last executing test programs: 23m59.614927714s ago: executing program 32 (id=602): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000000, 0x2000001}, 0x8) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) 23m33.889267308s ago: executing program 33 (id=654): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000640)="66ba2100ec430f00994798b213b9240a00000f32b885a08d80ef8f0838a6fe99b000ee0f30f3400f09660f38803f8f23c00f21f835020002001723f8c40279134e9ac4c17b117d0d000000000001c5", 0x4f}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001480)={0x0, 0x0, @ioapic={0x5b26e54df1861b95, 0x8, 0x0, 0x3, 0x0, [{0x5, 0xb, 0x8, '\x00', 0x4b}, {0x9, 0x6, 0x0, '\x00', 0x1}, {0x6, 0xc, 0x3, '\x00', 0x67}, {0x5, 0x1, 0x7f, '\x00', 0x4}, {0x45, 0x1, 0x8, '\x00', 0x3}, {0x80, 0x5, 0xf8, '\x00', 0x80}, {0x8, 0x3, 0x7, '\x00', 0xff}, {0x2, 0x12, 0x3, '\x00', 0xfd}, {0x7c, 0x40, 0x6, '\x00', 0x1}, {0x6, 0x20, 0x0, '\x00', 0x4}, {0x0, 0x8, 0x5, '\x00', 0xa}, {0x0, 0x4, 0x7, '\x00', 0x3}, {0x6, 0x8, 0x81, '\x00', 0x9}, {0x0, 0x8, 0x1, '\x00', 0xf}, {0x4, 0x0, 0x91, '\x00', 0x4}, {0xb, 0x8, 0x14, '\x00', 0xff}, {0x10, 0x5, 0xc0, '\x00', 0x6}, {0x95, 0x1, 0xb6, '\x00', 0x6}, {0xf2, 0x6, 0x3, '\x00', 0x6}, {0x7f, 0x7, 0xde, '\x00', 0xdb}, {0xb3, 0x9, 0x10, '\x00', 0x70}, {0xe3, 0xb, 0x4}, {0x6, 0x8, 0x7, '\x00', 0xe}, {0x3, 0x5, 0x6}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20m41.909666966s ago: executing program 34 (id=1095): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) recvmmsg(r0, &(0x7f0000001b00), 0x0, 0x45833af92e4b39ff, 0x0) 20m31.941127625s ago: executing program 35 (id=1111): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f88", 0x11}, {&(0x7f0000000180)="000002b7c70281", 0x7}], 0x2) 18m52.5655084s ago: executing program 36 (id=1295): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0xb81, &(0x7f0000007a00)=ANY=[], 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000480)=0x0) sendmsg$AUDIT_SET(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x3e9, 0x800, 0x70bd2b, 0x25dfdbfd, {0x58, 0x0, 0x1, r6, 0x8, 0x10, 0x4, 0x0, 0x0, 0x6, 0x1}, ["", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x830) 13m55.932526415s ago: executing program 37 (id=2240): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) timer_create(0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r5 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) r6 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) fchdir(r7) landlock_restrict_self(r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x40001f9, 0x2, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$eJzs3AuYjlXXOPC99t43Y5r0NMlh2GuvmycNtkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyavNEkSEhL2/9J78L5v7/f1ff/e/993fbN+17Wv2WvuZ61n3bPmmue+n+ua57ueo+q1qF+7GRGJPwT+/CVFCBEjhBgmhLhOCBEIISrFV4q/fLyAgpQ/9iTs3+vh9KvdAbuaeP55G88/b+P55208/7yN55+38fzzNp5/3sbzZywv2z6n2PW88u7i9//zMn79/18kt/zkrzaWv7HXfyOF55+38fzzNp5/3sbzz9t4/nkbz/9/v1r/yTGef97G82csL9sOWoj/Ae9D87o662r//jHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYyxvO+Su0EOKv+6vdF2OMMcYYY4wxxv59fP6r3QFjjDHGGGOMMcb+3wMhhRJaBCKfyC9iRAERK64RceJaUVBcJyLiehEvbhCFxI2isCgiiopiIkEUFyWEESisIBGKkqKUiIqbRGlxs0gUZURZUU44UV4kiVtEBXGrqChuE5XE7aKyuENUEVVFNVFd3ClqiLtETVFL1BZ3izqirqgn6ot7RANxr2go7hONxP2isXhANBEPiqbiIdFMPCyai0dEC/GoaCkeE61Ea9FGtBXt/q/yXxJ9xcuin+gvUsQAMVC8IgaJwWKIGCqGiVfFcPGaGCFeF6lipBgl3hCjxZtijHhLjBXjxHjxtpggJopJYrKYIqaKNPGOmCbeFdPFe2KGmClmidkiXcwRc8X7Yp6YLxaID8RC8aFYJBaLJWKpyBAfiUyxTGSJj8Vy8YnIFivESrFKrBZrxFqxTqwXG8RGsUlsFlvEVrFNbBefih1ip9gldos9Yq/YJz4T+8Xn4oD4QuSIL/+b+Wf/Kb8XCBAgQYIGDfkgH8RADMRCLMRBHBSEghCBCMRDPBSCQlAYCkNRKAoJkAAloAQgIBAQlISSEIUolIbSkAiJUBbKggMHSZAEFeBWqAgVoRJUgspQGapAVagK1aE61IAaUBNqQm2oDXWgDtSDenAP3AP3QkNoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraAVtIE20A7aQXtoDx2gA3SCTtAZOkMX6ALJkAxdoSt0g27QHbpDD+gBPaEn9ILe0BtegpfgZXgZ+kMdOQAGwkAYBINgCAyFofAqDIfX4DV4HVJhJIyCN+ANeBPGwBkYC+NgPIyHGnIiTILJQHIqpEEaTINpMB2mwwyYCTNhNqTDHJgLc2EezIf58AEshA/hQ1gMi2EpZEAGZMIyyIIsWA5nIRtWwEpYBathDayGdbAe1sFG2AQbYQtsgW2wDT6FT2En7ITdsBv2wl74DD6Dz+FzSIUcyIGDcBAOwSE4DIchF3LhCByBo3AUjsExOA7H4QSchFNwEk7DaTgDZ+EcnIPzcB4uwAsJ3zTfW2ZDqpCXaallPplPxsgYGStjZZyMkwVlQRmRERkv42UhWUgWloVlUVlUJsgEWUKWkChRkgxlSVlSRmVUlpalZaJMlGVlWemkk0kySVaQFWRFWVFWkrfLyvIOWUVWlR1ddVld1pCdXE1ZS9aWtWUdWVfWk/VlfdlANpANZUPZSDaSjWVj2UQ+KJvKATAEHpaXJ9NCjoSWchS0kq1lG9lWvgmPy/ZyDHSQHWUn+aQcB2Ohi2zvkuUzsqucBN3kc3IyPC97yKnQU74oe8neso98SfaVHVw/2V/OgAFyoJwNg+RgOUQOlfOgrrw8sXrydZkqR8pR8g25FN6UY+RbcqwcJ8fLt+UEOVFOkpPlFDlVpsl35DT5rpwu35Mz5Ew5S86W6XKOnCvfl/PkfLlAfiAXyg/lIrlYLpFLZYb8SGbKZTJLfiyXy09ktlwhV8pVcrVcI9fKdXK93CA3yk1ys9wit8ptcrv8VO6QO+UuuVvukXvlPvmZ3C8/lwfkFzJHfikPyj/JQ/IreVh+LXPlN/KI/FYeld/JY/J7eVz+IE/Ik/KU/FGelj/JM/KsPCd/luflL/KCvCgvSS+FAiWVUloFKp/Kr2JUARWrrlFx6lpVUF2nIup6Fa9uUIXUjaqwKqKKqmIqQRVXJZRRqKwiFaqSqpSKqptUaXWzSlRlVFlVTjlVXiWpW1QFdauqqG5TldTtqrK6Q1VRVVU1VV3dqWqou1RNVUvVVnerOqquqqfqq3tUA3WvaqjuU43U/aqxekA1UQ+qpuoh1Uw9rJqrR1QL9ahqqR5TrVRr1Ua1Ve3U46q9ekJ1UB1VJ/Wk6qyeUl3U0ypZPaO6qmdVN/Wc6q6eVz3UC6qnelH1Ur1VH3VRXVJe9VP9VYoaoAaqV9QgNVgNUUPVMPWqGq5eUyPU6ypVjVSj1BtqtHpTjVFvqbFqnBqv3lYT1EQ1SU1WU9RUlabeUdPUu2q6ek/NUDPVLDVbpas5ashfKi34L+S/+y/yR/z67NvUdvWp2qF2ql1qt9qj9qp9ap/ar/arA+qAylE56qA6qA6pQ+qwOqxyVa46oo6oo+qoOqaOqePquDqhTqqf1Y/qtPpJnVFn1Vn1szqvzqsLf/kZCA1aaqW1DnQ+nV/H6AI6Vl+j4/S1uqC+Tkf09Tpe36AL6Rt1YV1EF9XFdIIurktoo1FbTTrUJXUpHdU36dL6Zp2oy+iyupx2urxO0rf84fzf66+dbqfb6/a6g+6gO+lOurPurLvoLjpZJ+uuuqvuprvp7rq77qF76J66p+6le+k+uo/uq/vqfrqfTtEpeqB+RQ/Sg/UQPVQP06/q4Xq4HqFH6FSdqkfpUXq0Hq3H6DF6rB6rx+vxeoKeoCfpSXqKnqLTdJqepqfp6Xq6nqFn6Fl6lk7X6Xqunqvn6Xl6gV6gF+qFepFepJfoJTpDZ+hMnamzdJZerpfrbL1Cr9Cr9Cq9Rq/R6/Q6vUFv0Jv0Jr1Fb9HZervernfoHXqX3qX36D16n96n9+v9+oA+oHN0jj6oD+pD+pA+rA/rXJ2rj+gj+qg+qo/pY/q4Pq5P6BP6lD6lT+vT+ow+o8/pc/q8Pq8v6Av6kr50+bIvkIEMdKCDfEG+ICaICWKD2CAuiAsKBgWDSBAJ4oP4oFBwY1A4KBIUDYoFCUHxoERgAgxsQEEYlAxKBdHgpqB0cHOQGJQJygblAheUD5KCW4IKwa1BxeC2oFJwe1A5uCOoUkAE1YLqwZ1BjeCuoGZQK6gd3B3UCeoG9YL6wT1Bg+DeoGFwX9AouD9oHDwQNAkeDJoGDwXNgoeD5sEjQYvg0aBl8FjQKmgdtAnaBu3+uX5Q9Q/U9/5MkSdcP9PfpJgBZqB5xQwyg80QM9QMM6+a4eY1M8K8blLNSDPKvGFGmzfNGPOWGWvGmfHmbTPBTDSTzGQzxUw1aeYdM828a6ab98wMM9PMMrNNuplj5pr3zTwz3ywwH5iF5kOzyCw2S8xSk2E+MplmmckyH5vl5hOTbVaYlWaVWW3WmLVmnVlvNpiNZpPZbLaYrWab2W4+NTvMTrPL7DZ7zF6zz3xm9pvPzQHzhckxX5qD5k/mkPnKHDZfm1zzjTlivjVHzXfmmPneHDc/mBPmpDllfjSnzU/mjDlrzpmfzXnzi7lgLppLxl++uL/88o4aNebDfBiDMRiLsRiHcVgQC2IEIxiP8VgIC2FhLIxFsSgmYAKWwBJ4GSFhSSyJUYxiaSyNiZiIZbEsOnSYhElYAStgRayIlbASVsbKWAWrYDWshnfinXgX3oW1sBbejXdjXayL9bE+NsAG2BAbYiNshI2xMTbBJtgUm2IzbIbNsTm2wBbYEltiK2yFbbANtsN22B7bYwfsgJ2wE3bGztgFu2AyJmNX7IrdsBt2x+7YA3tgT+yJvbAX9sE+2Bf7Yj/shymYggNxIA7CQTgEh+AwHIbDcTiOwBGYiqk4CkfhaByNY3AMjsVxOB7fxgk4ESfhZJyCUzEN03AaTsPpOB1n4AychbMwHdNxLs7FeTgPF+ACXIgLcREuwiW4BDMwAzMxE7MwC5fjcszGbFyJK3E1rsa1uBbX43rciBtxM27GrbgVt+N23IE7cBfuwj24B/fhPtyP+/EAHsAczMGDeBAP4SE8jIcxF3PxCB7Bo3gUj+ExPI7H8QSewFN4Ck/jaTyDZ/AcnsPz+AtewIt4CT3GWCli7TU2zl5rC9rrbIwtYP8+LmqL2QRb3Jawxha2Rf4hRmttoi1jy9py1tnyNsne8pu4iq1qq9nq9k5bw95la/4mbmDvtQ3tfbaRvd/Wt/f8Q9zYPmCb2EdtU/uYbWZb2+a2rW1hH7Ut7WO2lW1t29i2trN9ynaxT9tk+4ztap/9TZxpl9n1doPdaDfZ/fZze87+bI/a7+x5+4vtZ/vbYfZVO9y+ZkfY122qHfmbeLx9206wE+0kO9lOsVN/E8+ys226nWPn2vftPDv/N3GG/cgutFl2kV1sl9ilv8aXe8qyH9vl9hObbVfYlXaVXW3X2LV23d96XWW32K12m91nP7M77E67y+62e+zeX+PL53HAfmFz7Jf2iP3WHrJf2cP2mM213/waXz6/Y/Z7e9z+YE/Yk/aU/dGetj/ZM/bsr+d/+dx/tBftJeutICBJijQFlI/yUwwVoFi6huLoWipI11GErqd4uoEK0Y1UmIpQUSpGCVScSpAhJEtEIZWkUhSlm6g03UyJVIbKUjlyVJ6S6BaqQLdSRbqNKtHtVJnuoCpUlapRdbqTatBdVJNqUW26m+pQXapH9ekeakD3UkO6jxrR/dSYHqAm9CA1pYeoGT1MzekRakGPUkt6jFpRa2pDbakdPU7t6QnqQB2pEz1Jnekp6kJPUzI9Q13pWepGz1F3ep560AvUk16kXtSb+tBL1Jdepn7Un1JoAA2kV2gQDaYhNJSG0as0nF6jEfQ6pdJIGkVv0Gh6k8bQWzSWxtF4epsm0ESaRJNpCk2lNHqHptG7NJ3eoxk0k2bRbEqnOTSX3qd5NJ8W0Ae0kD6kRbSYltBSyqCPKJOWURZ9TMvpE8qmFbSSVtFqWkNraR2tpw20kTbRZtpCW2kbbadPaQftpF20m/bQXtpHn9F++pwO0BeUQ1/SQfoTHaKv6DB9Tbn0DR2hb+kofUfH6Hs6Tj/QCTpJp+hHOk0/0Rk6S+foZzpPv9AFukiXyJMIIZShCnUYhPnC/GFMWCCMDa8J48Jrw4LhdWEkvD6MD28IC4U3hoXDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCkuHN4eJYZmwbFgudGH5MCm8JawQ3hpWDG8LK4W3h5XDO8IqYdXw0furh3eGNcK7wpphrbB2eHdYJ6wb1gvrh/eEDcJ7w4bhfWGj8P6wYvhA2CR8MGwaPhQ2Cx8Om4ePhC3CR8OW4WNhq7B12CZsG7YLHw/bh0+EHcKOYafwybBz+FTYJXw6TA6fCbuGz/7u8ZRwQDgwfCV8JfT+PrUkujSaEf0omhldFs2KfhxdHv0kmh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFumtcnLvWFXTXuYi73sW7G1whd6Mr7Iq4oq6YS3DFXQlnHDrryIWupCvlou4mV9rd7BJdGVfWlXPOlXdJrq1r59q59u4J18F1dJ3ck+5J95R7yj3tnnbPuK7uWdfNPee6u+ddD/eCe8G96Hq53q6Pe8n1dS+7fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3tct037oj71h1137lj7nt33P3gTriT7pT70Z12P7kz7qw75352590v7oK76C4579Ii70SmRd6NTI+8F5kRmRmZFZkdSY/MicyNvB+ZF5kfWRD5ILIw8mFkUWRxZElkaSQj8lEkM7IskhX5OLI88kkkO7IisjKyKrI6sibiffEdoS/pS/mov8mX9jf7RF/Gl/XlvPPlfZK/xVfwt/qK/jZfyd/uK/s7fBVf1Vfzj/lWvrVv49v6dv5x394/4Tv4jr6Tf9J39k/5Lv5pn+yf8V39s76bf85398/7Hv4F39O/6Hv53r6Pf8n39S/7fr6/T/ED/ED/ih/kB/shfqgf5l/1w/1rfoR/3af6kX6Uf8OP9m/6Mf4tP9aP8+P9236Cn+gn+cl+ip/q0/w7fpp/10/37/kZfqaf5Wf7dD/Hz/Xv+3l+vl/gP/AL/Yd+kV/sl/ilPsN/5DP9Mp/lP/bL/Sc+26/wK/0qv9qv8Wv9Or/eb/Ab/Sa/2W/xW/02v91/6nf4nX6X3+33+L1+n//M7/ef+wP+C5/jv/QH/Z/8If+VP+y/9rn+G3/Ef+uP+u/8Mf+9P+5/8Cf8SX/K/+hP+5/8GX/Wn/M/+/P+F3/BX/SX+H/WGGOMMcb+S9TvHB/wL74n/7IuGyiEuHZnsdx/rrm58J/3g2VC54gQ4pn+PR/+66pTJyUl5S+PzVYiKLVYCBG5kp9PXIlXiE7iKZEsOooK/7K/wbL3efqd+tHbhYj9W+dCxIi/xn9f/9b/oP7jT47PrByei/9P6i8WIrHUlZwC4kp8pX7F/6B+kfa/03+Br9KE6PB3OXHiSnylfpJ4Qjwrkv/hkYwxxhhjjDHG2J8NltW6/9798+X78wR9JSe/uBL/3v05Y4wxxhhjjDHGrr7ne/d5+vHk5I7decMb3vDmb5ur/ZeJMcYYY4wx9u925aL/anfCGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4zlXf8/Pk7sap8jY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxdrX9nwAAAP//JhA6YA==") r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r8, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff00", 0x37}], 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) 12m48.129450763s ago: executing program 38 (id=2386): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r5 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r4, r6, 0x3, 0x0, @val=@perf_event={0x1}}, 0x18) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r7, r4, 0x4, r3}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r8, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) 12m3.087717147s ago: executing program 39 (id=2463): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x0, 0x0, 0x0, 0x4001, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @cgroup_sock_addr=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) open_tree(0xffffffffffffff9c, 0x0, 0x89901) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_targets\x00') sendfile(r3, r3, 0x0, 0x80000000) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 11m1.18002743s ago: executing program 40 (id=2578): openat$audio(0xffffff9c, &(0x7f0000000000), 0x101100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) writev(r2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) getsockname$packet(r4, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x5, 0xffffffc0, 0x6, 0x6, 0x6, 0x3, 0x8, {0x0, @in={{0x2, 0x4e21, @remote}}, 0x80000001, 0x79f, 0x6f, 0x76, 0x9}}, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) 10m51.449508874s ago: executing program 5 (id=2625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "b00dea55fe1c39c5", "0b59a18dc565492a7257f7bc0cf24d6568d8ca8aced6a5f94de56e4a39ffae42", "e60a84b0", "48f7cfcde39d035d"}, 0x38) 10m36.084917008s ago: executing program 41 (id=2625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "b00dea55fe1c39c5", "0b59a18dc565492a7257f7bc0cf24d6568d8ca8aced6a5f94de56e4a39ffae42", "e60a84b0", "48f7cfcde39d035d"}, 0x38) 10m29.359521736s ago: executing program 42 (id=2633): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)=[{0x10, 0x110, 0xb}], 0x20}, 0xfc40) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 7m31.010907612s ago: executing program 3 (id=3002): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r0, @ANYBLOB], 0xa8}}, 0x2004c010) 7m27.046766732s ago: executing program 3 (id=3007): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) 7m25.699646308s ago: executing program 3 (id=3012): r0 = syz_open_dev$cec(0x0, 0xffffffffffffffff, 0x80243) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x6, 0x81, 0xffffffff, 0x2241d13d}) ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffff7, 0xffffffffffffffff, 0x6, 0x9, 0x9, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x1, 0x52, 0x1, 0x49, 0x9, 0x9, 0xd}) 7m24.448660453s ago: executing program 3 (id=3014): r0 = socket(0x1d, 0x2, 0x6) r1 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x2, {0x2, 0x0, 0x2}}, 0x18) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x80) 7m23.293549289s ago: executing program 3 (id=3017): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r0, @ANYBLOB], 0xa8}}, 0x2004c010) 7m19.382663485s ago: executing program 3 (id=3019): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setrlimit(0x0, &(0x7f0000000080)={0x9cc, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x26004885) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80, 0x0) 7m3.133967766s ago: executing program 43 (id=3019): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) setrlimit(0x0, &(0x7f0000000080)={0x9cc, 0x8}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044000}, 0x26004885) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x102) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00009b3000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000000c0)=ANY=[], 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000009b80)=""/102392, 0x18ff8) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x80, 0x0) 4m39.978071685s ago: executing program 6 (id=3285): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m37.179652614s ago: executing program 6 (id=3291): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000044e22008d31324320dcb010c03010902120001040020000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4m28.237201754s ago: executing program 6 (id=3297): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x0, 0x1, 0x4f, "477746182a892f2cda640fd21c967f102583aac06858af9a749b32bdb4fe2714fe1863cb8b9f6cc428e2cf28c3b0d81d98357a84bbd0d852ea62a87981a01c9427960518109aa65cda29fb380fd304"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 4m28.234907482s ago: executing program 6 (id=3301): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x184905c, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) 4m28.234456884s ago: executing program 6 (id=3303): r0 = socket(0x2, 0x80805, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90) 4m23.698307257s ago: executing program 6 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 4m19.968128765s ago: executing program 44 (id=3317): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) 4m5.014927586s ago: executing program 9 (id=3353): mkdir(&(0x7f0000000500)='./file0\x00', 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800001100000000fdffffff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='\x01') 4m3.78828887s ago: executing program 9 (id=3355): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create(0x7) r4 = epoll_create1(0x0) r5 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000100)) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000000)) 3m52.225885987s ago: executing program 9 (id=3373): setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000400)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000006c0)={0x2c, &(0x7f0000000440)={0x0, 0x1, 0x4f, "477746182a892f2cda640fd21c967f102583aac06858af9a749b32bdb4fe2714fe1863cb8b9f6cc428e2cf28c3b0d81d98357a84bbd0d852ea62a87981a01c9427960518109aa65cda29fb380fd304"}, 0x0, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0}) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) 3m50.065781961s ago: executing program 9 (id=3377): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a80000", @ANYRES16=r0, @ANYBLOB="0100000000000000000009000000280003801400020062617461647630000000050000000000080001000200000008000300000000000800060073000000140002800800070000000080080003000300000050000380080003000000000008000500e0000001060007004e2300000500080002000000060007004e24000008000300030000001400020067656e65766530000000000000000000080001"], 0xa8}}, 0x2004c010) 3m49.184238141s ago: executing program 9 (id=3379): mkdir(&(0x7f0000000500)='./file0\x00', 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800001100000000fdffffff02"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)='\x01') 3m48.007767505s ago: executing program 9 (id=3382): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010003", 0x7) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)}], 0x1}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket(0x15, 0x5, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x1) syz_open_dev$video4linux(0x0, 0xff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) io_destroy(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000340)) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000480)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) io_uring_enter(0xffffffffffffffff, 0x6efc, 0x3900, 0xb, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 3m32.470405707s ago: executing program 45 (id=3382): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0x2a5cc081, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="2e000000010003", 0x7) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)}], 0x1}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = dup(0xffffffffffffffff) r5 = socket(0x15, 0x5, 0x0) fsetxattr$security_capability(r3, 0x0, 0x0, 0x0, 0x1) syz_open_dev$video4linux(0x0, 0xff, 0x0) fgetxattr(0xffffffffffffffff, 0x0, &(0x7f0000001080)=""/5, 0x5) io_destroy(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, 0x0, &(0x7f0000000340)) ioctl$SIOCAX25DELUID(r4, 0x89e2, &(0x7f0000000480)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) io_uring_enter(0xffffffffffffffff, 0x6efc, 0x3900, 0xb, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) 2m40.701822288s ago: executing program 7 (id=3399): ioctl$KVM_SET_DEVICE_ATTR_vm(0xffffffffffffffff, 0x4018aee1, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x40000000000, 0x0, 0x6, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x400000000, 0xfffffffffffffffd, 0xfafa, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) 2m40.380866374s ago: executing program 0 (id=3489): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_udp(0xa, 0x2, 0x0) fanotify_init(0x200, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) syz_open_dev$usbfs(0x0, 0x76, 0x109301) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000002c00000008005800000000000e0001006e657464657673696d0000000f0002"], 