last executing test programs: 14m26.240884381s ago: executing program 2 (id=66): setns(0xc9, 0x0) pipe(&(0x7f0000000000)) io_setup(0x2, &(0x7f0000000040)) r0 = socket(0x1e, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000800)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000880)=0x2) sched_setscheduler(r1, 0x1, &(0x7f00000008c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000009c0), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000a00), 0x4000087, 0x2, 0x0) clock_getres(0xd6c79f3ee28bc1b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) listen(r0, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000600)=0x4) 14m19.916265494s ago: executing program 2 (id=75): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000480)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000500)={0x3, &(0x7f0000000540)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x48, 0x9, 0xf, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000580)={@multicast, @random="7ad65e3d6474", @void, {@ipv6={0x86dd, @dccp_packet={0x4, 0x6, "c120d2", 0x18, 0x21, 0xff, @loopback, @empty, {[@dstopts={0x89}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x7, 0x0, 0x0, 0x3, 0x7, "bd563c", 0x4, "5d62c1"}}}}}}}, 0x0) 14m19.532631941s ago: executing program 2 (id=79): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x0, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/sda\x00', 0x42, 0x0) ioctl$BLKROSET(r0, 0x2284, 0x0) 14m19.212263743s ago: executing program 2 (id=83): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000dc0)=0x2a, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000e00)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000e40)="10031200e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000e80)={0x11, 0x0, r1}, 0x14) 14m17.964494884s ago: executing program 2 (id=86): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) prlimit64(r0, 0x8, &(0x7f0000000300)={0x2, 0xc}, &(0x7f0000000340)) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4797}, {0x0, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x4f]}}, &(0x7f0000000580)=""/4089, 0x3b, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x9, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000001680)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000540)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mkdirat(0xffffffffffffff9c, &(0x7f0000004700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006580)='./proc\x00', &(0x7f00000065c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000006600)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) 14m16.752737511s ago: executing program 2 (id=88): unshare(0x62020600) r0 = socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x6) 14m0.833413661s ago: executing program 32 (id=88): unshare(0x62020600) r0 = socket$packet(0x11, 0x2, 0x300) close_range(r0, 0xffffffffffffffff, 0x6) 13m20.103521552s ago: executing program 0 (id=175): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ppoll(&(0x7f0000000280)=[{r0, 0x228}], 0x1, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000300)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) 13m19.450062115s ago: executing program 0 (id=178): syz_emit_ethernet(0x92, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x8, 0x4, 0x0, 0x0, 0x84, 0x67, 0x0, 0xf, 0x11, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@cipso={0x86, 0xc, 0xffffffffffffffff, [{0x6, 0x2}, {0x6, 0x2}, {0x3, 0x2}]}]}}, {0x4e23, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "499841ad2e4e9be79dd9fcb1cb9491783621097f64e3c758b741ee6246de54a9", "2251972584a21965d8273f01898383f0", {"11317b4fda1c0c23a8b22f5199fe2775", "1a07ef9179a85de4845bc70073ce023c"}}}}}}}, 0x0) 13m19.449658703s ago: executing program 0 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) prlimit64(r0, 0x8, &(0x7f0000000300)={0x2, 0xc}, &(0x7f0000000340)) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4797}, {0x0, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x4f]}}, &(0x7f0000000580)=""/4089, 0x3b, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x9, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000001680)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000004700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006580)='./proc\x00', &(0x7f00000065c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000006600)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r4, &(0x7f0000006640)="522db49c98d3b63ab78fbcfb8f35d8f92975c2765104d8be09396d3eba", 0x1d) 13m17.725736178s ago: executing program 0 (id=181): socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) unshare(0x2040400) getsockopt(0xffffffffffffffff, 0x28, 0x1, &(0x7f0000009100)=""/4110, 0x0) 13m17.012572163s ago: executing program 0 (id=183): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000006c0)={@loopback, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1}, 0x20) capset(&(0x7f0000000700)={0x19980330}, &(0x7f0000000740)={0x6, 0x6, 0x402, 0x87, 0xffffffff}) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000140)={@loopback={0x1000000, 0x3fc}, 0x0, r5}) connect$inet6(r3, &(0x7f00000004c0)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x8000) bind$inet6(r6, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @rand_addr=' \x01\x00', 0x9}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x101, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x80, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x402, "ffc9737a65b66319359eeca1be7c79b3b84d99e43c91f80ec8a6f6a38913600d", "e79e13214def5de2c0ecdca405fab1ed68e828cb0f9ae4c1bbdd76df4d96e281786b657347b14bb3825bc8b801a68ab9", "c9b8e1261c51c033aaf4fe54f013582d53dde1b4f39228c5d61e2915", {"01bfbe11fe4bd672561f4331fd0c9925", "b78a12c4a0a7fbd6f562787b334e1296"}}}}}}}, 0x0) r7 = userfaultfd(0x80001) socket$unix(0x1, 0x2, 0x0) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, @dev, @dev={0xfe, 0x80, '\x00', 0x37}, 0x8000, 0x0, 0x2, 0xc}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000440)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x0, 0x0, 0x4007}}) close_range(r0, 0xffffffffffffffff, 0x2) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) 13m15.77890722s ago: executing program 0 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x181643, 0x0) unshare(0x62060600) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000400)={0x66666666666689b}) 13m0.699478144s ago: executing program 33 (id=188): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x181643, 0x0) unshare(0x62060600) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) ioctl$KVM_GET_EMULATED_CPUID(r0, 0xc008ae09, &(0x7f0000000400)={0x66666666666689b}) 12m22.857506184s ago: executing program 1 (id=293): socket$inet6(0xa, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000003c0), 0x400000000000041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@ipv6_newrule={0x58, 0x20, 0x1, 0x70bd28, 0x35dfdbfc, {0xa, 0x80, 0x80, 0x0, 0x8, 0x0, 0x0, 0x3, 0x17}, [@FIB_RULE_POLICY=@FRA_OIFNAME={0x14, 0x11, 'vcan0\x00'}, @FRA_SRC={0x14, 0x2, @private0}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) fsetxattr(r3, &(0x7f0000000000)=@known='trusted.overlay.nlink\x00', &(0x7f0000000040)='\x00', 0x1, 0x2) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x9, [@ptr={0x0, 0x0, 0x0, 0x2, 0x2}, @typedef={0x7, 0x0, 0x0, 0x8, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x1, 0x8000}}]}, {0x0, [0x30, 0x61, 0x5f, 0x30, 0x2e, 0x61, 0x2e]}}, 0x0, 0x51}, 0x28) 12m21.84371852s ago: executing program 1 (id=296): syz_emit_ethernet(0x5a, &(0x7f00000005c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1d6000", 0x24, 0x2c, 0x0, @remote, @local, {[@routing={0x1, 0x0, 0x1, 0xe}], {{0x8000, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1}, {"c9a6bc5452260f56"}}}}}}}, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000000580), 0x9, 0x0) 12m21.552341387s ago: executing program 1 (id=298): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) r1 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000001100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x10000008ebc, 0x0) splice(r2, 0x0, r5, 0x0, 0x25a5, 0x4) vmsplice(r3, &(0x7f00000011c0)=[{&(0x7f0000001200)='*', 0x1}], 0x1, 0xd) 12m19.569702385s ago: executing program 1 (id=301): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sendto(r2, 0x0, 0x0, 0x4085, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x6, 0x1, 0x0, 0xf, 0x1, 0x885c, [{0x4, 0x1, 0x2}]}]}, {0x0, [0x5f, 0x0, 0x30, 0x0, 0x0]}}, &(0x7f0000001040)=""/249, 0x37, 0xf9, 0x6}, 0x28) r3 = syz_open_dev$usbfs(&(0x7f0000000900), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000940)={0x2, 0x3, 0x0, 0x1000, 0x0, 0xfffffffe, 0x0}) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000980)=@req={0x28, &(0x7f00000008c0)={'veth0_to_bridge\x00', @ifru_ivalue}}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x240880c0, &(0x7f00000009c0)={0xa, 0xe20, 0x0, @mcast1}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'veth0_to_hsr\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, &(0x7f0000000a80)=""/150, 0x0, 0x96, 0x1}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x6}, {0xe}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000cc0)=""/219, 0xdb}], 0x1}}], 0x1, 0x60, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000e40)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, 0x0, {0x10}, {0xa, 0x3}, {0xfff2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20040098}, 0x880) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000ec0)={0x0}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="4000000010000100"/19, @ANYRES32=0x0, @ANYBLOB="000000000000001814000300697036eb3c4563e00ac35b00000000000c002b80", @ANYBLOB], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40400c0) 12m14.156920579s ago: executing program 1 (id=303): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) prlimit64(r0, 0x8, &(0x7f0000000300)={0x2, 0xc}, &(0x7f0000000340)) recvmmsg(r2, &(0x7f0000000380), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4797}, {0x0, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x4f]}}, &(0x7f0000000580)=""/4089, 0x3b, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x9, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000001680)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000540)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mkdirat(0xffffffffffffff9c, &(0x7f0000004700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006580)='./proc\x00', &(0x7f00000065c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000006600)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) 12m12.972329274s ago: executing program 1 (id=306): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) unshare(0x64000600) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x8000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 11m56.821186894s ago: executing program 34 (id=306): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0) unshare(0x64000600) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x8000) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 10m12.343873224s ago: executing program 3 (id=446): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xe, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300), 0x10}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000001540)=""/15, &(0x7f0000001580)=0xf) 10m10.166648173s ago: executing program 3 (id=449): r0 = syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x0, 0x90, 0xcf, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x1, 0x6, 0x0, {0x7, 0x25, 0x1, 0xc, 0xb6, 0xff7f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0xb, 0xc, {0x7, 0x25, 0x1, 0xc, 0x5, 0x7}}}}}}}}]}}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, &(0x7f0000000780)={0x14, 0x0, &(0x7f0000000740)={0x0, 0x3, 0x5, @string={0x5, 0x3, '~%T'}}}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) pipe(0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000004580)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0xd7, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x30, 0x10, "", [{{0x9, 0x4, 0x0, 0x4, 0x3, 0x2, 0x6, 0x0, 0xa7, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x3, 0x4383, 0x5}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x2, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x8, 0xa3}}}}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000005e80)={0x14, &(0x7f0000005dc0)={0x0, 0x3, 0x6, {0x6, 0x1, "b4acd35e"}}, &(0x7f0000005e40)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1007}}}, 0x0) pipe2(&(0x7f0000006180), 0x80800) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 10m5.570258758s ago: executing program 3 (id=453): unshare(0x40400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000540), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 10m5.4226444s ago: executing program 3 (id=454): mkdir(&(0x7f0000000000)='./file0\x00', 0x18b) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) unshare(0x6020400) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) mount$bind(0x0, &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x84000, 0x0) 10m4.628943992s ago: executing program 3 (id=456): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000400), 0x318, 0x0) recvmmsg(r1, &(0x7f0000000440), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xe, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001300), 0x10}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0x23, &(0x7f0000001540)=""/15, &(0x7f0000001580)=0xf) 10m3.857708101s ago: executing program 3 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f00000000c0)={0xfffffffd, 0xffffffffffffffff, 0x400}) 10m3.341426574s ago: executing program 35 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4020aeb2, &(0x7f00000000c0)={0xfffffffd, 0xffffffffffffffff, 0x400}) 5m17.952437386s ago: executing program 7 (id=817): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x24, &(0x7f00000002c0)=0x100000002) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, 0x0}, 0x8000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000003c0)={0x10, 0x81, 0x4, 0x4, 0x7, 0x0, 0x40}, 0xc) listen(r5, 0xb) 5m13.601575669s ago: executing program 7 (id=822): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x3, 0x0) r0 = syz_open_dev$sndpcmp(0x0, 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000002cc0)={0x0, [[0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) writev(r0, &(0x7f0000002f40)=[{&(0x7f0000002f80)="a4443f60a26f2383de75bf33043a446c4893e584", 0x14}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000002fc0)=[{&(0x7f0000003000)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000400030006010000418e01400004fcff", 0x58}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r2, 0x0, 0x17, 0x0, &(0x7f0000002700)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000003080)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000030c0)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003140)=0xfffffffffffffffe) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r4, {0xd, 0x9}, {0x1, 0xffff}, {0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1d4}, 0x54010) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000003180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08006000021000103701ff020000000000000000000000000001ff02000000000000000000000000000186009078ff0002000000000000000000cc53bf0ac390f5705c3e5ec821a876bd0df9b34b963d98309ceb5c6ad9892667199d501a54d84f45bff93dc86a05fc8996cd8524bdb51f45da7eb45b6d6535791ad2e574637f42418964b540"], 0x0) connect$unix(r6, &(0x7f0000003280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000003300), 0x318, 0x0) recvmmsg(r6, &(0x7f0000003340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003380)=0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000033c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r8 = socket(0x10, 0x80002, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r8, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/4089, 0xff9}, {&(0x7f0000001580)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002580)=""/51, 0x33}, {&(0x7f00000025c0)=""/52, 0x34}, {&(0x7f0000002600)=""/203, 0xcb}], 0x9}, 0x8}], 0x2, 0x40012120, 0x0) 5m9.143660305s ago: executing program 7 (id=826): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000), 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000680), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000006c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0) 5m8.10624537s ago: executing program 7 (id=827): r0 = syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x19, {[@global=@item_4={0x3, 0x1, 0x5, "16bd4505"}, @global=@item_012={0x1, 0x1, 0x1, '\x00'}, @global=@item_012={0x2, 0x1, 0x1, '\x00\x00'}, @main=@item_012={0x0, 0x0, 0xb}, @main=@item_012={0x1, 0x0, 0x9, "01"}, @local=@item_012={0x1, 0x2, 0x0, "01"}, @main=@item_4={0x3, 0x0, 0x9, "1a9f653b"}, @global=@item_012={0x1, 0x1, 0x1, '\b'}, @main=@item_012={0x1, 0x0, 0x2, "e8"}, @main=@item_012={0x0, 0x0, 0xc}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000001c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000200)={0x2, 0x100}) 5m7.052714486s ago: executing program 7 (id=829): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0xb, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000ffff000000000000ffffffff18150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000c5005af8ff00000000bfa200000000000007020000bbffffffb703000008000000b704000000000000850000001e0200009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000100)={0x0, 'veth0_vlan\x00', {0x10000001}, 0x26}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400002e0002000000000000000000000d03000000000000000000000a05000000000000000000000b0030e4000000"], 0x0, 0x3e}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file2\x00', 0x86) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0xc}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) syz_fuse_handle_req(r5, &(0x7f0000000a00), 0x2000, &(0x7f0000002a00)={&(0x7f0000002a80)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x22110079, 0x1000, 0x0, 0x7fc, 0x58, 0x0, 0x0, 0x6, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000002b00)='./proc\x00', 0x777) mount(0x0, &(0x7f0000002b40)='./proc\x00', &(0x7f0000002b80)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000002bc0)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) write$cgroup_int(r6, 0x0, 0x0) 5m5.405481552s ago: executing program 7 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x24, &(0x7f00000002c0)=0x100000002) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, 0x0}, 0x8000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000003c0)={0x10, 0x81, 0x4, 0x4, 0x7, 0x0, 0x40}, 0xc) listen(r5, 0xb) 4m50.012829382s ago: executing program 36 (id=831): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r1 = getpid() sched_setaffinity(0x0, 0x24, &(0x7f00000002c0)=0x100000002) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x9a5eb000) lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300), 0x0, 0x0, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$devlink(0x0, r0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x40000000, 0x0, 0x0}, 0x8000) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000340)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f00000003c0)={0x10, 