T10] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense firmware info: -71 [ 392.881100][ T10] playstation 0003:054C:0DF2.000C: Failed to get firmware info from DualSense [ 392.881123][ T10] playstation 0003:054C:0DF2.000C: Failed to create dualsense. [ 392.966290][ T10] playstation 0003:054C:0DF2.000C: probe with driver playstation failed with error -71 [ 393.019922][ T10] usb 4-1: USB disconnect, device number 30 [ 400.809410][ T7831] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.283156][ T36] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 401.435985][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 401.436013][ T36] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.436044][ T36] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 401.436063][ T36] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.483663][ T10] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 401.510400][ T36] usb 6-1: config 0 descriptor?? [ 401.708554][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 401.848983][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.849013][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 402.035478][ T10] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 402.035512][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.035533][ T10] usb 4-1: Product: syz [ 402.035549][ T10] usb 4-1: Manufacturer: syz [ 402.035565][ T10] usb 4-1: SerialNumber: syz [ 402.094002][ T10] usb 4-1: config 0 descriptor?? [ 402.194967][ T36] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 402.195008][ T36] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 402.195053][ T36] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 402.195081][ T36] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 402.195108][ T36] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0 [ 402.275718][ T36] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 402.345789][ T7837] mmap: syz.4.324 (7837) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 403.470669][ T36] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 5: -71 [ 403.470701][ T36] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense calibration info: -71 [ 403.470755][ T36] playstation 0003:054C:0DF2.000D: Failed to get calibration data from DualSense [ 403.470774][ T36] playstation 0003:054C:0DF2.000D: Failed to create dualsense. [ 403.758866][ T36] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71 [ 403.814768][ T36] usb 6-1: USB disconnect, device number 3 [ 405.464106][ T7861] netlink: 200 bytes leftover after parsing attributes in process `syz.4.329'. [ 407.374274][ T7866] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 408.932009][ T10] usb 4-1: USB disconnect, device number 31 [ 413.754735][ T7908] : renamed from bridge_slave_0 (while UP) [ 414.243169][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 414.453191][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 414.471757][ T31] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 414.471782][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.493577][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 414.562352][ T31] usb 7-1: config 0 descriptor?? [ 414.793208][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 414.830360][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 414.830394][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.921024][ T31] gspca_main: sq930x-2.14.0 probing 041e:403c [ 414.941372][ T10] usb 5-1: config 0 descriptor?? [ 415.129218][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 415.431637][ T31] gspca_sq930x: reg_r 001f failed -110 [ 415.431743][ T31] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 415.633478][ T10] gspca_sq930x: reg_r 001f failed -110 [ 415.633590][ T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 415.883285][ T5624] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 416.043116][ T5624] usb 6-1: Using ep0 maxpacket: 32 [ 416.067256][ T5624] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 416.067282][ T5624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.129921][ T7937] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 416.137785][ T5624] usb 6-1: config 0 descriptor?? [ 416.250621][ T5624] gspca_main: sq930x-2.14.0 probing 041e:403c [ 416.790913][ T4919] Bluetooth: hci1: command 0x0406 tx timeout [ 416.796234][ T5624] gspca_sq930x: reg_r 001f failed -110 [ 416.796446][ T5624] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 417.043709][ T5921] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 417.203476][ T5921] usb 4-1: Using ep0 maxpacket: 32 [ 417.315184][ T5921] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.315205][ T5921] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 417.327529][ T5921] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 417.327563][ T5921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.327578][ T5921] usb 4-1: Product: syz [ 417.327588][ T5921] usb 4-1: Manufacturer: syz [ 417.327599][ T5921] usb 4-1: SerialNumber: syz [ 417.415664][ T5921] usb 4-1: config 0 descriptor?? [ 422.099818][ T1261] usb 7-1: USB disconnect, device number 3 [ 423.033136][ T36] usb 6-1: USB disconnect, device number 4 [ 424.719270][ T36] usb 4-1: USB disconnect, device number 32 [ 425.383391][ T5624] usb 5-1: USB disconnect, device number 12 [ 426.496399][ T5624] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 426.645246][ T5624] usb 7-1: Using ep0 maxpacket: 8 [ 426.647389][ T5624] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.647414][ T5624] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.647431][ T5624] usb 7-1: config 0 interface 0 has no altsetting 0 [ 426.647455][ T5624] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 426.647472][ T5624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.725571][ T5624] usb 7-1: config 0 descriptor?? [ 427.389755][ T5624] smartjoyplus 0003:6666:8804.000E: unknown main item tag 0x2 [ 427.389790][ T5624] smartjoyplus 0003:6666:8804.000E: item fetching failed at offset 4/5 [ 427.391671][ T5624] smartjoyplus 0003:6666:8804.000E: parse failed [ 427.391752][ T5624] smartjoyplus 0003:6666:8804.000E: probe with driver smartjoyplus failed with error -22 [ 427.597573][ T7953] IPVS: length: 153 != 24 [ 427.626159][ T5624] usb 7-1: USB disconnect, device number 4 [ 431.173447][ T8005] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.234150][ T8009] syz.2.363 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 432.157462][ T8015] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 432.203802][ T5893] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 432.354893][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 432.379898][ T5893] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.379926][ T5893] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 432.430005][ T5893] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 432.430037][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.430058][ T5893] usb 6-1: Product: syz [ 432.430072][ T5893] usb 6-1: Manufacturer: syz [ 432.430087][ T5893] usb 6-1: SerialNumber: syz [ 432.486458][ T5893] usb 6-1: config 0 descriptor?? [ 432.926402][ T8020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.367'. [ 439.952320][ T5615] usb 6-1: USB disconnect, device number 5 [ 440.338697][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.338857][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.646987][ T8059] overlayfs: failed to resolve './file1': -2 [ 443.644150][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 443.800311][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.800349][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.800391][ T10] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 443.800417][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.863464][ T10] usb 4-1: config 0 descriptor?? [ 444.179712][ T1261] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 444.351710][ T10] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 444.351738][ T10] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 444.351757][ T10] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 444.351776][ T10] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 444.351802][ T10] playstation 0003:054C:0DF2.000F: unknown main item tag 0x0 [ 444.373544][ T1261] usb 3-1: Using ep0 maxpacket: 8 [ 444.419740][ T1261] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 444.419765][ T1261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.419779][ T1261] usb 3-1: Product: syz [ 444.419790][ T1261] usb 3-1: Manufacturer: syz [ 444.419801][ T1261] usb 3-1: SerialNumber: syz [ 444.466884][ T10] playstation 0003:054C:0DF2.000F: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 444.498044][ T1261] usb 3-1: config 0 descriptor?? [ 444.541644][ T1261] gspca_main: se401-2.14.0 probing 047d:5003 [ 444.585792][ T8074] : renamed from bridge_slave_0 (while UP) [ 444.912521][ T1261] gspca_se401: Bayer format not supported! [ 445.009962][ T10] playstation 0003:054C:0DF2.000F: Failed to retrieve feature with reportID 5: -71 [ 445.009985][ T10] playstation 0003:054C:0DF2.000F: Failed to retrieve DualSense calibration info: -71 [ 445.010023][ T10] playstation 0003:054C:0DF2.000F: Failed to get calibration data from DualSense [ 445.010067][ T10] playstation 0003:054C:0DF2.000F: Failed to create dualsense. [ 445.105316][ T5893] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 445.142086][ T10] playstation 0003:054C:0DF2.000F: probe with driver playstation failed with error -71 [ 445.221851][ T10] usb 4-1: USB disconnect, device number 33 [ 445.313861][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 445.319921][ T5893] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 445.319945][ T5893] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.364120][ T5893] usb 6-1: config 0 descriptor?? [ 445.385905][ T5893] gspca_main: sq930x-2.14.0 probing 041e:403c [ 445.443168][ T5624] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 445.600435][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.600471][ T5624] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.600511][ T5624] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 445.600762][ T5624] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.730302][ T5624] usb 7-1: config 0 descriptor?? [ 445.894182][ T5893] gspca_sq930x: reg_r 001f failed -110 [ 445.894962][ T5893] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 