0x3c}}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 2m39.942497655s ago: executing program 7 (id=3491): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x6f7bf862, 0x800) close(r2) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x2, 0xa}, {0x1}, @const={0x0, {0xfbff, 0x8, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 2m38.259895538s ago: executing program 7 (id=3493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r0, 0x0, 0x4004050) 2m34.788247278s ago: executing program 0 (id=3500): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000810087406d040e0a7594000000"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, 0x0}, 0x0) 2m33.304853993s ago: executing program 7 (id=3505): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c0000000109021200010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 2m30.874827389s ago: executing program 0 (id=3508): syz_usb_connect(0x5, 0x27, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b75c7f404705010264110102031109021200"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) io_setup(0x9, &(0x7f0000000240)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[0x0]) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8242, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r5, 0x4020aeb2, &(0x7f0000012300)={0x0, 0x12c, @ioapic={0x70000, 0xc8f, 0xfffff5ab, 0x7fffffff, 0x0, [{0x8, 0x81, 0xfd, '\x00', 0x7}, {0x0, 0x3, 0x1, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4a, 0xe, 0xd6, '\x00', 0x86}, {0xd, 0x2, 0xa, '\x00', 0x2}, {0xd, 0x2, 0xe9, '\x00', 0x3}, {0xff, 0xa, 0x7, '\x00', 0x6}, {0x9, 0xd, 0x2a, '\x00', 0x8}, {0x4, 0x0, 0xa, '\x00', 0x2}, {0x8, 0xd6, 0x3, '\x00', 0x8}, {0x9e, 0x6, 0x3}, {0x2, 0x9, 0x1, '\x00', 0x6f}, {0x45, 0x51, 0x3}, {0x10, 0xfc, 0x0, '\x00', 0x1}, {0x8, 0x2, 0x9a, '\x00', 0x4b}, {0x5, 0x1b, 0xfe, '\x00', 0x3}, {0x2, 0xa, 0xd6, '\x00', 0x8}, {0xa, 0x0, 0xca, '\x00', 0x7}, {0x0, 0x7, 0x4, '\x00', 0x1a}, {0x3, 0x8, 0x81, '\x00', 0xda}, {0x3, 0x7, 0x6, '\x00', 0x6}, {0x9, 0x9, 0x1, '\x00', 0x2}, {0x87, 0x21, 0x7, '\x00', 0x7}, {0x1, 0x9, 0x0, '\x00', 0x6}]}}) 2m29.498146442s ago: executing program 7 (id=3512): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3b9601000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="440033004000000008021100000008"], 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) 2m28.561676256s ago: executing program 7 (id=3515): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x10, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x2010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x8, [{@remote, 0x4}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m26.239354924s ago: executing program 0 (id=3521): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m25.117577741s ago: executing program 0 (id=3523): write$RDMA_USER_CM_CMD_RESOLVE_ADDR(0xffffffffffffffff, &(0x7f0000000640)={0x15, 0x110, 0xfa08, {0xffffffffffffffff, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0xfffd, @empty}}}, 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) syz_open_dev$swradio(&(0x7f0000000300), 0x0, 0x2) r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) pwritev(r4, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000280)="111ec20239e272abb2cedf053d666ab41bdf031bdcaca63b9856f15d16d909ca3d83d93e22b370e9df", 0x29}], 0x2, 0x4000001, 0x0) sendfile(r3, r4, 0x0, 0x8000fb00) 2m19.334093515s ago: executing program 0 (id=3531): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) 2m12.960258556s ago: executing program 46 (id=3515): r0 = socket$alg(0x26, 0x5, 0x0) accept4(r0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x10, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x2010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x8, [{@remote, 0x4}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 2m3.887862927s ago: executing program 47 (id=3531): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) 14.874851629s ago: executing program 5 (id=3542): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x6, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80002, 0x7f) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, 0x0, 0x0) r5 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) readv(r5, &(0x7f0000000200)=[{&(0x7f0000000480)=""/198, 0xc6}], 0x1) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r5, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5cc2000090780000"], 0x0) 9.028356465s ago: executing program 5 (id=3706): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 7.78747394s ago: executing program 1 (id=3711): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313d, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffc}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 7.475312259s ago: executing program 5 (id=3713): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000072000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = getpgrp(0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = getpid() socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f00000010c0)={0x2020}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}]}}}]}, 0x3c}}, 0x0) 6.726986237s ago: executing program 2 (id=3715): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000003100)={0x2020}, 0x2020) io_setup(0xc, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 6.526355245s ago: executing program 1 (id=3716): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x1c1501) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000000c0)={0x9, {"35dcb52da13e6cd1280702a50ebb3511", "b48197598fb6e31cde1c7d87ab8bd116", "85a3d54424ab99070a94635615970404"}, 0x8, 0x30c0ca9062887fbb}) 6.29711865s ago: executing program 8 (id=3718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x18, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xd) landlock_restrict_self(r1, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(0xffffffffffffffff, &(0x7f00000004c0)='./bus/file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 5.713356215s ago: executing program 2 (id=3719): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.403196397s ago: executing program 4 (id=3720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="2e003300c0000000ffffffffffff080211"], 0x4c}}, 0x0) 5.323673692s ago: executing program 1 (id=3721): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r2], 0x20}}, 0x2000e844) 5.307053479s ago: executing program 8 (id=3722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x50}}, 0x2) 4.409636688s ago: executing program 2 (id=3723): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x2000, 0x1000, 0x5, 0x6}, 0x20) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.235428842s ago: executing program 4 (id=3724): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) 4.104592803s ago: executing program 8 (id=3725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000100)) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x80, &(0x7f0000000000)=""/4090, &(0x7f00000010c0)=0xffa) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x8, 0x7, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x0, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.533192523s ago: executing program 1 (id=3726): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x8000002, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313d, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0xfffffffc}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 3.256472531s ago: executing program 4 (id=3727): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f024e22000000000000ab5c58000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000a000100224e0000", 0x58}], 0x1) 2.615271251s ago: executing program 2 (id=3728): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) read(r0, &(0x7f0000000000)=""/166, 0xa6) 2.424147007s ago: executing program 4 (id=3729): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f0000000500)=[{&(0x7f00000000c0)="27b3e14871d705dafbaea11391aaa27c2e2d38961e9946f4b3d2275b481bfcfd7d8e23821c36e409641c0f21098fe15c90f438a2bf29214fe29017f881b9577ab72cea2dd2816b9dff4af028f0989cae", 0x50}], 0x1) 2.372839391s ago: executing program 8 (id=3730): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x7) 1.787500048s ago: executing program 5 (id=3731): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x1c1501) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x13, 0x4}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f00000000c0)={0x9, {"35dcb52da13e6cd1280702a50ebb3511", "b48197598fb6e31cde1c7d87ab8bd116", "85a3d54424ab99070a94635615970404"}, 0x8, 0x30c0ca9062887fbb}) 1.762691684s ago: executing program 1 (id=3732): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x0, 0x2}, 0x18, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000280)='./bus/file0\x00', 0x0) renameat2(r1, &(0x7f00000004c0)='./bus/file0\x00', r2, &(0x7f00000002c0)='./file0\x00', 0x2) 1.563266765s ago: executing program 2 (id=3733): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_io_uring_setup(0x895, &(0x7f0000000140)={0x0, 0x8c36, 0x80, 0xfffffffe, 0xbfdffddc}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r2, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.397226922s ago: executing program 8 (id=3734): symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') mkdir(&(0x7f0000000340)='./bus\x00', 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}, {@userxattr}, {@redirect_dir_on}]}) 1.378703518s ago: executing program 4 (id=3735): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x48}]}]}, 0x50}}, 0x2) 839.550762ms ago: executing program 1 (id=3736): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000110001002cbd70000000000000000000", @ANYRES32=r2], 0x20}}, 0x2000e844) 675.137016ms ago: executing program 5 (id=3737): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x4e24, 0x14, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x10, 0x8, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x2}, 0xffdd) sendto$inet6(r0, &(0x7f0000000180)="9fa04bd8c96fd8b2be3030ed68f704a9a2701356c9ce6062e9e24e8d469f4a89b5fa0d1435d4686394a65567766c3c16564b", 0x32, 0x44004, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) 480.612276ms ago: executing program 4 (id=3738): r0 = openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x2000, 0x1000, 0x5, 0x6}, 0x20) syz_clone(0x2048000, 0x0, 0x0, 0x0, 0x0, 0x0) 339.582657ms ago: executing program 8 (id=3739): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000740)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x48c86100, 0x0, 0x0, 0x1, 0x57, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=3740): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0}, 0x50) r0 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @private2, 0x3ff}, 0x1c) kernel console output (not intermixed with test programs): evice found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1562.957589][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.998589][ T30] usb 7-1: Product: syz [ 1563.003009][ T30] usb 7-1: Manufacturer: syz [ 1563.013739][ T30] usb 7-1: SerialNumber: syz [ 1563.081006][ T30] usb 7-1: config 0 descriptor?? [ 1563.130666][ T142] bridge_slave_1: left allmulticast mode [ 1563.136549][ T142] bridge_slave_1: left promiscuous mode [ 1563.172538][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.240264][ T30] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1563.276624][ T142] bridge_slave_0: left allmulticast mode [ 1563.310860][ T142] bridge_slave_0: left promiscuous mode [ 1563.317676][ T30] em28xx 7-1:0.132: Video interface 132 found: [ 1563.340201][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.610324][ T30] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1564.271990][ T30] em28xx 7-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1564.304484][ T30] em28xx 7-1:0.132: failed to read eeprom (err=-5) [ 1564.338577][ T30] em28xx 7-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1564.438343][ T30] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1564.446453][ T30] em28xx 7-1:0.132: analog set to bulk mode. [ 1564.531621][T15482] em28xx 7-1:0.132: Registering V4L2 extension [ 1564.651274][ T30] usb 7-1: USB disconnect, device number 13 [ 1564.683541][ T30] em28xx 7-1:0.132: Disconnecting em28xx [ 1565.290198][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1565.410250][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1565.548609][ T142] bond0 (unregistering): Released all slaves [ 1565.691172][T16975] fuse: Unknown parameter 'group_i00000000000000000000' [ 1566.078872][T16894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1566.086041][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.133574][T15482] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1566.141743][T15482] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1566.166973][T15482] em28xx 7-1:0.132: No AC97 audio processor [ 1566.226795][T15482] usb 7-1: Decoder not found [ 1566.238753][T16894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1566.275150][T15482] em28xx 7-1:0.132: failed to create media graph [ 1566.315160][T16894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1566.325152][T15482] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1566.388194][T16894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1566.412018][T15482] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1566.458418][ T30] em28xx 7-1:0.132: Closing input extension [ 1566.524749][T16894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1566.587048][ T30] em28xx 7-1:0.132: Freeing device [ 1566.836624][ T142] hsr_slave_0: left promiscuous mode [ 1566.867750][ T142] hsr_slave_1: left promiscuous mode [ 1566.888550][T14715] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1566.901122][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.963422][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1567.025682][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.067626][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.158508][T14715] usb 3-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1567.218258][T14715] usb 3-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1567.226800][T14715] usb 3-1: Product: syz [ 1567.264536][ T142] veth1_macvtap: left promiscuous mode [ 1567.271188][T14715] usb 3-1: Manufacturer: syz [ 1567.276017][T14715] usb 3-1: SerialNumber: syz [ 1567.300416][ T142] veth0_macvtap: left promiscuous mode [ 1567.306390][ T142] veth1_vlan: left promiscuous mode [ 1567.358765][ T142] veth0_vlan: left promiscuous mode [ 1567.438672][T14715] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1567.850749][T14715] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1567.921097][T14715] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1568.134312][ T30] usb 3-1: USB disconnect, device number 24 [ 1569.348198][T14715] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 1569.603739][T14715] usb 1-1: config 6 has an invalid interface number: 186 but max is 0 [ 1569.658542][T14715] usb 1-1: config 6 has no interface number 0 [ 1569.684662][T14715] usb 1-1: config 6 interface 186 has no altsetting 0 [ 1569.757184][T14715] usb 1-1: New USB device found, idVendor=15a4, idProduct=1003, bcdDevice=f9.7d [ 1569.802618][T14715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1569.830356][T14715] usb 1-1: Product: syz [ 1569.856536][T13930] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1569.877098][T14715] usb 1-1: Manufacturer: syz [ 1569.906527][T14715] usb 1-1: SerialNumber: syz [ 1570.088313][T13930] usb 3-1: Using ep0 maxpacket: 32 [ 1570.220659][T13930] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1570.274844][T13930] usb 3-1: config 0 has no interface number 0 [ 1570.298418][T13930] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1570.316321][T14715] usb 1-1: USB disconnect, device number 18 [ 1570.394511][T13930] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1570.418685][T13930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1570.440100][T13930] usb 3-1: Product: syz [ 1570.454502][T13930] usb 3-1: Manufacturer: syz [ 1570.463696][T13930] usb 3-1: SerialNumber: syz [ 1570.581409][T13930] usb 3-1: config 0 descriptor?? [ 1570.697573][T13930] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1570.734418][T13930] em28xx 3-1:0.132: Video interface 132 found: [ 1570.829957][ T142] team0 (unregistering): Port device team_slave_1 removed [ 1570.950605][ T142] team0 (unregistering): Port device team_slave_0 removed [ 1571.124232][T13930] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1571.560616][T17013] fuse: Unknown parameter 'group_i00000000000000000000' [ 1571.688832][ T30] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1571.779058][T13930] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1571.835679][T13930] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 1571.884389][T13930] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1571.905612][ T30] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1571.938370][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.999603][ T30] usb 7-1: config 0 descriptor?? [ 1572.025491][ T30] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1572.028680][T13930] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1572.108137][T13930] em28xx 3-1:0.132: analog set to bulk mode. [ 1572.150937][T17004] em28xx 3-1:0.132: Registering V4L2 extension [ 1572.227551][T13930] usb 3-1: USB disconnect, device number 25 [ 1572.267853][T13930] em28xx 3-1:0.132: Disconnecting em28xx [ 1572.495613][ T30] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 1572.702365][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1572.848413][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1572.889905][ T30] gspca_cpia1: usb_control_msg 01, error -71 [ 1572.896223][ T30] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 1573.023076][T16894] hsr_slave_0: entered promiscuous mode [ 1573.031485][ T30] usb 7-1: USB disconnect, device number 14 [ 1573.115829][T16894] hsr_slave_1: entered promiscuous mode [ 1573.204217][T16894] debugfs: 'hsr0' already exists in 'hsr' [ 1573.245961][T16894] Cannot create hsr debugfs directory [ 1574.081594][T17004] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1574.128449][T17004] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1574.135965][T17004] em28xx 3-1:0.132: No AC97 audio processor [ 1574.229015][T17004] usb 3-1: Decoder not found [ 1574.234149][T17004] em28xx 3-1:0.132: failed to create media graph [ 