0x81, 0x4, 0x4, 0x7, 0x0, 0x40}, 0xc) listen(r5, 0xb) 21.878571158s ago: executing program 4 (id=1186): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 20.826482134s ago: executing program 4 (id=1187): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4797}, {0x0, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x4f]}}, &(0x7f0000000580)=""/4089, 0x3b, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x9, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000001680)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r6, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, 0xfffffffffffffffe, &(0x7f0000001800)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000540)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mkdirat(0xffffffffffffff9c, &(0x7f0000004700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006580)='./proc\x00', &(0x7f00000065c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000006600)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r7, &(0x7f0000006640)="522db49c98d3b63ab78fbcfb8f35d8f92975c2765104d8be09396d3eba", 0x1d) read$rfkill(r7, &(0x7f0000006680), 0x5) 19.921034029s ago: executing program 4 (id=1188): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000280), 0x0) socket(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000340)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000003c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001fc0)=""/102392, 0x18ff8) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f000001afc0)={0x0, 0x0, 0x0}, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f000001b000)={0x5}, 0x10) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(0xffffffffffffffff, 0x40186e8d, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000440)="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", 0x418}], 0x1) 18.280652929s ago: executing program 4 (id=1190): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x3, 0x0) recvfrom$unix(r1, &(0x7f0000000100)=""/75, 0x4b, 0x1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000400)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000004c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000500)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000540)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000005c0)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000680), 0x651, 0x0) recvmmsg(r3, &(0x7f00000006c0), 0x4000087, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x25) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000330c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000033240)={{r5}, &(0x7f0000033280), &(0x7f00000332c0)}, 0x20) 11.845534537s ago: executing program 4 (id=1197): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="9201000200000010b404a1bc000b000000010902240001000000020904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xd8, 0x43, 0xb, 0x8, 0x45e, 0x775, 0x5a54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0xd3, 0x3, 0x0, 0x8d, 0xf0, 0x66, 0xfe}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x2001) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000001c0)=""/167) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 9.988830028s ago: executing program 6 (id=1200): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000240)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) r1 = userfaultfd(0x80801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000780)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='my_sys\x00', 0x1fd) mount(0x0, &(0x7f0000000140)='my_sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r3, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000200)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)) read$FUSE(r4, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000340), 0x400000000000041, 0x0) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) 8.895741711s ago: executing program 6 (id=1202): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) close(r0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0xe00) r1 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 8.348771354s ago: executing program 6 (id=1203): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="4607182dab0000002400128009000100766c616e000000001400028006000100010000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000900), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) lstat(0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) write(0xffffffffffffffff, &(0x7f0000000980), 0x0) socket(0x11, 0x3, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r7, 0x0) mmap(&(0x7f00005ec000/0x3000)=nil, 0x3000, 0x1000009, 0x30, 0xffffffffffffffff, 0xc823b000) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f00000009c0)=0xa) r8 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8008, 0x1c1300) mmap(&(0x7f00006c2000/0x1000)=nil, 0x1000, 0x5, 0x13, r8, 0x1e67e000) ioctl$MON_IOCT_RING_SIZE(r8, 0x9204, 0x49cdee) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000a00)={0x0, 0x7185, 0x800, 0x0, 0x399}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x841a, 0x2050, 0x1, 0x17a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7805, 0xa, 0x3, 0x10b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc16d, 0x10, 0x2, 0xab}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7655, 0x40, 0x0, 0xee}}], 0x4, &(0x7f0000000dc0)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x4}, 0x0, 0x0, '\x00', {0x4, 0x951, 0x0, &(0x7f0000000e40)=@buf_512="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"}}, &(0x7f0000000040)) 7.963326788s ago: executing program 8 (id=1204): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000030000"], 0x50) epoll_create1(0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000002400), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000002440)=0x6) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) socket$netlink(0x10, 0x3, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000002540)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r5, &(0x7f0000002580)='lzo', 0x3) 7.415642481s ago: executing program 4 (id=1205): pipe2(0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setns(0xc9, 0x0) r0 = fsopen(&(0x7f0000000300)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 6.486752864s ago: executing program 8 (id=1206): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) 5.376138596s ago: executing program 8 (id=1207): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc_mnt\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt/irq/12/smp_affinity\x00', 0x1, 0x6) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000180)=ANY=[], 0xfedd) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000002c0), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x5, 0x4797}, {0x0, 0x1}]}]}, {0x0, [0x2e, 0x30, 0x0, 0x61, 0x4f]}}, &(0x7f0000000580)=""/4089, 0x3b, 0xff9, 0x1}, 0x28) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0x2) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001580)={0x9, 0x3, &(0x7f0000001640)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000001680)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000016c0)={r6, 0xe0, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x1, 0xfffffffffffffffe, &(0x7f0000001800)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000000540)=@ethtool_cmd={0x29, 0x5, 0x0, 0x4, 0x7, 0x0, 0x3, 0x28, 0x0, 0xfc, 0x3, 0x9, 0x4, 0xff, 0x0, 0x45}}) mkdirat(0xffffffffffffff9c, &(0x7f0000004700)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000006580)='./proc\x00', &(0x7f00000065c0)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000006600)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) write(r7, &(0x7f0000006640)="522db49c98d3b63ab78fbcfb8f35d8f92975c2765104d8be09396d3eba", 0x1d) read$rfkill(r7, &(0x7f0000006680), 0x5) 4.597610435s ago: executing program 6 (id=1208): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x3, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000002cc0)={0x0, [[0xffffffff, 0x2, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0x39a8, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xfffffff7, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xe8e1, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xd3, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) writev(0xffffffffffffffff, &(0x7f0000002f40)=[{&(0x7f0000002f80)="a4443f60a26f2383de75bf33043a446c4893e584", 0x14}, {0x0}], 0x2) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000002fc0)=[{&(0x7f0000003000)="580000001400192340834b80040d8c560a06ffffff7f000000010000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000400030006010000418e01400004fcff", 0x58}], 0x1) r1 = socket$inet(0x2, 0x2, 0x0) getsockopt$inet_int(r1, 0x0, 0x17, 0x0, &(0x7f0000002700)) inotify_add_watch(0xffffffffffffffff, &(0x7f0000003080)='./file0\x00', 0x400008bf) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000030c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000003100)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000003140)=0xfffffffffffffffe) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002800)={&(0x7f0000002780)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {0xd, 0x9}, {0x1, 0xffff}, {0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @TCA_RATE={0x6, 0x5, {0x9, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1d4}, 0x54010) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000003180)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000031c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08006000021000103701ff020000000000000000000000000001ff02000000000000000000000000000186009078ff0002000000000000000000cc53bf0ac390f5705c3e5ec821a876bd0df9b34b963d98309ceb5c6ad9892667199d501a54d84f45bff93dc86a05fc8996cd8524bdb51f45da7eb45b6d6535791ad2e574637f42418964b540"], 0x0) connect$unix(r5, &(0x7f0000003280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000003300), 0x318, 0x0) recvmmsg(r5, &(0x7f0000003340), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000003380)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x0, 0x0) r7 = socket(0x10, 0x80002, 0x0) sendmsg(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa1090000", 0x38}], 0x1}, 0x0) recvmmsg(r7, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/167, 0xa7}, {&(0x7f0000000480)=""/156, 0x9c}, {&(0x7f0000000540)=""/14, 0xe}, {&(0x7f0000000580)=""/4089, 0xff9}, {&(0x7f0000001580)=""/4096, 0x1000}, {0x0}, {&(0x7f0000002580)=""/51, 0x33}, {&(0x7f00000025c0)=""/52, 0x34}, {&(0x7f0000002600)=""/203, 0xcb}], 0x9}, 0x8}], 0x2, 0x40012120, 0x0) 4.410160819s ago: executing program 8 (id=1209): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$sndctrl(&(0x7f0000005a80), 0x7, 0x4aa442) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000480)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000600)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) 3.029192346s ago: executing program 6 (id=1210): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x4000)=nil, 0x0, 0x2) socket$packet(0x11, 0x3, 0x300) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r3, 0x402c542c, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000640), 0x2, 0x963b01) ioctl$EVIOCSFF(r4, 0x40304580, &(0x7f0000000680)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x53, 0x2}, @ramp={0xffff, 0x8000, {0x7, 0xfffe, 0xab8, 0x3}}}) write$char_usb(r4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) getpid() syz_emit_ethernet(0x86, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x4, 0x4, 0x100, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0xd, &(0x7f0000000500)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r5}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r6}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 862.751342ms ago: executing program 8 (id=1211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x60042, 0x1) close(r0) syz_open_dev$sndctrl(&(0x7f0000000280), 0x0, 0xe00) r1 = fsopen(&(0x7f0000000300)='binfmt_misc\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x14c98, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 630.245787ms ago: executing program 6 (id=1212): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a61b01000100000000010902200001010080320904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x1, 0x802) 0s ago: executing program 8 (id=1213): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="9201000200000010b404a1bc000b000000010902240001000000020904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x310, 0xd8, 0x43, 0xb, 0x8, 0x45e, 0x775, 0x5a54, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x8, 0x10, 0x1, "", [{{0x9, 0x4, 0xd3, 0x3, 0x0, 0x8d, 0xf0, 0x66, 0xfe}}]}}]}}, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0}) ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xc018480b, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x2001) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f00000001c0)=""/167) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) kernel console output (not intermixed with test programs): -dummy_hcd.8-1/input0 [ 735.412687][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 735.492381][ T5756] usb 9-1: USB disconnect, device number 36 [ 735.742125][T10545] fido_id[10545]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/9-1/report_descriptor': No such file or directory [ 735.829485][ T464] bridge_slave_1: left allmulticast mode [ 735.829519][ T464] bridge_slave_1: left promiscuous mode [ 735.830537][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 736.059788][ T464] bridge_slave_0: left allmulticast mode [ 736.059829][ T464] bridge_slave_0: left promiscuous mode [ 736.060580][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 736.223945][ T5613] ffs_data_put(): freeing [ 743.652709][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.662934][ T30] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 743.792699][ T30] usb 5-1: device descriptor read/64, error -71 [ 743.955172][ T464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 744.032735][ T30] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 744.155662][ T464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 744.172548][ T30] usb 5-1: device descriptor read/64, error -71 [ 744.196373][ T464] bond0 (unregistering): Released all slaves [ 744.283115][ T30] usb usb5-port1: attempt power cycle [ 744.515548][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.515840][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 744.516038][T10458] bridge_slave_0: entered allmulticast mode [ 744.528079][T10458] bridge_slave_0: entered promiscuous mode [ 744.611165][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.611259][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 744.611398][T10458] bridge_slave_1: entered allmulticast mode [ 744.635280][T10458] bridge_slave_1: entered promiscuous mode [ 744.682624][ T30] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 744.703266][ T30] usb 5-1: device descriptor read/8, error -71 [ 744.955676][ T1009] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 744.957264][ T30] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 744.960685][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 744.990176][ T30] usb 5-1: device descriptor read/8, error -71 [ 745.014117][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 745.151362][T10458] team0: Port device team_slave_0 added [ 745.164408][T10458] team0: Port device team_slave_1 added [ 745.319281][ T30] usb usb5-port1: unable to enumerate USB device [ 745.342560][ T1009] usb 7-1: Using ep0 maxpacket: 16 [ 745.352541][ T1009] usb 7-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=b.00 [ 745.356478][ T1009] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.356571][ T1009] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 745.356644][ T1009] usb 7-1: config 0 interface 0 has no altsetting 0 [ 745.356734][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.826048][T10603] overlayfs: overlapping lowerdir path [ 746.440553][ T1009] usb 7-1: config 0 descriptor?? [ 746.666999][T10601] tipc: Started in network mode [ 746.667048][T10601] tipc: Node identity 0010000000000000002, cluster identity 1 [ 746.730901][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.730919][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.730952][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.786448][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.786468][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 746.786500][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.112006][T10591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 747.139300][T10591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 747.164232][ T1009] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:04B4:BCA1.0011/input/input19 [ 747.566712][ T1009] cypress 0003:04B4:BCA1.0011: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 04b4:bca1] on usb-dummy_hcd.6-1/input0 [ 747.632789][ T1009] usb 7-1: USB disconnect, device number 23 [ 747.777240][ T464] hsr_slave_0: left promiscuous mode [ 747.818828][ T464] hsr_slave_1: left promiscuous mode [ 747.832733][ T464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.853470][ T464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 748.071660][T10620] fido_id[10620]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 749.830471][T10631] fuse: Unknown parameter '0x0000000000000003' [ 751.263173][ T464] team0 (unregistering): Port device team_slave_1 removed [ 751.325018][ T464] team0 (unregistering): Port device team_slave_0 removed [ 751.482587][ T5935] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 751.612598][ T5935] usb 9-1: device descriptor read/64, error -71 [ 751.736406][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 751.852670][ T5935] usb 9-1: new full-speed USB device number 38 using dummy_hcd [ 751.966833][T10458] hsr_slave_0: entered promiscuous mode [ 751.970945][T10458] hsr_slave_1: entered promiscuous mode [ 751.981427][T10458] debugfs: 'hsr0' already exists in 'hsr' [ 751.981515][T10458] Cannot create hsr debugfs directory [ 751.986413][ T5935] usb 9-1: device descriptor read/64, error -71 [ 752.116218][ T5935] usb usb9-port1: attempt power cycle [ 752.176114][T10462] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.176264][T10462] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.176443][T10462] bridge_slave_0: entered allmulticast mode [ 752.179350][T10462] bridge_slave_0: entered promiscuous mode [ 752.264480][T10462] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.264626][T10462] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.264823][T10462] bridge_slave_1: entered allmulticast mode [ 752.300110][T10462] bridge_slave_1: entered promiscuous mode [ 752.492573][ T5935] usb 9-1: new full-speed USB device number 39 using dummy_hcd [ 752.516199][ T5935] usb 9-1: device descriptor read/8, error -71 [ 752.616639][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.616722][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.618767][T10462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.657593][T10462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.755859][ T5935] usb 9-1: new full-speed USB device number 40 using dummy_hcd [ 752.778161][ T5935] usb 9-1: device descriptor read/8, error -71 [ 752.883163][ T5935] usb usb9-port1: unable to enumerate USB device [ 753.002602][ T8354] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 753.131724][T10462] team0: Port device team_slave_0 added [ 753.173649][ T8354] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 753.175457][ T8354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 753.175491][ T8354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 753.175517][ T8354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 753.175560][ T8354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.180522][ T8354] usb 7-1: config 0 descriptor?? [ 753.305082][T10462] team0: Port device team_slave_1 added [ 753.631016][T10652] fuse: Unknown parameter 'ÿ0xffffffffffffffffUv1µÊîœtÈz}§' [ 753.858332][T10462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 753.858347][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 753.858389][T10462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 754.037219][T10462] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 754.047126][T10462] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 754.047165][T10462] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 754.257352][ T8354] usbhid 7-1:0.0: can't add hid device: -71 [ 754.257486][ T8354] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 754.325600][ T8354] usb 7-1: USB disconnect, device number 24 [ 756.036151][ T464] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.212637][ T1009] usb 9-1: new full-speed USB device number 41 using dummy_hcd [ 758.257616][T10462] hsr_slave_0: entered promiscuous mode [ 758.259190][T10462] hsr_slave_1: entered promiscuous mode [ 758.260330][T10462] debugfs: 'hsr0' already exists in 'hsr' [ 758.260360][T10462] Cannot create hsr debugfs directory [ 758.384458][ T1009] usb 9-1: New USB device found: idVendor=1e7d, idProduct=319c, bcdDevice=0.00 [ 758.385763][ T1009] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 758.385792][ T1009] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 758.385836][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.443764][ T1009] usb 9-1: config 0 descriptor?? [ 758.708269][ T464] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.758922][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 759.022648][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 759.186406][ T8354] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 759.241649][ T464] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.336329][ T8354] usb 7-1: Using ep0 maxpacket: 32 [ 759.340509][ T8354] usb 7-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 759.341809][ T8354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.341833][ T8354] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.341860][ T8354] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.397293][ T8354] usb 7-1: config 0 descriptor?? [ 760.036573][ T8354] hid_parser_main: 434 callbacks suppressed [ 760.036604][ T8354] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 760.036627][ T8354] ft260 0003:0403:6030.0012: unknown main item tag 0x0 [ 760.204827][ T8354] ft260 0003:0403:6030.0012: chip code: 0000 0000 [ 760.459759][ T8354] ft260 0003:0403:6030.0012: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 760.684719][ T8354] ft260 0003:0403:6030.0012: failed to retrieve status: -32, no wakeup [ 760.716379][ T8354] ft260 0003:0403:6030.0012: failed to retrieve status: -71 [ 760.716926][ T8354] ft260 0003:0403:6030.0012: failed to reset I2C controller: -71 [ 760.969515][ T5935] usb 9-1: USB disconnect, device number 41 [ 761.280204][ T8354] usb 7-1: USB disconnect, device number 25 [ 761.582940][ T464] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.605110][ T5935] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 761.753512][ T5935] usb 9-1: New USB device found: idVendor=0b05, idProduct=183d, bcdDevice=0.00 [ 761.755163][ T5935] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 761.755199][ T5935] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 761.755230][ T5935] usb 9-1: config 0 interface 0 has no altsetting 0 [ 761.755265][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.813325][ T5935] usb 9-1: config 0 descriptor?? [ 762.262801][ T5935] asus 0003:0B05:183D.0013: ignoring exceeding usage max [ 762.315877][ T5935] asus 0003:0B05:183D.0013: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.8-1/input0 [ 762.696106][T10697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 762.696546][T10697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 762.700417][ T5935] usb 9-1: USB disconnect, device number 42 [ 764.682624][ T8353] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 764.792581][ T5935] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 764.833445][ T8353] usb 9-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 764.834448][ T8353] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 764.834468][ T8353] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 764.834496][ T8353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.918411][ T8353] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 764.953790][ T8353] usb 9-1: SPCP8x5 converter now attached to ttyUSB0 [ 765.013275][ T5935] usb 7-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 765.021051][ T5935] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.036966][ T5935] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 765.072213][ T5935] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.072245][ T5935] usb 7-1: Product: syz [ 765.072261][ T5935] usb 7-1: Manufacturer: syz [ 765.072277][ T5935] usb 7-1: SerialNumber: syz [ 765.142026][ T5935] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 765.174889][ T5935] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 765.202000][ T5935] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 765.402917][T10724] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 765.406247][T10724] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 765.458682][T10724] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 765.503629][T10724] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 765.543091][ T464] bridge_slave_1: left allmulticast mode [ 765.543130][ T464] bridge_slave_1: left promiscuous mode [ 765.543396][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.665595][T10722] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 