446.242933][ T5624] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 446.245651][ T5624] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 446.246206][ T5624] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 446.246295][ T5624] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 446.246356][ T5624] playstation 0003:054C:0DF2.0010: unknown main item tag 0x0 [ 446.322886][ T5624] playstation 0003:054C:0DF2.0010: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 446.912238][ T5624] playstation 0003:054C:0DF2.0010: Failed to retrieve feature with reportID 5: -71 [ 446.912260][ T5624] playstation 0003:054C:0DF2.0010: Failed to retrieve DualSense calibration info: -71 [ 446.912294][ T5624] playstation 0003:054C:0DF2.0010: Failed to get calibration data from DualSense [ 446.912308][ T5624] playstation 0003:054C:0DF2.0010: Failed to create dualsense. [ 447.105503][ T5624] playstation 0003:054C:0DF2.0010: probe with driver playstation failed with error -71 [ 447.148395][ T10] usb 3-1: USB disconnect, device number 18 [ 447.214568][ T5624] usb 7-1: USB disconnect, device number 5 [ 447.474930][ T5626] Bluetooth: hci5: command 0x0406 tx timeout [ 451.368587][ T820] usb 6-1: USB disconnect, device number 6 [ 451.371244][ T5921] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 451.371641][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 451.493225][ T5921] usb 7-1: device descriptor read/64, error -32 [ 451.733552][ T5921] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 452.046227][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 452.165760][ T8115] overlayfs: failed to resolve './file1': -2 [ 453.058420][ T5921] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.058449][ T5921] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 453.224584][ T8116] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 454.819327][ T8122] overlayfs: overlapping lowerdir path [ 454.972855][ T8123] overlayfs: overlapping lowerdir path [ 458.114262][ T5921] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 458.114317][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.114338][ T5921] usb 7-1: Product: syz [ 458.114357][ T5921] usb 7-1: Manufacturer: syz [ 458.206405][ T5921] usb 7-1: config 0 descriptor?? [ 458.208155][ T5921] usb 7-1: can't set config #0, error -32 [ 458.697095][ T5624] usb 7-1: USB disconnect, device number 7 [ 458.813203][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 458.963149][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 458.966550][ T10] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 458.966584][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.057354][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 459.057406][ T10] pvrusb2: ********** [ 459.057411][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 459.057420][ T10] pvrusb2: Important functionality might not be entirely working. [ 459.057427][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 459.057435][ T10] pvrusb2: ********** [ 461.179540][ T2387] pvrusb2: Invalid write control endpoint [ 461.402180][ T10] usb 6-1: USB disconnect, device number 7 [ 462.596852][ T8156] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 463.129072][ T2387] pvrusb2: Invalid write control endpoint [ 463.129090][ T2387] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 463.129101][ T2387] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 463.129110][ T2387] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 463.129122][ T2387] pvrusb2: Device being rendered inoperable [ 463.139259][ T2387] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 463.139525][ T2387] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 463.372752][ T2387] pvrusb2: Attached sub-driver cx25840 [ 463.372771][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 463.372783][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 466.777442][ T5715] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 466.933082][ T5715] usb 3-1: Using ep0 maxpacket: 32 [ 467.092396][ T5715] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.092426][ T5715] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.357664][ T5715] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 467.357688][ T5715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.357703][ T5715] usb 3-1: Product: syz [ 467.357713][ T5715] usb 3-1: Manufacturer: syz [ 467.357724][ T5715] usb 3-1: SerialNumber: syz [ 467.414980][ T5715] usb 3-1: config 0 descriptor?? [ 467.644068][ T10] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 467.845863][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 467.866720][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 467.866772][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.010052][ T10] usb 7-1: config 0 descriptor?? [ 468.111069][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 468.629508][ T10] gspca_sq930x: reg_r 001f failed -110 [ 468.629630][ T10] sq930x 7-1:0.0: probe with driver sq930x failed with error -110 [ 471.040641][ T4919] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 474.178663][ T820] usb 7-1: USB disconnect, device number 8 [ 474.349019][ T5624] usb 3-1: USB disconnect, device number 19 [ 476.634533][ T4919] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 476.634715][ T4919] Bluetooth: hci5: Injecting HCI hardware error event [ 476.664393][ T5626] Bluetooth: hci5: hardware error 0x00 [ 477.243264][ T4919] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 478.950827][ T8248] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 479.974293][ T5626] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 482.753197][ T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 482.753498][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 482.883134][ T10] usb 5-1: device descriptor read/64, error -32 [ 483.133139][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 486.363190][ T5624] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 486.793277][ T5624] usb 7-1: Using ep0 maxpacket: 32 [ 486.819629][ T5624] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.819650][ T5624] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 486.930372][ T5624] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 486.930396][ T5624] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.930411][ T5624] usb 7-1: Product: syz [ 486.930421][ T5624] usb 7-1: Manufacturer: syz [ 486.930432][ T5624] usb 7-1: SerialNumber: syz [ 486.968133][ T5921] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 486.986988][ T5624] usb 7-1: config 0 descriptor?? [ 487.113189][ T5921] usb 3-1: Using ep0 maxpacket: 32 [ 487.154026][ T5921] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 487.154059][ T5921] usb 3-1: config 0 has no interface number 0 [ 487.154109][ T5921] usb 3-1: config 0 interface 12 has no altsetting 0 [ 487.224142][ T5921] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 487.224400][ T5921] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.224425][ T5921] usb 3-1: Product: syz [ 487.224440][ T5921] usb 3-1: Manufacturer: syz [ 487.224455][ T5921] usb 3-1: SerialNumber: syz [ 487.281700][ T5921] usb 3-1: config 0 descriptor?? [ 489.455209][ T5921] f81534 3-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 489.455380][ T5921] f81534 3-1:0.12: f81534_find_config_idx: read failed: -32 [ 489.455401][ T5921] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 489.455498][ T5921] f81534 3-1:0.12: probe with driver f81534 failed with error -32 [ 492.499256][ T5626] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 492.742399][ T8303] netlink: 8 bytes leftover after parsing attributes in process `syz.5.430'. [ 493.776475][ T5893] usb 7-1: USB disconnect, device number 9 [ 493.898137][ T9] usb 3-1: USB disconnect, device number 20 [ 497.253108][ T5921] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 497.426337][ T5921] usb 4-1: Using ep0 maxpacket: 8 [ 497.428815][ T5921] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 497.428851][ T5921] usb 4-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.428877][ T5921] usb 4-1: config 0 interface 0 has no altsetting 0 [ 497.428913][ T5921] usb 4-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 497.428938][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.495738][ T5921] usb 4-1: config 0 descriptor?? [ 497.935746][ T5921] smartjoyplus 0003:6666:8804.0011: unknown main item tag 0x2 [ 497.935774][ T5921] smartjoyplus 0003:6666:8804.0011: item fetching failed at offset 4/5 [ 497.936333][ T5921] smartjoyplus 0003:6666:8804.0011: parse failed [ 497.936386][ T5921] smartjoyplus 0003:6666:8804.0011: probe with driver smartjoyplus failed with error -22 [ 498.232461][ T8312] IPVS: length: 153 != 24 [ 498.256343][ T5615] usb 4-1: USB disconnect, device number 34 [ 498.460654][ T8345] overlayfs: overlapping lowerdir path [ 498.615873][ T8346] overlayfs: overlapping lowerdir path [ 501.134381][ T8349] overlayfs: overlapping lowerdir path [ 501.233816][ T8350] overlayfs: overlapping lowerdir path [ 501.723869][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.723945][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.528229][ T8361] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.433237][ T5893] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 504.503673][ T5624] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 504.583187][ T5893] usb 7-1: Using ep0 maxpacket: 32 [ 504.618402][ T5893] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.618430][ T5893] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 504.653276][ T5624] usb 5-1: Using ep0 maxpacket: 32 [ 504.681611][ T5624] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 504.681632][ T5624] usb 5-1: config 0 has no interface number 0 [ 504.681665][ T5624] usb 5-1: config 0 interface 12 has no altsetting 0 [ 504.755200][ T5893] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 504.755243][ T5893] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.755259][ T5893] usb 7-1: Product: syz [ 504.755314][ T5893] usb 7-1: Manufacturer: syz [ 504.755326][ T5893] usb 7-1: SerialNumber: syz [ 504.787351][ T5624] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 504.787447][ T5624] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.787519][ T5624] usb 5-1: Product: syz [ 504.787562][ T5624] usb 5-1: Manufacturer: syz [ 504.787606][ T5624] usb 5-1: SerialNumber: syz [ 504.860925][ T5893] usb 7-1: config 0 