1574.315626][T17004] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1574.386074][T17004] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1574.473859][T13930] em28xx 3-1:0.132: Closing input extension [ 1574.579494][T13930] em28xx 3-1:0.132: Freeing device [ 1574.591738][T14715] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1574.670833][T17035] input: syz0 as /devices/virtual/input/input15 [ 1574.843986][T14715] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 1574.889170][T14715] usb 7-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 1574.928662][T14715] usb 7-1: Product: syz [ 1574.959605][T14715] usb 7-1: Manufacturer: syz [ 1575.006002][T14715] usb 7-1: SerialNumber: syz [ 1575.193834][T14715] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 1575.607612][T14715] vp7045: USB control message 'in' went wrong. [ 1575.642263][T14715] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1575.689530][T14715] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 1575.743438][T14715] usb 7-1: USB disconnect, device number 15 [ 1576.636609][T17052] fuse: Unknown parameter 'group_id00000000000000000000' [ 1577.308907][T14715] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1577.538617][T14715] usb 7-1: Using ep0 maxpacket: 32 [ 1577.610028][T14715] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 1577.638383][T14715] usb 7-1: config 0 has no interface number 0 [ 1577.644764][T14715] usb 7-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1577.748196][T14715] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1577.787005][T14715] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.806277][T14715] usb 7-1: Product: syz [ 1577.816696][T14715] usb 7-1: Manufacturer: syz [ 1577.850257][T14715] usb 7-1: SerialNumber: syz [ 1577.858353][T15482] Bluetooth: hci6: Opcode 0x0c1a failed: -110 [ 1577.859226][ T5773] Bluetooth: hci6: command 0x0406 tx timeout [ 1577.910991][T14715] usb 7-1: config 0 descriptor?? [ 1577.918398][T15482] Bluetooth: hci6: Error when powering off device on rfkill (-110) [ 1577.965191][T14715] em28xx 7-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1577.986140][T14715] em28xx 7-1:0.132: Video interface 132 found: [ 1578.374829][T14715] em28xx 7-1:0.132: unknown em28xx chip ID (0) [ 1578.882198][T14715] em28xx 7-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1578.933690][T14715] em28xx 7-1:0.132: board has no eeprom [ 1578.958643][T15489] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 1579.053361][T14715] em28xx 7-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1579.101609][T16894] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1579.112434][T14715] em28xx 7-1:0.132: analog set to bulk mode. [ 1579.147842][T13930] em28xx 7-1:0.132: Registering V4L2 extension [ 1579.171714][T15489] usb 10-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1579.258796][T14715] usb 7-1: USB disconnect, device number 16 [ 1579.268587][T15489] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.274807][T16894] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1579.320078][T14715] em28xx 7-1:0.132: Disconnecting em28xx [ 1579.388725][T15489] usb 10-1: config 0 descriptor?? [ 1579.446784][T15489] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1579.550216][T16894] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1579.717263][T16894] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1579.883204][T15489] cpia1 10-1:0.0: unexpected state after lo power cmd: 00 [ 1580.087533][T15489] gspca_cpia1: usb_control_msg 01, error -32 [ 1580.166817][T15489] gspca_cpia1: usb_control_msg 01, error -32 [ 1580.231417][T15489] gspca_cpia1: usb_control_msg 01, error -71 [ 1580.237732][T15489] cpia1 10-1:0.0: only firmware version 1 is supported (got: 0) [ 1580.350694][T15489] usb 10-1: USB disconnect, device number 10 [ 1580.738316][ T5773] Bluetooth: hci5: command 0x0406 tx timeout [ 1580.747413][T15482] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1580.822477][T15482] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 1581.174027][T13930] em28xx 7-1:0.132: Config register raw data: 0xffffffed [ 1581.227632][T13930] em28xx 7-1:0.132: AC97 chip type couldn't be determined [ 1581.272733][T13930] em28xx 7-1:0.132: No AC97 audio processor [ 1581.316433][T13930] usb 7-1: Decoder not found [ 1581.348562][T13930] em28xx 7-1:0.132: failed to create media graph [ 1581.395711][T13930] em28xx 7-1:0.132: V4L2 device video103 deregistered [ 1581.497867][T13930] em28xx 7-1:0.132: Remote control support is not available for this card. [ 1581.561548][T14715] em28xx 7-1:0.132: Closing input extension [ 1581.646867][T14715] em28xx 7-1:0.132: Freeing device [ 1581.998581][T16894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.224363][T16894] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.402665][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.410308][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.567275][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.574855][ T7815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1583.058184][T15482] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1583.058691][ T5773] Bluetooth: hci3: command 0x0406 tx timeout [ 1583.064786][T15482] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1583.859492][T17096] fuse: Unknown parameter 'group_id00000000000000000000' [ 1585.454588][T14715] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1585.660372][T14715] usb 10-1: Using ep0 maxpacket: 32 [ 1585.696471][T14715] usb 10-1: config 0 has an invalid interface number: 132 but max is 0 [ 1585.748490][T14715] usb 10-1: config 0 has no interface number 0 [ 1585.790312][T14715] usb 10-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1585.999855][T14715] usb 10-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1586.020276][T14715] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.063326][T14715] usb 10-1: Product: syz [ 1586.091239][T14715] usb 10-1: Manufacturer: syz [ 1586.120270][T14715] usb 10-1: SerialNumber: syz [ 1586.172422][T14715] usb 10-1: config 0 descriptor?? [ 1586.285928][T14715] em28xx 10-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1586.357468][T14715] em28xx 10-1:0.132: Video interface 132 found: [ 1586.403706][T16894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1586.418618][ T5773] Bluetooth: hci2: command 0x0c1a tx timeout [ 1586.426061][T15482] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 1586.456440][T15482] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 1586.684692][T14715] em28xx 10-1:0.132: unknown em28xx chip ID (0) [ 1587.158425][T14715] em28xx 10-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1587.248419][T14715] em28xx 10-1:0.132: board has no eeprom [ 1587.345605][T14715] em28xx 10-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1587.358224][T14715] em28xx 10-1:0.132: analog set to bulk mode. [ 1587.382152][T13930] em28xx 10-1:0.132: Registering V4L2 extension [ 1587.457388][ T35] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1587.470780][T14715] usb 10-1: USB disconnect, device number 11 [ 1587.530338][T14715] em28xx 10-1:0.132: Disconnecting em28xx [ 1587.808343][T17004] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1587.816199][ T35] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.045024][T17004] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1588.074743][ T35] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.111020][T17004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1588.190878][T17004] usb 1-1: config 0 descriptor?? [ 1588.298733][T16894] veth0_vlan: entered promiscuous mode [ 1588.349804][T17004] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1588.414998][ T35] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1588.643821][T17004] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1588.691767][T16894] veth1_vlan: entered promiscuous mode [ 1588.727004][T13930] em28xx 10-1:0.132: Config register raw data: 0xffffffed [ 1588.773980][T13930] em28xx 10-1:0.132: AC97 chip type couldn't be determined [ 1588.822258][T13930] em28xx 10-1:0.132: No AC97 audio processor [ 1588.854320][T17004] gspca_cpia1: usb_control_msg 01, error -32 [ 1588.862421][T13930] usb 10-1: Decoder not found [ 1588.867562][T13930] em28xx 10-1:0.132: failed to create media graph [ 1588.888674][T17004] gspca_cpia1: usb_control_msg 01, error -32 [ 1588.923868][T17004] gspca_cpia1: usb_control_msg 01, error -71 [ 1588.948249][T13930] em28xx 10-1:0.132: V4L2 device video103 deregistered [ 1588.959162][T17004] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1588.991107][T13930] em28xx 10-1:0.132: Remote control support is not available for this card. [ 1589.019800][T17004] usb 1-1: USB disconnect, device number 19 [ 1589.040595][T14715] em28xx 10-1:0.132: Closing input extension [ 1589.073772][T14715] em28xx 10-1:0.132: Freeing device [ 1589.628627][ T35] bridge_slave_1: left allmulticast mode [ 1589.634517][ T35] bridge_slave_1: left promiscuous mode [ 1589.689420][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 1589.759326][ T35] bridge_slave_0: left allmulticast mode [ 1589.765212][ T35] bridge_slave_0: left promiscuous mode [ 1589.819300][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 1590.785284][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1590.829273][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1590.855464][ T35] bond0 (unregistering): Released all slaves [ 1590.934674][T16894] veth0_macvtap: entered promiscuous mode [ 1591.007137][T16894] veth1_macvtap: entered promiscuous mode [ 1591.050097][ T35] tipc: Left network mode [ 1591.129976][ T35] IPVS: stopping backup sync thread 16161 ... [ 1591.267139][T17151] fuse: Unknown parameter 'group_id00000000000000000000' [ 1591.479023][T16894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1591.710262][T16894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1591.980790][ T35] hsr_slave_0: left promiscuous mode [ 1592.058214][ T35] hsr_slave_1: left promiscuous mode [ 1592.099147][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1592.106760][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1592.145187][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1592.207375][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1592.317748][ T35] veth1_vlan: left promiscuous mode [ 1592.345074][ T35] veth0_vlan: left promiscuous mode [ 1592.489288][T15482] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1592.533235][T15794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1592.542640][T15794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1592.556921][T15794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1592.574862][T15794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1592.593432][T15794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1592.735984][ T5773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1592.762839][ T5773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1592.772677][ T5773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1592.792719][T15482] usb 10-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1592.810647][ T5773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1592.825843][ T5773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1592.833611][T15482] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.876345][T15482] usb 10-1: config 0 descriptor?? [ 1593.208804][T15482] udl 10-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1593.415412][T15482] [drm:udl_init] *ERROR* Selecting channel failed [ 1593.526324][T15482] [drm] Initialized udl 0.0.1 for 10-1:0.0 on minor 2 [ 1593.548520][T15482] [drm] Initialized udl on minor 2 [ 1593.588579][T15482] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1593.609242][T15482] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1593.622090][ T30] udl 10-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1593.631158][ T30] udl 10-1:0.0: [drm] Cannot find any crtc or sizes [ 1593.644271][T15482] usb 10-1: USB disconnect, device number 12 [ 1594.214475][ T35] team0 (unregistering): Port device team_slave_1 removed [ 1594.468348][T15482] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1594.691936][T15482] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1594.702071][T15482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.740531][T15482] usb 1-1: config 0 descriptor?? [ 1594.794131][T15482] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1594.898650][ T5773] Bluetooth: hci0: command tx timeout [ 1594.922495][T15217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.953475][T15217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1594.996916][T15217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.043002][T15217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.240124][T15482] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1595.478324][T15482] gspca_cpia1: usb_control_msg 01, error -32 [ 1595.518350][T15482] gspca_cpia1: usb_control_msg 01, error -32 [ 1595.547984][T15482] gspca_cpia1: usb_control_msg 01, error -71 [ 1595.582810][T15482] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1595.680615][T15482] usb 1-1: USB disconnect, device number 20 [ 1595.931775][T17186] fuse: Bad value for 'user_id' [ 1595.936856][T17186] fuse: Bad value for 'user_id' [ 1596.138219][T14715] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1596.369273][T14715] usb 3-1: Using ep0 maxpacket: 32 [ 1596.581984][T14715] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 1596.619054][T14715] usb 3-1: config 0 has no interface number 0 [ 1596.625414][T14715] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1596.716885][T14715] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1596.744224][T14715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1596.753903][T14715] usb 3-1: Product: syz [ 1596.768551][T14715] usb 3-1: Manufacturer: syz [ 1596.773430][T14715] usb 3-1: SerialNumber: syz [ 1596.792417][T14715] usb 3-1: config 0 descriptor?? [ 1596.824288][T14715] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1596.845000][T14715] em28xx 3-1:0.132: Video interface 132 found: [ 1596.981033][ T5773] Bluetooth: hci0: command tx timeout [ 1597.301451][T14715] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 1597.605389][T17165] chnl_net:caif_netlink_parms(): no params data found [ 1597.781715][T14715] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 1597.832851][T14715] em28xx 3-1:0.132: board has no eeprom [ 1597.918633][T14715] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1597.968362][T14715] em28xx 3-1:0.132: analog set to bulk mode. [ 1597.987644][T17004] em28xx 3-1:0.132: Registering V4L2 extension [ 1598.119335][T14715] usb 3-1: USB disconnect, device number 26 [ 1598.127159][T14715] em28xx 3-1:0.132: Disconnecting em28xx [ 1599.059913][ T5773] Bluetooth: hci0: command tx timeout [ 1599.197505][T17004] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 1599.236490][T17004] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 1599.278995][T17004] em28xx 3-1:0.132: No AC97 audio processor [ 1599.300276][T17004] usb 3-1: Decoder not found [ 1599.305096][T17004] em28xx 3-1:0.132: failed to create media graph [ 1599.348144][T17004] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 1599.348293][T15482] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1599.385568][T17004] em28xx 3-1:0.132: Remote control support is not available for this card. [ 1599.433520][T14715] em28xx 3-1:0.132: Closing input extension [ 1599.488846][T14715] em28xx 3-1:0.132: Freeing device [ 1599.573482][T15482] usb 10-1: Using ep0 maxpacket: 8 [ 1599.655576][T15482] usb 10-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1599.701636][T15482] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1599.739362][T15482] usb 10-1: Product: syz [ 1599.743863][T15482] usb 10-1: Manufacturer: syz [ 1599.780752][T15482] usb 10-1: SerialNumber: syz [ 1599.821132][T15482] usb 10-1: config 0 descriptor?? [ 1599.858711][T17165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.907671][T17165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1599.922610][T15482] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1599.949340][T17165] bridge_slave_0: entered allmulticast mode [ 1599.983207][T17165] bridge_slave_0: entered promiscuous mode [ 1600.070555][T17237] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1600.090053][T17165] bridge0: port 2(bridge_slave_1) entered blocking state [ 1600.097785][T15482] gspca_vc032x: reg_r err -32 [ 1600.103029][T15482] vc032x 10-1:0.0: probe with driver vc032x failed with error -32 [ 1600.124898][T17165] bridge0: port 2(bridge_slave_1) entered disabled state [ 1600.146280][T17165] bridge_slave_1: entered allmulticast mode [ 1600.169995][T17237] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3338'. [ 1600.208791][T17165] bridge_slave_1: entered promiscuous mode [ 1600.603610][T17165] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1600.654758][T17165] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1601.027376][T17165] team0: Port device team_slave_0 added [ 1601.100312][T17165] team0: Port device team_slave_1 added [ 1601.138216][ T5773] Bluetooth: hci0: command tx timeout [ 1601.148401][ T30] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1601.341996][T17165] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1601.356484][ T30] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1601.388168][ T30] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1601.388179][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.388336][T17165] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1601.464133][ T30] usb 1-1: config 0 descriptor?? [ 1601.536317][ T30] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1601.550958][T17165] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1601.578724][T17165] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1601.678269][T17165] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1601.965120][ T30] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1602.187592][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1602.204094][ T30] gspca_cpia1: usb_control_msg 01, error -32 [ 1602.226663][ T30] gspca_cpia1: usb_control_msg 01, error -71 [ 1602.226786][T17165] hsr_slave_0: entered promiscuous mode [ 1602.264327][ T30] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 1602.356121][T17165] hsr_slave_1: entered promiscuous mode [ 1602.376981][ T30] usb 1-1: USB disconnect, device number 21 [ 1602.574764][T15482] usb 10-1: USB