last executing test programs: 12m12.80135845s ago: executing program 3 (id=1175): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0xff0a) 12m12.516772219s ago: executing program 3 (id=1176): ioctl$SIOCX25GDTEFACILITIES(0xffffffffffffffff, 0x89ea, &(0x7f0000000300)) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) writev(r0, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0xfdef}], 0x2) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d105012000090102030109021200010000000009040000004d2f9c00794ea5329fa7e5df1dc700c0771fdd63d6b7b32703ff0401952c0fb3450f1feef2b4fe3b4af259cd33809ef41469ca225f4f5da74ddcf03c10ea3a29bf8e"], 0x0) 12m11.051010311s ago: executing program 3 (id=1182): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x4000000004002, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x0, 0x36200}) 12m10.986855167s ago: executing program 3 (id=1183): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='devpts\x00', 0x0, 0x0) unshare(0x2020400) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') (fail_nth: 2) 12m10.884607235s ago: executing program 3 (id=1184): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000440)='./file0/../file0/../file0\x00', &(0x7f00000004c0)='devpts\x00', 0x0, 0x0) unshare(0x2020400) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 12m9.485481645s ago: executing program 3 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000001c0)='sys_exit\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x20, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}, 0x1, 0xbb1414ac}, 0x0) clock_getres(0x7, 0x0) 12m8.675265001s ago: executing program 32 (id=1189): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r1 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r1, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f00000001c0)='sys_exit\x00', r2}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x20, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}]}, @CTA_NAT_V4_MINIP={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x7c}, 0x1, 0xbb1414ac}, 0x0) clock_getres(0x7, 0x0) 9m36.839092767s ago: executing program 5 (id=1549): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) read$FUSE(r1, 0x0, 0x0) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x0) 9m36.664826982s ago: executing program 5 (id=1550): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/12, @ANYBLOB="9ee200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200800, 0x0) fcntl$addseals(r1, 0x406, 0x1) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, 0x0, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x5c}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}], 0x1}, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0xe, 0x0}, 0x8) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000540)={{0x1, 0x1, 0x18, r0, {0x3e8c, 0x1}}, './file0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000007}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000005c0)='GPL\x00', 0x6, 0xde, &(0x7f0000000400)=""/222, 0x41100, 0x58, '\x00', 0x0, @lsm=0x1b, r0, 0x8, &(0x7f0000000240)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, r3, 0xffffffffffffffff, 0x0, &(0x7f0000000580)=[r0, r4, 0xffffffffffffffff]}, 0x94) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) r6 = socket$netlink(0x10, 0x3, 0x0) socket$inet6(0xa, 0x3, 0xff) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000140)={[0xb, 0xe, 0x9, 0x0, 0xd, 0x2, 0x8, 0x0, 0x101, 0x0, 0xffffffff, 0x9, 0x2000000000000, 0x10000, 0x6, 0xfffffffffffffd81], 0x10001, 0xc401}) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2000000011000100000000000053d100100000e60b"], 0x20}], 0x1, 0x0, 0x0, 0xc0e5}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000ecad00000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r7}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r7, &(0x7f0000000140), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0xa, 0x0, 0xfe00, 0x41}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m35.499310042s ago: executing program 5 (id=1552): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x2, 0x200000000000001, 0x106) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010029bd7000fadbdf2500000000", @ANYRES32=r6, @ANYBLOB="1380000023b201002400128009000100626f6e6400000000140002800800070081000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x404c8e0}, 0xc094) 9m32.848243233s ago: executing program 5 (id=1556): socket$kcm(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x1, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0x700000, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0x4, 0x4a732f64, 0x1, 0x8, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x7f, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x17, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x3, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x5, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x103, 0xe07, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0x2, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x47fff, 0x1, 0x1cb, 0x1, 0x9c, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0xd, 0x1, 0x8000003, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x8000, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x3437, 0x3, 0x9, 0xfd, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x8, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c84, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0x2000d, 0xfffffff7, 0x7, 0x140f2, 0x5396, 0x3, 0x7fff, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x9, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0x12, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x14000, 0x1]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000080005"], 0x24}}, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000480)={0x0, 0xac, &(0x7f0000000640)=[@in6={0xa, 0x4e22, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xe04d}, @in={0x2, 0x4e23, @private=0xa010102}, @in6={0xa, 0x4e23, 0x3ff, @empty, 0x7fffffff}, @in6={0xa, 0x4e20, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x200}, @in6={0xa, 0x4e23, 0x784f, @loopback, 0x2}, @in={0x2, 0x4e24, @loopback}, @in6={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x401}]}, &(0x7f00000004c0)=0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x2, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x8, 0x5, 0x4, 0xbdb], 0x25000, 0x304}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m30.611238723s ago: executing program 5 (id=1564): pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9m30.068961624s ago: executing program 5 (id=1568): setreuid(0x0, 0xee01) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 9m14.498752793s ago: executing program 33 (id=1568): setreuid(0x0, 0xee01) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 5m6.792837598s ago: executing program 6 (id=2013): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x1}}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000740)}, {&(0x7f00000008c0)="c39c4979d2f9ee110342c9d82eefad00f06fcf23710d595793258a1fea70e762de55b1627cd695a9029861d00d68fc3b9c8b31e6ae2908f2159c06774673dc618b5682bb5e89cc9792", 0x49}, {&(0x7f0000002600)="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", 0x1000}, {&(0x7f00000002c0)="b768eb20304f2fdc5a9694a44beb7f5079ffaee73c0528a21b9e81a7867840d93170ca1a86406f", 0x27}], 0x4, 0x0, 0x0, 0x8051}, 0x40850) dup2(r1, r0) close_range(r0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m6.574166205s ago: executing program 6 (id=2016): pipe2$9p(0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r3, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad0c7fd3"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r5 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r3, r4}) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) sendmsg$nl_route_sched(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) close_range(r2, 0xffffffffffffffff, 0x0) 5m5.259122839s ago: executing program 6 (id=2018): socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x34) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000"], 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045520, &(0x7f00000000c0)) 5m1.44148536s ago: executing program 6 (id=2022): r0 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000a80), 0x0, &(0x7f0000000bc0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0x0, 0xee00}}}], 0x20, 0x1}}], 0x1, 0x4088040) 5m1.283596827s ago: executing program 6 (id=2024): r0 = getpgid(0x0) capset(&(0x7f0000000040)={0x20080522, r0}, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0xc, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x80001, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) setuid(0xee01) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4m57.298860926s ago: executing program 6 (id=2031): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r3, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) 4m41.554045316s ago: executing program 34 (id=2031): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x44000) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x1000002, 0x11012, r3, 0x0) munmap(&(0x7f000053c000/0x4000)=nil, 0x4000) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e010203010902"], 0x0) 35.755696209s ago: executing program 2 (id=2564): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x46100) close_range(r0, 0xffffffffffffffff, 0x0) 35.627587854s ago: executing program 2 (id=2567): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3f) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0xc0000101}]}) 35.466175298s ago: executing program 7 (id=2568): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 35.360968205s ago: executing program 7 (id=2570): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x7ffe, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) 35.082267578s ago: executing program 2 (id=2572): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) getpid() sched_setaffinity(0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$netlink(r2, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r3, 0x60046}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x6450, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x30}}, 0x0) 35.037101261s ago: executing program 7 (id=2574): r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "884e068a5e4e2085"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "25f87df99dc48af4"}}, 0x38}}, 0x0) 34.839164872s ago: executing program 7 (id=2575): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000011c0)={'sit0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x8, 0x80, 0x1007, 0x0, {{0x5, 0x4, 0x0, 0xe, 0x14, 0x63, 0x0, 0xd, 0x2f, 0x0, @local, @empty}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, &(0x7f0000000100)={0xf020000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @p_u16=&(0x7f0000001b80)=0xa}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 34.612649844s ago: executing program 1 (id=2576): socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = syz_open_procfs(0x0, 0x0) preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000680)=""/9, 0x9}], 0x1, 0x33, 0x51b) 34.279348037s ago: executing program 1 (id=2577): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8004}, 0x4000800) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0xc000}, 0x18) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) 34.080680028s ago: executing program 1 (id=2578): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, 0x0) 33.744133811s ago: executing program 1 (id=2579): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x49) sendmsg$kcm(r0, 0x0, 0x8080) 33.727937669s ago: executing program 7 (id=2581): sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYRES16, @ANYBLOB="470d000000000000000000000000080002"], 0x1c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) 33.671219797s ago: executing program 1 (id=2582): r0 = syz_clone(0x0, 0x0, 0x41, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 33.635067397s ago: executing program 7 (id=2583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d5303", 0x26}], 0x1) 33.538455821s ago: executing program 2 (id=2584): syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000006180)="3ea4e4305830d12dd9009ddb857b480e92a48b3e45093694091ed788285937ce7b2473522335a690d828b02ab613f956aecae781037db019ffda49138a514ee99a088fd6a2a0028ea055aef75e65cdadd3589c49eb6088bdec10b6d405a915a037c1f8037e1b9301fe4296ab789db8c69c3636af08fbaffd5106dd3788c626c35510cc0ebafc64e8b300d0ffa3bcea4d2e036bbc8dae2e46312e9a637b3002b8931a66cbc28a30ee3287a18f1d162a5985f7ef467a43a807cb75d34504dce996e2a3f1bb43e867f141ed07ef08e0aea605cb5b10346efd6b41a23ea6741dba1e2416380b330788486bba4e359fc0d094cc5301530c1228fcd0e378e0260dbdd56788ad718cac668467d4c50a9878c501cabe3389dcf76acf0267489de4aec621656bdd3878de387af2a3dfa7dbf460daffbef878ce2536a57b05bc44a1e01ef54cca3ad250298c95a52ae9927030eb1096e00f265283a30b4ede2c934dc62c46929761e230567d2ba5999495a5a0977e3156a44365b177a07cae07864be9765ba56bc7ecb29264e6dad2e41eebfeb1ef4115b923c49a8e0919db1de67b1cc4c2f30a672d64efac91e63d7bbf75784aa49346338b22504452b36266eb5e924d4b215ce5037da7b98f09a8dcd086f36787cdd6fab9ce916d12b7b939f113be8b1872a75aa0d8977fe598227998c8b5fa3be8831006f6071d2522b1c9be03873844b0a6e2ca1489f2391981ed762f743e4bc35fd1ca7158bd995a7b801d8525ce381de5497916d59183636f72e9b58c72179f678d1d4434a1fd39d304c3b62cfca763ee8c6108bdca364a438145775a76462927207a7ae654801635dfe3c1915d2ab57a11675724b17c0becb9b20f95d5beea1dd5a6eb66ea864a7d22bdefdc6e13a2a4a8c7780b4250c92dd9bd99453f24268cedca6963ab64c024e56e6f3ae74cf8d1eb5bc3c7292f5fc7d37b4c48ca981b8f54528dedac99a19c1181698b1982668c49b1a6b55142944a0edf891659ea82570ceefe2ca50a95e7df6496acb6bd979ae4b5b6327a201288b8ddadfe0cb91bdd64e74f06deb0133385f5c9cb6e8e554e4fd29126f550adc440e6d42de1bd3ba0ed5d0ebc91bdaeecc7f253190a21eeb51a14b2d949fe86626a88fd33ccd40379f67de81341d225a116e60770ab972ed872c124cd7c0db88709a48487c1c9fa6442997431b99a1ac224a8523430ddcfd699ad27e16bbb54db40785b869328e8e804ed5fc2f4b3e4548a9e60d5b73b2ac8564e8424e0dd292924feb14fb76ed19b1d76edafb1bd5585717a9eb73a8bef605e3ef3f6f8518faab6559f5b4b7d2c07f73edf67d3780d8b5b2042788e5d2f7c7184a80a1951323632b62101094bd80acfae621e56cef19cd059c9ff72fe564944bf8063137fdc7905cb63489cf8d250bda94f453c94fb2f6f33f972c0ffc4830bc8d7fb98c4ed8ef2fa6e147002d488d97122d579a9b214b09f792279021a20a36a05c74c9a668bbc4ee5bba0d8f7e96fe9a61feb01b7c0537e47894c3e7b5d19ce1568f8d9f49f3adf9c02ac941a3edf68c841f29fbe82450c2bbdcb7270dd2f5722666bd21c0839541c907ff43da0a10a05e47ac636d4f9c59e2abfb00d31621ac3f0455723563e402bd3ec56a2b7e59a82262119b02eedda2baef71a5d5efd2533b7e6fc01d6cae9d514fe63b30fdbd92548760f876f8d77e7fd8500f83e6f4e6290e4df64c73d6ab61737797b05235dea939163cf55f322939014acef81d248baa46e1ffbca5a699f0824988b4313ae222bc8d3a3c1e875054a9494c9beac817179749b5cceabbb7cc40bdb8e18d598b683943a61fe105b868896d78e1e3a802774170ef3c1f339b6d20cfb5a260fa197aad2e18146ef53fa9c783772dc9e251c2140fe89709d007c5343681cdf4569d5f3190c0d799504aa0a9001e26a11708fbe929f63ff691a3a0c7a06125d3b3d13b3241abee4fa8c6d27b26eaa58b454e34fe20128a15cf7f96bfec32904af4b2e04c26bf9393d45b0d66a1a2f15780a67ff34daa1bad27262ec78f27f9ff77157ed5201bf257e1d1d06f2cd3a4cbc02bb9003caebc7e7e9fe7a256de9fc2cce105644c833ee659e3f6d526142d154a881cb70ba8df353a5714bfee5480cf8bff86c62c3a56d45f821d99413f8ea8207a41b7d577e5a1788d051c8c19cc1fc8be844f18227b7eeed330a213a58009c7ea3cfd5c77093b5315c90d36fe15ecd9d9e7e4208aac31abc3928d162449ee68f04aa2aaf5b8711529b97944a873085ed6b59b53b2ef8a397733d5207eb27a81c646eb7079aff7403181b0d658abcdc3445096844b3139ee23cb30f9527b5c84105604e8aa57b32e0470dffa95719415b74ce519ac27b20a38045a9792043d3c5b426deb70b3418d9475c6b85580e7e414c5a9ff35ce7c6fe2f2d5ee8d0aef619d8c2c06e0af87a9bad9dfa2f6ddb57c2e636563a9ee58c8613be2b329f4c16efbe56ae671e712e90712cc4f519276cd7cfa3e421e87ace7e5469665b4345322c77de68639a6f561a0d203d4823d4c3a84f1b2b04c60cd2fe855652c1000b0f5e1bcc2355496522a5046a849d407b5d86123432a41d64b549c1713dc3f0b4a787420c9d3dd3052dbac55dc15ca6584d08bbcc7ece7144fc179d302c5e0833b1f667e0f4110ad9b31f5b7e19e11fc1bf5ea0f9a81806ab5bfa8caff29b84c53c04a85d175c05a74d55b548ae69bb365760ebd841cfd094ce2d7cbf447285f53f5e7cb4ccda0a607c9cf7c3aec55966aca8b8ce33eb30a138c3e4d85e4def697e0e00defa03f2c501010baa3470450bec0acdfcdc7f530584e7c2600ba58722303a11c9387edcfbdc85f1128155374f9844f381c2a8a15bb7df67db46f30b9232d3d6037d86dbbbed316bcc5be6fb3ab78a19c9df2889188c7321ffed7795dfd67f3853e516cbaef5d079aac33cbd2cd920b560945744ae03611257ccc66e9523de5282efbf9871092795c05685cfe8749ff4a4cf42aa19fe4f935a71ba462860f1243824fc2888cccc6866f1c81f05bf993b58621cc8f9c6e72a7db971e1bb40632d75c119acbcdcb88b5f1ed4fa5162da82ea66c21f2064867d86abf308a1c65c0a16879d56e2e76ac4110acca20be3abb731effad3aef7f0da4acb9aed0283111670d5ceeba5a551dff13de90acc9dc3176923ad1791a73eb41a3f5c260e4df26a1b8782fa85e5cbf5c20a62bec97da4096264fafafc9f5dcb9a8ca2990a144d6bd138cddcba35fe3cd2609f0189d37e2d76f6d96ea2ba1d5ec9b42c94f254904cd938ea2004b43a111c2f5b53eca1bdb68f8e84fb5834098ea5dd6388d41c987763c8b2c9733f758dd74ce5eeda6cf28137a4d83a66f05d90fb1c9acb0214eb7e5d0869b201330b6fd1a2948e0ad0af0c4f3deb08fa875223ba27f1d42f63da665eaeac81ea9eca52ae1afaed3f4252976019de7d61059e29c8220e88a2d9a4e6202839c74dda2ae43ee2514b55aa812889e4f8e153f9859af16f130053024a8bac43fad387cd526ef42bea5cad61230bbf89db7946a03101d18dc1ae46d046212ec5285564e65d876283fb937d6e38caaceb5716c8b2628b3a349058fe27fa58d53d6e5a769996217960e50846b2cd1b9fbc686f157e19d69a2050098097d45c2879e89e6fa3c5c79339fa3881fd228c29588befa5eb769a1cc1b67e8426b386ee0e6a80d7dd261b0ffb14b321190f1a390c6a0e8052a750d4cb587720ae43f6ffbd7f9328985b2aece118d4838c2eb55e8592823f74550b5d49377464890903f2650999fecb01fce6f6e51eae4f193bfab5f35b854cb0221e75898f111e94d5861fb15086889a5f804df2f7fd41cd49b663d352c59c6e8455f8287aab47cfba4d860c81ae1f61eb8bba8f18bfec3da3eec80bf39a6ff8d028650da69c108f98cdd8359756ff2b911fa688131121523187f1e449baeb64e332558c9d5ad9794e514a4239fe3277749506d69b3ba9df2c48d0111c526674e1ec144de88c58c93ef06da80e14675d0b14842a1ca644af3d7fd5907a46ae58df07f060088573683d14ab5310d471e139a47f8080fc282f16eae908671f35a9c1a7b2941ec86e85e15207e824437f8f79b173cde14b9fdcb9ecd82b224d45f724df18760a2913d907ed48a696367985713ab99d2416213f9991766161ce075aa6da4a7fba3a47c67d04ad7e669afada886f046363fb03a0cc795e5a1840e419967b1a19f40be8bf2a512015d486d00c4026ea86324b5b541ef8388f070800421c137d8ebe7c9a539b529a4af69165c1a6ea23534ce8efa7efb2ac55969df429f3b32d2f2aecb5087359c1b83224e4cfa2c583a1e147dc0202334a2c953383cc69e3a807299d86358b6f42a499eaa5d5680