descriptor?? [ 504.959190][ T5624] usb 5-1: config 0 descriptor?? [ 506.313169][ T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 506.463275][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 506.500355][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 506.500379][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.786201][ T10] usb 3-1: config 0 descriptor?? [ 506.877027][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 507.101313][ T5624] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 507.102711][ T5624] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 507.102871][ T5624] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 507.127333][ T5624] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 507.385068][ T10] gspca_sq930x: reg_r 001f failed -110 [ 507.385146][ T10] sq930x 3-1:0.0: probe with driver sq930x failed with error -110 [ 511.202330][ T5893] usb 7-1: USB disconnect, device number 10 [ 511.325379][ T1261] usb 5-1: USB disconnect, device number 15 [ 511.870972][ T5893] usb 3-1: USB disconnect, device number 21 [ 512.063257][ T1261] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 512.219831][ T1261] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 512.219883][ T1261] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 512.219911][ T1261] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 512.265170][ T1261] usb 7-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 512.265203][ T1261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.265225][ T1261] usb 7-1: Product: syz [ 512.265241][ T1261] usb 7-1: Manufacturer: syz [ 512.265265][ T1261] usb 7-1: SerialNumber: syz [ 512.495700][ T5893] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 512.670557][ T1261] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 512.684220][ T5893] usb 3-1: Using ep0 maxpacket: 8 [ 512.687159][ T5893] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 512.687275][ T5893] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.775588][ T5893] pvrusb2: Hardware description: Terratec Grabster AV400 [ 512.775611][ T5893] pvrusb2: ********** [ 512.775617][ T5893] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 512.775625][ T5893] pvrusb2: Important functionality might not be entirely working. [ 512.775632][ T5893] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 512.775640][ T5893] pvrusb2: ********** [ 512.975278][ T2387] pvrusb2: Invalid write control endpoint [ 513.123152][ T5921] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 513.188329][ T5715] usb 3-1: USB disconnect, device number 22 [ 513.273064][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 513.291531][ T5921] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 513.291561][ T5921] usb 6-1: config 0 has no interface number 0 [ 513.291609][ T5921] usb 6-1: config 0 interface 12 has no altsetting 0 [ 513.346794][ T5921] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 513.346818][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.346832][ T5921] usb 6-1: Product: syz [ 513.346843][ T5921] usb 6-1: Manufacturer: syz [ 513.346854][ T5921] usb 6-1: SerialNumber: syz [ 513.432531][ T2387] pvrusb2: Invalid write control endpoint [ 513.432548][ T2387] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 513.440696][ T2387] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 513.440713][ T2387] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 513.440724][ T2387] pvrusb2: Device being rendered inoperable [ 513.482041][ T2387] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 513.482104][ T2387] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 513.527011][ T2387] pvrusb2: Attached sub-driver cx25840 [ 513.527029][ T2387] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 513.527041][ T2387] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 513.579879][ T5921] usb 6-1: config 0 descriptor?? [ 514.246286][ T5626] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 514.490151][ T1261] usb 7-1: USB disconnect, device number 11 [ 515.647546][ T5921] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 515.647589][ T5921] f81534 6-1:0.12: f81534_find_config_idx: read failed: -32 [ 515.647622][ T5921] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 515.647714][ T5921] f81534 6-1:0.12: probe with driver f81534 failed with error -32 [ 517.203153][ T1261] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 517.355951][ T1261] usb 7-1: Using ep0 maxpacket: 32 [ 517.384072][ T1261] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 517.384095][ T1261] usb 7-1: config 0 has no interface number 0 [ 517.384129][ T1261] usb 7-1: config 0 interface 12 has no altsetting 0 [ 517.438876][ T1261] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 517.438901][ T1261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.438916][ T1261] usb 7-1: Product: syz [ 517.438927][ T1261] usb 7-1: Manufacturer: syz [ 517.438938][ T1261] usb 7-1: SerialNumber: syz [ 517.507168][ T1261] usb 7-1: config 0 descriptor?? [ 517.555652][ T5626] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 517.858966][ T5893] usb 6-1: USB disconnect, device number 8 [ 519.969267][ T8465] overlayfs: overlapping lowerdir path [ 520.026378][ T8466] overlayfs: overlapping lowerdir path [ 520.100076][ T1261] f81534 7-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 520.100140][ T1261] f81534 7-1:0.12: f81534_find_config_idx: read failed: -32 [ 520.100158][ T1261] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 520.100254][ T1261] f81534 7-1:0.12: probe with driver f81534 failed with error -32 [ 520.973114][ T1261] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 521.123959][ T1261] usb 6-1: Using ep0 maxpacket: 16 [ 521.126293][ T1261] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 521.126315][ T1261] usb 6-1: config 0 has no interface number 0 [ 521.126351][ T1261] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 521.126373][ T1261] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 521.140321][ T1261] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 521.140408][ T1261] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 521.140441][ T1261] usb 6-1: Product: syz [ 521.140459][ T1261] usb 6-1: SerialNumber: syz [ 521.230633][ T1261] usb 6-1: config 0 descriptor?? [ 521.300644][ T1261] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 521.398668][ T1261] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input5 [ 521.563192][ T5893] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 521.738612][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 521.738665][ T5893] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 521.738753][ T5893] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 521.738771][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.950623][ T5893] usb 5-1: config 0 descriptor?? [ 522.441541][ T5893] usbhid 5-1:0.0: can't add hid device: -71 [ 522.441832][ T5893] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 522.555285][ T5893] usb 5-1: USB disconnect, device number 16 [ 524.039015][ T5626] Bluetooth: hci4: unexpected event for opcode 0x1009 [ 524.826769][ T5615] usb 7-1: USB disconnect, device number 12 [ 525.431247][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.436367][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.436845][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.437270][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.437655][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.438026][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.438419][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.439379][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.439784][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.440230][ C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 525.519940][ T36] usb 6-1: USB disconnect, device number 9 [ 525.520077][ C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 525.725787][ T10] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 525.786339][ T36] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 525.828923][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.4.475'. [ 525.884092][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 525.887821][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 525.887843][ T10] usb 4-1: config 0 has no interface number 0 [ 525.887889][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 525.932399][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 525.932433][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.932455][ T10] usb 4-1: Product: syz [ 525.932482][ T10] usb 4-1: Manufacturer: syz [ 525.932497][ T10] usb 4-1: SerialNumber: syz [ 525.987736][ T10] usb 4-1: config 0 descriptor?? [ 528.240380][ T10] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 528.240437][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -32 [ 528.240462][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 528.240569][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -32 [ 528.303184][ T36] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 528.364468][ T5893] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 528.413177][ T8395] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 528.463281][ T36] usb 7-1: Using ep0 maxpacket: 8 [ 528.465603][ T36] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 528.465628][ T36] usb 7-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 528.465645][ T36] usb 7-1: config 0 interface 0 has no altsetting 0 [ 528.465669][ T36] usb 7-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 528.465686][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.472320][ T36] usb 7-1: config 0 descriptor?? [ 528.549166][ T5893] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 528.549223][ T5893] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 528.549244][ T5893] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 528.595708][ T8395] usb 5-1: Using ep0 maxpacket: 32 [ 528.597646][ T5893] usb 6-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 528.597751][ T5893] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.597774][ T5893] usb 6-1: Product: syz [ 528.597788][ T5893] usb 6-1: Manufacturer: syz [ 528.597803][ T5893] usb 6-1: SerialNumber: syz [ 528.663287][ T8395] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 528.663318][ T8395] usb 5-1: config 0 has no interface number 0 [ 528.663368][ T8395] usb 5-1: config 0 interface 12 