disconnect, device number 13 [ 1603.692846][ T7815] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1603.728431][ T7815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.308379][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.316708][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.912384][T17285] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.3349'. [ 1604.985818][T17285] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3349'. [ 1605.585114][T17165] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1605.691317][T17165] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1605.793420][T17165] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1605.924503][T17165] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1606.304933][ T30] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1606.323802][T14224] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1606.478662][ T30] usb 3-1: Using ep0 maxpacket: 8 [ 1606.564078][T14224] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1606.608274][T14224] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1606.631020][T14224] usb 2-1: config 220 has no interface number 2 [ 1606.637699][T14224] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1606.688723][ T30] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1606.718102][ T30] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.726914][T14224] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1606.748104][ T30] usb 3-1: Product: syz [ 1606.752508][ T30] usb 3-1: Manufacturer: syz [ 1606.770014][T14224] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1606.777235][T14224] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1606.795188][ T30] usb 3-1: SerialNumber: syz [ 1606.821717][T14224] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1606.861062][ T30] usb 3-1: config 0 descriptor?? [ 1606.873427][T14224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.905976][ T30] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1606.914419][T14224] usb 2-1: Product: syz [ 1606.934688][T14224] usb 2-1: Manufacturer: syz [ 1606.958161][T14224] usb 2-1: SerialNumber: syz [ 1607.350900][T14224] usb 2-1: selecting invalid altsetting 0 [ 1607.388657][T14224] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1607.428216][T14224] uvcvideo 2-1:220.0: No valid video chain found. [ 1607.617350][T14224] usb 2-1: selecting invalid altsetting 0 [ 1607.650788][ T30] gspca_vc032x: reg_r err -32 [ 1607.690923][ T30] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1607.703306][T14224] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 1607.729986][T14224] usb 2-1: USB disconnect, device number 8 [ 1607.738613][T17165] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1608.006411][T17165] 8021q: adding VLAN 0 to HW filter on device team0 [ 1608.211456][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.219212][ T7815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1608.464845][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.472718][ T7815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1609.618540][ T30] usb 3-1: USB disconnect, device number 27 [ 1610.796733][T17333] binder: 17324:17333 ioctl 4018620d 0 returned -22 [ 1613.488552][T17165] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1613.707556][T17346] netlink: 2028 bytes leftover after parsing attributes in process `syz.1.3362'. [ 1613.747477][T17346] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3362'. [ 1615.307313][T17365] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1616.156080][T17165] veth0_vlan: entered promiscuous mode [ 1616.218634][T17004] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1616.328390][T17165] veth1_vlan: entered promiscuous mode [ 1616.408369][T17004] usb 1-1: Using ep0 maxpacket: 8 [ 1616.473064][T17004] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1616.499972][T17004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1616.538499][T17004] usb 1-1: Product: syz [ 1616.542913][T17004] usb 1-1: Manufacturer: syz [ 1616.563346][T17004] usb 1-1: SerialNumber: syz [ 1616.594758][T17004] usb 1-1: config 0 descriptor?? [ 1616.663212][T17004] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1616.915665][T17165] veth0_macvtap: entered promiscuous mode [ 1616.931527][T14715] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1617.027367][T17165] veth1_macvtap: entered promiscuous mode [ 1617.098456][T14715] usb 2-1: device descriptor read/64, error -71 [ 1617.246632][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.255478][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.292256][T17004] gspca_vc032x: reg_r err -32 [ 1617.297543][T17004] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 1617.378365][T14715] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1617.414907][T17165] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1617.548337][T14715] usb 2-1: device descriptor read/64, error -71 [ 1617.553978][T17165] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1618.371618][T14715] usb usb2-port1: attempt power cycle [ 1618.543219][T17386] binder: 17381:17386 ioctl 4018620d 0 returned -22 [ 1618.809819][ T57] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1618.874209][ T57] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.124916][T16025] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.229069][ T2959] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1619.571589][T15482] usb 1-1: USB disconnect, device number 22 [ 1620.908783][T17396] Bluetooth: MGMT ver 1.23 [ 1620.994629][T17396] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 1621.112909][T17396] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 1622.448486][T15482] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 1622.678349][T15482] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 1622.730961][T15482] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 1622.805225][T15482] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1622.856266][T15482] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1622.874173][T15482] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1622.887566][T15482] usb 1-1: Product: syz [ 1622.906737][T15482] usb 1-1: Manufacturer: syz [ 1622.919750][T15482] usb 1-1: SerialNumber: syz [ 1622.946306][T15482] usb 1-1: config 0 descriptor?? [ 1623.022708][T15482] usb 1-1: selecting invalid altsetting 0 [ 1623.048648][T17425] Bluetooth: hci0: invalid length 0, exp 2 for type 16 [ 1623.502156][T17418] usb 1-1: cannot submit urb 0, error -90: internal error [ 1623.584051][T17418] usb 1-1: cannot submit urb 0, error -90: internal error [ 1623.640129][T17418] usb 1-1: cannot submit urb 0, error -90: internal error [ 1623.730721][T17418] usb 1-1: cannot submit urb 0, error -90: internal error [ 1623.754044][T15482] usb 1-1: USB disconnect, device number 23 [ 1623.763060][T17418] usb 1-1: cannot submit urb 0, error -19: no device [ 1624.034801][T15963] udevd[15963]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1624.888355][T15482] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1625.088478][T15482] usb 2-1: Using ep0 maxpacket: 8 [ 1625.212941][T15482] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1625.244813][T15482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1625.274421][T15482] usb 2-1: Product: syz [ 1625.295935][T15482] usb 2-1: Manufacturer: syz [ 1625.318415][T15482] usb 2-1: SerialNumber: syz [ 1625.352091][T15482] usb 2-1: config 0 descriptor?? [ 1625.425042][T15482] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1626.358460][T15482] gspca_vc032x: reg_r err -110 [ 1626.363774][T15482] vc032x 2-1:0.0: probe with driver vc032x failed with error -110 [ 1626.467015][T17449] binder: 17443:17449 ioctl 4018620d 0 returned -22 [ 1629.024719][T14715] usb 2-1: USB disconnect, device number 12 [ 1629.479369][T15482] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1629.708865][T15482] usb 1-1: Using ep0 maxpacket: 32 [ 1629.803337][T15482] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 1629.834031][T15482] usb 1-1: config 0 has no interface number 0 [ 1629.862752][T15482] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1629.953677][T15482] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1629.990932][T15482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1630.026844][T15482] usb 1-1: Product: syz [ 1630.039920][T15482] usb 1-1: Manufacturer: syz [ 1630.059464][T15482] usb 1-1: SerialNumber: syz [ 1630.120916][T15482] usb 1-1: config 0 descriptor?? [ 1630.235896][T15482] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1630.277372][T15482] em28xx 1-1:0.132: Video interface 132 found: [ 1630.653918][T15482] em28xx 1-1:0.132: unknown em28xx chip ID (0) [ 1631.335246][T15482] em28xx 1-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1631.388550][T15482] em28xx 1-1:0.132: failed to read eeprom (err=-5) [ 1631.395529][T15482] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1631.501082][T15482] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1631.520344][T15482] em28xx 1-1:0.132: analog set to bulk mode. [ 1631.551302][ T30] em28xx 1-1:0.132: Registering V4L2 extension [ 1631.625854][T15482] usb 1-1: USB disconnect, device number 24 [ 1631.680640][T15482] em28xx 1-1:0.132: Disconnecting em28xx [ 1632.339153][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.347714][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1632.769600][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1632.777730][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1633.293186][ T30] em28xx 1-1:0.132: Config register raw data: 0xffffffed [ 1633.419276][ T30] em28xx 1-1:0.132: AC97 chip type couldn't be determined [ 1633.449784][ T30] em28xx 1-1:0.132: No AC97 audio processor [ 1633.510990][ T30] usb 1-1: Decoder not found [ 1633.515813][ T30] em28xx 1-1:0.132: failed to create media graph [ 1633.589361][ T30] em28xx 1-1:0.132: V4L2 device video103 deregistered [ 1633.621867][ T30] em28xx 1-1:0.132: Remote control support is not available for this card. [ 1633.675563][T15482] em28xx 1-1:0.132: Closing input extension [ 1633.804872][T15482] em28xx 1-1:0.132: Freeing device [ 1635.720878][T17502] binder: 17498:17502 ioctl 4018620d 0 returned -22 [ 1639.254487][T14715] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1639.450586][T17004] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1639.481164][T14715] usb 9-1: Using ep0 maxpacket: 8 [ 1639.544414][T14715] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1639.593690][T14715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.628266][T17004] usb 3-1: device descriptor read/64, error -71 [ 1639.635909][T14715] usb 9-1: Product: syz [ 1639.667302][T14715] usb 9-1: Manufacturer: syz [ 1639.722021][T14715] usb 9-1: SerialNumber: syz [ 1639.874305][T14715] usb 9-1: config 0 descriptor?? [ 1639.916193][T17004] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1639.956538][T14715] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1640.178789][T17004] usb 3-1: device descriptor read/64, error -71 [ 1640.350629][T17004] usb usb3-port1: attempt power cycle [ 1640.593973][T14715] gspca_vc032x: reg_r err -32 [ 1640.623166][T14715] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1640.793470][T17004] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1640.889165][T17004] usb 3-1: device descriptor read/8, error -71 [ 1641.027173][T15794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1641.044668][T15794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1641.057412][T15794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1641.077313][T15794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1641.096794][T15794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1641.108988][T14715] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1641.178692][T17004] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1641.220892][T17004] usb 3-1: device descriptor read/8, error -71 [ 1641.278248][T14715] usb 2-1: Using ep0 maxpacket: 32 [ 1641.303635][T14715] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 1641.315130][T14715] usb 2-1: config 0 has no interface number 0 [ 1641.326487][T14715] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1641.341389][T17004] usb usb3-port1: unable to enumerate USB device [ 1641.376679][T14715] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1641.424949][T14715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1641.461239][T14715] usb 2-1: Product: syz [ 1641.481579][T14715] usb 2-1: Manufacturer: syz [ 1641.494071][T14715] usb 2-1: SerialNumber: syz [ 1641.561899][T14715] usb 2-1: config 0 descriptor?? [ 1641.684942][T14715] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 1641.739508][T14715] em28xx 2-1:0.132: Video interface 132 found: [ 1642.119102][T14715] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 1642.624538][T15482] usb 9-1: USB disconnect, device number 2 [ 1642.834285][T14715] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 1642.854738][T14715] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 1642.876332][T14715] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 1642.958344][T14715] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 1642.988262][T14715] em28xx 2-1:0.132: analog set to bulk mode. [ 1642.999282][T17004] em28xx 2-1:0.132: Registering V4L2 extension [ 1643.106742][T14715] usb 2-1: USB disconnect, device number 13 [ 1643.148293][ T5773] Bluetooth: hci1: command tx timeout [ 1643.162708][T14715] em28xx 2-1:0.132: Disconnecting em28xx [ 1644.919414][T17004] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 1644.962799][T17004] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 1645.029779][T17004] em28xx 2-1:0.132: No AC97 audio processor [ 1645.080018][T17004] usb 2-1: Decoder not found [ 1645.119299][T17004] em28xx 2-1:0.132: failed to create media graph [ 1645.125921][T17004] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 1645.203193][T17004] em28xx 2-1:0.132: Remote control support is not available for this card. [ 1645.222206][ T5773] Bluetooth: hci1: command tx timeout [ 1645.282614][T17522] chnl_net:caif_netlink_parms(): no params data found [ 1645.290261][T14715] em28xx 2-1:0.132: Closing input extension [ 1645.350658][T14715] em28xx 2-1:0.132: Freeing device [ 1645.651702][T17556] fuse: Bad value for 'fd' [ 1647.102363][T14224] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1647.301671][ T5773] Bluetooth: hci1: command tx timeout [ 1647.349622][T14224] usb 2-1: device descriptor read/64, error -71 [ 1647.738859][T14224] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1647.988200][T14224] usb 2-1: device descriptor read/64, error -71 [ 1648.112097][T14224] usb usb2-port1: attempt power cycle [ 1648.276029][T17522] bridge0: port 1(bridge_slave_0) entered blocking state [ 1648.303478][T14715] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 1648.325537][T17522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.345157][T17522] bridge_slave_0: entered allmulticast mode [ 1648.386602][T17522] bridge_slave_0: entered promiscuous mode [ 1648.443719][T17522] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.479030][T17522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.489658][T14715] usb 9-1: Using ep0 maxpacket: 8 [ 1648.535857][T17522] bridge_slave_1: entered allmulticast mode [ 1648.557319][T14715] usb 9-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1648.591922][T17522] bridge_slave_1: entered promiscuous mode [ 1648.598278][T14224] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1648.624516][T14715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.648752][T14715] usb 9-1: Product: syz [ 1648.653156][T14715] usb 9-1: Manufacturer: syz [ 1648.697506][T14224] usb 2-1: device descriptor read/8, error -71 [ 1648.706651][T14715] usb 9-1: SerialNumber: syz [ 1648.796071][T14715] usb 9-1: config 0 descriptor?? [ 1648.858089][T14715] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1649.058430][T14224] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1649.140932][T14224] usb 2-1: device descriptor read/8, error -71 [ 1649.301222][T14224] usb usb2-port1: unable to enumerate USB device [ 1649.365170][T17522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1649.381093][ T5773] Bluetooth: hci1: command tx timeout [ 1649.495465][T17522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1649.531636][T14715] gspca_vc032x: reg_r err -32 [ 1649.571241][T14715] vc032x 9-1:0.0: probe with driver vc032x failed with error -32 [ 1650.246116][T17522] team0: Port device team_slave_0 added [ 1650.405333][T17522] team0: Port device team_slave_1 added [ 1651.102781][T17522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1651.134986][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.288616][T14224] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1651.313799][T17522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1651.378788][T15482] usb 9-1: USB disconnect, device number 3 [ 1651.393437][T17522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1651.423646][T17522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1651.478307][T14224] usb 2-1: Using ep0 maxpacket: 32 [ 1652.030099][T17522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1652.147816][T17589] binder: 17586:17589 ioctl 4018620d 0 returned -22 [ 1654.971307][T14224] usb 2-1: unable to read config index 0 descriptor/all [ 1655.110779][T14224] usb 2-1: can't read configurations, error -71 [ 1655.506704][T17522] hsr_slave_0: entered promiscuous mode [ 1655.533742][T17596] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3418'. [ 1655.566432][T17522] hsr_slave_1: entered promiscuous mode [ 1655.610745][T17522] debugfs: 'hsr0' already exists in 'hsr' [ 1655.659283][T17522] Cannot create hsr debugfs directory [ 1656.781278][T14715] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1656.968216][T14715] usb 3-1: device descriptor read/64, error -71 [ 1656.998645][T15482] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 1657.006719][T14224] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1657.164220][T15482] usb 9-1: device descriptor read/64, error -71 [ 1657.255009][T14224] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1657.268819][T14715] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1657.308177][T14224] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.316445][T14224] usb 1-1: Product: syz [ 1657.368724][T14224] usb 1-1: Manufacturer: syz [ 1657.395908][T14224] usb 1-1: SerialNumber: syz [ 1657.475283][T14224] usb 1-1: config 0 descriptor?? [ 1657.479065][T14715] usb 3-1: device descriptor read/64, error -71 [ 1657.518627][T15482] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1657.635853][T14715] usb usb3-port1: attempt power cycle [ 1657.738435][T15482] usb 9-1: device descriptor read/64, error -71 [ 1657.890500][T15482] usb usb9-port1: attempt power cycle [ 1658.019617][T14224] usb 1-1: Firmware: major: 212, minor: 194, hardware type: UNKNOWN (14) [ 1658.038480][T14715] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1658.117032][T14715] usb 3-1: device descriptor read/8, error -71 [ 1658.230065][T14224] usb 1-1: no permanent extended address found, random address set [ 1658.270831][T14224] usb 1-1: atusb_probe: initialization failed, error = -524 [ 1658.299000][T14224] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 1658.328355][T15482] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1658.412596][T15482] usb 9-1: device descriptor read/8, error -71 [ 1658.422148][T14715] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1658.461093][T14224] usb 1-1: USB disconnect, device number 25 [ 1658.503829][T14715] usb 3-1: device descriptor read/8, error -71 [ 1658.660116][T14715] usb usb3-port1: unable to enumerate USB device [ 1658.736309][T15482] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1658.840450][T15482] usb 9-1: device descriptor read/8, error -71 [ 1659.023254][T15482] usb usb9-port1: unable to enumerate USB device [ 1659.612864][T15217] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1660.324117][T17627] binder: 17623:17627 ioctl 4018620d 0 returned -22 [ 1662.172340][T17522] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1663.371156][T17522] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1663.483379][T17522] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1663.776950][T15217] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1663.864273][T17522] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1664.085170][T15217] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.344082][T15217] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.982485][T17648] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3434'. [ 1665.618091][T15217] bridge_slave_1: left allmulticast mode [ 1665.658079][T15217] bridge_slave_1: left promiscuous mode [ 1665.664768][T15217] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.780965][T15217] bridge_slave_0: left allmulticast mode [ 1665.786858][T15217] bridge_slave_0: left promiscuous mode [ 1665.828982][T15217] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.381129][T14715] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1666.601793][T14715] usb 1-1: device descriptor read/64, error -71 [ 1666.761561][T17004] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1666.881565][T14715] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1666.968570][T17004] usb 3-1: device descriptor read/64, error -71 [ 1666.999309][T17666] binder: 17659:17666 ioctl 4018620d 0 returned -22 [ 1667.161318][T14715] usb 1-1: device descriptor read/64, error -71 [ 1667.258585][T17004] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1667.292253][T14715] usb usb1-port1: attempt power cycle [ 1667.430609][T17004] usb 3-1: device descriptor read/64, error -71 [ 1667.539906][T17004] usb usb3-port1: attempt power cycle [ 1667.673633][T14715] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1667.717124][T14715] usb 1-1: device descriptor read/8, error -71 [ 1667.929789][T17004] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1667.986685][T17004] usb 3-1: device descriptor read/8, error -71 [ 1668.009974][T14715] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1668.065105][T14715] usb 1-1: device descriptor read/8, error -71 [ 1668.198466][T14715] usb usb1-port1: unable to enumerate USB device [ 1668.244253][T17004] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1668.294646][T17004] usb 3-1: device descriptor read/8, error -71 [ 1668.389289][T15217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1668.426929][T17004] usb usb3-port1: unable to enumerate USB device [ 1668.483476][T15217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1668.551196][T15217] bond0 (unregistering): Released all slaves [ 1669.406437][T15217] tipc: Left network mode [ 1669.575039][T17522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1670.225194][T17522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1670.465841][T15217] hsr_slave_0: left promiscuous mode [ 1670.496120][T15217] hsr_slave_1: left promiscuous mode [ 1670.527548][T15217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1670.562174][T15217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1670.646379][T15217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1670.698186][T15217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1670.825253][T15217] veth1_vlan: left promiscuous mode [ 1670.839092][T15217] veth0_vlan: left promiscuous mode [ 1671.291468][T17695] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3447'. [ 1672.328167][T14715] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 1672.528684][T14715] usb 1-1: device descriptor read/64, error -71 [ 1672.671073][T15217] team0 (unregistering): Port device team_slave_1 removed [ 1673.489268][T14715] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 1673.518771][T15217] team0 (unregistering): Port device team_slave_0 removed [ 1673.581537][T17714] binder: 17708:17714 ioctl 4018620d 0 returned -22 [ 1673.685835][T14715] usb 1-1: device descriptor read/64, error -71 [ 1673.838296][T14715] usb usb1-port1: attempt power cycle [ 1674.308553][T14715] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 1674.402077][T14715] usb 1-1: device descriptor read/8, error -71 [ 1674.665748][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.673495][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1674.688280][T14715] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1674.750763][T14715] usb 1-1: device descriptor read/8, error -71 [ 1674.885795][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.893478][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1674.898738][ T30] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 1674.913602][T14715] usb usb1-port1: unable to enumerate USB device [ 1675.131748][ T30] usb 9-1: no configurations [ 1675.136762][ T30] usb 9-1: can't read configurations, error -22 [ 1675.392830][ T30] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1675.581445][ T30] usb 9-1: no configurations [ 1675.628723][ T30] usb 9-1: can't read configurations, error -22 [ 1675.678302][ T30] usb usb9-port1: attempt power cycle [ 1676.048193][ T30] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 1676.118237][ T30] usb 9-1: no configurations [ 1676.145671][ T30] usb 9-1: can't read configurations, error -22 [ 1676.278418][ T30] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1676.349639][ T30] usb 9-1: no configurations [ 1676.354839][ T30] usb 9-1: can't read configurations, error -22 [ 1676.384268][ T30] usb usb9-port1: unable to enumerate USB device [ 1677.446633][T17522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1678.157775][T17758] binder: 17753:17758 ioctl 4018620d 0 returned -22 [ 1678.706148][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1678.718358][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1679.233777][T14715] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1679.249036][T17764] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3464'. [ 1679.508344][T14715] usb 3-1: Using ep0 maxpacket: 8 [ 1679.566468][T14715] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1679.607036][T14715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1679.609121][T10649] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1679.671784][T14715] usb 3-1: Product: syz [ 1679.686546][T14715] usb 3-1: Manufacturer: syz [ 1679.698603][T14715] usb 3-1: SerialNumber: syz [ 1679.772685][T14715] usb 3-1: config 0 descriptor?? [ 1679.879042][T10649] usb 9-1: device descriptor read/64, error -71 [ 1679.886437][T14715] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1680.162858][T10649] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1680.441589][T10649] usb 9-1: device descriptor read/64, error -71 [ 1680.582434][T10649] usb usb9-port1: attempt power cycle [ 1680.925912][T14715] gspca_vc032x: reg_r err -32 [ 1680.949260][T14715] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 1680.958539][T10649] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1681.042748][T14715] usb 3-1: USB disconnect, device number 40 [ 1681.058758][T10649] usb 9-1: device descriptor read/8, error -71 [ 1681.300162][T10649] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1681.364108][T10649] usb 9-1: device descriptor read/8, error -71 [ 1681.508085][T10649] usb usb9-port1: unable to enumerate USB device [ 1681.709113][T17522] veth0_vlan: entered promiscuous mode [ 1681.837803][T17522] veth1_vlan: entered promiscuous mode [ 1682.254067][T17522] veth0_macvtap: entered promiscuous mode [ 1682.260562][T14715] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1682.333030][T17522] veth1_macvtap: entered promiscuous mode [ 1682.420046][T14715] usb 2-1: device descriptor read/64, error -71 [ 1682.575546][T17522] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1682.661841][T14715] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1682.761337][T17522] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1682.838821][T14715] usb 2-1: device descriptor read/64, error -71 [ 1682.918468][T15818] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1682.951953][T14715] usb usb2-port1: attempt power cycle [ 1682.958703][T15818] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.044405][ T2959] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.080552][ T2959] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1683.338228][T14715] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1683.400279][T14715] usb 2-1: device descriptor read/8, error -71 [ 1683.688321][T14715] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1683.740921][T14715] usb 2-1: device descriptor read/8, error -71 [ 1683.920282][T14715] usb usb2-port1: unable to enumerate USB device [ 1684.088883][ T30] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1684.296484][ T30] usb 9-1: no configurations [ 1684.309133][ T30] usb 9-1: can't read configurations, error -22 [ 1684.498471][ T30] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1684.582737][T17818] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3475'. [ 1684.684152][ T30] usb 9-1: no configurations [ 1684.694178][ T30] usb 9-1: can't read configurations, error -22 [ 1684.724664][ T30] usb usb9-port1: attempt power cycle [ 1684.840597][T15482] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1685.045373][T15482] usb 1-1: Using ep0 maxpacket: 16 [ 1685.075519][T15482] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1685.119180][ T30] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1685.127627][T15482] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1685.168188][T15482] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 1685.198526][ T30] usb 9-1: no configurations [ 1685.203555][ T30] usb 9-1: can't read configurations, error -22 [ 1685.218300][T15482] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1685.225220][T15482] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1685.302448][T15482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.343367][T15482] usb 1-1: config 0 descriptor?? [ 1685.378339][ T30] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1685.413879][ T30] usb 9-1: no configurations [ 1685.458278][ T30] usb 9-1: can't read configurations, error -22 [ 1685.478957][ T30] usb usb9-port1: unable to enumerate USB device [ 1685.976392][T15482] hid (null): unknown global tag 0xc [ 1686.027580][T15482] hid (null): report_id 0 is invalid [ 1686.103944][T15482] hid (null): unknown global tag 0xc [ 1686.128283][T15482] hid (null): usage index exceeded [ 1686.137454][T15482] hid (null): unknown global tag 0x56 [ 1686.341250][T15482] usb 1-1: USB disconnect, device number 34 [ 1686.748300][T14715] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1686.943672][T14715] usb 2-1: Using ep0 maxpacket: 8 [ 1687.025162][T14715] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1687.108346][T14715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.116644][T14715] usb 2-1: Product: syz [ 1687.158334][T14715] usb 2-1: Manufacturer: syz [ 1687.182923][T14715] usb 2-1: SerialNumber: syz [ 1687.237158][T14715] usb 2-1: config 0 descriptor?? [ 1687.341505][T14715] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1687.529632][T17848] netlink: 2028 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1687.611398][T17848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3480'. [ 1687.838158][T15482] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1688.004600][T15482] usb 9-1: no configurations [ 1688.036558][T15482] usb 9-1: can't read configurations, error -22 [ 1688.221855][T15482] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1688.360074][T14715] gspca_vc032x: reg_r err -32 [ 1688.369545][T14715] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1688.437135][T15482] usb 9-1: no configurations [ 1688.446830][T14715] usb 2-1: USB disconnect, device number 24 [ 1688.447566][T15482] usb 9-1: can't read configurations, error -22 [ 1688.500932][T15482] usb usb9-port1: attempt power cycle [ 1688.918476][T15482] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1688.983837][T15482] usb 9-1: no configurations [ 1688.991727][T15482] usb 9-1: can't read configurations, error -22 [ 1689.218278][T15482] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1689.253338][T15482] usb 9-1: no configurations [ 1689.278112][T15482] usb 9-1: can't read configurations, error -22 [ 1689.310678][T15482] usb usb9-port1: unable to enumerate USB device [ 1689.456678][T15818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.478399][T15818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1689.813239][T15818] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1689.834291][T15818] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1690.228529][T17873] netlink: 68 bytes leftover after parsing attributes in process `syz.1.3486'. [ 1691.088087][T14715] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1691.268653][T14715] usb 3-1: device descriptor read/64, error -71 [ 1691.458886][T15482] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1691.568101][T14715] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1691.672510][T15482] usb 9-1: no configurations [ 1691.688656][T15482] usb 9-1: can't read configurations, error -22 [ 1691.709891][T17891] netlink: 2028 bytes leftover after parsing attributes in process `syz.7.3491'. [ 1691.730957][T14715] usb 3-1: device descriptor read/64, error -71 [ 1691.771391][T17891] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3491'. [ 1691.839545][T14715] usb usb3-port1: attempt power cycle [ 1691.868317][T15482] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1692.071810][T15482] usb 9-1: no configurations [ 1692.082560][T15482] usb 9-1: can't read configurations, error -22 [ 1692.124190][T15482] usb usb9-port1: attempt power cycle [ 1692.213294][T14715] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1692.228147][ T30] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1692.250374][T14715] usb 3-1: device descriptor read/8, error -71 [ 1692.431287][ T30] usb 2-1: Using ep0 maxpacket: 8 [ 1692.484935][ T30] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1692.499646][T15482] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1692.531144][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1692.548477][T14715] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1692.568836][ T30] usb 2-1: Product: syz [ 1692.580822][T15482] usb 9-1: no configurations [ 1692.598398][T15482] usb 9-1: can't read configurations, error -22 [ 1692.606585][ T30] usb 2-1: Manufacturer: syz [ 1692.625116][ T30] usb 2-1: SerialNumber: syz [ 1692.666120][ T30] usb 2-1: config 0 descriptor?? [ 1692.672702][T14715] usb 3-1: device descriptor read/8, error -71 [ 1692.759849][ T30] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1692.791260][T15482] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1692.822086][T14715] usb usb3-port1: unable to enumerate USB device [ 1692.886232][T15482] usb 9-1: no configurations [ 1692.906948][T15482] usb 9-1: can't read configurations, error -22 [ 1692.947813][T15482] usb usb9-port1: unable to enumerate USB device [ 1693.776276][ T30] gspca_vc032x: reg_r err -32 [ 1693.811861][ T30] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1693.894016][ T30] usb 2-1: USB disconnect, device number 25 [ 1696.888178][T14715] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1697.111307][T14715] usb 1-1: no configurations [ 1697.153265][T14715] usb 1-1: can't read configurations, error -22 [ 1697.348390][T14715] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1697.610815][T14715] usb 1-1: no configurations [ 1697.640795][T14715] usb 1-1: can't read configurations, error -22 [ 1697.690600][T14715] usb usb1-port1: attempt power cycle [ 1697.926899][T17935] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3503'. [ 1697.978978][T17935] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3503'. [ 1698.088558][T14715] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1698.143837][T14715] usb 1-1: no configurations [ 1698.194093][T14715] usb 1-1: can't read configurations, error -22 [ 1698.228206][ T30] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1698.340324][T14715] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1698.388065][T14715] usb 1-1: no configurations [ 1698.398951][ T30] usb 9-1: device descriptor read/64, error -71 [ 1698.400664][T14715] usb 1-1: can't read configurations, error -22 [ 1698.427746][T14715] usb usb1-port1: unable to enumerate USB device [ 1698.443422][T15482] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1698.618369][T15482] usb 2-1: Using ep0 maxpacket: 8 [ 1698.643050][ T30] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1698.677379][T15482] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1698.702472][T15482] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1698.722537][T15482] usb 2-1: Product: syz [ 1698.726953][T15482] usb 2-1: Manufacturer: syz [ 1698.742559][T15482] usb 2-1: SerialNumber: syz [ 1698.761705][T15482] usb 2-1: config 0 descriptor?? [ 1698.828201][ T30] usb 9-1: device descriptor read/64, error -71 [ 1698.842945][T15482] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1698.939211][ T30] usb usb9-port1: attempt power cycle [ 1699.318583][ T30] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1699.353173][ T30] usb 9-1: device descriptor read/8, error -71 [ 1699.388245][T14715] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1699.568524][T14715] usb 3-1: Using ep0 maxpacket: 16 [ 1699.608860][ T30] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1699.659974][T14715] usb 3-1: config 0 has an invalid interface number: 29 but max is 0 [ 1699.671465][ T30] usb 9-1: device descriptor read/8, error -71 [ 1699.707097][T14715] usb 3-1: config 0 has no interface number 0 [ 1699.735806][T14715] usb 3-1: config 0 interface 29 altsetting 8 endpoint 0xF has invalid maxpacket 608, setting to 64 [ 1699.790802][T14715] usb 3-1: config 0 interface 29 altsetting 8 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 1699.809464][ T30] usb usb9-port1: unable to enumerate USB device [ 1699.861856][T14715] usb 3-1: config 0 interface 29 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1023 [ 1699.908084][T14715] usb 3-1: config 0 interface 29 has no altsetting 0 [ 1699.933336][T15482] gspca_vc032x: reg_r err -32 [ 1699.976065][T15482] vc032x 2-1:0.0: probe with driver vc032x failed with error -32 [ 1700.010214][T14715] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=44.da [ 1700.063404][T14715] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1700.087413][T15482] usb 2-1: USB disconnect, device number 26 [ 1700.140824][T14715] usb 3-1: Product: syz [ 1700.145253][T14715] usb 3-1: Manufacturer: syz [ 1700.218120][T14715] usb 3-1: SerialNumber: syz [ 1700.252064][T14715] usb 3-1: config 0 descriptor?? [ 1700.321350][T17949] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 1700.433282][T14715] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1700.570179][ T142] usb 3-1: Failed to submit usb control message: -71 [ 1700.570919][T15482] usb 3-1: USB disconnect, device number 45 [ 1700.577160][ T142] usb 3-1: unable to send the bmi data to the device: -71 [ 1700.577292][ T142] usb 3-1: unable to get target info from device [ 1700.598150][ T142] usb 3-1: could not get target info (-71) [ 1700.609839][ T142] usb 3-1: could not probe fw (-71) [ 1700.798776][T14715] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1700.996686][T14715] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1701.041684][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.093916][T14715] usb 1-1: config 0 has no interfaces? [ 1701.141525][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.198441][T14715] usb 1-1: config 0 has no interfaces? [ 1701.236901][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.289311][T14715] usb 1-1: config 0 has no interfaces? [ 1701.321368][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.380494][T14715] usb 1-1: config 0 has no interfaces? [ 1701.405914][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.510233][T14715] usb 1-1: config 0 has no interfaces? [ 1701.560161][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.608097][T14715] usb 1-1: config 0 has no interfaces? [ 1701.670491][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.728427][T14715] usb 1-1: config 0 has no interfaces? [ 1701.754993][T14715] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1701.768971][T17972] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3510'. [ 1701.801614][T14715] usb 1-1: config 0 has no interfaces? [ 1701.868769][T14715] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 1701.918573][T14715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1701.926842][T14715] usb 1-1: Product: syz [ 1701.968058][T14715] usb 1-1: Manufacturer: syz [ 1701.998082][T14715] usb 1-1: SerialNumber: syz [ 1702.084385][T14715] usb 1-1: config 0 descriptor?? [ 1703.651388][T18000] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.3517'. [ 1703.749095][T18000] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3517'. [ 1704.028171][ T30] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1704.064636][T15482] usb 1-1: USB disconnect, device number 39 [ 1704.253638][ T30] usb 9-1: no configurations [ 1704.324554][ T30] usb 9-1: can't read configurations, error -22 [ 1704.528447][ T30] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1704.724086][ T30] usb 9-1: no configurations [ 1704.765102][ T30] usb 9-1: can't read configurations, error -22 [ 1704.808771][ T30] usb usb9-port1: attempt power cycle [ 1705.235227][ T30] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1705.319130][ T30] usb 9-1: no configurations [ 1705.353667][ T30] usb 9-1: can't read configurations, error -22 [ 1705.517491][T17985] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1705.622202][ T30] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1705.673875][ T30] usb 9-1: no configurations [ 1705.685230][ T30] usb 9-1: can't read configurations, error -22 [ 1705.751162][ T30] usb usb9-port1: unable to enumerate USB device [ 1705.759259][T17985] usb 2-1: device descriptor read/64, error -71 [ 1706.068237][T17985] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1706.368710][T17985] usb 2-1: device descriptor read/64, error -71 [ 1706.486147][T17985] usb usb2-port1: attempt power cycle [ 1706.528422][ T30] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1706.728685][ T30] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1706.768971][ T30] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1706.836018][ T30] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1706.858532][T17985] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1706.912363][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1706.945456][T17985] usb 2-1: device descriptor read/8, error -71 [ 1706.972942][ T30] usb 3-1: config 0 descriptor?? [ 1707.238259][T17985] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1707.346514][T17985] usb 2-1: device descriptor read/8, error -71 [ 1707.525013][T17985] usb usb2-port1: unable to enumerate USB device [ 1709.335662][T17985] usb 3-1: USB disconnect, device number 46 [ 1710.649603][T14715] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 1710.977499][T14715] usb 9-1: config 6 has an invalid interface number: 186 but max is 0 [ 1711.017823][T14715] usb 9-1: config 6 has no interface number 0 [ 1711.025847][T14715] usb 9-1: config 6 interface 186 has no altsetting 0 [ 1711.094074][T14715] usb 9-1: New USB device found, idVendor=15a4, idProduct=1003, bcdDevice=f9.7d [ 1711.172361][T14715] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1711.216235][T14715] usb 9-1: Product: syz [ 1711.247625][T14715] usb 9-1: Manufacturer: syz [ 1711.253611][T14715] usb 9-1: SerialNumber: syz [ 1711.408565][T18049] netlink: 2048 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1711.463799][T18049] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1711.686786][T14715] usb 9-1: USB disconnect, device number 36 [ 1713.213357][T18057] fuse: Invalid rootmode [ 1714.368134][T17985] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1714.618176][T17005] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1714.627716][T17985] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.769891][T17985] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1714.793321][T17005] usb 2-1: device descriptor read/64, error -71 [ 1714.850689][T17985] usb 9-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1714.904285][T17985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.991326][T17985] usb 9-1: config 0 descriptor?? [ 1715.119141][T17005] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1715.278395][T17005] usb 2-1: device descriptor read/64, error -71 [ 1715.413948][T17005] usb usb2-port1: attempt power cycle [ 1715.780804][T17005] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1715.846997][T17005] usb 2-1: device descriptor read/8, error -71 [ 1716.118538][T17005] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1716.163048][T17005] usb 2-1: device descriptor read/8, error -71 [ 1716.298691][T17005] usb usb2-port1: unable to enumerate USB device [ 1717.251623][T17005] usb 9-1: USB disconnect, device number 37 [ 1718.888667][T17005] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 1723.150712][T17005] usb 9-1: device descriptor read/all, error -71 [ 1724.430906][T18113] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1724.546152][T18113] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1724.619309][T18113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1724.679814][T18113] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1724.694229][T18113] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1725.353346][T18119] fuse: Invalid rootmode [ 1725.998277][T17985] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1726.514949][T17985] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1726.569017][T17985] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.691351][T17985] usb 9-1: config 0 descriptor?? [ 1726.818158][T18113] Bluetooth: hci4: command tx timeout [ 1728.818242][T18111] chnl_net:caif_netlink_parms(): no params data found [ 1728.910470][T18113] Bluetooth: hci4: command tx timeout [ 1729.336059][T17005] usb 9-1: USB disconnect, device number 40 [ 1729.981286][ T5773] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1730.037653][ T5773] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1730.054721][ T5773] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1730.077673][ T5773] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1730.091194][ T5773] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1730.978321][T18113] Bluetooth: hci4: command tx timeout [ 1731.558405][T17985] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1731.860053][T17985] usb 2-1: config 6 has an invalid interface number: 186 but max is 0 [ 1731.899496][T17985] usb 2-1: config 6 has no interface number 0 [ 1731.915734][T17985] usb 2-1: config 6 interface 186 has no altsetting 0 [ 1732.104708][T17985] usb 2-1: New USB device found, idVendor=15a4, idProduct=1003, bcdDevice=f9.7d [ 1732.183137][T18113] Bluetooth: hci5: command tx timeout [ 1732.218182][T17985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1732.288290][T17985] usb 2-1: Product: syz [ 1732.355124][T17985] usb 2-1: Manufacturer: syz [ 1732.388324][T17985] usb 2-1: SerialNumber: syz [ 1733.018456][T17985] usb 2-1: USB disconnect, device number 35 [ 1733.058751][T18113] Bluetooth: hci4: command tx timeout [ 1733.331456][T18111] bridge0: port 1(bridge_slave_0) entered blocking state [ 1733.388717][T18111] bridge0: port 1(bridge_slave_0) entered disabled state [ 1733.442329][T18111] bridge_slave_0: entered allmulticast mode [ 1733.557046][T18111] bridge_slave_0: entered promiscuous mode [ 1733.710985][T18111] bridge0: port 2(bridge_slave_1) entered blocking state [ 1733.762150][T18111] bridge0: port 2(bridge_slave_1) entered disabled state [ 1733.829447][T18111] bridge_slave_1: entered allmulticast mode [ 1733.871541][T18111] bridge_slave_1: entered promiscuous mode [ 1734.265493][T18113] Bluetooth: hci5: command tx timeout [ 1734.834262][T18177] fuse: Invalid rootmode [ 1734.889664][T18111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.147702][T18111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.296461][T18111] team0: Port device team_slave_0 added [ 1736.338874][T18113] Bluetooth: hci5: command tx timeout [ 1736.519301][T18111] team0: Port device team_slave_1 added [ 1736.979841][T18149] chnl_net:caif_netlink_parms(): no params data found [ 1737.649380][T18111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.658897][T18111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.792789][T18111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.868160][ T30] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1738.175442][ T30] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1738.251880][ T30] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.335257][ T30] usb 3-1: config 0 descriptor?? [ 1738.421649][T18113] Bluetooth: hci5: command tx timeout [ 1738.659428][T18111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1738.722536][T18111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1738.928285][T18111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1739.212145][ T57] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1739.705077][ T57] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.162852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1740.178973][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1740.237495][ T57] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1740.699761][T17005] usb 3-1: USB disconnect, device number 47 [ 1741.646481][ T57] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1741.915063][T18111] hsr_slave_0: entered promiscuous mode [ 1742.025394][T18111] hsr_slave_1: entered promiscuous mode [ 1742.041730][T18111] debugfs: 'hsr0' already exists in 'hsr' [ 1742.047693][T18111] Cannot create hsr debugfs directory [ 1743.498878][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 1743.506474][T18149] bridge0: port 1(bridge_slave_0) entered disabled state [ 1743.579205][T18149] bridge_slave_0: entered allmulticast mode [ 1743.749406][T18149] bridge_slave_0: entered promiscuous mode [ 1743.826816][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 1743.878620][T18149] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.886605][T18149] bridge_slave_1: entered allmulticast mode [ 1743.981517][T18149] bridge_slave_1: entered promiscuous mode [ 1744.752527][T18149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1745.503458][T18149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1745.513220][T17005] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1745.746667][ T57] bridge_slave_1: left allmulticast mode [ 1745.778420][ T57] bridge_slave_1: left promiscuous mode [ 1745.778865][T17005] usb 9-1: Using ep0 maxpacket: 32 [ 1745.786385][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.832144][T17005] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.853460][T17005] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1745.898373][T17005] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1745.918172][T17005] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1745.943836][ T57] bridge_slave_0: left allmulticast mode [ 1745.951617][T17005] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1745.961854][T17005] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1745.976728][T17005] usb 9-1: Product: syz [ 1745.981886][T17005] usb 9-1: Manufacturer: syz [ 1745.987075][ T57] bridge_slave_0: left promiscuous mode [ 1745.987484][T17005] usb 9-1: SerialNumber: syz [ 1746.029215][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.042760][ C0] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1746.084301][T18230] loop2: detected capacity change from 0 to 7 [ 1746.130721][T17005] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/input/input16 [ 1746.155737][T18230] loop2: [ 1746.170389][T18230] loop2: partition table partially beyond EOD, truncated [ 1746.320168][T17005] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1746.356310][T17005] (id 0x00) [ 1746.920836][T17005] rc_core: IR keymap rc-imon-pad not found [ 1746.958189][T17005] Registered IR keymap rc-empty [ 1746.963548][T17005] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1747.035196][T17005] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1747.090754][T17005] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0 [ 1747.145997][T17005] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:155.0/rc/rc0/input17 [ 1747.171925][T17005] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:41> initialized [ 1747.329581][T17004] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1747.542557][T17004] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1747.593488][T17004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.729306][T17004] usb 2-1: config 0 descriptor?? [ 1747.916727][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1747.979273][T17004] usb 9-1: USB disconnect, device number 41 [ 1747.986101][T18228] imon:send_packet: packet tx failed (-71) [ 1748.033946][T18228] imon:vfd_write: send packet #2 failed [ 1748.099193][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1748.193715][ T57] bond0 (unregistering): Released all slaves [ 1748.976185][T18149] team0: Port device team_slave_0 added [ 1749.045629][T18149] team0: Port device team_slave_1 added [ 1749.493971][T18244] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3577'. [ 1749.817507][T18149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.837169][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.953663][T18149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1750.117659][T18149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1750.125033][T18149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1750.238061][T15482] usb 2-1: USB disconnect, device number 36 [ 1750.242527][T18149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1750.545110][ T57] hsr_slave_0: left promiscuous mode [ 1750.588759][ T57] hsr_slave_1: left promiscuous mode [ 1750.597409][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1750.636647][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1750.683365][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1750.701545][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1750.908495][ T57] veth1_macvtap: left promiscuous mode [ 1750.914259][ T57] veth0_macvtap: left promiscuous mode [ 1750.953640][ T57] veth1_vlan: left promiscuous mode [ 1750.978775][ T57] veth0_vlan: left promiscuous mode [ 1751.320102][T18257] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3583'. [ 1753.473611][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1753.660861][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1754.930702][T18149] hsr_slave_0: entered promiscuous mode [ 1754.946215][T18149] hsr_slave_1: entered promiscuous mode [ 1754.971577][T18149] debugfs: 'hsr0' already exists in 'hsr' [ 1754.977614][T18149] Cannot create hsr debugfs directory [ 1755.398150][T17004] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1755.588128][T17004] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1755.632665][T17004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1755.700200][T17004] usb 