cd670fb49af6488c7cce6efae45682f98d63371eced65de02a82bf560a335ba630283dd77bd3d15296bc21bc337fc1b6d34d77ea7f681055459447f01b65623218dbadbd1958a249ebb76fea35d56299a017c4d7920fb0433d5769bc5130d8a5ed950f8084ba0036078374b82ad14a232f137214bcaa82ea7fcf7393ff4226aa1effda1d44a6100896ebcffb9414baf53c77c84113ef99f89f9f282b19b0e057893ef9c81399e1db0e3a25549dbdc69895e5eebbc545e468401d18dd20afd2913f89c3c0d95d54d5145f5cf434287e01b73b2646a7dc42e0f64fcdc1f3853aa41a6242c6cbafebfd62d147dce9368259beefe4d28179750893fcbdab5956f582372c1c616db2a23537a353e08e275fece1a7c0c0bd9483160fc643ceed9d687d520e944923f1eeccfe7f2e5e1c5876810efa0deb7f00c8f606ca5c14e3bab922243d013288622cad6667696e6759742376f7546339ad37a9246c98a6500686aaec51e2391285e7bdac34fbd4a1df2147bbee2d56c7189b4aeb3880bbc63e6b922b27133497be09318b064166ee8b5ca1c360dc510592bb3077293ff7e48bbfd2221a8c823eef8e677b51b40c7a8bfed1def9e19af5a418b65567ad9cecf4c16232683740dfceef0bde563a0942db0d77493b2d683d413d9fbd0ac8fca1ecaf6e57fd7ae680a493d8c697d3cc038cfcfc55a9a30152ce450dfec029a4edbd38f10222149a87d358f881847d4daf8b182d6b1313d616a767dbd9d71c7a3ca896021216665fcb2c8fbddb593013118cc8ab5044bd6f99bb278ad871917c9b1684cecb2d0e8babaf33fd98c02d8451aa48f3b2a6d6e9a5d12910c7aff613cbcdda418a76abff697229b47783577d0ce2f0041e1360a10f607612405b9b06180d85617ff9c5993a986b32071cf4c43b97f53eef9311929cb8035ec5c2f65cdc40bd757d612de5b9a7eca6e7e70365dd47256ff9f6e22e91ff22bbbee51e153d5321dc76ee8a664505da2039da1fc87e3727f085a47ce3eb52b95edb41ea295b79752c672348621e4d49c48b7d065d116cd1ebe6203e9ed62a9d3367eec2ed7cf3e4762b5f71c6ab34a953482414b762a455ded6e0ede9e07c3b9915aa51aded822c57a72ee3ed236b7c8c3b26db5092baba5d4d385d1e3c0e0d860da91b33a85c20e30da31b890f85a88a5c105e8aa32d6033beafff9ff510a7c7fa566b86eb473c702fcf08449c581650c42b90843b1baabbe95b476983fc98397abb52450a65505212b25c94a2fe3d64816eb9a76e8e8e945b7dd544aa039e61fc6331d88ee4ba297bf0d59a04c95579b62f316da65064247cc1d45792f1510103708d636c53f201b1dc2004a479bccef0bab9bff46eaaedbaa445417ee040c568ca95e606d9d9431798e91491f48434551cb8d8b4b81b389d43845e04d98dc0edbb74eae8d13ef3f662a26d7e548218952bfb4d697bd5c3700cea776ac3eb0ebae5c101bc341688371e31bda8cf7819ff4fa3a478faf97582d497112e510b2986f4238d3d4219024ac82eddc2dfe6d42dd1652ec09548768cb0a46e475493a75a75c54c47ec1e6265d34a87634e09394c77a41b01f374a79333951eec0423e037e0a5dd3cd12dbcc25fbb028613aa7382bade63c1d300b0a6d021f65fca7905e622eb54bde35d59c169f970e3de01272229e78382c7e87cc052da8b7b2dda1d29bc42fd2b7091feab28c14dd9cca5c8946afd8a466c681025128d3f752a8bfd2a8bc0c1bd89c01ad7803d8fe9ea1247e25d8ec18e0c18b8e6293b85cca5535a075b799519623d98a9bb393df5f17065a7f11142320e3138fae891346ca10040fda33128909b485ca1fa733f7d44e424d8dabe3f38d4249c3cb3f22d10521e536be978ff2dee276098db46b56e782596a68d5144ea1f2dff227956f4f860135ec2e0cee212a51b63c60e775fa2e0a7dbcb6f3d27f09dbaf55343bd2af3aee72ed39e15919d3e5b2bc67710c88a68806f1713313887e72e6af52f7de7009399b81cadfe76bff2b61e53b259218bf854d52644bd8e722e170bf9b109ee819b960b8d9da0d2dacf48083bd8a766d3818eae48ba408e18c63c8b59e282553a71f62083e6a007ffa6ce8ad271b7202da28f1d6be4332f404c1e2b98acc4d783785c1eab14361db6382594a9bbc3304f121f198948c91fe58d96aa6a8e12cc3f46f283e635548d96341fe3052aed45be1970010bb76325873b7902f0f73bf21fbe0a5cef6ec0b50902174c3515c89421a496737024b22db73916c4a41d294b8eec3913421b784a2629132461d4e6d5498a88b87abe2e385df8688b70b075e2139def62c18c60f96c1715e203850155ea7bc8d67e77428e9c96a3edf06d984f29959217633a907e7aa0f9792313fd30c6f767b79981ccbf1bf87942cf082090761f9faf5afb90f56a80908cdf34387d3c9ac4d27321b8b2c64f66eb3bc0f7937b0771b68eee977d5f3682fedb04e51868e4e588eb625a71db0057655af47806eaa6b875304738f1129d95ef85921db8b584af8e389297c8d59eb4f5f784474e5e293f48c5cc45e490878c31d32bcbfc88d51f96eee3cfaaea0e443505825a52603a06aa8cdc8920af575650833e7715dc2205ecba7e304eb121cb0d65609b853974fe9ddee9b9cb9fe4d1c08fed5b2f3d0f51e104635dba4857520e0cf319438659cb765bbbe6bed3a6451a85e3efe32707b2c84d7fbb99cd80b3529605b221b808cf34bfe776607cb4074cb9371306c74f3c38a4b48f8a8da8a02be28a08f5a0da463aa85863ef54276c4f414667d3812deb6b0e882381932585e3d08c6f3c2c13b9987088b345e1216b3d525c99820c0b6688d9c0271f648da1881e58fbf5bc02acf226d9e90a64911ebb27b415f3ff4f7bdeb9fdd5bb1f39a99f909f80af444b902d1bd96562882da6e0ce9efb2adfdcd78803164a5ebacd12d6246571066e8f05a37d9eebbf41a88926b6bcb287f4ef47728ec00bd96ccd72eefd5815fa9e2840a100e08be686e6b664c938a0eaa7588e87d69809af59268f3c4e92a98a663f83481668e0f3ee684a6728fa38c75cf66ac73dcee17dfa5ca94601b1e5ff91215492270e24c4abe4dce8686e99d3c64e7c3f5972152da99388bb59e282a1e300627e542cfea5a390dd11f0c95f52702982c0e8c690c1e7bca2ecffb7287b617090ace76f818fa8a9078978e1e249a7f4fa281fb3174fec950f6b9afaabb3279e22c9c37a4ea1c05df6c49c1b89b2ed23ca3673f388f502edd3edc358549c039eeec6ca4ae3404bbfb688c3d90cbd4a092e035ec48c3bb1ef08e2b1b6326622419356669a8399954dcbeddb197de9fb5407e105d800b6cfa91de41b2eb3ad2ead5487b9c7b11e76f2ad08711b00cb8f3da6794398a961853bdcbde90086ff13d69154442c8caa36d56862581a9f326f85c6722be613caf2329d4ff9734c99016390e793b6ef90c540ad3c7478d7b221a71e0f10575ce5f666e2425903f3c358c4dc5b29133da5027b541898b501cfa144e166d1b1d7470d05aeda051a1cd5bc3bafee7ccf8564682cd728d0dfaa4f731438de2ca3095f105c0bad8f3b039a427729ba1f96238403e3d1c8a2bdf1730253d6c78e42f4dc5a6079e95ea5013a9d335e628ee7d2dd1c7f2d25342b2be5c9fef9fd5eeddc8665c1a39705231538d0f3a19e9c021a7d6d2d1c6b3f4b483e6198ca6d269db9e82746c5ea36c70f29fc98462ecaeed27547de6435a82112b2ec9a8c1e759f82d04810824d97f1ca45071f6ac242b90b218f2c2c9b4cd42b56dbeb5e947a8e8b476749ab8cc7d910fdb17529440107a565737b69440cac0b418858d62fb7af804c5e483faa849a6375ea62581eff9c4dd3ccacdbab7af9fe9b2be75cb2e322c296cb91a792ab424f77ff348d07dfc2a5c5af476cc7c44de169dc1702ddbd5e4d7fb11172d8eab6df3b70c7b66fec5177a533ed44641c291ed9d8cea6832c24c3cd279c9f3bbb355fe47364d23af48cf8a86d27727ab2adf771641ff447291fa9ba99cf5c2cec5c968d565aabe16cd07d752f7d5b2c78e77cbd2dcb2bc151a35207026c98b755eb0e6fdc94628de7653f7a461e0b51f5c089fc4db6deca2243e3e5532bcc279dfccd2651db61565968dfce800e995626a4bf045e3522b996dee4bd10980ede518f4a5d986f41c53f0e2820853337869645c31c41c9563f1c01ce651e916f7472b04929feecd09ff768bdf74f0b40a0c58555f2a390db9bb7990dc31f995ac4bbf1f90271cd4b90ef7fcd096c34040fbd4a74aefdc5a6b8edf38da8084c87564b10e6e2cd7d0ea6849cff02c06e4df741c278f0d29ed6c6c739376e1c262f9d780fec67aeb519cfa669c9d6487ba527e0ccf5012954dbb3ecdbd3f5be1c018784cf83b3bd040e7116be8401e760f82cfc86ac19a18f28c894662f8dd13b1aea577c81bf2447753b57853765eae4353b65475e10c3b36bf0d0dc3199dabff76a06f70b173fac295db1f52100547050f052b9d287155bc8b04435ef35902395ae894bed80080fd3becba14c51da2cf34e2999cdbbf652dc6862e8e65f675b1d7e5da57fbfb497e8111dfe77164372d707a5857325c47afb462f7a38f617d158e8a28fda6d121e532e44b2ca9cef3c34a7a8d748c4edd061b62f6ab7344317b0dbd8ce4836142719a7c0835901236180840246527f3ba39cb64614e95d4af008d281b53853532abdc663051d041af7d1aa9766ab185efb77fcf278f09577e01e507a2034f435b66cab7692a1733d1ad3d5d566396fcacfd1bbdf542e35136a49e2d3cbc21ce157ff051a0c1b636b159f370366565a8ddadaa1502b425ef27a1ff070c52bd17595ee507dc984aeb14d2aba07fe786f3733e3527d5bbfcacfb09d3d5cf94738d1b13d2590b1bb1ea2eb400e9605f90b4b23c125622da85ece62e4493938099a4058e0b3dda2532c6d62bd033ee7a1cd7683620a6501e3ca420f9a64f462bbd4f125d154beff38c8f4a1278f9d6194289234d7e9fd397feb24fe1a8636e334d1342fa590b4578b3c677aae57119bea99ff7a5635b98ee867a282e5f3444b70415c0c33942f041c28589ba0de67d7b7ebe43ec6656f60c82c9d75bc8dac80791cd59a9c576ccf726cc97befcb9aeedf32b9ec6f4aaf043ab9bfc4712ee6bc4906dcd9766658ce56fea361518bb54ccca4bbb82eb64e417a37899ab31736ffddf51f97aa710b29f18ada97a200bd65d655364149db2c41cf32bac2c4bf799bb2356335a4fa01016da72bc7dd99b3f902f8b80a89d19bb04f8c49cdc5a78b17b52d52c06f18baa9839332f3ae59909748cd4dac49c1901f3c2dec64ccb40a49fed1699fe1140f8602384a930fed2ed6f9c120c9e6158aae34d8ec8a4fb0cb7ae19c2865e3939b499b5a08183c342ff4af2b3400980879aaa6e29784e90bfc915b9f31e79b742420952bda798a8b88c77134cc5752630e57fa23f9b174535e3244c9fa475d1b2829fdb768d22d6564e55556fd3750bbb223f3b5748a57c899d324f359c3842fddf8055e1b40588365393b84aa798fcc8b321ba1eeac33d340eda01fdf697e81bb5b55852f6b355a7dd2082cf087949cf9fbbf697af8f81c20f25a1c0b92fcb06dddc50c5d9e989a15a2fb7d0544f1844e3f46711165bab1658615f440b71f93ddb713ba91e8f4d91dd17243082d61cf43fd08861d42f41f1ebc68be633bfcc79b14cdfd7b171ed4b282a926055ce26e7fcf40d1e8e7d05ce6660fdb825dff76d735bce7b43c98e5b6c4763ccff99b45c1439859ccfc61756c298eef7424c465aadcd71455448827e39e5ec21293f2007617fae73b74de8efe349c726a9dac11524720fed5214101b4f26ad6fec2215a54980512a57358545899c6898692d805134d606b3022d16954747d247db0093dbec65fa7d101439ccee58a8790ee0daec0976a743d8f7aabbaf8d9945e95ceede27387e2faebe8d1eae6feedb78cdf016c6c5888e56ab4830b002513f87aed9bb4988784c0debd8f566ea9c8467bab4a52a52de9e262f16ffe222ac1ac6f6d5de557eead4554f03bc8ebd681daa2ae6cf93587d32dcf53a184f5019f0fad0729095a5788b04fc6987064b80c6bba46e36fdd767ca9c6819445e95ec7d60c3f9b2716c206a589e413fd7bf1d8fd3f1245ff54d6db4d7b45f20cb4f6dc8bcde65484d70ac38921f89261d27fc85203b801867850457a3b61fd55e805bd3c40a336bf87101d8914d21c8c968e934ce265cca3efe21d3ae1b78848f7b50a9a2e9b51bfca2ff7e0292ede0aa013af1c09242d6e53f23a216b8ccc64402a46eef3411c06cabb5435b1d2d8ddffc2c3dbbbb0e707e03ae0c518414dc7304dec25084891255011dd133d235e663ff38ee78c9abb93c9f692c5195222c881e35431d638367c7e570c962646424dae41fa2b2af118a93add1e088aaf7e1dd108c7096f4f9868a8af02cc15db7493ef011d320c6d64f6de56a51748e9dc4b7bd1bd515d3e9522a65e87e25477f71a6bddaf7ee5a01d424ac153efaa52f1e56fbef9f66efe5642f7dae41e419a64be65635a088885717942d475daa806ab151b087525446227d0d75a493d5a98486365b3981b3bb77a7c6c6ed44a120a98d0f2d35e8ce83837004c39bf09ac5723b1d7d7392f6e94462e86de853c6841027c697236331e19aa45693b2dbeffea7b00f0b284e49b04935327b9808576b397cb48d6b1960d06058f1cf2d0641d7c99e79dc9d47efd1d5bde85bb51ffe4a687c2d364713ee0ca4981f371c7a418b61118431984324f84f8cdd6e2849c00c1f14b1732a08ffa08d39c312dd809f15c8a651cbec053e870ac04c131946d80a8e684c8f309881f98220d7e532773d4d8304ae53428390ca7914a408030fae3b47619352d8a1edc33856530f806b8efe61bedcbe199aca4dbe79bdacb08b361e31f59c00463071fb19edbc0cb84c59130770fcd17643f7c37c1f54753f40fbeeeee31b22d89944ac6ee913e63145e3e35f804d2cbd08d9f2e278be717872a4fae63d8a8b462f715c3191d394a67a724fab2e4ec31c439fb2fa01295aeb56910fd406316bdfed587c1b42a733542a55793303e59dc23a40bc9b9f5713a3dc21b95b591ac9863f31a4ecd160e7d9b7b2ec2b137e67", 0x2000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1000, 0x40000000}, 0x28) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 33.482999915s ago: executing program 1 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 33.272129692s ago: executing program 2 (id=2586): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f00000000c0)="91685102d300000013000010888e", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) 33.152735567s ago: executing program 2 (id=2587): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 18.017149995s ago: executing program 35 (id=2585): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000380)={0x64, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 17.874106029s ago: executing program 36 (id=2587): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x8040044}, 0x810) 17.593166613s ago: executing program 37 (id=2583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x440, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000480)="89e7ee2c78dad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d5303", 0x26}], 0x1) 625.203112ms ago: executing program 4 (id=2671): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000620000095"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map, r2, 0x2f, 0x34, r2}, 0x20) 512.225039ms ago: executing program 0 (id=2672): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @request_death], 0x0, 0x0, 0x0}) 415.696539ms ago: executing program 0 (id=2673): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000040), 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000400)={r1, 0x0, r2, 0x7, 0x1, 0x8, 0x3, 0x2, 0x28, 0x1, 0x39e5, 0xfffffffe}) 406.136507ms ago: executing program 4 (id=2674): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x7, 0xc, 0x22}, 0x50) write$sysctl(0xffffffffffffffff, &(0x7f0000000000)='0\x00', 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 360.842144ms ago: executing program 0 (id=2675): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1f000000fb000000fffb"], 0x10002) 289.94018ms ago: executing program 4 (id=2676): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f0000000140)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 229.241142ms ago: executing program 4 (id=2677): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r1 = dup(r0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2004c084}, 0x0) 212.347722ms ago: executing program 0 (id=2678): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) 91.397446ms ago: executing program 4 (id=2679): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000002c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000240)={r3, 0x0, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x3f]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r4, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000800)={0x0, 0x0, r5}) 74.090852ms ago: executing program 4 (id=2680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x20000, {0x0, 0x0, 0x0, r4, {0x1, 0xfff2}, {}, {0x8, 0xf}}}, 0x24}}, 0x40004) 46.533548ms ago: executing program 0 (id=2681): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000200)='./bus/file0\x00', 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./bus\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000180)=""/92, 0x5c) 0s ago: executing program 0 (id=2682): syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r0, 0x5b06, 0x0) kernel console output (not intermixed with test programs): 60.381668][ T7589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 760.381700][ T7589] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.381735][ T7589] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 760.381757][ T7589] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.406934][ T7589] usb 5-1: config 0 descriptor?? [ 760.904529][ T7589] isku 0003:1E7D:319C.0019: item fetching failed at offset 5/7 [ 760.904934][ T7589] isku 0003:1E7D:319C.0019: parse failed [ 760.904971][ T7589] isku 0003:1E7D:319C.0019: probe with driver isku failed with error -22 [ 761.213054][T12574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 761.213467][T12574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 763.372239][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.427324][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.444081][ T59] bond0 (unregistering): Released all slaves [ 764.141257][ T10] usb 5-1: USB disconnect, device number 38 [ 765.728216][ T5970] kernel read not supported for file /newroot/383/file0 (pid: 5970 comm: kworker/0:9) [ 766.708353][T12607] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 766.708397][T12607] overlayfs: overlapping lowerdir path [ 766.726655][T12605] 9p: Bad value for 'rfdno' [ 767.224362][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 768.021641][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 768.048656][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 768.048681][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 768.063047][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 768.063075][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.063095][ T9] usb 1-1: Product: syz [ 768.063108][ T9] usb 1-1: Manufacturer: syz [ 768.063122][ T9] usb 1-1: SerialNumber: syz [ 770.661756][ T5805] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 770.814509][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 770.814544][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.814581][ T5805] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 770.814604][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.828568][ T5970] usb 1-1: USB disconnect, device number 55 [ 770.922274][ T5805] usb 5-1: config 0 descriptor?? [ 771.365560][ T5805] isku 0003:1E7D:319C.001A: item fetching failed at offset 5/7 [ 771.366308][ T5805] isku 0003:1E7D:319C.001A: parse failed [ 771.366385][ T5805] isku 0003:1E7D:319C.001A: probe with driver isku failed with error -22 [ 771.608283][T12637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 771.608816][T12637] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 771.789089][T12655] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 771.801703][T12655] overlayfs: overlapping lowerdir path [ 771.960481][ T59] hsr_slave_0: left promiscuous mode [ 772.951726][ T59] hsr_slave_1: left promiscuous mode [ 772.974109][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 772.974139][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.106441][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 773.106469][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.287834][ T59] veth1_macvtap: left promiscuous mode [ 773.287944][ T59] veth0_macvtap: left promiscuous mode [ 773.288213][ T59] veth1_vlan: left promiscuous mode [ 773.308510][ T59] veth0_vlan: left promiscuous mode [ 775.091717][T10465] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 775.150672][ T56] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 775.251690][T10465] usb 1-1: Using ep0 maxpacket: 16 [ 775.253366][T10465] usb 1-1: config 0 has no interfaces? [ 775.255473][T10465] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 775.255495][T10465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.255505][T10465] usb 1-1: Product: syz [ 775.255513][T10465] usb 1-1: Manufacturer: syz [ 775.255521][T10465] usb 1-1: SerialNumber: syz [ 775.258920][T10465] usb 1-1: config 0 descriptor?? [ 775.301721][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 775.308038][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.308077][ T56] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.308114][ T56] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 775.308138][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.356293][ T56] usb 2-1: config 0 descriptor?? [ 775.571450][ T56] usbhid 2-1:0.0: can't add hid device: -71 [ 775.578898][ T56] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 775.590929][ T56] usb 2-1: USB disconnect, device number 44 [ 777.116533][ T6085] usb 1-1: USB disconnect, device number 56 [ 778.361262][T12689] input: syz0 as /devices/virtual/input/input28 [ 778.763907][ T59] team0 (unregistering): Port device team_slave_1 removed [ 779.103622][ T59] team0 (unregistering): Port device team_slave_0 removed [ 779.136975][T12692] 9p: Bad value for 