has no altsetting 0 [ 528.773652][ T8395] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 528.773682][ T8395] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.773716][ T8395] usb 5-1: Product: syz [ 528.773732][ T8395] usb 5-1: Manufacturer: syz [ 528.773747][ T8395] usb 5-1: SerialNumber: syz [ 528.915643][ T8395] usb 5-1: config 0 descriptor?? [ 529.470944][ T5893] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 529.821030][ T36] smartjoyplus 0003:6666:8804.0012: unknown main item tag 0x2 [ 529.821154][ T36] smartjoyplus 0003:6666:8804.0012: item fetching failed at offset 4/5 [ 529.840153][ T36] smartjoyplus 0003:6666:8804.0012: parse failed [ 529.840234][ T36] smartjoyplus 0003:6666:8804.0012: probe with driver smartjoyplus failed with error -22 [ 529.894307][ T8498] IPVS: length: 153 != 24 [ 529.968660][ T36] usb 7-1: USB disconnect, device number 13 [ 531.088739][ T8395] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -32 [ 531.088800][ T8395] f81534 5-1:0.12: f81534_find_config_idx: read failed: -32 [ 531.088818][ T8395] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -32 [ 531.088939][ T8395] f81534 5-1:0.12: probe with driver f81534 failed with error -32 [ 531.621885][ T5893] usb 6-1: USB disconnect, device number 10 [ 532.272175][ T5741] usb 4-1: USB disconnect, device number 35 [ 532.723243][ T5893] usb 5-1: USB disconnect, device number 17 [ 533.453952][ T5893] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 533.659358][ T5893] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 533.659414][ T5893] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 533.659443][ T5893] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 533.712640][ T5893] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 533.712673][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.712688][ T5893] usb 5-1: Product: syz [ 533.712698][ T5893] usb 5-1: Manufacturer: syz [ 533.712717][ T5893] usb 5-1: SerialNumber: syz [ 534.171981][ T5893] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 534.478360][ T5893] usb 5-1: USB disconnect, device number 18 [ 534.821915][ T8140] udevd[8140]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 537.753076][ T5741] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 538.263164][ T10] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 538.413132][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 538.421151][ T10] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 538.421178][ T10] usb 3-1: config 0 has no interface number 0 [ 538.422599][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 538.422628][ T10] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 538.491887][ T10] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 538.491985][ T10] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 538.492008][ T10] usb 3-1: Product: syz [ 538.492024][ T10] usb 3-1: SerialNumber: syz [ 538.544248][ T10] usb 3-1: config 0 descriptor?? [ 538.586347][ T10] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 538.744629][ T10] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input6 [ 543.003219][ T5741] usb 7-1: device descriptor read/64, error -110 [ 543.363111][ T5893] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 543.394732][ T5741] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 543.523116][ T5741] usb 7-1: device descriptor read/64, error -32 [ 543.613062][ T5893] usb 6-1: Using ep0 maxpacket: 32 [ 543.639643][ T5741] usb usb7-port1: attempt power cycle [ 544.096274][ T5741] raw-gadget.0 gadget.6: failed to queue resume event [ 544.180487][ C0] cm109_urb_ctl_callback: 154 callbacks suppressed [ 544.180519][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.180761][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.181004][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.181262][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.181508][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.181757][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.182015][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.182253][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.182511][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.182766][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 544.189098][ T36] usb 3-1: USB disconnect, device number 23 [ 544.189101][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 544.194865][ T5741] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 544.289935][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 544.299151][ T5741] usb 7-1: device descriptor read/8, error -32 [ 544.409509][ T5741] raw-gadget.0 gadget.6: failed to queue suspend event [ 544.433813][ T5741] raw-gadget.0 gadget.6: failed to queue reset event [ 544.503667][ T5741] raw-gadget.0 gadget.6: failed to queue resume event [ 544.565156][ T5741] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 544.582798][ T36] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 544.591822][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 544.591990][ T5741] usb 7-1: device descriptor read/8, error -32 [ 544.693802][ T5741] raw-gadget.0 gadget.6: failed to queue suspend event [ 544.694258][ T5741] usb usb7-port1: unable to enumerate USB device [ 548.220359][ T8557] raw-gadget.0 gadget.6: failed to queue disconnect event [ 549.074075][ T5893] usb 6-1: unable to read config index 0 descriptor/all [ 549.074128][ T5893] usb 6-1: can't read configurations, error -110 [ 549.375603][ T8618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.502'. [ 550.503152][ T5893] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 551.474527][ T31] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 551.636823][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 551.658753][ T31] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 551.658784][ T31] usb 4-1: config 0 has no interface number 0 [ 551.706488][ T31] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 551.706522][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.706544][ T31] usb 4-1: Product: syz [ 551.706561][ T31] usb 4-1: Manufacturer: syz [ 551.706576][ T31] usb 4-1: SerialNumber: syz [ 551.797131][ T31] usb 4-1: config 0 descriptor?? [ 551.814469][ T31] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 551.863140][ T5921] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 552.013095][ T5921] usb 7-1: Using ep0 maxpacket: 8 [ 552.050160][ T5921] usb 7-1: config 2 has an invalid interface number: 31 but max is 0 [ 552.050192][ T5921] usb 7-1: config 2 has no interface number 0 [ 552.050336][ T5921] usb 7-1: config 2 interface 31 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 552.050363][ T5921] usb 7-1: config 2 interface 31 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 552.050392][ T5921] usb 7-1: config 2 interface 31 has no altsetting 0 [ 552.152583][ T5921] usb 7-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 552.152699][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.152726][ T5921] usb 7-1: Product: syz [ 552.152744][ T5921] usb 7-1: Manufacturer: syz [ 552.152760][ T5921] usb 7-1: SerialNumber: syz [ 552.205356][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 552.514597][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 552.522817][ T5921] ch9200 7-1:2.31: probe with driver ch9200 failed with error -22 [ 552.573867][ T31] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 552.636507][ T31] usb 4-1: USB disconnect, device number 36 [ 552.822831][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 552.908326][ T8626] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 552.933306][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 552.936079][ T31] quatech2 4-1:0.51: device disconnected [ 553.396536][ T5741] usb 7-1: USB disconnect, device number 18 [ 553.423126][ T5921] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 553.584805][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 553.591489][ T5921] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 553.591520][ T5921] usb 5-1: config 0 has no interface number 0 [ 553.645730][ T5921] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 553.645774][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.647311][ T5921] usb 5-1: Product: syz [ 553.647326][ T5921] usb 5-1: Manufacturer: syz [ 553.647337][ T5921] usb 5-1: SerialNumber: syz [ 553.690825][ T5921] usb 5-1: config 0 descriptor?? [ 553.717171][ T5921] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 554.255519][ T5921] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 554.365351][ T5921] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 554.384307][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 554.431758][ T5921] usb 5-1: USB disconnect, device number 19 [ 554.507219][ T5921] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 554.592670][ T5921] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 554.615603][ T5921] quatech2 5-1:0.51: device disconnected [ 555.033314][ T1261] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 555.186420][ T1261] usb 7-1: Using ep0 maxpacket: 32 [ 555.189084][ T1261] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 555.189115][ T1261] usb 7-1: config 0 has no interface number 0 [ 555.218959][ T1261] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 555.218993][ T1261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.219017][ T1261] usb 7-1: Product: syz [ 555.219034][ T1261] usb 7-1: Manufacturer: syz [ 555.219052][ T1261] usb 7-1: SerialNumber: syz [ 555.290827][ T1261] usb 7-1: config 0 descriptor?? [ 555.319515][ T1261] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 555.613123][ T5921] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 555.638386][ T1261] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 555.709860][ T1261] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 555.773322][ T5921] usb 4-1: Using ep0 maxpacket: 16 [ 555.794593][ T5921] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 555.794683][ T5921] usb 4-1: config 0 has no interface number 0 [ 555.794729][ T5921] usb 4-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 555.797908][ T5921] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 555.797952][ T5921] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 555.798097][ T5921] usb 4-1: Product: syz [ 555.798115][ T5921] usb 4-1: SerialNumber: syz [ 555.874691][ T5921] usb 4-1: config 0 descriptor?? [ 555.907042][ T5921] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 555.931653][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 556.001883][ T1261] usb 7-1: USB disconnect, device number 19 [ 556.243606][ T1261] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 556.455604][ T1261] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 556.461358][ T1261] quatech2 7-1:0.51: device disconnected [ 556.801226][ T8652] capability: warning: `syz.5.514' uses deprecated v2 capabilities in a way that may be insecure [ 557.412512][ T5741] usb 4-1: USB disconnect, device number 37 [ 559.374771][ T5921] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 559.533124][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 559.535918][ T5921] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 559.535948][ T5921] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.535969][ T5921] usb 5-1: config 0 has no interface number 0 [ 559.536023][ T5921] usb 5-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 559.571685][ T5921] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 559.571720][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.571741][ T5921] usb 5-1: Product: syz [ 559.571764][ T5921] usb 5-1: Manufacturer: syz [ 559.571779][ T5921] usb 5-1: SerialNumber: syz [ 559.636622][ T5921] usb 5-1: config 0 descriptor?? [ 559.653699][ T5921] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 559.863926][ T5921] usb 5-1: qt2_setup_urbs - submit read urb failed -8 [ 559.865171][ T5921] quatech2 5-1:0.51: probe with driver quatech2 failed with error -8 [ 560.090703][ T31] usb 5-1: USB disconnect, device number 20 [ 563.161548][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.161628][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.637338][ T31] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 563.803335][ T31] usb 6-1: Using ep0 maxpacket: 32 [ 563.826120][ T31] usb 6-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 563.826153][ T31] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.854515][ T31] usb 6-1: config 0 descriptor?? [ 563.880236][ T31] gspca_main: sq930x-2.14.0 probing 041e:403c [ 564.404029][ T31] gspca_sq930x: reg_r 001f failed -110 [ 564.404143][ T31] sq930x 6-1:0.0: probe with driver sq930x failed with error -110 [ 567.319985][ T5715] usb 6-1: USB disconnect, device number 13 [ 570.511592][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 570.511617][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 570.719602][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.726941][ T8840] netlink: 8 bytes leftover after parsing attributes in process `syz.4.568'. [ 570.727006][ T8840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.568'. [ 570.735068][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.737636][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 570.737686][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 572.493202][ T1261] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 572.650505][ T1261] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 572.650543][ T1261] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0 [ 572.650567][ T1261] usb 6-1: config 0 interface 0 has no altsetting 0 [ 572.699354][ T1261] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 572.699388][ T1261] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 572.699410][ T1261] usb 6-1: Product: syz [ 572.699426][ T1261] usb 6-1: Manufacturer: syz [ 572.699441][ T1261] usb 6-1: SerialNumber: syz [ 572.756832][ T1261] usb 6-1: config 0 descriptor?? [ 572.786937][ T1261] usb 6-1: selecting invalid altsetting 0 [ 573.695589][ T1261] usb 6-1: USB disconnect, device number 14 [ 574.473218][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 574.646114][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 574.679239][ T10] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 574.679263][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.780670][ T10] usb 5-1: config 0 descriptor?? [ 574.827655][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 574.986577][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.585'. [ 575.336291][ T10] gspca_sq930x: reg_r 001f failed -110 [ 575.336394][ T10] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 575.837523][ T8437] udevd[8437]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 577.588506][ T8915] netlink: 8 bytes leftover after parsing attributes in process `syz.5.592'. [ 579.174743][ T5715] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 579.261679][ T31] usb 5-1: USB disconnect, device number 21 [ 579.373697][ T5715] usb 4-1: Using ep0 maxpacket: 32 [ 579.442727][ T5715] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 579.442750][ T5715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.469217][ T5715] usb 4-1: config 0 descriptor?? [ 582.045366][ T8951] netlink: 8 bytes leftover after parsing attributes in process `syz.4.599'. [ 584.523327][ T5715] usb 4-1: can't set config #0, error -110 [ 584.920163][ T820] usb 4-1: USB disconnect, device number 38 [ 585.061878][ T8963] syz.4.603 uses obsolete (PF_INET,SOCK_PACKET) [ 585.062813][ T8963] syzkaller1: entered promiscuous mode [ 585.062837][ T8963] syzkaller1: entered allmulticast mode [ 587.115729][ T8998] capability: warning: `syz.2.616' uses 32-bit capabilities (legacy support in use) [ 587.166801][ T8998] program syz.2.616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 587.483233][ T1261] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 587.636020][ T1261] usb 4-1: Using ep0 maxpacket: 32 [ 587.650370][ T1261] usb 4-1: no configurations [ 587.650424][ T1261] usb 4-1: can't read configurations, error -22 [ 587.835988][ T1261] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 587.983115][ T1261] usb 4-1: Using ep0 maxpacket: 32 [ 587.986535][ T1261] usb 4-1: no configurations [ 587.986550][ T1261] usb 4-1: can't read configurations, error -22 [ 587.986883][ T1261] usb usb4-port1: attempt power cycle [ 588.324861][ T1261] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 588.350215][ T1261] usb 4-1: Using ep0 maxpacket: 32 [ 588.351314][ T1261] usb 4-1: no configurations [ 588.351327][ T1261] usb 4-1: can't read configurations, error -22 [ 588.453072][ T5921] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 588.530451][ T1261] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 588.561228][ T1261] usb 4-1: Using ep0 maxpacket: 32 [ 588.570242][ T1261] usb 4-1: no configurations [ 588.570257][ T1261] usb 4-1: can't read configurations, error -22 [ 588.570540][ T1261] usb usb4-port1: unable to enumerate USB device [ 588.623107][ T5921] usb 7-1: Using ep0 maxpacket: 32 [ 588.630446][ T5921] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 588.630478][ T5921] usb 7-1: config 0 has no interface number 0 [ 588.663624][ T5921] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 588.666018][ T5921] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.666050][ T5921] usb 7-1: Product: syz [ 588.666065][ T5921] usb 7-1: Manufacturer: syz [ 588.666080][ T5921] usb 7-1: SerialNumber: syz [ 588.704209][ T5921] usb 7-1: config 0 descriptor?? [ 589.184627][ T5921] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 589.184652][ T5921] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 589.428607][ T5921] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 589.428919][ T5921] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 591.327886][ T1261] usb 7-1: USB disconnect, device number 20 [ 594.605596][ T5626] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 595.213065][ T5921] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 595.375053][ T5921] usb 6-1: Using ep0 maxpacket: 32 [ 595.377528][ T5921] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 595.377556][ T5921] usb 6-1: config 0 has no interface number 0 [ 595.380671][ T5921] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 595.380702][ T5921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.380723][ T5921] usb 6-1: Product: syz [ 595.380738][ T5921] usb 6-1: Manufacturer: syz [ 595.380765][ T5921] usb 6-1: SerialNumber: syz [ 595.439418][ T5921] usb 6-1: config 0 descriptor?? [ 596.753518][ T5921] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 596.753552][ T5921] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 596.961478][ T5921] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 596.961776][ T5921] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 597.923121][ T820] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 598.077963][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 598.100586][ T820] usb 5-1: no configurations [ 598.100607][ T820] usb 5-1: can't read configurations, error -22 [ 598.137985][ T5921] usb 6-1: USB disconnect, device number 15 [ 598.223149][ T820] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 598.383161][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 598.391234][ T820] usb 5-1: no configurations [ 598.391251][ T820] usb 5-1: can't read configurations, error -22 [ 598.415528][ T820] usb usb5-port1: attempt power cycle [ 598.803696][ T820] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 598.832122][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 598.842504][ T820] usb 5-1: no configurations [ 598.842525][ T820] usb 5-1: can't read configurations, error -22 [ 598.984878][ T820] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 599.013842][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 599.036863][ T820] usb 5-1: no configurations [ 599.036884][ T820] usb 5-1: can't read configurations, error -22 [ 599.039021][ T820] usb usb5-port1: unable to enumerate USB device [ 600.092327][ T9121] netlink: 'syz.6.643': attribute type 25 has an invalid length. [ 603.592758][ T9159] netlink: 'syz.5.655': attribute type 25 has an invalid length. [ 604.143102][ T36] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 604.318183][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 604.318209][ T36] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 604.318238][ T36] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 604.318255][ T36] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.376547][ T36] usb 7-1: config 0 descriptor?? [ 604.877908][ T36] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 604.877949][ T36] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 604.877978][ T36] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 604.878006][ T36] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 604.878033][ T36] playstation 0003:054C:0DF2.0013: unknown main item tag 0x0 [ 604.957129][ T36] playstation 0003:054C:0DF2.0013: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.6-1/input0 [ 605.485740][ T36] playstation 0003:054C:0DF2.0013: Failed to retrieve feature with reportID 5: -71 [ 605.485784][ T36] playstation 0003:054C:0DF2.0013: Failed to retrieve DualSense calibration info: -71 [ 605.486330][ T36] playstation 0003:054C:0DF2.0013: Failed to get calibration data from DualSense [ 605.486357][ T36] playstation 0003:054C:0DF2.0013: Failed to create dualsense. [ 605.599942][ T36] playstation 0003:054C:0DF2.0013: probe with driver playstation failed with error -71 [ 605.669473][ T36] usb 7-1: USB disconnect, device number 21 [ 606.552022][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 606.772469][ T9191] netlink: 20 bytes leftover after parsing attributes in process `syz.4.665'. [ 612.766892][ T9255] kvm: kvm [9254]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1008 [ 612.766994][ T9255] kvm: kvm [9254]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 624.612333][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.612406][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.995838][ T9414] warning: `syz.3.724' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 629.180850][ T9422] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 630.103179][ T820] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 630.268716][ T820] usb 3-1: Using ep0 maxpacket: 32 [ 630.273009][ T820] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.273038][ T820] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 630.306738][ T820] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 630.306780][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.306800][ T820] usb 3-1: Product: syz [ 630.306815][ T820] usb 3-1: Manufacturer: syz [ 630.306829][ T820] usb 3-1: SerialNumber: syz [ 630.366773][ T820] usb 3-1: config 0 descriptor?? [ 632.496567][ T820] usb 3-1: USB disconnect, device number 24 [ 633.933105][ T820] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 634.106885][ T820] usb 5-1: unable to get BOS descriptor or descriptor too short [ 634.109709][ T820] usb 5-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 634.109739][ T820] usb 5-1: config 66 has 1 interface, different from the descriptor's value: 2 [ 634.109798][ T820] usb 5-1: config 66 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 634.109844][ T820] usb 5-1: config 66 interface 0 has no altsetting 0 [ 634.163759][ T820] usb 5-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 634.163791][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.163812][ T820] usb 5-1: Product: syz [ 634.163827][ T820] usb 5-1: Manufacturer: syz [ 634.163842][ T820] usb 5-1: SerialNumber: syz [ 635.208701][ T820] ati_remote2 5-1:66.0: ati_remote2_probe(): interface 0 must have an endpoint [ 635.251803][ T820] usb 5-1: USB disconnect, device number 26 [ 635.933100][ T820] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 636.107333][ T820] usb 3-1: unable to get BOS descriptor or descriptor too short [ 636.110382][ T820] usb 3-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16 [ 636.110407][ T820] usb 3-1: config 66 interface 0 has no altsetting 0 [ 636.146198][ T820] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 636.146230][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.146252][ T820] usb 3-1: Product: syz [ 636.146267][ T820] usb 3-1: Manufacturer: syz [ 636.146282][ T820] usb 3-1: SerialNumber: syz [ 636.196976][ T9471] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 636.313433][ T5921] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 636.435280][ T820] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint [ 636.482273][ T820] usb 3-1: USB disconnect, device number 25 [ 636.493649][ T5921] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 636.493680][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.493702][ T5921] usb 5-1: Product: syz [ 636.493718][ T5921] usb 5-1: Manufacturer: syz [ 636.493733][ T5921] usb 5-1: SerialNumber: syz [ 637.034808][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 637.034876][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 640.421784][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 640.421855][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 640.497743][ T5921] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 640.548524][ T5921] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 640.567272][ T5921] usb 5-1: USB disconnect, device number 27 [ 643.773159][ T5742] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 643.925737][ T5742] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 643.925793][ T5742] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 643.925835][ T5742] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 643.925852][ T5742] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.981009][ T5742] usb 6-1: config 0 descriptor?? [ 644.013518][ T5742] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 645.839973][ T9536] kAFS: unable to lookup cell 'ÿ' [ 647.624378][ T5921] usb 6-1: USB disconnect, device number 16 [ 671.663129][ T5893] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 671.830658][ T5893] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 671.830696][ T5893] usb 7-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 671.830714][ T5893] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.904594][ T5893] usb 7-1: config 0 descriptor?? [ 671.934040][ T5893] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 674.621165][ T5615] usb 7-1: USB disconnect, device number 22 [ 674.955945][ T9681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 675.040022][ T9684] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 677.818129][ T4919] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 677.868996][ T4919] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 677.870525][ T4919] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 677.871668][ T4919] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 677.872428][ T4919] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 681.903127][ T4919] Bluetooth: hci3: command tx timeout [ 682.299607][ T9728] NILFS (loop6): device size too small [ 684.166199][ T4919] Bluetooth: hci3: command tx timeout [ 685.110755][ T9743] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 686.193027][ T5615] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 686.203674][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.203747][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.204760][ T4919] Bluetooth: hci3: command tx timeout [ 686.359037][ T5615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 686.359089][ T5615] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 686.359107][ T5615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.402835][ T5615] usb 3-1: config 0 descriptor?? [ 686.447448][ T5615] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 686.876262][ T1180] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.308464][ T1180] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.351364][ T4919] Bluetooth: hci3: command tx timeout [ 689.613246][ T5615] usb 3-1: USB disconnect, device number 26 [ 689.909680][ T1180] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.170066][ T9780] kvm: kvm [9779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 690.195102][ T9780] kvm: kvm [9779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 690.201650][ T9780] kvm: kvm [9779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffd500000000 [ 690.256907][ T9780] kvm: kvm [9779]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffffc000000000 [ 690.839830][ T1180] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.038200][ T9699] bridge0: port 1(bridge_slave_0) entered blocking state [ 691.053218][ T9699] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.053432][ T9699] bridge_slave_0: entered allmulticast mode [ 691.083078][ T9699] bridge_slave_0: entered promiscuous mode [ 691.115280][ T9699] bridge0: port 2(bridge_slave_1) entered blocking state [ 691.115518][ T9699] bridge0: port 2(bridge_slave_1) entered disabled state [ 691.115765][ T9699] bridge_slave_1: entered allmulticast mode [ 691.145296][ T9699] bridge_slave_1: entered promiscuous mode [ 691.296910][ T9699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 691.302300][ T9699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 691.381184][ T9699] team0: Port device team_slave_0 added [ 691.435866][ T9699] team0: Port device team_slave_1 added [ 691.542110][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.542127][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.542150][ T9699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.594400][ T9699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.594415][ T9699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 691.594439][ T9699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.076217][ T9807] kAFS: unable to lookup cell 'ÿ' [ 695.322017][ T9699] hsr_slave_0: entered promiscuous mode [ 695.326290][ T9699] hsr_slave_1: entered promiscuous mode [ 695.329106][ T9699] debugfs: 'hsr0' already exists in 'hsr' [ 695.329180][ T9699] Cannot create hsr debugfs directory [ 696.799587][ T9827] netlink: 24 bytes leftover after parsing attributes in process `syz.2.830'. [ 697.035788][ T1180] bridge_slave_1: left allmulticast mode [ 697.035824][ T1180] bridge_slave_1: left promiscuous mode [ 697.036117][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 697.136506][ T9835] kvm: kvm [9833]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 697.137982][ T9835] kvm: kvm [9833]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 697.143773][ T9835] kvm: kvm [9833]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffd500000000 [ 697.187961][ T9835] kvm: kvm [9833]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffffc000000000 [ 697.237590][ T1180] : left allmulticast mode [ 697.237625][ T1180] : left promiscuous mode [ 697.237879][ T1180] bridge0: port 1() entered disabled state [ 704.164155][ T1180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 704.226124][ T1180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 704.248385][ T1180] bond0 (unregistering): Released all slaves [ 704.371133][ T5265] 8021q: adding VLAN 0 to HW filter on device eth9 [ 709.729568][ T5265] 8021q: adding VLAN 0 to HW filter on device eth10 [ 709.891006][ T9919] kvm: kvm [9918]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffcc0000c800 [ 709.904563][ T9919] kvm: kvm [9918]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffe500000000 [ 709.909252][ T9919] kvm: kvm [9918]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffd500000000 [ 709.939568][ T9919] kvm: kvm [9918]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xffffffc000000000 [ 711.820107][ T9929] kAFS: unable to lookup cell 'ÿ' [ 712.512954][ T1180] hsr_slave_0: left promiscuous mode [ 712.603228][ T1180] hsr_slave_1: left promiscuous mode [ 712.604448][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 712.604476][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 714.742363][ T1180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 714.742399][ T1180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 714.878995][ T1180] veth1_macvtap: left promiscuous mode [ 714.879075][ T1180] veth0_macvtap: left promiscuous mode [ 714.879353][ T1180] veth1_vlan: left promiscuous mode [ 714.879467][ T1180] veth0_vlan: left promiscuous mode [ 719.195320][ T1180] team0 (unregistering): Port device team_slave_1 removed [ 719.284315][ T1180] team0 (unregistering): Port device team_slave_0 removed [ 719.604545][ T9699] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 719.670911][ T9699] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 719.819133][ T9699] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 719.906618][ T9699] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 719.923762][ T9699] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 720.011039][ T9699] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 720.012464][ T9699] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 720.176726][ T9699] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 720.991856][ T9699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 721.048487][ T9699] 8021q: adding VLAN 0 to HW filter on device team0 [ 721.090460][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.090639][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.269900][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.270041][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.369790][T10001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 723.095327][ T5265] 8021q: adding VLAN 0 to HW filter on device eth11 [ 726.653982][T10035] NILFS (loop6): device size too small [ 730.119002][ T9699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 737.514093][ T1261] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 737.689248][ T1261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 737.689284][ T1261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 737.689326][ T1261] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 737.689352][ T1261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.759450][ T1261] usb 3-1: config 0 descriptor?? [ 738.965952][ T5626] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 739.088917][ T5626] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 739.131253][ T5626] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 739.149544][ T5626] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 739.160646][ T5626] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.381130][ T1261] usbhid 3-1:0.0: can't add hid device: -71 [ 739.381258][ T1261] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 739.421166][ T1261] usb 3-1: USB disconnect, device number 27 [ 740.347300][ T5265] 8021q: adding VLAN 0 to HW filter on device eth12 [ 740.434608][T10110] netlink: 4 bytes leftover after parsing attributes in process `syz.3.875'. [ 740.759728][T10118] netlink: 4 bytes leftover after parsing attributes in process `syz.6.877'. [ 741.393166][ T4919] Bluetooth: hci5: command tx timeout [ 741.411363][T10118] hsr_slave_1 (unregistering): left promiscuous mode [ 743.503157][ T4919] Bluetooth: hci5: command tx timeout [ 745.553200][ T4919] Bluetooth: hci5: command tx timeout [ 747.078504][T10161] netlink: 16 bytes leftover after parsing attributes in process `syz.4.885'. [ 747.078530][T10161] openvswitch: netlink: Flow actions attr not present in new flow. [ 747.484957][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.485048][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.633058][ T5626] Bluetooth: hci5: command tx timeout [ 753.733898][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.2.890'. [ 758.891973][T10223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 763.666009][T10031] bridge_slave_1: left allmulticast mode [ 763.666044][T10031] bridge_slave_1: left promiscuous mode [ 763.666309][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 763.847209][T10031] bridge_slave_0: left allmulticast mode [ 763.847238][T10031] bridge_slave_0: left promiscuous mode [ 763.848801][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.688991][T10277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 766.003935][T10031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 766.044842][T10031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 766.065263][T10031] bond0 (unregistering): Released all slaves [ 766.403717][ T36] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 766.405284][T10101] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.405419][T10101] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.405699][T10101] bridge_slave_0: entered allmulticast mode [ 766.437238][T10101] bridge_slave_0: entered promiscuous mode [ 766.489568][T10101] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.489704][T10101] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.489908][T10101] bridge_slave_1: entered allmulticast mode [ 766.508993][T10101] bridge_slave_1: entered promiscuous mode [ 766.595444][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.595480][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.595519][ T36] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 766.595544][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.672199][ T36] usb 5-1: config 0 descriptor?? [ 767.667081][T10101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.894751][ T36] usbhid 5-1:0.0: can't add hid device: -71 [ 768.894924][ T36] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 768.955808][ T36] usb 5-1: USB disconnect, device number 28 [ 769.106999][T10031] hsr_slave_0: left promiscuous mode [ 769.163014][T10031] hsr_slave_1: left promiscuous mode [ 769.164203][T10031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.222896][T10031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 772.334527][T10031] team0 (unregistering): Port device team_slave_1 removed [ 772.395735][T10031] team0 (unregistering): Port device team_slave_0 removed [ 772.711264][T10101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.716272][ T5265] 8021q: adding VLAN 0 to HW filter on device eth13 [ 772.891944][T10101] team0: Port device team_slave_0 added [ 772.900500][T10101] team0: Port device team_slave_1 added [ 772.990887][T10101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.990905][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 772.990935][T10101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.050589][T10101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.050608][T10101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 773.050640][T10101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.142343][T10335] netlink: 'syz.2.914': attribute type 1 has an invalid length. [ 774.159745][T10336] netlink: 'syz.3.915': attribute type 1 has an invalid length. [ 774.517764][T10101] hsr_slave_0: entered promiscuous mode [ 774.523558][T10101] hsr_slave_1: entered promiscuous mode [ 774.524483][T10101] debugfs: 'hsr0' already exists in 'hsr' [ 774.524509][T10101] Cannot create hsr debugfs directory [ 879.912837][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 879.912861][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10354/1:b..l P10342/2:b..l [ 879.912927][ C0] rcu: (detected by 0, t=10502 jiffies, g=68745, q=172 ncpus=2) [ 879.912948][ C0] task:syz.6.916 state:R running task stack:23608 pid:10342 tgid:10342 ppid:6968 task_flags:0x400040 flags:0x00080000 [ 879.913028][ C0] Call Trace: [ 879.913037][ C0] [ 879.913053][ C0] __schedule+0x16ec/0x5620 [ 879.913313][ C0] ? __pfx___schedule+0x10/0x10 [ 879.913354][ C0] ? ___migrate_enable+0x19c/0x1f0 [ 879.913460][ C0] ? __pfx____migrate_enable+0x10/0x10 [ 879.913485][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 879.913547][ C0] preempt_schedule_common+0x82/0xd0 [ 879.913581][ C0] preempt_schedule_thunk+0x16/0x30 [ 879.913621][ C0] rt_spin_unlock+0xf0/0x200 [ 879.913658][ C0] insert_page+0x25a/0x3b0 [ 879.913773][ C0] ? __pfx_insert_page+0x10/0x10 [ 879.913813][ C0] ? vmalloc_to_page+0x41c/0x6b0 [ 879.913864][ C0] kcov_mmap+0xcb/0x140 [ 879.913948][ C0] mmap_region+0x19f4/0x2280 [ 879.914023][ C0] ? __pfx_mmap_region+0x10/0x10 [ 879.914065][ C0] ? __pfx_mmap_region+0x10/0x10 [ 879.914096][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 879.914245][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 879.914303][ C0] ? cap_mmap_addr+0xaf/0x100 [ 879.914382][ C0] ? bpf_lsm_mmap_addr+0x9/0x50 [ 879.914461][ C0] ? shmem_mapping+0xd/0x50 [ 879.914504][ C0] ? memfd_check_seals_mmap+0xcb/0x210 [ 879.914572][ C0] do_mmap+0xc2f/0x10c0 [ 879.914622][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 879.914678][ C0] ? __pfx_do_mmap+0x10/0x10 [ 879.914700][ C0] ? rwbase_write_lock+0x568/0x730 [ 879.914737][ C0] vm_mmap_pgoff+0x2cc/0x4f0 [ 879.914791][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 879.914823][ C0] ? __fget_files+0x2a/0x420 [ 879.914870][ C0] ? __fget_files+0x3a6/0x420 [ 879.914891][ C0] ? __fget_files+0x2a/0x420 [ 879.914917][ C0] ksys_mmap_pgoff+0x4e8/0x720 [ 879.914944][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 879.914982][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.915028][ C0] do_syscall_64+0x174/0x580 [ 879.915058][ C0] ? trace_irq_disable+0x3b/0x140 [ 879.915127][ C0] ? clear_bhb_loop+0x40/0x90 [ 879.915155][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.915183][ C0] RIP: 0033:0x7f07c8e2cbc2 [ 879.915208][ C0] RSP: 002b:00007ffda8dcf718 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 879.915231][ C0] RAX: ffffffffffffffda RBX: 00007f07c67f8000 RCX: 