3-1: config 0 descriptor?? [ 1756.041200][T18111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1756.085384][T18111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1756.164881][T18111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1756.230511][T18111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1756.868397][ T57] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.407786][ T57] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.694919][ T57] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.182646][ T57] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.588581][T17985] usb 3-1: USB disconnect, device number 48 [ 1759.841481][ T57] bridge_slave_1: left allmulticast mode [ 1759.847453][ T57] bridge_slave_1: left promiscuous mode [ 1759.899731][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 1759.942342][ T57] bridge_slave_0: left allmulticast mode [ 1759.948473][ T57] bridge_slave_0: left promiscuous mode [ 1759.955488][ T57] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.643069][T18294] binder: 18292:18294 ioctl 4018620d 0 returned -22 [ 1761.080988][ T57] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1761.116853][ T57] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1761.163855][ T57] bond0 (unregistering): Released all slaves [ 1761.196416][ T57] bond1 (unregistering): Released all slaves [ 1761.268246][ T30] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1761.448285][ T30] usb 2-1: Using ep0 maxpacket: 32 [ 1761.476917][ T57] tipc: Left network mode [ 1761.508488][ T30] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.525088][T18149] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1761.558189][ T30] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1761.594717][ T30] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1761.608413][T18149] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1761.627613][ T30] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1761.670422][ T30] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1761.683267][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1761.705942][ T30] usb 2-1: Product: syz [ 1761.733004][ T30] usb 2-1: Manufacturer: syz [ 1761.741806][ T30] usb 2-1: SerialNumber: syz [ 1761.770169][T18149] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1761.805249][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1761.854014][ T30] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input18 [ 1761.875875][T18149] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1762.028330][ T30] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1762.038139][ T30] (id 0x00) [ 1762.392373][ T57] hsr_slave_0: left promiscuous mode [ 1762.435725][ T57] hsr_slave_1: left promiscuous mode [ 1762.450759][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1762.468197][ T30] rc_core: IR keymap rc-imon-pad not found [ 1762.474202][ T30] Registered IR keymap rc-empty [ 1762.492223][ T57] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1762.532121][ T57] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1762.548649][ T57] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1762.553469][ T30] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1762.588933][ T30] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1762.670954][ T30] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1762.704472][ T57] veth1_macvtap: left promiscuous mode [ 1762.720384][ T57] veth0_macvtap: left promiscuous mode [ 1762.726436][ T57] veth1_vlan: left promiscuous mode [ 1762.743043][ T30] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input19 [ 1762.768345][ T57] veth0_vlan: left promiscuous mode [ 1762.810227][ T30] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:37> initialized [ 1764.534790][T18304] imon:send_packet: task interrupted [ 1764.541043][T18304] imon:send_packet: packet tx failed (-512) [ 1764.547241][T18304] imon:vfd_write: send packet #2 failed [ 1764.663695][ T30] usb 2-1: USB disconnect, device number 37 [ 1765.607531][ T57] team0 (unregistering): Port device team_slave_1 removed [ 1765.721428][ T57] team0 (unregistering): Port device team_slave_0 removed [ 1766.596000][T18111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1766.923551][T18111] 8021q: adding VLAN 0 to HW filter on device team0 [ 1767.076991][T15217] bridge0: port 1(bridge_slave_0) entered blocking state [ 1767.084695][T15217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1767.331673][T15217] bridge0: port 2(bridge_slave_1) entered blocking state [ 1767.339451][T15217] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1768.871501][T18149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1769.180175][T18149] 8021q: adding VLAN 0 to HW filter on device team0 [ 1769.690995][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.698458][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.820207][ T2959] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.827986][ T2959] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1770.408605][T17005] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1770.608214][T17005] usb 3-1: Using ep0 maxpacket: 8 [ 1770.753110][T17005] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1770.789412][T17005] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1770.822919][T17005] usb 3-1: Product: syz [ 1770.844554][T17005] usb 3-1: Manufacturer: syz [ 1770.861651][T17005] usb 3-1: SerialNumber: syz [ 1770.948869][T17005] usb 3-1: config 0 descriptor?? [ 1771.016241][T17005] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1771.335278][T18111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1772.506886][T17005] gspca_vc032x: reg_w err -71 [ 1772.551832][T17005] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 1772.636527][T17005] usb 3-1: USB disconnect, device number 49 [ 1773.685946][T18149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1775.787772][T18111] veth0_vlan: entered promiscuous mode [ 1775.871950][T18111] veth1_vlan: entered promiscuous mode [ 1776.313610][T18111] veth0_macvtap: entered promiscuous mode [ 1776.424935][T18111] veth1_macvtap: entered promiscuous mode [ 1776.538487][T17005] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1776.697639][T18111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1776.750387][T17005] usb 2-1: Using ep0 maxpacket: 32 [ 1776.785071][T18111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1776.808969][T17005] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1776.836992][T17005] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1776.918476][T17005] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1776.982740][T17005] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1777.011585][ T142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.039242][T17005] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1777.053852][ T142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.069939][T17005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1777.086710][T17005] usb 2-1: Product: syz [ 1777.110564][T17005] usb 2-1: Manufacturer: syz [ 1777.120563][T17005] usb 2-1: SerialNumber: syz [ 1777.150285][ T142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.196874][ C0] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1777.198991][ T142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1777.223078][T17005] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input20 [ 1777.449353][T17005] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1777.487299][T17005] (id 0x00) [ 1777.877427][T18149] veth0_vlan: entered promiscuous mode [ 1778.018584][T17005] rc_core: IR keymap rc-imon-pad not found [ 1778.064644][T17005] Registered IR keymap rc-empty [ 1778.136048][T17005] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1778.150466][T18149] veth1_vlan: entered promiscuous mode [ 1778.188272][T17005] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1778.308169][T17005] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 1778.413670][T17005] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input21 [ 1778.579374][T17005] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:38> initialized [ 1778.864680][T18149] veth0_macvtap: entered promiscuous mode [ 1779.057036][T18149] veth1_macvtap: entered promiscuous mode [ 1779.482370][T18149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1779.829333][T18149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1780.074072][T15217] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.155657][T15217] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.260656][T15217] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.303400][T17985] usb 2-1: USB disconnect, device number 38 [ 1780.316890][T15217] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1780.945834][T18413] 9p: Bad value for 'rfdno' [ 1781.791343][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1781.811677][ T5773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1781.823413][ T5773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1781.880081][ T5773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1781.893240][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1784.018182][ T5773] Bluetooth: hci1: command tx timeout [ 1784.871377][T15489] libceph: connect (1)[c::]:6789 error -101 [ 1784.911607][T15489] libceph: mon0 (1)[c::]:6789 connect error [ 1785.050329][T18442] ceph: No mds server is up or the cluster is laggy [ 1785.200157][T15489] libceph: connect (1)[c::]:6789 error -101 [ 1785.206897][T15489] libceph: mon0 (1)[c::]:6789 connect error [ 1785.294866][ T142] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1785.491014][T18418] chnl_net:caif_netlink_parms(): no params data found [ 1785.833557][ T142] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.098419][ T5773] Bluetooth: hci1: command tx timeout [ 1786.384488][ T142] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.644160][ T142] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.558792][ T142] bridge_slave_1: left allmulticast mode [ 1787.564740][ T142] bridge_slave_1: left promiscuous mode [ 1787.626264][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1787.739398][ T142] bridge_slave_0: left allmulticast mode [ 1787.745300][ T142] bridge_slave_0: left promiscuous mode [ 1787.816670][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1788.178342][ T5773] Bluetooth: hci1: command tx timeout [ 1789.860506][T18113] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1789.871013][T18113] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1789.883946][T18113] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1789.912788][T18113] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1789.943553][T18113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1790.011048][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1790.191533][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1790.241331][ T142] bond0 (unregistering): Released all slaves [ 1790.258946][ T5773] Bluetooth: hci1: command tx timeout [ 1790.828100][T18418] bridge0: port 1(bridge_slave_0) entered blocking state [ 1790.856795][T18418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1790.899324][T18418] bridge_slave_0: entered allmulticast mode [ 1790.929943][T18418] bridge_slave_0: entered promiscuous mode [ 1791.106672][ T142] hsr_slave_0: left promiscuous mode [ 1791.178710][ T142] hsr_slave_1: left promiscuous mode [ 1791.187065][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1791.277580][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1791.341469][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1791.394010][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1791.578812][ T142] veth1_macvtap: left promiscuous mode [ 1791.584596][ T142] veth0_macvtap: left promiscuous mode [ 1791.621822][ T142] veth1_vlan: left promiscuous mode [ 1791.627450][ T142] veth0_vlan: left promiscuous mode [ 1792.020586][ T5773] Bluetooth: hci3: command tx timeout [ 1792.289101][T18491] 9p: Bad value for 'rfdno' [ 1793.962574][ T142] team0 (unregistering): Port device team_slave_1 removed [ 1794.099954][ T5773] Bluetooth: hci3: command tx timeout [ 1794.176058][ T142] team0 (unregistering): Port device team_slave_0 removed [ 1794.901246][T18418] bridge0: port 2(bridge_slave_1) entered blocking state [ 1794.958421][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1794.966227][T18418] bridge_slave_1: entered allmulticast mode [ 1795.069936][T18418] bridge_slave_1: entered promiscuous mode [ 1795.204712][T18514] netlink: 'syz.2.3634': attribute type 21 has an invalid length. [ 1795.321078][T18488] team0: Port device team_slave_0 removed [ 1795.712185][T18514] netlink: 'syz.2.3634': attribute type 6 has an invalid length. [ 1795.728407][T18514] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3634'. [ 1796.040994][T18418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1796.181434][ T5773] Bluetooth: hci3: command tx timeout [ 1796.261829][T18418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1796.817120][ T142] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1796.902152][T18418] team0: Port device team_slave_0 added [ 1796.960233][T18418] team0: Port device team_slave_1 added [ 1797.007056][T17005] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 1797.122160][ T142] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.195154][T17005] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1797.243421][T17005] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1797.268355][T17005] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1797.295502][T17005] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.366241][T17005] usb 3-1: config 0 descriptor?? [ 1797.442537][T18534] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.3638'. [ 1797.521194][ T142] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.832517][ T142] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1797.908413][T18418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1797.925023][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.006662][T18418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1798.037332][T18418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1798.049835][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1798.085004][T18418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.259084][T18113] Bluetooth: hci3: command tx timeout [ 1798.498923][T18113] Bluetooth: hci0: command 0x0406 tx timeout [ 1798.914021][T18418] hsr_slave_0: entered promiscuous mode [ 1798.943723][T18418] hsr_slave_1: entered promiscuous mode [ 1799.016491][T18418] debugfs: 'hsr0' already exists in 'hsr' [ 1799.058368][T18418] Cannot create hsr debugfs directory [ 1799.270874][ T5773] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 1799.281692][ T5773] CPU: 1 UID: 0 PID: 5773 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1799.281847][ T5773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1799.281980][ T5773] Workqueue: hci0 hci_rx_work [ 1799.282314][ T5773] Call Trace: [ 1799.282367][ T5773] [ 1799.282419][ T5773] __dump_stack+0x26/0x30 [ 1799.282596][ T5773] dump_stack_lvl+0x14c/0x1c0 [ 1799.282778][ T5773] dump_stack+0x1e/0x25 [ 1799.282944][ T5773] sysfs_create_dir_ns+0x46c/0x540 [ 1799.283177][ T5773] kobject_add_internal+0x1084/0x19b0 [ 1799.283417][ T5773] kobject_add+0x2c1/0x410 [ 1799.283635][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 1799.283835][ T5773] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1799.284050][ T5773] device_add+0xa70/0x1c00 [ 1799.284315][ T5773] hci_conn_add_sysfs+0x159/0x2e0 [ 1799.284534][ T5773] le_conn_complete_evt+0x1d0a/0x2250 [ 1799.284848][ T5773] hci_le_conn_complete_evt+0x157/0x260 [ 1799.285089][ T5773] hci_le_meta_evt+0x6eb/0x960 [ 1799.285282][ T5773] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1799.285503][ T5773] hci_event_packet+0xce2/0x1e40 [ 1799.285672][ T5773] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1799.285915][ T5773] hci_rx_work+0x8c3/0xfc0 [ 1799.286169][ T5773] ? kmsan_get_metadata+0xf1/0x160 [ 1799.286370][ T5773] ? __pfx_hci_rx_work+0x10/0x10 [ 1799.286554][ T5773] process_scheduled_works+0xb21/0x1e30 [ 1799.286800][ T5773] worker_thread+0xede/0x1580 [ 1799.287012][ T5773] kthread+0x53f/0x600 [ 1799.287210][ T5773] ? __pfx_worker_thread+0x10/0x10 [ 1799.287393][ T5773] ? __pfx_kthread+0x10/0x10 [ 1799.287571][ T5773] ret_from_fork+0x20f/0x910 [ 1799.287734][ T5773] ? __switch_to+0x51c/0x750 [ 1799.287933][ T5773] ? __pfx_kthread+0x10/0x10 [ 1799.288129][ T5773] ret_from_fork_asm+0x1a/0x30 [ 1799.288359][ T5773] [ 1799.475516][ T5773] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1799.490200][ T5773] Bluetooth: hci0: failed to register connection device [ 1799.584704][T18552] team0: Port device team_slave_0 removed [ 1800.142498][T17005] usb 3-1: USB disconnect, device number 50 [ 1800.715065][ T142] bridge_slave_1: left allmulticast mode [ 1800.746306][ T142] bridge_slave_1: left promiscuous mode [ 1800.766820][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 1800.869206][ T142] bridge_slave_0: left allmulticast mode [ 1800.882296][ T142] bridge_slave_0: left promiscuous mode [ 1800.896593][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.576161][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.585556][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 1802.243143][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1802.312897][T18581] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.3650'. [ 1802.324970][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1802.367215][ T142] bond0 (unregistering): Released all slaves [ 1802.892072][ T142] hsr_slave_0: left promiscuous mode [ 1802.932962][ T142] hsr_slave_1: left promiscuous mode [ 1802.971614][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1803.003616][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1803.090959][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1803.124005][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1803.263397][ T142] veth1_macvtap: left promiscuous mode [ 1803.284650][ T142] veth0_macvtap: left promiscuous mode [ 1803.314480][ T142] veth1_vlan: left promiscuous mode [ 1803.324652][ T142] veth0_vlan: left promiscuous mode [ 