'rfdno' [ 781.970928][T12691] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1849'. [ 782.109074][ T5970] usb 5-1: USB disconnect, device number 39 [ 784.414065][ T10] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 784.591665][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 784.594320][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.594351][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.594388][ T10] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 784.594411][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.599362][ T10] usb 1-1: config 0 descriptor?? [ 784.853354][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 784.853474][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 784.865654][ T10] usb 1-1: USB disconnect, device number 57 [ 786.650912][ T5991] kernel read not supported for file /newroot/399/file0 (pid: 5991 comm: kworker/1:8) [ 786.751748][ T56] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 786.908485][T12357] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 786.915888][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 786.915920][ T56] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.915957][ T56] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 786.915981][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.960622][ T56] usb 1-1: config 0 descriptor?? [ 787.000325][T12357] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 787.042302][T12357] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 787.100290][T12357] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 787.373932][ T56] isku 0003:1E7D:319C.001B: item fetching failed at offset 5/7 [ 787.374726][ T56] isku 0003:1E7D:319C.001B: parse failed [ 787.374796][ T56] isku 0003:1E7D:319C.001B: probe with driver isku failed with error -22 [ 787.579951][T12729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 787.580482][T12729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 787.603877][ T56] usb 1-1: USB disconnect, device number 58 [ 787.605791][T12357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.734197][T12357] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.756974][T11589] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.757198][T11589] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.782293][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.782436][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.012386][T12752] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1865'. [ 788.014833][T12752] 9p: Bad value for 'rfdno' [ 790.717235][T12357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.450440][ T5991] kernel read not supported for file /newroot/397/file0 (pid: 5991 comm: kworker/1:8) [ 793.167124][T12357] veth0_vlan: entered promiscuous mode [ 793.187987][T12357] veth1_vlan: entered promiscuous mode [ 793.291952][T12357] veth0_macvtap: entered promiscuous mode [ 793.318078][T12357] veth1_macvtap: entered promiscuous mode [ 793.436955][T12357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.460551][T12357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.497921][ T43] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.498957][ T43] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.498997][ T43] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.499032][ T43] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 795.244406][ T6471] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 795.407171][ T6471] usb 1-1: Using ep0 maxpacket: 32 [ 795.420659][ T6471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.420690][ T6471] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.420734][ T6471] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 795.420756][ T6471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.426390][ T6471] usb 1-1: config 0 descriptor?? [ 795.881176][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 795.881738][ T6471] usbhid 1-1:0.0: can't add hid device: -71 [ 795.881839][ T6471] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 795.916197][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 795.939057][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 795.949462][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 795.954873][ T6471] usb 1-1: USB disconnect, device number 59 [ 795.973806][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 798.021717][ T5812] Bluetooth: hci4: command tx timeout [ 800.222752][ T5812] Bluetooth: hci4: command tx timeout [ 801.081819][T12837] 9p: Bad value for 'rfdno' [ 801.438308][T12847] 9p: Bad value for 'rfdno' [ 802.261758][ T5812] Bluetooth: hci4: command tx timeout [ 802.491851][T12843] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1880'. [ 802.646137][ T5970] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 802.791817][ T5970] usb 2-1: Using ep0 maxpacket: 32 [ 802.793851][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.793877][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.793916][ T5970] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 802.793936][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.798038][ T5970] usb 2-1: config 0 descriptor?? [ 802.938790][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 803.013734][ T5970] usbhid 2-1:0.0: can't add hid device: -71 [ 803.013855][ T5970] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 803.035371][ T5970] usb 2-1: USB disconnect, device number 45 [ 803.109911][T12804] chnl_net:caif_netlink_parms(): no params data found [ 803.400061][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.380020][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 804.855348][T12891] 9p: Bad value for 'rfdno' [ 805.609233][ T5812] Bluetooth: hci4: command tx timeout [ 805.878115][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.231852][T12907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1911'. [ 806.232081][T12804] bridge0: port 1(bridge_slave_0) entered blocking state [ 806.232962][T12804] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.233189][T12804] bridge_slave_0: entered allmulticast mode [ 806.238116][T12907] 9p: Bad value for 'rfdno' [ 806.239028][T12804] bridge_slave_0: entered promiscuous mode [ 806.307236][T12804] bridge0: port 2(bridge_slave_1) entered blocking state [ 806.307758][T12804] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.307959][T12804] bridge_slave_1: entered allmulticast mode [ 806.335587][T12804] bridge_slave_1: entered promiscuous mode [ 807.021088][ T6240] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 807.328412][T12804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 807.530119][T12804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.985183][ T6240] usb 1-1: Using ep0 maxpacket: 32 [ 808.105653][ T6240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 808.105686][ T6240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 808.105730][ T6240] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 808.105752][ T6240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.110778][ T6240] usb 1-1: config 0 descriptor?? [ 808.379604][ T6240] usbhid 1-1:0.0: can't add hid device: -71 [ 808.379727][ T6240] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 808.441827][ T6240] usb 1-1: USB disconnect, device number 60 [ 808.559868][ T5970] kernel read not supported for file /newroot/422/file0 (pid: 5970 comm: kworker/0:9) [ 809.851044][T12804] team0: Port device team_slave_0 added [ 809.860461][T12804] team0: Port device team_slave_1 added [ 811.461910][ T5889] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 813.076506][ T59] bridge_slave_1: left allmulticast mode [ 813.076535][ T59] bridge_slave_1: left promiscuous mode [ 813.076769][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.203124][ T59] bridge_slave_0: left allmulticast mode [ 813.203154][ T59] bridge_slave_0: left promiscuous mode [ 813.203421][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.971398][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.971467][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 813.974837][ T5889] usb 5-1: device not accepting address 40, error -71 [ 815.119003][T12966] overlayfs: failed to resolve './bus': -2 [ 816.655651][ T5889] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 817.238651][T12981] 9p: Bad value for 'rfdno' [ 817.581675][ T5889] usb 5-1: Using ep0 maxpacket: 32 [ 817.600883][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.600917][ T5889] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.600963][ T5889] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 817.600984][ T5889] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.695819][ T5889] usb 5-1: config 0 descriptor?? [ 817.907065][ T5889] usbhid 5-1:0.0: can't add hid device: -71 [ 817.908373][ T5889] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 817.919972][ T5889] usb 5-1: USB disconnect, device number 42 [ 819.342649][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 819.382265][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 819.405204][ T59] bond0 (unregistering): Released all slaves [ 819.452571][T12804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 819.452589][T12804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.452616][T12804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.453179][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1929'. [ 819.464322][T12804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.464339][T12804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 819.464366][T12804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.481683][ T5889] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 819.641635][ T5889] usb 5-1: Using ep0 maxpacket: 16 [ 819.646885][ T5889] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 819.646911][ T5889] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 819.651171][ T5889] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 819.651198][ T5889] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.651218][ T5889] usb 5-1: Product: syz [ 819.651232][ T5889] usb 5-1: Manufacturer: syz [ 819.651247][ T5889] usb 5-1: SerialNumber: syz [ 820.774234][T12804] hsr_slave_0: entered promiscuous mode [ 820.775506][T12804] hsr_slave_1: entered promiscuous mode [ 820.776388][T12804] debugfs: 'hsr0' already exists in 'hsr' [ 820.776410][T12804] Cannot create hsr debugfs directory [ 822.469358][ T5970] usb 5-1: USB disconnect, device number 43 [ 823.031704][ T5970] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 823.181841][ T5970] usb 5-1: Using ep0 maxpacket: 32 [ 823.184195][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.184225][ T5970] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.184262][ T5970] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 823.184293][ T5970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.247107][ T5970] usb 5-1: config 0 descriptor?? [ 823.489525][ T5970] usbhid 5-1:0.0: can't add hid device: -71 [ 823.489644][ T5970] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 823.532008][ T5970] usb 5-1: USB disconnect, device number 44 [ 824.692015][ T59] hsr_slave_0: left promiscuous mode [ 824.724760][ T59] hsr_slave_1: left promiscuous mode [ 824.740108][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.740137][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 824.805739][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.805767][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.730764][T13046] 9p: Bad value for 'rfdno' [ 825.872971][ T59] veth1_macvtap: left promiscuous mode [ 825.873084][ T59] veth0_macvtap: left promiscuous mode [ 825.873328][ T59] veth1_vlan: left promiscuous mode [ 825.873504][ T59] veth0_vlan: left promiscuous mode [ 829.441764][ T7589] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 829.600222][ T7589] usb 1-1: Using ep0 maxpacket: 16 [ 829.610888][ T7589] usb 1-1: config 0 has no interfaces? [ 829.687252][ T7589] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 829.687282][ T7589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.687301][ T7589] usb 1-1: Product: syz [ 829.687314][ T7589] usb 1-1: Manufacturer: syz [ 829.687326][ T7589] usb 1-1: SerialNumber: syz [ 829.756307][ T7589] usb 1-1: config 0 descriptor?? [ 831.271209][ T8355] usb 1-1: USB disconnect, device number 61 [ 833.443856][ T59] team0 (unregistering): Port device team_slave_1 removed [ 833.722600][ T59] team0 (unregistering): Port device team_slave_0 removed [ 835.391763][ T7589] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 835.541651][ T7589] usb 1-1: Using ep0 maxpacket: 16 [ 835.572003][ T7589] usb 1-1: config 0 has no interfaces? [ 835.574514][ T7589] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 835.574541][ T7589] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.574559][ T7589] usb 1-1: Product: syz [ 835.574574][ T7589] usb 1-1: Manufacturer: syz [ 835.574588][ T7589] usb 1-1: SerialNumber: syz [ 835.579561][ T7589] usb 1-1: config 0 descriptor?? [ 837.481990][T13045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1949'. [ 837.483954][T13075] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1957'. [ 837.592383][ T5991] usb 1-1: USB disconnect, device number 62 [ 840.192078][ T5970] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 840.381680][ T5970] usb 1-1: Using ep0 maxpacket: 16 [ 840.384726][ T5970] usb 1-1: config 0 has no interfaces? [ 840.404708][ T5970] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 840.404738][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.404758][ T5970] usb 1-1: Product: syz [ 840.404773][ T5970] usb 1-1: Manufacturer: syz [ 840.404788][ T5970] usb 1-1: SerialNumber: syz [ 840.410076][ T5970] usb 1-1: config 0 descriptor?? [ 841.511829][ T5970] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 842.491653][ T5970] usb 2-1: Using ep0 maxpacket: 16 [ 842.496234][T12804] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 842.496971][ T5970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 842.497001][ T5970] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 842.500058][ T5970] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 842.500083][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.500102][ T5970] usb 2-1: Product: syz [ 842.500116][ T5970] usb 2-1: Manufacturer: syz [ 842.500130][ T5970] usb 2-1: SerialNumber: syz [ 842.593791][T12804] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 842.624267][ T6085] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 842.653720][ T8355] usb 1-1: USB disconnect, device number 63 [ 842.695411][T12804] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 842.739321][T13138] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1977'. [ 842.740656][T12804] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 842.769411][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 842.775391][ T5970] usb 2-1: cannot find UAC_HEADER [ 842.784035][ T6085] usb 5-1: Using ep0 maxpacket: 16 [ 842.785852][ T6085] usb 5-1: config 0 has no interfaces? [ 842.788160][ T6085] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 842.788185][ T6085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.788203][ T6085] usb 5-1: Product: syz [ 842.788217][ T6085] usb 5-1: Manufacturer: syz [ 842.788231][ T6085] usb 5-1: SerialNumber: syz [ 842.812044][T13138] 9p: Bad value for 'rfdno' [ 842.843326][ T6085] usb 5-1: config 0 descriptor?? [ 842.859178][ T5970] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 842.885429][ T5970] usb 2-1: USB disconnect, device number 46 [ 842.950869][T13069] udevd[13069]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 843.093719][T12804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.139230][T12804] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.162723][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.162939][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.189868][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.190073][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.344405][T12804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 845.771949][ T6471] usb 5-1: USB disconnect, device number 45 [ 847.844580][T12804] veth0_vlan: entered promiscuous mode [ 847.867759][T12804] veth1_vlan: entered promiscuous mode [ 848.100928][T12804] veth0_macvtap: entered promiscuous mode [ 848.119852][T12804] veth1_macvtap: entered promiscuous mode [ 848.166203][T12804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.240610][T12804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.305250][ T1011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.305990][ T1011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.306030][ T1011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.306066][ T1011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.946083][ T1218] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 848.946105][ T1218] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 849.443239][ T1423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 849.443287][ T1423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.882140][ T56] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 851.883446][ T6471] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 851.912528][ T6019] bond0: (slave bond_slave_0): interface is now down [ 851.912552][ T6019] bond0: (slave bond_slave_1): interface is now down [ 853.057508][ T6019] bond0: now running without any active interface! [ 853.361858][ T56] usb 2-1: Using ep0 maxpacket: 16 [ 853.365826][ T56] usb 2-1: config 0 has no interfaces? [ 853.368228][ T56] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 853.368254][ T56] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.368274][ T56] usb 2-1: Product: syz [ 853.368287][ T56] usb 2-1: Manufacturer: syz [ 853.368301][ T56] usb 2-1: SerialNumber: syz [ 853.464414][ T6471] usb 5-1: Using ep0 maxpacket: 16 [ 853.494405][ T6471] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 853.494431][ T6471] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 853.526807][ T56] usb 2-1: config 0 descriptor?? [ 853.543037][ T6471] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 853.543066][ T6471] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.543086][ T6471] usb 5-1: Product: syz [ 853.543098][ T6471] usb 5-1: Manufacturer: syz [ 853.543112][ T6471] usb 5-1: SerialNumber: syz [ 853.864274][ T6471] usb 5-1: cannot find UAC_HEADER [ 