00007f07c8e2cbc2 [ 879.915248][ C0] RDX: 0000000000000003 RSI: 0000000000400000 RDI: 00007f07c67f8000 [ 879.915263][ C0] RBP: 0000000000000011 R08: 00000000000000dc R09: 0000000000000000 [ 879.915284][ C0] R10: 0000000000000011 R11: 0000000000000206 R12: 0000000000000003 [ 879.915298][ C0] R13: 0000000000000003 R14: 0000000000000000 R15: 00007f07c90a5fa0 [ 879.915333][ C0] [ 879.915342][ C0] task:syz.2.918 state:R running task stack:27736 pid:10354 tgid:10351 ppid:5613 task_flags:0x400140 flags:0x00080000 [ 879.915416][ C0] Call Trace: [ 879.915423][ C0] [ 879.915436][ C0] __schedule+0x16ec/0x5620 [ 879.915501][ C0] ? __pfx___schedule+0x10/0x10 [ 879.915550][ C0] preempt_schedule_irq+0x4d/0xa0 [ 879.915582][ C0] irqentry_exit+0x14f/0x8b0 [ 879.915614][ C0] ? trace_irq_disable+0x3b/0x140 [ 879.915646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 879.915671][ C0] RIP: 0010:preempt_count_add+0x34/0x190 [ 879.915695][ C0] Code: bf 00 00 00 00 00 fc ff df 48 c7 c0 e0 23 75 99 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 ea 00 00 00 83 3d ee a7 e1 17 00 75 07 <65> 8b 05 35 54 d6 10 65 01 3d 2e 54 d6 10 48 c7 c0 e0 23 75 99 48 [ 879.915715][ C0] RSP: 0018:ffffc900045ef940 EFLAGS: 00000246 [ 879.915734][ C0] RAX: 0000000000000004 RBX: 1ffff920008bdf30 RCX: ffffffff99752303 [ 879.915750][ C0] RDX: 00000000ac848b1c RSI: ffffffff8ba759c0 RDI: 0000000000000001 [ 879.915799][ C0] RBP: ffffc900045efa10 R08: ffffffff8b1dda40 R09: ffffffff8dfc8000 [ 879.915816][ C0] R10: dffffc0000000000 R11: fffffbfff1f10c7f R12: ffff88802b42c240 [ 879.915834][ C0] R13: dffffc0000000000 R14: ffff88805dfe8b08 R15: dffffc0000000000 [ 879.915859][ C0] ? rt_spin_lock+0x1e0/0x400 [ 879.915896][ C0] rt_spin_lock+0x28a/0x400 [ 879.915921][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 879.915982][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 879.916006][ C0] ? rt_spin_lock+0x1e0/0x400 [ 879.916035][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 879.916068][ C0] __d_add+0x35/0x840 [ 879.916120][ C0] ? rt_spin_unlock+0x160/0x200 [ 879.916151][ C0] simple_lookup+0x12c/0x1c0 [ 879.916231][ C0] lookup_one_qstr_excl+0x12d/0x360 [ 879.916290][ C0] start_dirop+0x5c/0x90 [ 879.916335][ C0] simple_start_creating+0xcc/0x110 [ 879.916361][ C0] ? __pfx_simple_start_creating+0x10/0x10 [ 879.916390][ C0] ? mntput+0x65/0xc0 [ 879.916424][ C0] debugfs_start_creating+0xdb/0x1a0 [ 879.916525][ C0] __debugfs_create_file+0x6f/0x400 [ 879.916563][ C0] debugfs_create_file_full+0x3f/0x60 [ 879.916600][ C0] kvm_create_vm_debugfs+0x471/0x8f0 [ 879.916652][ C0] ? __pfx_kvm_create_vm_debugfs+0x10/0x10 [ 879.916681][ C0] ? alloc_pages_mpol+0x2ae/0x380 [ 879.916765][ C0] ? __rt_spin_lock_init+0x3e/0x50 [ 879.916817][ C0] kvm_dev_ioctl+0x1236/0x1610 [ 879.916856][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 879.916882][ C0] ? __fget_files+0x2a/0x420 [ 879.916908][ C0] ? bpf_lsm_file_ioctl+0x9/0x20 [ 879.916933][ C0] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 879.916962][ C0] __se_sys_ioctl+0xff/0x170 [ 879.916990][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.917015][ C0] do_syscall_64+0x174/0x580 [ 879.917047][ C0] ? trace_irq_disable+0x3b/0x140 [ 879.917072][ C0] ? clear_bhb_loop+0x40/0x90 [ 879.917100][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 879.917122][ C0] RIP: 0033:0x7f7d1aa1ce59 [ 879.917141][ C0] RSP: 002b:00007f7d18c6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 879.917163][ C0] RAX: ffffffffffffffda RBX: 00007f7d1ac95fa0 RCX: 00007f7d1aa1ce59 [ 879.917180][ C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 879.917194][ C0] RBP: 00007f7d1aab2d6f R08: 0000000000000000 R09: 0000000000000000 [ 879.917208][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 879.917223][ C0] R13: 00007f7d1ac96038 R14: 00007f7d1ac95fa0 R15: 00007ffc9b660388 [ 879.917258][ C0] [ 879.917278][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10498 jiffies! g68745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 879.917303][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=34171 [ 879.917315][ C0] rcu: rcu_preempt kthread starved for 10499 jiffies! g68745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 879.917340][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 879.917352][ C0] rcu: RCU grace-period kthread stack dump: [ 879.917360][ C0] task:rcu_preempt state:I stack:26784 pid:18 tgid:18 ppid:2 task_flags:0x208040 flags:0x00080000 [ 879.917428][ C0] Call Trace: [ 879.917435][ C0] [ 879.917448][ C0] __schedule+0x16ec/0x5620 [ 879.917477][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 879.917537][ C0] ? __pfx___schedule+0x10/0x10 [ 879.917578][ C0] ? schedule+0x90/0x360 [ 879.917611][ C0] schedule+0x164/0x360 [ 879.917644][ C0] schedule_timeout+0x158/0x2c0 [ 879.917677][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 879.917708][ C0] ? __pfx_process_timeout+0x10/0x10 [ 879.917787][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 879.917821][ C0] ? prepare_to_swait_event+0x340/0x370 [ 879.917895][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 879.917980][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 879.918011][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 879.918038][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 879.918076][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 879.918115][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 879.918146][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 879.918173][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 879.918207][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 879.918246][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 879.918286][ C0] kthread+0x388/0x470 [ 879.918316][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 879.918343][ C0] ? __pfx_kthread+0x10/0x10 [ 879.918374][ C0] ret_from_fork+0x514/0xb70 [ 879.918403][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 879.918428][ C0] ? __switch_to+0xc79/0x1410 [ 879.918464][ C0] ? __pfx_kthread+0x10/0x10 [ 879.918495][ C0] ret_from_fork_asm+0x1a/0x30 [ 879.918540][ C0] [ 879.918548][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 879.918564][ C0] Sending NMI from CPU 0 to CPUs 1: [ 879.918595][ C1] NMI backtrace for cpu 1 [ 879.918631][ C1] CPU: 1 UID: 0 PID: 10356 Comm: vhost-10348 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 879.918653][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.918664][ C1] RIP: 0010:mark_lock+0x95/0x190 [ 879.918691][ C1] Code: 83 3d b2 f3 e7 0d 00 75 13 48 8d 3d 75 12 eb 0d 48 c7 c6 30 42 71 8d 67 48 0f b9 3a 90 31 c9 4c 89 fe 4c 89 f7 b8 01 00 00 00 <85> 69 60 74 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 49 [ 879.918707][ C1] RSP: 0018:ffffc900057efb40 EFLAGS: 00000006 [ 879.918722][ C1] RAX: 0000000000000001 RBX: 0000000000000006 RCX: ffffffff9316ec78 [ 879.918735][ C1] RDX: 0000000000000006 RSI: ffff88802dfbaab8 RDI: ffff88802dfb9ec0 [ 879.918748][ C1] RBP: 0000000000000040 R08: ffffffff8f8863f7 R09: 1ffffffff1f10c7e [ 879.918761][ C1] R10: dffffc0000000000 R11: fffffbfff1f10c7f R12: ffff88802dfbaae0 [ 879.918781][ C1] R13: 0000000000000246 R14: ffff88802dfbaab8 R15: 0000000000000000 [ 879.918794][ C1] FS: 00007fb32c5066c0(0000) GS:ffff888126283000(0000) knlGS:0000000000000000 [ 879.918810][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 879.918823][ C1] CR2: 00007fcd29aa3e9c CR3: 0000000035594000 CR4: 00000000003526f0 [ 879.918839][ C1] Call Trace: [ 879.918846][ C1] [ 879.918855][ C1] lockdep_hardirqs_on_prepare+0x178/0x260 [ 879.918881][ C1] trace_hardirqs_on+0x28/0x40 [ 879.918900][ C1] _raw_spin_unlock_irqrestore+0x30/0x80 [ 879.918927][ C1] rt_spin_lock+0x17a/0x400 [ 879.918950][ C1] ? __pfx_rt_spin_lock+0x10/0x10 [ 879.918972][ C1] ? rt_spin_unlock+0x14f/0x200 [ 879.918996][ C1] kcov_remote_stop+0xbd/0x680 [ 879.919015][ C1] ? kcov_remote_start+0x57a/0x710 [ 879.919035][ C1] vhost_run_work_list+0x152/0x1e0 [ 879.919153][ C1] ? __pfx_vhost_run_work_list+0x10/0x10 [ 879.919179][ C1] vhost_task_fn+0x2ef/0x4a0 [ 879.919247][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 879.919274][ C1] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 879.919297][ C1] ? rt_spin_unlock+0x14f/0x200 [ 879.919320][ C1] ? rt_spin_unlock+0x160/0x200 [ 879.919340][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 879.919365][ C1] ret_from_fork+0x514/0xb70 [ 879.919385][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 879.919404][ C1] ? __switch_to+0xc79/0x1410 [ 879.919432][ C1] ? __pfx_vhost_task_fn+0x10/0x10 [ 879.919456][ C1] ret_from_fork_asm+0x1a/0x30 [ 879.919486][ C1] [ 997.727916][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.727969][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.885423][ T5626] Bluetooth: hci5: command 0x0406 tx timeout SYZFAIL: failed to send rpc fd=3 want=288 sent=0 n=-1 (errno 32: Broken pipe) [ 1002.574953][ T5265] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1003.223176][ T7812] bridge_slave_1: left allmulticast mode [ 1003.223214][ T7812] bridge_slave_1: left promiscuous mode [ 1003.223533][ T7812] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.384821][ T7812] bridge_slave_0: left allmulticast mode [ 1003.384850][ T7812] bridge_slave_0: left promiscuous mode [ 1003.385066][ T7812] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.843738][ T7812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1003.943791][ T7812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1004.005300][ T7812] bond0 (unregistering): Released all slaves [ 1004.404456][ T7812] hsr_slave_0: left promiscuous mode [ 1004.443043][ T7812] hsr_slave_1: left promiscuous mode [ 1004.444095][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1004.475205][ T7812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1004.863863][ T7812] team0 (unregistering): Port device team_slave_1 removed [ 1004.914018][ T7812] team0 (unregistering): Port device team_slave_0 removed [ 1006.601306][ T7812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1006.601346][ T7812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.019800][ T7812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.019830][ T7812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.426568][ T7812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1007.426598][ T7812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.491244][ T5265] 8021q: adding VLAN 0 to HW filter on device eth15