1804.922210][T17985] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1805.133403][T17985] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1805.165420][T17985] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1805.200793][T17985] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1805.228309][T17985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.264364][T17985] usb 2-1: config 0 descriptor?? [ 1805.911050][ T142] team0 (unregistering): Port device team_slave_1 removed [ 1805.977355][ T142] team0 (unregistering): Port device team_slave_0 removed [ 1806.850563][T18594] team0: Port device team_slave_0 removed [ 1807.251635][T18475] chnl_net:caif_netlink_parms(): no params data found [ 1807.910369][T17005] usb 2-1: USB disconnect, device number 39 [ 1807.958535][T17004] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1808.172008][T17004] usb 3-1: Using ep0 maxpacket: 32 [ 1808.206315][T17004] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1808.268093][T17004] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1808.345335][T17004] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1808.400757][T17004] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1808.474018][T17004] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1808.526311][T17004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.560128][T17004] usb 3-1: Product: syz [ 1808.564526][T17004] usb 3-1: Manufacturer: syz [ 1808.588783][T17004] usb 3-1: SerialNumber: syz [ 1808.696849][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1808.752964][T17004] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input22 [ 1809.018340][T17004] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1809.026923][T17004] (id 0x00) [ 1809.467409][T18418] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1809.618359][T17004] rc_core: IR keymap rc-imon-pad not found [ 1809.643194][T17004] Registered IR keymap rc-empty [ 1809.678398][T17004] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1809.714681][T17004] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1809.727765][T18418] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1809.790679][T17004] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1809.863304][T17004] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input23 [ 1809.878753][T18418] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1810.007424][T17004] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:51> initialized [ 1810.134692][T18475] bridge0: port 1(bridge_slave_0) entered blocking state [ 1810.144060][T18475] bridge0: port 1(bridge_slave_0) entered disabled state [ 1810.177088][T18475] bridge_slave_0: entered allmulticast mode [ 1810.294001][T18475] bridge_slave_0: entered promiscuous mode [ 1810.322473][T18418] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1810.575787][T18475] bridge0: port 2(bridge_slave_1) entered blocking state [ 1810.602863][T18475] bridge0: port 2(bridge_slave_1) entered disabled state [ 1810.645060][T18475] bridge_slave_1: entered allmulticast mode [ 1810.806641][T18475] bridge_slave_1: entered promiscuous mode [ 1811.528640][T17985] usb 3-1: USB disconnect, device number 51 [ 1811.573963][T18475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1811.753520][T18475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1812.726069][T18475] team0: Port device team_slave_0 added [ 1812.815565][T18475] team0: Port device team_slave_1 added [ 1813.786643][T18475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1813.808265][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1813.898572][T18475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1814.014347][T18475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1814.034730][T18475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1814.088269][T18475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1815.186110][T18475] hsr_slave_0: entered promiscuous mode [ 1815.240632][T18475] hsr_slave_1: entered promiscuous mode [ 1815.270761][T18475] debugfs: 'hsr0' already exists in 'hsr' [ 1815.276706][T18475] Cannot create hsr debugfs directory [ 1815.385085][T18418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1816.050125][T18418] 8021q: adding VLAN 0 to HW filter on device team0 [ 1816.415910][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1816.423531][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1817.080316][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1817.088162][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1817.178213][T17004] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 1817.370962][T17004] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1817.418164][T17004] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1817.427530][T17004] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1817.497492][T17004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1817.552227][T17004] usb 3-1: config 0 descriptor?? [ 1818.642045][T18475] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1818.730658][T18475] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1818.883138][T18475] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1819.100265][T18475] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1820.346112][T13930] usb 3-1: USB disconnect, device number 52 [ 1820.687738][T18418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1820.989621][T18693] loop2: detected capacity change from 0 to 7 [ 1821.035466][T18693] Dev loop2: unable to read RDB block 7 [ 1821.058427][T13930] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1821.074519][T18693] loop2: unable to read partition table [ 1821.084644][T18693] loop2: partition table beyond EOD, truncated [ 1821.148385][T18693] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà¶ ) failed (rc=-5) [ 1821.238212][T13930] usb 3-1: Using ep0 maxpacket: 32 [ 1821.298705][T13930] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1821.312329][T18475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1821.350251][T13930] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 1821.408191][T13930] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1821.453993][T13930] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1821.527675][T13930] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1821.560308][T13930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1821.583104][T18475] 8021q: adding VLAN 0 to HW filter on device team0 [ 1821.594782][T13930] usb 3-1: Product: syz [ 1821.638552][T13930] usb 3-1: Manufacturer: syz [ 1821.672206][T13930] usb 3-1: SerialNumber: syz [ 1821.696975][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1821.704744][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1821.791150][ C0] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 1821.878923][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1821.886470][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1821.910896][T13930] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input24 [ 1822.149191][T13930] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 1822.188149][T13930] (id 0x00) [ 1822.670115][T13930] rc_core: IR keymap rc-imon-pad not found [ 1822.676154][T13930] Registered IR keymap rc-empty [ 1822.728957][T13930] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 1822.771116][T13930] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 1822.824436][T13930] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 1822.889848][T13930] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input25 [ 1823.004401][T13930] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:53> initialized [ 1824.254500][T18418] veth0_vlan: entered promiscuous mode [ 1824.465733][T18418] veth1_vlan: entered promiscuous mode [ 1824.616213][T17985] usb 3-1: USB disconnect, device number 53 [ 1825.135641][T18418] veth0_macvtap: entered promiscuous mode [ 1825.285983][T18418] veth1_macvtap: entered promiscuous mode [ 1825.781663][T18475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1825.908502][T18418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1826.166866][T18418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1826.378793][ T142] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.429380][ T142] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.515770][ T142] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.572699][ T142] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1826.788941][T18735] kAFS: unable to lookup cell 'syz0' [ 1827.928120][T13930] usb 3-1: new full-speed USB device number 54 using dummy_hcd [ 1828.156569][T13930] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1828.203025][T13930] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1828.246350][T13930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.320881][T13930] usb 3-1: config 0 descriptor?? [ 1829.140363][ T30] usb 2-1: new full-speed USB device number 40 using dummy_hcd [ 1829.355876][ T30] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1829.390892][ T30] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1829.437000][ T30] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1829.470632][ T30] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1829.494393][ T30] usb 2-1: Product: syz [ 1829.506853][ T30] usb 2-1: Manufacturer: syz [ 1829.524113][ T30] usb 2-1: SerialNumber: syz [ 1829.561561][T18475] veth0_vlan: entered promiscuous mode [ 1829.592863][ T30] usb 2-1: config 0 descriptor?? [ 1829.717398][ T30] streamzap 2-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 1829.780496][T18475] veth1_vlan: entered promiscuous mode [ 1829.945718][ T30] usb 2-1: USB disconnect, device number 40 [ 1830.284969][T18475] veth0_macvtap: entered promiscuous mode [ 1830.354162][T18475] veth1_macvtap: entered promiscuous mode [ 1830.547665][T18475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1830.700163][T18475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1830.865862][ T35] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.898221][ T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.907386][ T35] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1830.974774][ T30] usb 3-1: USB disconnect, device number 54 [ 1831.038186][ T35] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1833.261070][T18801] fuse: Unknown parameter '0x0000000000000003' [ 1834.996843][ T142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.032065][ T142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1835.465072][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1835.487972][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1835.558020][T17005] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1835.804998][T17005] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1835.853750][T17005] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1835.899293][T17005] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1835.953968][T17005] usb 2-1: config 0 descriptor?? [ 1838.380696][T18851] fuse: Unknown parameter 'fd0x0000000000000003' [ 1838.707010][T15489] usb 2-1: USB disconnect, device number 41 [ 1839.553850][T15217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1839.623059][T15217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1840.205468][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1840.301235][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1841.512843][T17005] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1841.709323][T18868] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1841.741634][T17005] usb 5-1: device descriptor read/64, error -71 [ 1841.849907][T18868] CIFS mount error: No usable UNC path provided in device string! [ 1841.849907][T18868] [ 1841.901520][T18868] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1841.990042][T17005] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1842.208456][T17005] usb 5-1: device descriptor read/64, error -71 [ 1842.353527][T17005] usb usb5-port1: attempt power cycle [ 1842.791559][T17005] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1842.868657][T17005] usb 5-1: device descriptor read/8, error -71 [ 1843.113271][T17005] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1843.202796][T17005] usb 5-1: device descriptor read/8, error -71 [ 1843.329693][T17005] usb usb5-port1: unable to enumerate USB device [ 1843.537727][T18883] fuse: Unknown parameter 'fd0x0000000000000003' [ 1850.030868][T18953] overlayfs: conflicting options: userxattr,redirect_dir=on [ 1851.583265][ T35] ===================================================== [ 1851.591015][ T35] BUG: KMSAN: uninit-value in __inet6_bind+0x4ac/0x1830 [ 1851.598507][ T35] __inet6_bind+0x4ac/0x1830 [ 1851.603333][ T35] inet6_bind+0x11e/0x1a0 [ 1851.607997][ T35] kernel_bind+0xd6/0x130 [ 1851.612610][ T35] rds_tcp_conn_path_connect+0x952/0xff0 [ 1851.618736][ T35] rds_connect_worker+0x353/0x4d0 [ 1851.624067][ T35] process_scheduled_works+0xb21/0x1e30 [ 1851.630077][ T35] worker_thread+0xede/0x1580 [ 1851.634947][ T35] kthread+0x53f/0x600 [ 1851.639344][ T35] ret_from_fork+0x20f/0x910 [ 1851.644130][ T35] ret_from_fork_asm+0x1a/0x30 [ 1851.653924][ T35] [ 1851.656374][ T35] Uninit was stored to memory at: [ 1851.663306][ T35] kernel_bind+0x92/0x130 [ 1851.668068][ T35] rds_tcp_conn_path_connect+0x952/0xff0 [ 1851.673911][ T35] rds_connect_worker+0x353/0x4d0 [ 1851.679330][ T35] process_scheduled_works+0xb21/0x1e30 [ 1851.685084][ T35] worker_thread+0xede/0x1580 [ 1851.690086][ T35] kthread+0x53f/0x600 [ 1851.694394][ T35] ret_from_fork+0x20f/0x910 [ 1851.699313][ T35] ret_from_fork_asm+0x1a/0x30 [ 1851.704306][ T35] [ 1851.706740][ T35] Uninit was stored to memory at: [ 1851.712306][ T35] rds_tcp_conn_path_connect+0xae5/0xff0 [ 1851.718244][ T35] rds_connect_worker+0x353/0x4d0 [ 1851.723506][ T35] process_scheduled_works+0xb21/0x1e30 [ 1851.729436][ T35] worker_thread+0xede/0x1580 [ 1851.734361][ T35] kthread+0x53f/0x600 [ 1851.738819][ T35] ret_from_fork+0x20f/0x910 [ 1851.743695][ T35] ret_from_fork_asm+0x1a/0x30 [ 1851.753415][ T35] [ 1851.757349][ T35] Uninit was created at: [ 1851.762031][ T35] kmem_cache_alloc_noprof+0x37b/0x1270 [ 1851.768528][ T35] rds_tcp_conn_alloc+0x7b/0xbb0 [ 1851.773738][ T35] __rds_conn_create+0x267f/0x34e0 [ 1851.781117][ T35] rds_conn_create_outgoing+0x5d/0x80 [ 1851.786716][ T35] rds_sendmsg+0x2684/0x4d70 [ 1851.799297][ T35] __sys_sendto+0xa77/0xb90 [ 1851.804156][ T35] __ia32_sys_sendto+0x12f/0x200 [ 1851.809521][ T35] ia32_sys_call+0x372f/0x4360 [ 1851.814559][ T35] __do_fast_syscall_32+0x17f/0x3f0 [ 1851.820092][ T35] do_fast_syscall_32+0x37/0x80 [ 1851.825233][ T35] do_SYSENTER_32+0x1f/0x30 [ 1851.830026][ T35] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1851.836581][ T35] [ 1851.839119][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) [ 1851.848689][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1851.863618][ T35] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1851.872191][ T35] ===================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1851.879360][ T35] Disabling lock debugging due to kernel taint [ 1852.619458][ T35] Kernel panic - not syncing: kmsan.panic set ... [ 1852.626111][ T35] CPU: 0 UID: 0 PID: 35 Comm: kworker/u8:2 Tainted: G B syzkaller #0 PREEMPT(full) [ 1852.637202][ T35] Tainted: [B]=BAD_PAGE [ 1852.641494][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1852.651738][ T35] Workqueue: krds_cp_wq#0/0 rds_connect_worker [ 1852.658186][ T35] Call Trace: [ 1852.661604][ T35] [ 1852.664706][ T35] __dump_stack+0x26/0x30 [ 1852.669361][ T35] dump_stack_lvl+0x50/0x1c0 [ 1852.674376][ T35] ? dump_stack+0x12/0x25 [ 1852.678928][ T35] dump_stack+0x1e/0x25 [ 1852.683296][ T35] vpanic+0x7b4/0x1430 [ 1852.687608][ T35] panic+0x15d/0x160 [ 1852.691866][ T35] kmsan_report+0x31a/0x320 [ 1852.696636][ T35] ? __msan_warning+0x1b/0x30 [ 1852.701547][ T35] ? __inet6_bind+0x4ac/0x1830 [ 1852.706781][ T35] ? inet6_bind+0x11e/0x1a0 [ 1852.711583][ T35] ? kernel_bind+0xd6/0x130 [ 1852.716304][ T35] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 1852.722325][ T35] ? rds_connect_worker+0x353/0x4d0 [ 1852.727764][ T35] ? process_scheduled_works+0xb21/0x1e30 [ 1852.733685][ T35] ? worker_thread+0xede/0x1580 [ 1852.738757][ T35] ? kthread+0x53f/0x600 [ 1852.743220][ T35] ? ret_from_fork+0x20f/0x910 [ 1852.748275][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 1852.753507][ T35] ? stack_depot_save+0x12/0x20 [ 1852.758612][ T35] ? kmsan_internal_chain_origin+0xb6/0xd0 [ 1852.764750][ T35] ? kmsan_internal_chain_origin+0x5d/0xd0 [ 1852.770791][ T35] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1852.777368][ T35] ? __msan_memcpy+0x105/0x1c0 [ 1852.782361][ T35] ? kernel_bind+0x92/0x130 [ 1852.787082][ T35] ? rds_tcp_conn_path_connect+0x952/0xff0 [ 1852.793102][ T35] ? rds_connect_worker+0x353/0x4d0 [ 1852.798548][ T35] ? process_scheduled_works+0xb21/0x1e30 [ 1852.804512][ T35] ? worker_thread+0xede/0x1580 [ 1852.809604][ T35] ? kthread+0x53f/0x600 [ 1852.814181][ T35] ? ret_from_fork+0x20f/0x910 [ 1852.819243][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 1852.824421][ T35] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1852.830522][ T35] ? stack_depot_save_flags+0x610/0x790 [ 1852.836334][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 1852.841709][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1852.847781][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 1852.853310][ T35] __msan_warning+0x1b/0x30 [ 1852.858143][ T35] __inet6_bind+0x4ac/0x1830 [ 1852.863121][ T35] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 1852.869228][ T35] inet6_bind+0x11e/0x1a0 [ 1852.873878][ T35] ? __pfx_inet6_bind+0x10/0x10 [ 1852.878938][ T35] kernel_bind+0xd6/0x130 [ 1852.883593][ T35] ? kmsan_get_metadata+0xf1/0x160 [ 1852.889036][ T35] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1852.895189][ T35] rds_tcp_conn_path_connect+0x952/0xff0 [ 1852.901072][ T35] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1852.907838][ T35] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1852.914199][ T35] rds_connect_worker+0x353/0x4d0 [ 1852.919481][ T35] ? __pfx_rds_connect_worker+0x10/0x10 [ 1852.925395][ T35] process_scheduled_works+0xb21/0x1e30 [ 1852.931241][ T35] worker_thread+0xede/0x1580 [ 1852.936305][ T35] kthread+0x53f/0x600 [ 1852.940609][ T35] ? __pfx_worker_thread+0x10/0x10 [ 1852.946044][ T35] ? __pfx_kthread+0x10/0x10 [ 1852.950878][ T35] ret_from_fork+0x20f/0x910 [ 1852.955763][ T35] ? __switch_to+0x51c/0x750 [ 1852.960620][ T35] ? __pfx_kthread+0x10/0x10 [ 1852.965442][ T35] ret_from_fork_asm+0x1a/0x30 [ 1852.970669][ T35] [ 1852.974450][ T35] Kernel Offset: disabled [ 1852.978950][ T35] Rebooting in 86400 seconds..