853.988052][ T6471] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 854.049536][ T6471] usb 5-1: USB disconnect, device number 46 [ 854.085921][T13219] udevd[13219]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 855.791389][T13227] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 856.407930][ T5812] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 856.521710][ T56] usb 2-1: can't set config #0, error -71 [ 856.543925][ T56] usb 2-1: USB disconnect, device number 47 [ 861.725009][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2010'. [ 862.253895][ T5812] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 862.253971][ T5812] CPU: 1 UID: 0 PID: 5812 Comm: kworker/u9:5 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 862.254002][ T5812] Tainted: [L]=SOFTLOCKUP [ 862.254010][ T5812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 862.254025][ T5812] Workqueue: hci4 hci_rx_work [ 862.254051][ T5812] Call Trace: [ 862.254060][ T5812] [ 862.254070][ T5812] dump_stack_lvl+0xe8/0x150 [ 862.254101][ T5812] sysfs_create_dir_ns+0x259/0x280 [ 862.254130][ T5812] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 862.254157][ T5812] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 862.254197][ T5812] ? rt_spin_unlock+0x161/0x200 [ 862.254225][ T5812] kobject_add_internal+0x6b1/0xcd0 [ 862.254259][ T5812] kobject_add+0x155/0x220 [ 862.254285][ T5812] ? __pfx_kobject_add+0x10/0x10 [ 862.254315][ T5812] ? get_device_parent+0x370/0x3a0 [ 862.254343][ T5812] device_add+0x408/0xb80 [ 862.254369][ T5812] hci_conn_add_sysfs+0xd5/0x210 [ 862.254402][ T5812] le_conn_complete_evt+0xf1d/0x1420 [ 862.254426][ T5812] ? lockdep_hardirqs_on+0x7b/0x110 [ 862.254455][ T5812] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 862.254496][ T5812] hci_le_conn_complete_evt+0x187/0x480 [ 862.254528][ T5812] hci_event_packet+0x78f/0x1260 [ 862.254561][ T5812] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 862.254588][ T5812] ? __pfx_hci_event_packet+0x10/0x10 [ 862.254616][ T5812] ? rt_spin_unlock+0x150/0x200 [ 862.254651][ T5812] ? hci_send_to_monitor+0xe2/0x590 [ 862.254680][ T5812] hci_rx_work+0x3ee/0x1060 [ 862.254707][ T5812] ? process_scheduled_works+0x9ef/0x1770 [ 862.254732][ T5812] process_scheduled_works+0xad1/0x1770 [ 862.254784][ T5812] ? __pfx_process_scheduled_works+0x10/0x10 [ 862.254803][ T5812] ? do_raw_spin_lock+0x121/0x290 [ 862.254842][ T5812] worker_thread+0x8a0/0xda0 [ 862.254891][ T5812] kthread+0x711/0x8a0 [ 862.254920][ T5812] ? __pfx_worker_thread+0x10/0x10 [ 862.254942][ T5812] ? __pfx_kthread+0x10/0x10 [ 862.254966][ T5812] ? rt_spin_unlock+0x150/0x200 [ 862.254994][ T5812] ? rt_spin_unlock+0x161/0x200 [ 862.255016][ T5812] ? __pfx_kthread+0x10/0x10 [ 862.255040][ T5812] ret_from_fork+0x510/0xa50 [ 862.255064][ T5812] ? __pfx_ret_from_fork+0x10/0x10 [ 862.255084][ T5812] ? __switch_to+0xc9e/0x1480 [ 862.255115][ T5812] ? __pfx_kthread+0x10/0x10 [ 862.255144][ T5812] ret_from_fork_asm+0x1a/0x30 [ 862.255199][ T5812] [ 862.255326][ T5812] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 862.255412][ T5812] Bluetooth: hci4: failed to register connection device [ 864.201758][ T5970] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 864.351659][ T5970] usb 1-1: Using ep0 maxpacket: 16 [ 864.353884][ T5970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 864.353961][ T5970] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 864.360062][ T5970] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 864.360148][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.360168][ T5970] usb 1-1: Product: syz [ 864.360183][ T5970] usb 1-1: Manufacturer: syz [ 864.360197][ T5970] usb 1-1: SerialNumber: syz [ 864.541754][ T56] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 864.680956][ T5970] usb 1-1: cannot find UAC_HEADER [ 864.704404][ T5970] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 865.285050][ T5970] usb 1-1: USB disconnect, device number 64 [ 865.425018][T13069] udevd[13069]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.475249][ T56] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 865.475275][ T56] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 865.502017][ T56] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 865.502048][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.502067][ T56] usb 7-1: Product: syz [ 865.502081][ T56] usb 7-1: Manufacturer: syz [ 865.502095][ T56] usb 7-1: SerialNumber: syz [ 865.521683][ T5869] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 865.551313][ T56] usb 7-1: config 0 descriptor?? [ 867.942390][ T5869] usb 5-1: Using ep0 maxpacket: 16 [ 867.943595][ T5869] usb 5-1: device descriptor read/all, error -71 [ 868.058277][ T6762] usb 7-1: USB disconnect, device number 2 [ 868.832728][ T5799] Bluetooth: hci4: command 0x0406 tx timeout [ 872.086343][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2023'. [ 872.556535][ T5812] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 873.192190][T13351] overlayfs: failed to resolve './bus': -2 [ 875.302978][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.303048][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.585601][ T5798] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 879.761629][ T5798] usb 2-1: Using ep0 maxpacket: 16 [ 879.765913][ T5798] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 879.765929][ T5798] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 879.768489][ T5798] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 879.768514][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.768525][ T5798] usb 2-1: Product: syz [ 879.768533][ T5798] usb 2-1: Manufacturer: syz [ 879.768540][ T5798] usb 2-1: SerialNumber: syz [ 880.262940][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 880.275072][ T5798] usb 2-1: cannot find UAC_HEADER [ 880.418916][ T5798] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 880.437020][ T5798] usb 2-1: USB disconnect, device number 48 [ 880.695601][T13367] udevd[13367]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.504936][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 885.908385][T13422] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2050'. [ 885.925333][T13422] 9p: Bad value for 'rfdno' [ 890.056646][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 890.073642][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 890.099298][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 890.105402][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 890.131944][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 892.186477][ T5799] Bluetooth: hci5: command tx timeout [ 894.336955][ T5799] Bluetooth: hci5: command tx timeout [ 896.246096][T13441] chnl_net:caif_netlink_parms(): no params data found [ 897.427451][ T5812] Bluetooth: hci5: command tx timeout [ 899.472030][ T5812] Bluetooth: hci5: command tx timeout [ 899.739787][T13491] 9p: Bad value for 'rfdno' [ 900.678439][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.061698][T13490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2067'. [ 902.789668][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 904.567675][T13441] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.569942][T13441] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.570185][T13441] bridge_slave_0: entered allmulticast mode [ 904.615803][T13441] bridge_slave_0: entered promiscuous mode [ 905.326164][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.420493][T13441] bridge0: port 2(bridge_slave_1) entered blocking state [ 905.425014][T13441] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.425254][T13441] bridge_slave_1: entered allmulticast mode [ 905.437366][T13441] bridge_slave_1: entered promiscuous mode [ 907.116691][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 907.318878][T13441] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 907.333192][T13441] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 910.673244][T13441] team0: Port device team_slave_0 added [ 910.676808][T13441] team0: Port device team_slave_1 added [ 912.409999][T13441] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.410017][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.410044][T13441] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.469884][T13441] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.469901][T13441] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 912.469929][T13441] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 913.025741][T13441] hsr_slave_0: entered promiscuous mode [ 913.027094][T13441] hsr_slave_1: entered promiscuous mode [ 913.028076][T13441] debugfs: 'hsr0' already exists in 'hsr' [ 913.028099][T13441] Cannot create hsr debugfs directory [ 915.680602][ T12] bridge_slave_1: left allmulticast mode [ 915.680623][ T12] bridge_slave_1: left promiscuous mode [ 915.680787][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 917.925110][ T12] bridge_slave_0: left allmulticast mode [ 917.925139][ T12] bridge_slave_0: left promiscuous mode [ 917.969215][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 919.351199][T13578] 9p: Bad value for 'rfdno' [ 919.874729][T13589] overlayfs: failed to resolve './bus': -2 [ 925.497272][T13603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2087'. [ 926.142290][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.183812][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.205306][ T12] bond0 (unregistering): Released all slaves [ 926.784172][T13577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2083'. [ 927.682198][T13517] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 927.851879][T13517] usb 5-1: Using ep0 maxpacket: 16 [ 927.853648][T13517] usb 5-1: config 0 has no interfaces? [ 927.855906][T13517] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 927.855931][T13517] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 927.855941][T13517] usb 5-1: Product: syz [ 927.855949][T13517] usb 5-1: Manufacturer: syz [ 927.855956][T13517] usb 5-1: SerialNumber: syz [ 927.859537][T13517] usb 5-1: config 0 descriptor?? [ 931.015831][T13517] usb 5-1: USB disconnect, device number 49 [ 932.421851][ T12] hsr_slave_0: left promiscuous mode [ 932.493803][ T12] hsr_slave_1: left promiscuous mode [ 932.501403][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 932.501429][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 932.682877][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 932.682904][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.140373][T13660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2099'. [ 936.176211][ T12] veth1_macvtap: left promiscuous mode [ 936.176319][ T12] veth0_macvtap: left promiscuous mode [ 936.176573][ T12] veth1_vlan: left promiscuous mode [ 936.176758][ T12] veth0_vlan: left promiscuous mode [ 936.597900][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.597968][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.726335][ T5812] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 937.568976][T13667] 9p: Bad value for 'rfdno' [ 941.402230][ T12] team0 (unregistering): Port device team_slave_1 removed [ 941.671422][ T12] team0 (unregistering): Port device team_slave_0 removed [ 943.977309][T13665] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 944.004918][ T69] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 944.005844][ T69] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 944.010027][ T69] bond0: active interface up! [ 945.698583][T13689] overlayfs: failed to resolve './bus': -2 [ 946.533653][T13441] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 946.704412][T13694] 9p: Bad value for 'rfdno' [ 946.705577][T13693] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2107'. [ 946.706454][T13441] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 946.748150][T13441] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 946.863667][T13441] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 948.182847][T13441] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.303403][T13441] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.320115][T10801] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.320285][T10801] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.382437][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.382597][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 950.149928][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 951.662185][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 951.665495][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 951.675378][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 951.703732][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 953.659319][T13716] chnl_net:caif_netlink_parms(): no params data found [ 953.788362][ T5812] Bluetooth: hci4: command tx timeout [ 955.612218][T13751] input: syz0 as /devices/virtual/input/input29 [ 956.609940][ T5812] Bluetooth: hci4: command tx timeout [ 956.916887][T13756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2113'. [ 958.777914][ T5812] Bluetooth: hci4: command tx timeout [ 959.635881][T13773] overlayfs: failed to resolve './bus': -2 [ 960.581647][T10957] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 960.741782][T10957] usb 2-1: Using ep0 maxpacket: 16 [ 960.744185][T10957] usb 2-1: config 0 has no interfaces? [ 960.747160][T10957] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 960.747187][T10957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 960.747207][T10957] usb 2-1: Product: syz [ 960.747222][T10957] usb 2-1: Manufacturer: syz [ 960.747236][T10957] usb 2-1: SerialNumber: syz [ 960.804390][T10957] usb 2-1: config 0 descriptor?? [ 960.822475][ T5812] Bluetooth: hci4: command tx timeout [ 962.517405][T13716] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.517610][T13716] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.517852][T13716] bridge_slave_0: entered allmulticast mode [ 962.560465][T13716] bridge_slave_0: entered promiscuous mode [ 962.985855][T13716] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.985987][T13716] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.986223][T13716] bridge_slave_1: entered allmulticast mode [ 963.015579][T13716] bridge_slave_1: entered promiscuous mode [ 964.585847][T10957] usb 2-1: USB disconnect, device number 49 [ 964.892447][T13811] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2128'. [ 965.014889][T13817] input: syz0 as /devices/virtual/input/input30 [ 968.507186][T13716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.511263][T13716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.285690][T13716] team0: Port device team_slave_0 added [ 971.289239][T13716] team0: Port device team_slave_1 added [ 973.394759][T13716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.394776][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.394803][T13716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.397061][T13716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.397076][T13716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 973.397103][T13716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.046240][T13716] hsr_slave_0: entered promiscuous mode [ 974.050851][T13716] hsr_slave_1: entered promiscuous mode [ 974.552514][T13716] debugfs: 'hsr0' already exists in 'hsr' [ 974.552545][T13716] Cannot create hsr debugfs directory [ 977.193091][T13871] input: syz0 as /devices/virtual/input/input31 [ 978.150906][T13879] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2142'. [ 979.512001][T11589] bridge_slave_1: left allmulticast mode [ 979.512031][T11589] bridge_slave_1: left promiscuous mode [ 979.512278][T11589] bridge0: port 2(bridge_slave_1) entered disabled state [ 979.541117][T13886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2143'. [ 979.631985][T11589] bridge_slave_0: left allmulticast mode [ 979.632031][T11589] bridge_slave_0: left promiscuous mode [ 979.632847][T11589] bridge0: port 1(bridge_slave_0) entered disabled state [ 980.189721][ T5812] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 986.225506][T11589] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 986.282239][T11589] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 986.315700][T11589] bond0 (unregistering): Released all slaves [ 986.436347][T13891] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2144'. [ 989.561752][T13927] input: syz0 as /devices/virtual/input/input32 [ 992.538378][ T10] kernel read not supported for file /newroot/460/file0 (pid: 10 comm: kworker/0:1) [ 992.572248][T11589] hsr_slave_0: left promiscuous mode [ 992.603752][T11589] hsr_slave_1: left promiscuous mode [ 992.604726][T11589] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 992.625714][T11589] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 992.781908][ T5991] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 992.953997][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 992.954031][ T5991] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.954070][ T5991] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 992.954093][ T5991] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.959381][ T5991] usb 3-1: config 0 descriptor?? [ 993.958101][ T5991] isku 0003:1E7D:319C.001C: item fetching failed at offset 5/7 [ 993.958841][ T5991] isku 0003:1E7D:319C.001C: parse failed [ 993.958905][ T5991] isku 0003:1E7D:319C.001C: probe with driver isku failed with error -22 [ 994.237230][T13954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.238257][T13954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.222942][T11589] team0 (unregistering): Port device team_slave_1 removed [ 997.442086][T11589] team0 (unregistering): Port device team_slave_0 removed [ 998.026483][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.026570][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.561359][ T147] bond0: (slave bond_slave_0): interface is now down [ 999.561385][ T147] bond0: (slave bond_slave_1): interface is now down [ 999.701698][T10801] bond0: (slave bond_slave_0): interface is now down [ 999.701722][T10801] bond0: (slave bond_slave_1): interface is now down [ 999.702404][ T6471] usb 3-1: USB disconnect, device number 27 [ 999.841851][ T12] bond0: (slave bond_slave_0): interface is now down [ 999.841876][ T12] bond0: (slave bond_slave_1): interface is now down [ 999.981764][ T1457] bond0: (slave bond_slave_0): interface is now down [ 999.981789][ T1457] bond0: (slave bond_slave_1): interface is now down [ 1001.550718][ T147] bond0: (slave bond_slave_0): interface is now down [ 1001.550742][ T147] bond0: (slave bond_slave_1): interface is now down [ 1001.771292][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1001.771316][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1001.783240][ T1218] bond0: now running without any active interface! [ 1006.292226][ T147] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 1006.292554][ T147] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 1006.300293][ T147] bond0: active interface up! [ 1006.829358][T14007] input: syz0 as /devices/virtual/input/input33 [ 1007.794490][ T5991] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 1007.803613][T13716] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1007.954281][T13716] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1009.225546][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1009.225580][ T5991] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.225617][ T5991] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1009.225640][ T5991] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.280555][ T5991] usb 2-1: config 0 descriptor?? [ 1009.386467][T13716] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1009.512394][T13716] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1009.594078][ T5991] usbhid 2-1:0.0: can't add hid device: -71 [ 1009.594196][ T5991] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1009.628370][ T5991] usb 2-1: USB disconnect, device number 50 [ 1012.253000][ T5799] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1012.257314][ T5799] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1012.260937][ T5799] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1012.294741][ T5799] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1012.295433][ T5799] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1014.915352][ T5812] Bluetooth: hci5: command tx timeout [ 1016.875279][T14066] input: syz0 as /devices/virtual/input/input34 [ 1017.108966][ T5812] Bluetooth: hci5: command tx timeout [ 1018.052180][ T6240] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 1018.205642][ T6240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1018.205676][ T6240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1018.205706][ T6240] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 1018.205718][ T6240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.244260][ T6240] usb 5-1: config 0 descriptor?? [ 1018.307049][T14034] chnl_net:caif_netlink_parms(): no params data found [ 1018.650524][ T6240] isku 0003:1E7D:319C.001D: item fetching failed at offset 5/7 [ 1018.650934][ T6240] isku 0003:1E7D:319C.001D: parse failed [ 1018.650972][ T6240] isku 0003:1E7D:319C.001D: probe with driver isku failed with error -22 [ 1019.716564][ T5812] Bluetooth: hci5: command tx timeout [ 1019.770948][T14082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1019.781999][T14082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1019.789862][ T8830] bond0: (slave bond_slave_0): interface is now down [ 1019.875089][ T8830] bond0: (slave bond_slave_1): interface is now down [ 1019.925023][T13517] usb 5-1: USB disconnect, device number 50 [ 1020.011685][ T5950] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1020.011740][ T147] bond0: (slave bond_slave_0): interface is now down [ 1020.011758][ T147] bond0: (slave bond_slave_1): interface is now down [ 1020.154663][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1020.154686][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1020.171770][ T5950] usb 3-1: Using ep0 maxpacket: 16 [ 1020.189492][ T5950] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.189518][ T5950] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.211394][ T5950] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1020.211420][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.211430][ T5950] usb 3-1: Product: syz [ 1020.211438][ T5950] usb 3-1: Manufacturer: syz [ 1020.211445][ T5950] usb 3-1: SerialNumber: syz [ 1020.296215][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1020.296239][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1020.435319][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1020.435344][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1020.576056][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1020.576080][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1021.581956][ T7183] bond0: (slave bond_slave_0): interface is now down [ 1021.581979][ T7183] bond0: (slave bond_slave_1): interface is now down [ 1021.607680][ T5950] usb 3-1: cannot find UAC_HEADER [ 1021.735178][ T5950] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1021.745928][ T1457] bond0: (slave bond_slave_0): interface is now down [ 1021.745949][ T1457] bond0: (slave bond_slave_1): interface is now down [ 1021.759601][ T5950] usb 3-1: USB disconnect, device number 28 [ 1021.788429][ T5812] Bluetooth: hci5: command tx timeout [ 1022.011508][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1022.017866][T13964] udevd[13964]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1022.019523][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1022.927052][ T8830] bond0: (slave bond_slave_0): interface is now down [ 1022.927101][ T8830] bond0: (slave bond_slave_1): interface is now down [ 1023.244647][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1023.244673][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1024.094862][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1024.094933][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1024.145381][ T3772] bond0: (slave bond_slave_0): link status definitely up, 10000 Mbps full duplex [ 1024.146144][ T3772] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex [ 1024.148121][ T3772] bond0: active interface up! [ 1024.271329][T14099] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2192'. [ 1024.341695][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1024.341719][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1024.758876][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1024.758901][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1024.891689][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1024.892656][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1025.048300][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1025.048326][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1025.198514][T14109] overlayfs: missing 'lowerdir' [ 1026.027435][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1026.027458][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1026.223895][ T8830] bond0: (slave bond_slave_0): interface is now down [ 1026.223920][ T8830] bond0: (slave bond_slave_1): interface is now down [ 1026.362002][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1026.362026][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1026.606877][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1026.606900][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1026.642734][T14120] 9p: Bad value for 'rfdno' [ 1027.137360][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1027.137440][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1027.607449][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2188'. [ 1027.637201][ T1457] bond0: (slave bond_slave_0): interface is now down [ 1027.637223][ T1457] bond0: (slave bond_slave_1): interface is now down [ 1027.789553][ T1334] bond0: (slave bond_slave_0): interface is now down [ 1027.789578][ T1334] bond0: (slave bond_slave_1): interface is now down [ 1027.941774][ T43] bond0: (slave bond_slave_0): interface is now down [ 1027.941797][ T43] bond0: (slave bond_slave_1): interface is now down [ 1028.842749][ T6019] bond0: (slave bond_slave_0): interface is now down [ 1028.842775][ T6019] bond0: (slave bond_slave_1): interface is now down [ 1029.005689][T14034] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.006395][T14034] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.006625][T14034] bridge_slave_0: entered allmulticast mode [ 1029.045529][ T1442] bond0: (slave bond_slave_0): interface is now down [ 1029.045551][ T1442] bond0: (slave bond_slave_1): interface is now down [ 1029.047114][T14034] bridge_slave_0: entered promiscuous mode [ 1029.062660][T14034] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.062800][T14034] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.063014][T14034] bridge_slave_1: entered allmulticast mode [ 1029.074062][T14034] bridge_slave_1: entered promiscuous mode [ 1029.312093][ T7183] bond0: (slave bond_slave_0): interface is now down [ 1029.312118][ T7183] bond0: (slave bond_slave_1): interface is now down [ 1030.250968][ T147] bond0: (slave bond_slave_0): interface is now down [ 1030.250995][ T147] bond0: (slave bond_slave_1): interface is now down [ 1030.425065][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1030.425089][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1030.571942][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1030.571958][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1030.644298][T14034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1030.722263][ T1442] bond0: (slave bond_slave_0): interface is now down [ 1030.722288][ T1442] bond0: (slave bond_slave_1): interface is now down [ 1030.803927][T14034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1030.890247][T11589] bond0: (slave bond_slave_0): interface is now down [ 1030.890264][T11589] bond0: (slave bond_slave_1): interface is now down [ 1031.954283][ T3582] bond0: (slave bond_slave_0): interface is now down [ 1031.954306][ T3582] bond0: (slave bond_slave_1): interface is now down [ 1032.327294][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1032.327318][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1032.463330][T13516] bond0: (slave bond_slave_0): interface is now down [ 1032.463354][T13516] bond0: (slave bond_slave_1): interface is now down [ 1032.606689][T11589] bond0: (slave bond_slave_0): interface is now down [ 1032.606705][T11589] bond0: (slave bond_slave_1): interface is now down [ 1032.856106][T11589] bond0: (slave bond_slave_0): interface is now down [ 1032.856131][T11589] bond0: (slave bond_slave_1): interface is now down [ 1033.029616][T14165] overlayfs: missing 'lowerdir' [ 1033.802076][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1033.802096][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1033.972508][T11589] bond0: (slave bond_slave_0): interface is now down [ 1033.972532][T11589] bond0: (slave bond_slave_1): interface is now down [ 1034.111969][ T6019] bond0: (slave bond_slave_0): interface is now down [ 1034.111991][ T6019] bond0: (slave bond_slave_1): interface is now down [ 1034.267033][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1034.267057][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1034.419587][T14178] input: syz0 as /devices/virtual/input/input35 [ 1034.728698][T11589] bond0: (slave bond_slave_0): interface is now down [ 1034.728723][T11589] bond0: (slave bond_slave_1): interface is now down [ 1034.863810][T14013] bond0: (slave bond_slave_0): interface is now down [ 1034.863835][T14013] bond0: (slave bond_slave_1): interface is now down [ 1034.924264][T14034] team0: Port device team_slave_0 added [ 1034.927219][T14034] team0: Port device team_slave_1 added [ 1035.053010][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1035.053028][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1035.309819][T13516] bond0: (slave bond_slave_0): interface is now down [ 1035.309844][T13516] bond0: (slave bond_slave_1): interface is now down [ 1037.691692][ T7183] bond0: (slave bond_slave_0): interface is now down [ 1037.691716][ T7183] bond0: (slave bond_slave_1): interface is now down [ 1037.853749][ T7183] bond0: (slave bond_slave_0): interface is now down [ 1037.853769][ T7183] bond0: (slave bond_slave_1): interface is now down [ 1037.991870][ T3582] bond0: (slave bond_slave_0): interface is now down [ 1037.991893][ T3582] bond0: (slave bond_slave_1): interface is now down [ 1038.136678][T13516] bond0: (slave bond_slave_0): interface is now down [ 1038.136700][T13516] bond0: (slave bond_slave_1): interface is now down [ 1039.182723][T14013] bond0: (slave bond_slave_0): interface is now down [ 1039.182755][T14013] bond0: (slave bond_slave_1): interface is now down [ 1040.052894][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1040.052916][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1040.148936][T14034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1040.148955][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.148982][T14034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1040.191987][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1040.192009][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1040.224771][T14034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1040.224787][T14034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1040.224813][T14034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1040.341778][T11589] bond0: (slave bond_slave_0): interface is now down [ 1040.341803][T11589] bond0: (slave bond_slave_1): interface is now down [ 1040.482040][T14013] bond0: (slave bond_slave_0): interface is now down [ 1040.482064][T14013] bond0: (slave bond_slave_1): interface is now down [ 1040.590288][ T59] bridge_slave_1: left allmulticast mode [ 1040.590314][ T59] bridge_slave_1: left promiscuous mode [ 1040.590532][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.621800][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1040.621822][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1040.761919][ T7183] bond0: (slave bond_slave_0): interface is now down [ 1040.761945][ T7183] bond0: (slave bond_slave_1): interface is now down [ 1040.783311][ T59] bridge_slave_0: left allmulticast mode [ 1040.783340][ T59] bridge_slave_0: left promiscuous mode [ 1040.783607][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.901794][T14013] bond0: (slave bond_slave_0): interface is now down [ 1040.901818][T14013] bond0: (slave bond_slave_1): interface is now down [ 1041.041901][T14013] bond0: (slave bond_slave_0): interface is now down [ 1041.041923][T14013] bond0: (slave bond_slave_1): interface is now down [ 1041.277460][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1041.277485][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1041.490211][ T1457] bond0: (slave bond_slave_0): interface is now down [ 1041.490260][ T1457] bond0: (slave bond_slave_1): interface is now down [ 1041.625847][ T13] bond0: (slave bond_slave_0): interface is now down [ 1041.625897][ T13] bond0: (slave bond_slave_1): interface is now down [ 1041.763312][ T6019] bond0: (slave bond_slave_0): interface is now down [ 1041.763360][ T6019] bond0: (slave bond_slave_1): interface is now down [ 1041.902508][ T6019] bond0: (slave bond_slave_0): interface is now down [ 1041.902559][ T6019] bond0: (slave bond_slave_1): interface is now down [ 1042.285140][ T6019] bond0: (slave bond_slave_0): interface is now down [ 1042.285162][ T6019] bond0: (slave bond_slave_1): interface is now down [ 1042.557360][T11589] bond0: (slave bond_slave_0): interface is now down [ 1042.557380][T11589] bond0: (slave bond_slave_1): interface is now down [ 1043.235387][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1043.235412][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1043.372148][ T13] bond0: (slave bond_slave_0): interface is now down [ 1043.372172][ T13] bond0: (slave bond_slave_1): interface is now down [ 1043.521705][ T13] bond0: (slave bond_slave_0): interface is now down [ 1043.521729][ T13] bond0: (slave bond_slave_1): interface is now down [ 1043.576744][T14227] overlayfs: failed to resolve './file1': -2 [ 1044.671631][ T13] bond0: (slave bond_slave_0): interface is now down [ 1044.671658][ T13] bond0: (slave bond_slave_1): interface is now down [ 1044.812712][T11589] bond0: (slave bond_slave_0): interface is now down [ 1044.812736][T11589] bond0: (slave bond_slave_1): interface is now down [ 1044.865751][T14234] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2222'. [ 1044.934494][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.960822][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1044.960860][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1045.052943][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.095896][ T1442] bond0: (slave bond_slave_0): interface is now down [ 1045.095936][ T1442] bond0: (slave bond_slave_1): interface is now down [ 1045.106115][ T59] bond0 (unregistering): Released all slaves [ 1045.291785][ T1334] bond0: (slave bond_slave_0): interface is now down [ 1045.291822][ T1334] bond0: (slave bond_slave_1): interface is now down [ 1045.446450][ T147] bond0: (slave bond_slave_0): interface is now down [ 1045.446474][ T147] bond0: (slave bond_slave_1): interface is now down [ 1045.581786][ T1011] bond0: (slave bond_slave_0): interface is now down [ 1045.581810][ T1011] bond0: (slave bond_slave_1): interface is now down [ 1045.591866][ T6240] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1045.722179][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1045.722204][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1045.741731][ T6240] usb 1-1: Using ep0 maxpacket: 16 [ 1045.745756][ T6240] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.745780][ T6240] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1045.826769][T14034] hsr_slave_0: entered promiscuous mode [ 1045.827592][T14034] hsr_slave_1: entered promiscuous mode [ 1045.828147][T14034] debugfs: 'hsr0' already exists in 'hsr' [ 1045.828166][T14034] Cannot create hsr debugfs directory [ 1045.934014][T14245] overlayfs: missing 'lowerdir' [ 1046.587445][ T6240] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1046.587527][ T6240] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.587572][ T6240] usb 1-1: Product: syz [ 1046.587612][ T6240] usb 1-1: Manufacturer: syz [ 1046.587652][ T6240] usb 1-1: SerialNumber: syz [ 1046.631145][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1046.631168][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1046.928419][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1046.928442][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1046.930502][ T7748] bond0: now running without any active interface! [ 1047.737053][ T6240] usb 1-1: cannot find UAC_HEADER [ 1047.877695][ T6240] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1047.891163][ T6240] usb 1-1: USB disconnect, device number 65 [ 1048.094120][T14240] udevd[14240]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1050.063978][ T59] hsr_slave_0: left promiscuous mode [ 1050.191734][ T59] hsr_slave_1: left promiscuous mode [ 1050.192753][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1051.300932][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1052.264041][T14277] overlayfs: failed to resolve './file1': -2 [ 1055.468758][T14291] overlayfs: failed to resolve './bus': -2 [ 1055.685344][ T59] team0 (unregistering): Port device team_slave_1 removed [ 1055.792154][ T59] team0 (unregistering): Port device team_slave_0 removed [ 1056.378314][T14300] overlayfs: missing 'lowerdir' [ 1057.921590][ T1442] bond0: (slave bond_slave_0): interface is now down [ 1057.921613][ T1442] bond0: (slave bond_slave_1): interface is now down [ 1058.062204][T11589] bond0: (slave bond_slave_0): interface is now down [ 1058.062228][T11589] bond0: (slave bond_slave_1): interface is now down [ 1060.217039][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.217108][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.223937][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1060.223957][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1060.363278][ T1011] bond0: (slave bond_slave_0): interface is now down [ 1060.363296][ T1011] bond0: (slave bond_slave_1): interface is now down [ 1060.581931][ T1218] bond0: (slave bond_slave_0): interface is now down [ 1060.581955][ T1218] bond0: (slave bond_slave_1): interface is now down [ 1060.817100][T14317] overlayfs: missing 'lowerdir' [ 1061.249525][ T7183] bond0: (slave bond_slave_0): interface is now down [ 1061.249612][ T7183] bond0: (slave bond_slave_1): interface is now down [ 1061.743251][T14013] bond0: (slave bond_slave_0): interface is now down [ 1061.743275][T14013] bond0: (slave bond_slave_1): interface is now down [ 1061.882258][ T1334] bond0: (slave bond_slave_0): interface is now down [ 1061.882282][ T1334] bond0: (slave bond_slave_1): interface is now down [ 1062.021759][ T7748] bond0: (slave bond_slave_0): interface is now down [ 1062.021781][ T7748] bond0: (slave bond_slave_1): interface is now down [ 1062.161688][ T1531] bond0: (slave bond_slave_0): interface is now down [ 1062.161712][ T1531] bond0: (slave bond_slave_1): interface is now down [ 1062.271739][T14321] overlayfs: failed to resolve './file1': -2 [ 1062.302032][T14013] bond0: (slave bond_slave_0): interface is now down [ 1062.302054][T14013] bond0: (slave bond_slave_1): interface is now down [ 1062.444211][T14013] bond0: (slave bond_slave_0): interface is now down [ 1062.444234][T14013] bond0: (slave bond_slave_1): interface is now down [ 1062.581743][ T3772] bond0: (slave bond_slave_0): interface is now down [ 1062.581767][ T3772] bond0: (slave bond_slave_1): interface is now down [ 1062.721791][T14013] bond0: (slave bond_slave_0): interface is now down [ 1062.721812][T14013] bond0: (slave bond_slave_1): interface is now down [ 1062.722378][T14013] bond0: now running without any active interface! [ 1066.565881][T14348] overlayfs: missing 'lowerdir' [ 1067.667928][T14356] overlayfs: failed to resolve './bus': -2 [ 1071.197456][T14373] overlayfs: failed to resolve './file0': -2 [ 1071.654766][ T5799] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1071.659605][ T5799] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1071.680360][ T5799] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1071.684010][ T5799] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1071.687122][ T5799] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1074.591891][ T5812] Bluetooth: hci4: command tx timeout [ 1074.901370][T14376] chnl_net:caif_netlink_parms(): no params data found [ 1074.937544][T14391] 9p: Bad value for 'rfdno' [ 1075.468778][T14398] overlayfs: missing 'lowerdir' [ 1076.661900][ T5812] Bluetooth: hci4: command tx timeout [ 1078.454422][T14407] overlayfs: missing 'lowerdir' [ 1079.814770][ T5812] Bluetooth: hci4: command tx timeout [ 1080.537244][T14428] overlayfs: failed to resolve './file0': -2 [ 1082.120497][ T5799] Bluetooth: hci4: command tx timeout [ 1083.558386][T14376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.558575][T14376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.558802][T14376] bridge_slave_0: entered allmulticast mode [ 1083.561238][T14376] bridge_slave_0: entered promiscuous mode [ 1083.803334][T14376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.803408][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.803565][T14376] bridge_slave_1: entered allmulticast mode [ 1083.813047][T14376] bridge_slave_1: entered promiscuous mode [ 1084.285460][T14376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.289572][T14376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.652555][T14441] overlayfs: failed to resolve './bus': -2 [ 1088.433093][T14376] team0: Port device team_slave_0 added [ 1088.446110][T14376] team0: Port device team_slave_1 added [ 1088.554109][T14463] 9p: Bad value for 'rfdno' [ 1089.855900][T14376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.855918][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.855943][T14376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.858195][T14376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.858208][T14376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.858235][T14376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1090.852656][T14483] overlayfs: failed to resolve './file0': -2 [ 1090.898995][T14376] hsr_slave_0: entered promiscuous mode [ 1090.899773][T14376] hsr_slave_1: entered promiscuous mode [ 1090.900291][T14376] debugfs: 'hsr0' already exists in 'hsr' [ 1090.900306][T14376] Cannot create hsr debugfs directory [ 1093.480583][T14495] overlayfs: failed to resolve './bus': -2 [ 1094.484703][T13516] bridge_slave_1: left allmulticast mode [ 1094.484731][T13516] bridge_slave_1: left promiscuous mode [ 1094.484993][T13516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1095.944302][T13516] bridge_slave_0: left allmulticast mode [ 1095.944322][T13516] bridge_slave_0: left promiscuous mode [ 1095.944482][T13516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.358185][T13516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.598258][T13516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.674874][T13516] bond0 (unregistering): Released all slaves [ 1098.497544][T14512] overlayfs: failed to resolve './file0': -2 [ 1098.783066][T14520] overlayfs: missing 'lowerdir' [ 1099.556392][T13516] hsr_slave_0: left promiscuous mode [ 1099.612756][T13516] hsr_slave_1: left promiscuous mode [ 1099.613713][T13516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.768531][T14527] 9p: Bad value for 'rfdno' [ 1099.857343][T13516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1102.603822][T13516] team0 (unregistering): Port device team_slave_1 removed [ 1103.781345][T13516] team0 (unregistering): Port device team_slave_0 removed [ 1104.623507][T14555] overlayfs: failed to resolve './file1': -2 [ 1109.124102][T14581] overlayfs: failed to get inode (-116) [ 1109.124769][T14581] overlayfs: failed to look up (file2) for ino (-116) [ 1109.565474][ T5799] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 1110.268054][T14376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1110.298442][T14376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1110.340761][T14376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1110.360604][T14376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1110.703143][T14376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1110.756096][T14376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1110.826222][ T8830] bridge0: port 1(bridge_slave_0) entered blocking state [ 1110.826432][ T8830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1110.849033][ T8830] bridge0: port 2(bridge_slave_1) entered blocking state [ 1110.849378][ T8830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.735125][T14376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.233037][T14648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 1112.285367][T14376] veth0_vlan: entered promiscuous mode [ 1112.329657][T14376] veth1_vlan: entered promiscuous mode [ 1112.433637][T14376] veth0_macvtap: entered promiscuous mode [ 1112.454598][T14376] veth1_macvtap: entered promiscuous mode [ 1112.499292][T14376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.514183][T14376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1112.529104][ T69] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.542897][ T69] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.549140][ T69] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.549183][ T69] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1112.691831][T10957] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1112.851925][ T5950] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1112.853055][T10957] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1112.856323][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.856397][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.856430][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1112.861034][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.861081][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.861106][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1112.862462][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.862512][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.862539][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1112.864578][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.864629][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.864654][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1112.867645][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.867698][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.867723][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1112.868816][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1112.868867][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1112.868891][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1112.955668][ T8830] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1112.955691][ T8830] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.082673][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1113.082706][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1113.087903][ T5950] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 8.00 [ 1113.087930][ T5950] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 1113.087951][ T5950] usb 3-1: Product: syz [ 1113.140885][ T5950] usb 3-1: config 0 descriptor?? [ 1113.152284][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1113.152341][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1113.152368][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1113.190844][T10957] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1113.191377][T10957] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1113.191395][T10957] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1113.220431][T10957] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1113.220460][T10957] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1113.220478][T10957] usb 1-1: Product: syz [ 1113.220485][T10957] usb 1-1: Manufacturer: syz [ 1113.220493][T10957] usb 1-1: SerialNumber: syz [ 1113.255052][T10957] usb 1-1: config 0 descriptor?? [ 1113.299169][T10957] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 [ 1113.475421][T13517] usb 1-1: USB disconnect, device number 66 [ 1113.488580][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.488600][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1113.543878][T13517] yurex 1-1:0.0: USB YUREX #0 now disconnected [ 1113.561319][ T5950] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 1113.576848][ T5950] cm6533_jd 0003:0D8C:0022.001E: unknown main item tag 0x0 [ 1113.585605][ T37] kauditd_printk_skb: 16 callbacks suppressed [ 1113.585622][ T37] audit: type=1800 audit(1767217657.730:73): pid=14667 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.4.2323" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1113.634797][ T5950] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.001E/input/input36 [ 1113.696181][ T5950] cm6533_jd 0003:0D8C:0022.001E: input,hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 1113.773719][ T5970] usb 3-1: USB disconnect, device number 29 [ 1113.891958][ T5799] Bluetooth: hci1: unexpected cc 0x2027 length: 2 > 1 [ 1113.894214][ T5799] Bluetooth: hci1: unexpected event for opcode 0x2027 [ 1114.051232][T14671] fido_id[14671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1114.111320][ T5799] Bluetooth: hci1: connection err: -111 [ 1114.187014][T14686] 9pnet_virtio: no channels available for device syz [ 1114.654221][T14706] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1114.682696][T14706] kvm: user requested TSC rate below hardware speed [ 1114.882827][T14713] netlink: 'syz.7.2341': attribute type 4 has an invalid length. [ 1114.882848][T14713] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2341'. [ 1114.915466][T14713] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.367657][T14738] binder: 14737:14738 ioctl c0306201 200000000680 returned -14 [ 1115.523022][T14744] syzkaller0: entered promiscuous mode [ 1115.523048][T14744] syzkaller0: entered allmulticast mode [ 1115.548661][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 1115.562729][T14747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1115.595031][T14749] 9pnet_virtio: no channels available for device syz [ 1115.723108][T14756] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2357'. [ 1115.838056][T14745] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2356'. [ 1116.324938][T14013] netdevsim netdevsim2 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.327870][T14013] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.329263][T14013] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.329307][T14013] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1116.538407][T14773] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1117.374485][T14816] syzkaller0: entered promiscuous mode [ 1117.374619][T14816] syzkaller0: entered allmulticast mode [ 1117.651711][ T5970] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1117.716595][T14791] orangefs_mount: mount request failed with -4 [ 1117.823151][ T5970] usb 8-1: Using ep0 maxpacket: 8 [ 1117.827369][ T5970] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1117.827393][ T5970] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1117.827413][ T5970] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1117.827431][ T5970] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1117.827463][ T5970] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1117.827481][ T5970] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.942004][ T5799] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1117.942470][ T5799] Bluetooth: hci1: Injecting HCI hardware error event [ 1117.946371][ T5812] Bluetooth: hci1: hardware error 0x00 [ 1118.059411][ T5970] usb 8-1: GET_CAPABILITIES returned 0 [ 1118.059509][ T5970] usbtmc 8-1:16.0: can't read capabilities [ 1118.285642][ T5970] usb 8-1: USB disconnect, device number 2 [ 1118.451850][ T6240] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1118.608077][ T6240] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1118.608108][ T6240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.608129][ T6240] usb 2-1: Product: syz [ 1118.608143][ T6240] usb 2-1: Manufacturer: syz [ 1118.608158][ T6240] usb 2-1: SerialNumber: syz [ 1118.643765][ T6240] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1118.674488][T14848] block nbd2: shutting down sockets [ 1118.794366][ T5970] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1119.033166][ T6240] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1119.212660][ T6240] usb 5-1: Using ep0 maxpacket: 8 [ 1119.215600][ T6240] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1119.215649][ T6240] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1119.215671][ T6240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1119.215752][ T6240] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1119.215776][ T6240] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1119.215814][ T6240] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1119.215836][ T6240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.351680][T13517] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1119.501655][T13517] usb 3-1: Using ep0 maxpacket: 8 [ 1119.504794][T13517] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 1119.504820][T13517] usb 3-1: config 0 has no interface number 0 [ 1119.504867][T13517] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1119.504891][T13517] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1119.504915][T13517] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 1896, setting to 1024 [ 1119.504941][T13517] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1119.504981][T13517] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1119.505003][T13517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.511207][T13517] usb 3-1: config 0 descriptor?? [ 1119.527817][T14855] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1119.565304][ T6240] usb 5-1: GET_CAPABILITIES returned 0 [ 1119.565967][ T6240] usbtmc 5-1:16.0: can't read capabilities [ 1119.600084][T14856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1119.606905][T14856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1119.648950][T13517] ldusb 3-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 1119.766948][T13517] usb 5-1: USB disconnect, device number 51 [ 1119.830734][ T6240] usb 3-1: USB disconnect, device number 30 [ 1119.876867][ T6240] ldusb 3-1:0.55: LD USB Device #1 now disconnected [ 1119.952985][ T5970] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 1119.956152][ T5970] ath9k_htc: Failed to initialize the device [ 1119.999768][ T5970] usb 2-1: ath9k_htc: USB layer deinitialized [ 1120.217463][T13517] usb 2-1: USB disconnect, device number 51 [ 1120.341714][ T5812] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1120.917090][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 1120.917159][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.351037][ T5812] Bluetooth: hci2: unexpected event for opcode 0x080f [ 1121.654608][T14906] 9pnet_virtio: no channels available for device syz [ 1122.024017][T14928] 9pnet_virtio: no channels available for device syz [ 1122.201695][T10957] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1122.351670][T10957] usb 2-1: Using ep0 maxpacket: 8 [ 1122.355306][T10957] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1122.355360][T10957] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1122.355382][T10957] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1122.355405][T10957] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1122.355429][T10957] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1122.355471][T10957] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1122.355494][T10957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.157265][ T37] audit: type=1804 audit(1767217667.280:74): pid=14957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.2.2436" name="/newroot/546/file1" dev="fuse" ino=1 res=1 errno=0 [ 1123.209817][ T37] audit: type=1800 audit(1767217667.350:75): pid=14957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2436" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1123.211484][ T37] audit: type=1800 audit(1767217667.350:76): pid=14953 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.2.2436" name="/" dev="fuse" ino=1 res=0 errno=0 [ 1123.481947][T14969] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1123.627377][T14958] usbtmc 2-1:16.0: simple usb_control_msg failed -32 [ 1123.628699][T13544] usb 2-1: USB disconnect, device number 52 [ 1123.644801][ T8355] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 1123.804676][ T8355] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.804703][ T8355] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1123.804753][ T8355] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1123.804777][ T8355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.812544][ T8355] usb 5-1: config 0 descriptor?? [ 1123.875900][ T8355] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1123.875942][ T8355] dvb-usb: bulk message failed: -22 (3/0) [ 1123.886887][ T8355] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1123.887871][ T8355] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1123.888030][ T8355] usb 5-1: media controller created [ 1123.899246][ T8355] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1123.907524][ T8355] dvb-usb: bulk message failed: -22 (6/0) [ 1123.907613][ T8355] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1123.912606][ T8355] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input37 [ 1123.925073][ T8355] dvb-usb: schedule remote query interval to 150 msecs. [ 1123.925094][ T8355] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1124.084628][ T8355] dvb-usb: bulk message failed: -22 (1/0) [ 1124.084667][ T8355] dvb-usb: error while querying for an remote control event. [ 1124.134556][T13544] usb 5-1: USB disconnect, device number 52 [ 1124.259660][T13544] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1124.934095][T14981] ***************************************************** [ 1124.934110][T14981] ORANGEFS Device Error: You cannot open the device file [ 1124.934118][T14981] [ 1124.934118][T14981] /dev/pvfs2-req more than once. Please make sure that [ 1124.934118][T14981] there are no [ 1124.934130][T14981] instances of a program using this device [ 1124.934130][T14981] currently running. (You must verify this!) [ 1124.934141][T14981] For example, you can use the lsof program as follows: [ 1124.934149][T14981] 'lsof | grep pvfs2-req' (run this as root) [ 1124.934158][T14981] open_access_count = 1 [ 1124.934168][T14981] ***************************************************** [ 1125.011742][ T8355] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1125.171304][ T8355] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 1125.171363][ T8355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.175409][ T8355] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1125.175443][ T8355] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1125.175463][ T8355] usb 5-1: Manufacturer: syz [ 1125.181083][ T8355] usb 5-1: config 0 descriptor?? [ 1125.331673][ T8355] rc_core: IR keymap rc-hauppauge not found [ 1125.331696][ T8355] Registered IR keymap rc-empty [ 1125.333951][ T8355] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1125.342238][ T8355] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input38 [ 1125.383860][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1125.388505][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 1125.401331][ T5799] Bluetooth: hci2: hardware error 0x00 [ 1125.433096][T15016] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 1125.538903][ T6419] usb 5-1: USB disconnect, device number 53 [ 1126.661093][T15048] overlayfs: failed to decode file handle (len=7, type=251, flags=0, err=-61) [ 1127.193067][T15079] bridge_slave_0: left allmulticast mode [ 1127.193095][T15079] bridge_slave_0: left promiscuous mode [ 1127.193348][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.283717][T15079] bridge_slave_1: left allmulticast mode [ 1127.283738][T15079] bridge_slave_1: left promiscuous mode [ 1127.284135][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.403866][T10957] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1127.423310][T15079] bond0: (slave bond_slave_0): Releasing backup interface [ 1127.502153][T15079] bond0: (slave bond_slave_1): Releasing backup interface [ 1127.555542][T10957] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1127.555588][T10957] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.555601][T10957] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.555613][T10957] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1127.556856][T10957] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1127.556882][T10957] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1127.556901][T10957] usb 8-1: Manufacturer: syz [ 1127.561291][T10957] usb 8-1: config 0 descriptor?? [ 1127.588007][T15079] team0: Port device team_slave_0 removed [ 1127.681360][T15079] team0: Port device team_slave_1 removed [ 1127.683074][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.683100][T15079] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.742295][T15079] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.742324][T15079] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.781976][ T5799] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1127.801918][T15079] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1127.813211][T15083] team0: Mode changed to "activebackup" [ 1127.975652][T10957] appleir 0003:05AC:8243.001F: unknown main item tag 0x0 [ 1128.024793][T10957] appleir 0003:05AC:8243.001F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.7-1/input0 [ 1128.109932][ T5799] Bluetooth: hci0: connection err: -111 [ 1128.875748][ T10] usb 8-1: USB disconnect, device number 3 [ 1129.202650][ T5812] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 1129.414553][T15117] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2501'. [ 1130.051814][ T5799] Bluetooth: hci4: unexpected event for opcode 0x0404 [ 1130.339903][T15154] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1130.566350][T15169] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2525'. [ 1130.815299][ T37] audit: type=1800 audit(1767217674.940:77): pid=15144 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2514" name="/" dev="fuse" ino=0 res=0 errno=0 [ 1130.943639][ T6419] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1131.101760][ T6419] usb 1-1: Using ep0 maxpacket: 8 [ 1131.104243][ T6419] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1131.104270][ T6419] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1131.104294][ T6419] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1131.104318][ T6419] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1131.104359][ T6419] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1131.104382][ T6419] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.369450][ T6419] usb 1-1: GET_CAPABILITIES returned 0 [ 1131.369498][ T6419] usbtmc 1-1:16.0: can't read capabilities [ 1131.576410][T13517] usb 1-1: USB disconnect, device number 67 [ 1131.637783][T15210] team0: Mode changed to "loadbalance" [ 1131.890419][T15220] 9pnet_virtio: no channels available for device syz [ 1132.091756][T13517] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1132.242125][T13517] usb 3-1: Using ep0 maxpacket: 16 [ 1132.246593][T13517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.246626][T13517] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.246647][T13517] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1132.246686][T13517] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1132.246709][T13517] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.312619][T13517] usb 3-1: config 0 descriptor?? [ 1132.434149][ T8355] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1132.598583][ T8355] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 1132.610123][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.610179][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.610206][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.638940][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.638995][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.639021][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.641040][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.641093][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.641118][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.698793][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.698858][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.698881][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.700486][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.700537][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.700563][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.719582][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.734884][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.734916][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.794025][T13517] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 1132.794068][T13517] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 1132.794092][T13517] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 1132.794117][T13517] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 1132.794141][T13517] shield 0003:0955:7214.0020: unknown main item tag 0x0 [ 1132.794268][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.794317][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.794340][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.802661][ T8355] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1132.802716][ T8355] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1132.802743][ T8355] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1132.836729][ T8355] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1132.836757][ T8355] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1132.836776][ T8355] usb 8-1: Product: syz [ 1132.836803][ T8355] usb 8-1: Manufacturer: syz [ 1132.836818][ T8355] usb 8-1: SerialNumber: syz [ 1132.924966][T13517] input: HID 0955:7214 Haptics as /devices/virtual/input/input39 [ 1132.932208][ T8355] usb 8-1: config 0 descriptor?? [ 1132.986262][T15218] random: crng reseeded on system resumption [ 1133.013959][T13517] shield 0003:0955:7214.0020: Registered Thunderstrike controller [ 1133.014315][T13517] shield 0003:0955:7214.0020: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 1133.032749][ T8355] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 1133.065392][ T5799] Bluetooth: hci0: unexpected event for opcode 0x100c [ 1133.081628][ T5950] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1133.081962][ T5950] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1133.082270][ T5950] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1133.082567][ T5950] shield 0003:0955:7214.0020: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1133.137705][T13517] usb 3-1: USB disconnect, device number 31 [ 1133.219603][ T8355] usb 8-1: USB disconnect, device number 4 [ 1133.262113][ T8355] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 1134.031780][T13517] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1134.216846][T13517] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1134.216878][T13517] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.216898][T13517] usb 1-1: Product: syz [ 1134.216912][T13517] usb 1-1: Manufacturer: syz [ 1134.216925][T13517] usb 1-1: SerialNumber: syz [ 1134.249722][T13517] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1134.269973][ T5950] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1134.722811][T15275] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1134.726289][T15275] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1134.776731][T15275] vhci_hcd vhci_hcd.0: Device attached [ 1135.230275][T13517] usb 38-1: SetAddress Request (2) to port 0 [ 1135.230657][T13517] usb 38-1: new SuperSpeed USB device number 2 using vhci_hcd [ 1135.352302][T15276] vhci_hcd: connection reset by peer [ 1135.386837][ T7183] vhci_hcd vhci_hcd.2: stop threads [ 1135.390398][ T7183] vhci_hcd vhci_hcd.2: release socket [ 1135.436503][ T7183] vhci_hcd vhci_hcd.2: disconnect device [ 1135.552647][ T5950] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1135.554525][ T5950] ath9k_htc: Failed to initialize the device [ 1135.589736][ T5950] usb 1-1: ath9k_htc: USB layer deinitialized [ 1135.812644][ T5970] usb 1-1: USB disconnect, device number 68 [ 1136.075765][T15309] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1136.075919][T15310] tipc: Started in network mode [ 1136.075946][T15310] tipc: Node identity d6b661315c14, cluster identity 4711 [ 1136.079231][T15310] tipc: Enabled bearer , priority 0 [ 1136.091718][ T6419] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1136.163222][T15304] tipc: Resetting bearer [ 1136.244514][ T6419] usb 5-1: Using ep0 maxpacket: 8 [ 1136.258509][ T6419] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1136.258563][ T6419] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1136.258586][ T6419] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1136.258610][ T6419] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1136.258632][ T6419] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1136.258674][ T6419] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1136.258695][ T6419] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.558458][ T6419] usb 5-1: GET_CAPABILITIES returned 0 [ 1136.558505][ T6419] usbtmc 5-1:16.0: can't read capabilities [ 1136.797839][ T6419] usb 5-1: USB disconnect, device number 54 [ 1137.197095][T15325] binder: BINDER_SET_CONTEXT_MGR already set [ 1137.197110][T15325] binder: 15324:15325 ioctl 4018620d 200000000100 returned -16 [ 1137.197441][T15325] binder: 15324:15325 ioctl c018620c 200000000000 returned -1 [ 1140.359937][T13517] usb 38-1: device descriptor read/8, error -110 [ 1140.795147][T13517] usb usb38-port1: attempt power cycle [ 1141.367879][T13517] usb usb38-port1: unable to enumerate USB device [ 1151.274484][T15304] tipc: Disabling bearer [ 1151.559618][T15309] team0: Mode changed to "activebackup" [ 1151.567229][ T5950] tipc: Node number set to 2325897521 [ 1151.579384][T15315] lo speed is unknown, defaulting to 1000 [ 1151.606821][T15315] lo speed is unknown, defaulting to 1000 [ 1151.891180][T11895] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1151.908187][T11895] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1151.910078][T11895] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1151.963269][T11895] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1151.965488][T11895] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1152.073979][T15315] lo speed is unknown, defaulting to 1000 [ 1152.096506][T15315] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1152.132065][T15315] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1152.420769][T15315] lo speed is unknown, defaulting to 1000 [ 1152.473910][ T5799] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1152.489756][T15315] lo speed is unknown, defaulting to 1000 [ 1152.500438][ T5799] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1152.506244][ T5799] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1152.507416][ T5799] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1152.513629][ T5799] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1152.700368][T15336] lo speed is unknown, defaulting to 1000 [ 1152.767052][ T5799] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1152.770658][ T5799] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1152.793962][T15344] lo speed is unknown, defaulting to 1000 [ 1152.794278][ T5799] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1152.822857][ T5799] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1152.824422][ T5799] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1152.898160][T15315] lo speed is unknown, defaulting to 1000 [ 1152.932608][T15356] binder: 15355:15356 ioctl c018620c 200000000000 returned -22 [ 1152.934582][T15315] lo speed is unknown, defaulting to 1000 [ 1152.972989][T15315] lo speed is unknown, defaulting to 1000 [ 1153.321760][ T5950] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1153.481659][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 1153.487844][ T5950] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1153.487904][ T5950] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.487922][ T5950] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1153.487935][ T5950] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1153.487947][ T5950] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.487971][ T5950] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1153.487982][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.707163][ T5950] usb 5-1: GET_CAPABILITIES returned 0 [ 1153.707193][ T5950] usbtmc 5-1:16.0: can't read capabilities [ 1153.909745][ T5950] usb 5-1: USB disconnect, device number 55 [ 1154.021780][T11895] Bluetooth: hci5: command tx timeout [ 1154.147911][T15373] binder: BINDER_SET_CONTEXT_MGR already set [ 1154.147928][T15373] binder: 15372:15373 ioctl 4018620d 200000000100 returned -16 [ 1154.148193][T15373] binder: 15372:15373 ioctl c018620c 200000000000 returned -1 [ 1154.189313][T15352] lo speed is unknown, defaulting to 1000 [ 1154.432998][ T1565] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.474953][T15375] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2612'. [ 1154.661742][T11895] Bluetooth: hci6: command tx timeout [ 1154.735969][ T1565] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1154.901783][T11895] Bluetooth: hci7: command tx timeout [ 1155.030326][T15389] overlayfs: failed to resolve './file0': -2 [ 1155.197958][ T1565] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.544965][ T1565] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1155.549340][T15399] binder: 15398:15399 ioctl c018620c 200000000000 returned -22 [ 1155.632411][T15401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 1155.676837][T15344] chnl_net:caif_netlink_parms(): no params data found [ 1155.945755][T15336] chnl_net:caif_netlink_parms(): no params data found [ 1156.101885][T11895] Bluetooth: hci5: command tx timeout [ 1156.624421][T15352] chnl_net:caif_netlink_parms(): no params data found [ 1156.668810][T15344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.669042][T15344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.669277][T15344] bridge_slave_0: entered allmulticast mode [ 1156.670759][T15344] bridge_slave_0: entered promiscuous mode [ 1156.738364][T15344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.738585][T15344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.738766][T15344] bridge_slave_1: entered allmulticast mode [ 1156.740261][T15344] bridge_slave_1: entered promiscuous mode [ 1156.751693][T11895] Bluetooth: hci6: command tx timeout [ 1156.981670][T11895] Bluetooth: hci7: command tx timeout [ 1157.037780][T15435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2629'. [ 1157.233109][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.233233][T15336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1157.233380][T15336] bridge_slave_0: entered allmulticast mode [ 1157.234830][T15336] bridge_slave_0: entered promiscuous mode [ 1157.269423][T15344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1157.296200][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.296352][T15336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.296570][T15336] bridge_slave_1: entered allmulticast mode [ 1157.299115][T15336] bridge_slave_1: entered promiscuous mode [ 1157.307385][T15344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.351746][ T5991] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1157.511942][ T5991] usb 5-1: Using ep0 maxpacket: 8 [ 1157.516694][ T5991] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1157.516770][ T5991] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1157.516793][ T5991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1157.516818][ T5991] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1157.516842][ T5991] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1157.516881][ T5991] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1157.516903][ T5991] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.656162][ T1565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1157.656186][ T1565] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1157.742278][ T5991] usb 5-1: GET_CAPABILITIES returned 0 [ 1157.742307][ T5991] usbtmc 5-1:16.0: can't read capabilities [ 1157.947812][ T6419] usb 5-1: USB disconnect, device number 56 [ 1158.181729][T11895] Bluetooth: hci5: command tx timeout [ 1158.432231][ T1565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.432253][ T1565] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.544690][T15336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.548641][T15344] team0: Port device team_slave_0 added [ 1158.627442][T15352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.627755][T15352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1158.627971][T15352] bridge_slave_0: entered allmulticast mode [ 1158.630560][T15352] bridge_slave_0: entered promiscuous mode [ 1158.665873][T15336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.692944][T15344] team0: Port device team_slave_1 added [ 1158.834171][T11895] Bluetooth: hci6: command tx timeout [ 1158.874619][ T1565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.874642][ T1565] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.922411][T15352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1158.922506][T15352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1158.922845][T15352] bridge_slave_1: entered allmulticast mode [ 1158.924389][T15352] bridge_slave_1: entered promiscuous mode [ 1159.071721][T11895] Bluetooth: hci7: command tx timeout [ 1159.112866][T15457] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2638'. [ 1159.431673][ T5950] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1159.584444][ T5950] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1159.584481][ T5950] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1159.584519][ T5950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1159.584542][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.590593][T15460] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1159.597234][ T5950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1159.680718][ T1565] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.680756][ T1565] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.748699][T15336] team0: Port device team_slave_0 added [ 1159.752062][T15344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1159.752077][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.752102][T15344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1159.763880][T15352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1159.858183][T15336] team0: Port device team_slave_1 added [ 1159.863278][T15344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1159.863295][T15344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1159.863320][T15344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1159.870936][T15352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1159.900444][ T5950] usb 5-1: USB disconnect, device number 57 [ 1160.261824][T11895] Bluetooth: hci5: command tx timeout [ 1160.359071][T15336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1160.359083][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.359096][T15336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1160.408174][T15352] team0: Port device team_slave_0 added [ 1160.409074][T15336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1160.409088][T15336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1160.409113][T15336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1160.456589][T15473] fuse: Bad value for 'fd' [ 1160.541381][T15475] binder: 15474:15475 ioctl c018620c 200000000000 returned -1 [ 1160.553147][T15352] team0: Port device team_slave_1 added [ 1160.901798][T11895] Bluetooth: hci6: command tx timeout [ 1160.904009][T15344] hsr_slave_0: entered promiscuous mode [ 1160.908386][T15344] hsr_slave_1: entered promiscuous mode [ 1160.909402][T15344] debugfs: 'hsr0' already exists in 'hsr' [ 1160.909427][T15344] Cannot create hsr debugfs directory [ 1161.055753][T15481] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2646'. [ 1161.141762][T11895] Bluetooth: hci7: command tx timeout [ 1161.172046][T15352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1161.172064][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.172091][T15352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1161.413925][T15352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1161.413944][T15352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1161.413971][T15352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1161.469101][T15336] hsr_slave_0: entered promiscuous mode [ 1161.470325][T15336] hsr_slave_1: entered promiscuous mode [ 1161.471199][T15336] debugfs: 'hsr0' already exists in 'hsr' [ 1161.471222][T15336] Cannot create hsr debugfs directory [ 1161.890925][T15497] binder: 15496:15497 ioctl c018620c 200000000000 returned -1 [ 1162.250180][T15352] hsr_slave_0: entered promiscuous mode [ 1162.251017][T15352] hsr_slave_1: entered promiscuous mode [ 1162.252154][T15352] debugfs: 'hsr0' already exists in 'hsr' [ 1162.252178][T15352] Cannot create hsr debugfs directory [ 1162.266500][ T1565] team0: left allmulticast mode [ 1162.266522][ T1565] team_slave_0: left allmulticast mode [ 1162.266542][ T1565] team_slave_1: left allmulticast mode [ 1162.266557][ T1565] geneve0: left allmulticast mode [ 1162.266579][ T1565] team0: left promiscuous mode [ 1162.266592][ T1565] team_slave_0: left promiscuous mode [ 1162.266811][ T1565] team_slave_1: left promiscuous mode [ 1162.267000][ T1565] geneve0: left promiscuous mode [ 1162.267384][ T1565] bridge0: port 3(team0) entered disabled state [ 1162.373638][T15508] fuse: Bad value for 'fd' [ 1162.397300][ T1565] bridge_slave_1: left allmulticast mode [ 1162.397326][ T1565] bridge_slave_1: left promiscuous mode [ 1162.397616][ T1565] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.483144][ T1565] bridge_slave_0: left allmulticast mode [ 1162.483172][ T1565] bridge_slave_0: left promiscuous mode [ 1162.483410][ T1565] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.605664][T15517] binder: 15516:15517 ioctl c018620c 200000000000 returned -1 [ 1164.292128][ T1565] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1164.464445][ T1565] bond0 (unregistering): Released all slaves [ 1164.483936][ T1565] bond1 (unregistering): Released all slaves [ 1165.362840][ T1565] team0: Port device geneve0 removed [ 1166.675813][ T1565] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1166.732174][ T1565] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1166.764773][ T1565] bond0 (unregistering): Released all slaves [ 1166.774708][ T1565] bond1 (unregistering): Released all slaves [ 1167.421661][ T6240] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1167.494090][T15547] binder: 15546:15547 ioctl c018620c 200000000000 returned -1 [ 1167.578644][ T6240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1167.578675][ T6240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1167.578710][ T6240] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1167.578733][ T6240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1167.593313][ T6240] usb 5-1: config 0 descriptor?? [ 1168.040719][ T6240] keytouch 0003:0926:3333.0021: fixing up Keytouch IEC report descriptor [ 1168.052916][ T6240] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0021/input/input40 [ 1168.107597][T15344] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1168.138079][T15344] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1168.523281][ T6240] keytouch 0003:0926:3333.0021: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0 [ 1168.536535][ T6240] usb 5-1: USB disconnect, device number 58 [ 1168.766374][T15344] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1168.788647][T15555] fido_id[15555]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1168.884463][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 1168.884863][T15344] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1169.148510][T15566] overlayfs: failed to resolve './file0': -2 [ 1169.561164][ T6240] ------------[ cut here ]------------ [ 1169.561179][ T6240] workqueue: cannot queue hci_conn_timeout on wq hci4 [ 1169.561213][ T6240] WARNING: kernel/workqueue.c:2252 at __queue_work+0xd5d/0xff0, CPU#0: kworker/0:10/6240 [ 1169.561249][ T6240] Modules linked in: [ 1169.561270][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1169.561295][ T6240] Tainted: [L]=SOFTLOCKUP [ 1169.561302][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.561314][ T6240] Workqueue: events l2cap_chan_timeout [ 1169.561341][ T6240] RIP: 0010:__queue_work+0xd88/0xff0 [ 1169.561363][ T6240] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 79 ac 97 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 18 [ 1169.561381][ T6240] RSP: 0018:ffffc90005d9f848 EFLAGS: 00010082 [ 1169.561397][ T6240] RAX: 1ffff11006a0015b RBX: 0000000000000008 RCX: ffff888023c09e40 [ 1169.561411][ T6240] RDX: ffff88803f866168 RSI: ffffffff89cd7580 RDI: ffffffff8eddefc0 [ 1169.561426][ T6240] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000 [ 1169.561437][ T6240] R10: dffffc0000000000 R11: ffffed1006a00159 R12: dffffc0000000000 [ 1169.561452][ T6240] R13: ffff888035000ad8 R14: ffffffff8eddefc0 R15: ffff88803f866168 [ 1169.561467][ T6240] FS: 0000000000000000(0000) GS:ffff888126cef000(0000) knlGS:0000000000000000 [ 1169.561482][ T6240] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1169.561496][ T6240] CR2: 00007f7f25a01d58 CR3: 000000002c666000 CR4: 00000000003526f0 [ 1169.561513][ T6240] Call Trace: [ 1169.561525][ T6240] [ 1169.561540][ T6240] ? __queue_delayed_work+0xe1/0x2d0 [ 1169.561567][ T6240] queue_delayed_work_on+0x11a/0x1d0 [ 1169.561599][ T6240] l2cap_chan_del+0x285/0x620 [ 1169.561632][ T6240] l2cap_chan_close+0x4c2/0x760 [ 1169.561655][ T6240] ? __pfx_l2cap_chan_close+0x10/0x10 [ 1169.561671][ T6240] ? lockdep_hardirqs_on+0x7b/0x110 [ 1169.561691][ T6240] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1169.561712][ T6240] ? mutex_lock_nested+0x154/0x1d0 [ 1169.561735][ T6240] ? l2cap_chan_timeout+0xa0/0x3b0 [ 1169.561764][ T6240] l2cap_chan_timeout+0x158/0x3b0 [ 1169.561789][ T6240] ? process_scheduled_works+0x9ef/0x1770 [ 1169.561812][ T6240] process_scheduled_works+0xad1/0x1770 [ 1169.561864][ T6240] ? __pfx_process_scheduled_works+0x10/0x10 [ 1169.561883][ T6240] ? do_raw_spin_lock+0x121/0x290 [ 1169.561923][ T6240] worker_thread+0x8a0/0xda0 [ 1169.561968][ T6240] ? __kthread_parkme+0x7b/0x200 [ 1169.562002][ T6240] kthread+0x711/0x8a0 [ 1169.562030][ T6240] ? __pfx_worker_thread+0x10/0x10 [ 1169.562052][ T6240] ? __pfx_kthread+0x10/0x10 [ 1169.562074][ T6240] ? rt_spin_unlock+0x150/0x200 [ 1169.562103][ T6240] ? rt_spin_unlock+0x161/0x200 [ 1169.562123][ T6240] ? __pfx_kthread+0x10/0x10 [ 1169.562150][ T6240] ret_from_fork+0x510/0xa50 [ 1169.562176][ T6240] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.562194][ T6240] ? __switch_to+0xc9e/0x1480 [ 1169.562225][ T6240] ? __pfx_kthread+0x10/0x10 [ 1169.562250][ T6240] ret_from_fork_asm+0x1a/0x30 [ 1169.562294][ T6240] [ 1169.562314][ T6240] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1169.562331][ T6240] CPU: 0 UID: 0 PID: 6240 Comm: kworker/0:10 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1169.562357][ T6240] Tainted: [L]=SOFTLOCKUP [ 1169.562365][ T6240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1169.562378][ T6240] Workqueue: events l2cap_chan_timeout [ 1169.562404][ T6240] Call Trace: [ 1169.562412][ T6240] [ 1169.562421][ T6240] vpanic+0x1e0/0x670 [ 1169.562450][ T6240] panic+0xb9/0xc0 [ 1169.562474][ T6240] ? __pfx_panic+0x10/0x10 [ 1169.562509][ T6240] ? ret_from_fork_asm+0x1a/0x30 [ 1169.562543][ T6240] __warn+0x317/0x4b0 [ 1169.562566][ T6240] ? __queue_work+0xd5d/0xff0 [ 1169.562590][ T6240] ? __queue_work+0xd5d/0xff0 [ 1169.562609][ T6240] __report_bug+0x288/0x500 [ 1169.562636][ T6240] ? __pfx___set_cpus_allowed_ptr_locked+0x10/0x10 [ 1169.562658][ T6240] ? __queue_work+0xd5d/0xff0 [ 1169.562684][ T6240] ? __pfx___report_bug+0x10/0x10 [ 1169.562711][ T6240] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1169.562750][ T6240] ? preempt_schedule_thunk+0x16/0x30 [ 1169.562777][ T6240] report_bug_entry+0x19a/0x290 [ 1169.562806][ T6240] ? __queue_work+0xd88/0xff0 [ 1169.562826][ T6240] ? __queue_work+0xd8d/0xff0 [ 1169.562847][ T6240] handle_bug+0xca/0x200 [ 1169.562869][ T6240] exc_invalid_op+0x1a/0x50 [ 1169.562891][ T6240] asm_exc_invalid_op+0x1a/0x20 [ 1169.562909][ T6240] RIP: 0010:__queue_work+0xd88/0xff0 [ 1169.562938][ T6240] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 79 ac 97 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 18 [ 1169.562954][ T6240] RSP: 0018:ffffc90005d9f848 EFLAGS: 00010082 [ 1169.562971][ T6240] RAX: 1ffff11006a0015b RBX: 0000000000000008 RCX: ffff888023c09e40 [ 1169.562985][ T6240] RDX: ffff88803f866168 RSI: ffffffff89cd7580 RDI: ffffffff8eddefc0 [ 1169.562999][ T6240] RBP: 0000000000000020 R08: 0000000000000000 R09: 0000000000000000 [ 1169.563010][ T6240] R10: dffffc0000000000 R11: ffffed1006a00159 R12: dffffc0000000000 [ 1169.563025][ T6240] R13: ffff888035000ad8 R14: ffffffff8eddefc0 R15: ffff88803f866168 [ 1169.563054][ T6240] ? __pfx_hci_conn_timeout+0x10/0x10 [ 1169.563083][ T6240] ? __queue_work+0xf92/0xff0 [ 1169.563111][ T6240] ? __queue_delayed_work+0xe1/0x2d0 [ 1169.563134][ T6240] queue_delayed_work_on+0x11a/0x1d0 [ 1169.563165][ T6240] l2cap_chan_del+0x285/0x620 [ 1169.563195][ T6240] l2cap_chan_close+0x4c2/0x760 [ 1169.563218][ T6240] ? __pfx_l2cap_chan_close+0x10/0x10 [ 1169.563236][ T6240] ? lockdep_hardirqs_on+0x7b/0x110 [ 1169.563254][ T6240] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1169.563274][ T6240] ? mutex_lock_nested+0x154/0x1d0 [ 1169.563296][ T6240] ? l2cap_chan_timeout+0xa0/0x3b0 [ 1169.563328][ T6240] l2cap_chan_timeout+0x158/0x3b0 [ 1169.563353][ T6240] ? process_scheduled_works+0x9ef/0x1770 [ 1169.563377][ T6240] process_scheduled_works+0xad1/0x1770 [ 1169.563431][ T6240] ? __pfx_process_scheduled_works+0x10/0x10 [ 1169.563449][ T6240] ? do_raw_spin_lock+0x121/0x290 [ 1169.563488][ T6240] worker_thread+0x8a0/0xda0 [ 1169.563526][ T6240] ? __kthread_parkme+0x7b/0x200 [ 1169.563559][ T6240] kthread+0x711/0x8a0 [ 1169.563588][ T6240] ? __pfx_worker_thread+0x10/0x10 [ 1169.563610][ T6240] ? __pfx_kthread+0x10/0x10 [ 1169.563633][ T6240] ? rt_spin_unlock+0x150/0x200 [ 1169.563661][ T6240] ? rt_spin_unlock+0x161/0x200 [ 1169.563683][ T6240] ? __pfx_kthread+0x10/0x10 [ 1169.563711][ T6240] ret_from_fork+0x510/0xa50 [ 1169.563736][ T6240] ? __pfx_ret_from_fork+0x10/0x10 [ 1169.563756][ T6240] ? __switch_to+0xc9e/0x1480 [ 1169.563789][ T6240] ? __pfx_kthread+0x10/0x10 [ 1169.563815][ T6240] ret_from_fork_asm+0x1a/0x30 [ 1169.563862][ T6240] [ 1169.564218][ T6240] Kernel Offset: disabled