765.679919][ T9004] usb 9-1: USB disconnect, device number 43 [ 765.728885][ T464] bridge_slave_0: left allmulticast mode [ 765.728925][ T464] bridge_slave_0: left promiscuous mode [ 765.729177][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.836264][ T9004] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 765.886468][ T9004] spcp8x5 9-1:1.0: device disconnected [ 767.797119][ T5935] usb 7-1: USB disconnect, device number 26 [ 767.862381][ T5935] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 767.887611][ T5935] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 767.889102][ T5935] ti_usb_3410_5052 7-1:2.0: device disconnected [ 769.502745][ T464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 769.545727][ T9490] ffs_data_put(): freeing [ 769.653228][ T464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 769.705209][ T464] bond0 (unregistering): Released all slaves [ 771.541457][T10462] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 771.721625][T10462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.733006][T10462] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 771.866909][T10462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.918056][T10462] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 771.979534][T10462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.980688][T10462] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 772.034446][T10462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.762611][ T9004] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 772.924801][ T9004] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 772.926310][ T9004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.962708][ T9004] usb 9-1: config 0 descriptor?? [ 774.574865][ T9004] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 777.115359][ T9004] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 1 [ 777.115381][ T9004] [drm] Initialized udl on minor 1 [ 777.182746][ T9004] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 777.217023][ T9004] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 777.234224][ T9004] usb 9-1: USB disconnect, device number 44 [ 779.217082][ T9490] ffs_data_put(): freeing [ 779.738514][ T9004] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 779.924005][ T9004] usb 7-1: New USB device found: idVendor=046d, idProduct=0821, bcdDevice=1.00 [ 779.925993][ T9004] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.926013][ T9004] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 779.926047][ T9004] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 780.001766][ T9004] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 780.001789][ T9004] usb 7-1: Product: syz [ 780.001800][ T9004] usb 7-1: Manufacturer: syz [ 780.001811][ T9004] usb 7-1: SerialNumber: syz [ 780.095493][ T9004] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (046d:0821) [ 780.095532][ T9004] uvcvideo 7-1:1.0: No valid video chain found. [ 780.291448][ T9004] usb 7-1: USB disconnect, device number 27 [ 782.720852][T10462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.930543][ T4923] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.985327][ T4923] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.995184][ T4923] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 784.015578][ T4923] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 784.021324][ T4923] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 784.848570][ T5611] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 784.907303][ T5611] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 784.909586][ T5611] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 784.943647][ T5611] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 784.946034][ T5611] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 785.357543][ T464] hsr_slave_0: left promiscuous mode [ 785.461275][ T464] hsr_slave_1: left promiscuous mode [ 785.477661][ T464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.477695][ T464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.603625][ T464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.603657][ T464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.015701][ T464] veth1_macvtap: left promiscuous mode [ 786.015783][ T464] veth0_macvtap: left promiscuous mode [ 786.015978][ T464] veth1_vlan: left promiscuous mode [ 786.016674][ T464] veth0_vlan: left promiscuous mode [ 786.452841][ T4923] Bluetooth: hci4: command tx timeout [ 787.970595][ T4923] Bluetooth: hci6: command tx timeout [ 788.532559][ T4923] Bluetooth: hci4: command tx timeout [ 788.545284][ T464] team0 (unregistering): Port device team_slave_1 removed [ 788.593804][ T464] team0 (unregistering): Port device team_slave_0 removed [ 789.092745][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 789.674115][ T30] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 789.830562][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 789.830624][ T30] usb 7-1: New USB device found: idVendor=8086, idProduct=0ad2, bcdDevice=0.00 [ 789.913902][ T30] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.913934][ T30] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 789.913985][ T30] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 789.917797][ T30] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 789.917828][ T30] usb 7-1: Product: syz [ 789.917845][ T30] usb 7-1: Manufacturer: syz [ 789.973255][ T4923] Bluetooth: hci6: command tx timeout [ 790.000646][ T30] uvcvideo 7-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 790.000721][ T30] uvcvideo 7-1:1.0: No streaming interface found for terminal 32770. [ 790.145793][ T5268] 8021q: adding VLAN 0 to HW filter on device eth9 [ 790.203655][ T9004] usb 7-1: USB disconnect, device number 28 [ 790.612622][ T4923] Bluetooth: hci4: command tx timeout [ 791.750774][T10912] netlink: 'syz.4.935': attribute type 1 has an invalid length. [ 791.857478][T10912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 792.012952][T10847] rxe_eth0 speed is unknown, defaulting to 1000 [ 792.052558][ T4923] Bluetooth: hci6: command tx timeout [ 792.692863][ T4923] Bluetooth: hci4: command tx timeout [ 792.995764][ T4923] Bluetooth: Frame is too long (len 10, expected len 4) [ 793.003552][T10851] rxe_eth0 speed is unknown, defaulting to 1000 [ 793.143351][ T5268] 8021q: adding VLAN 0 to HW filter on device eth10 [ 793.334597][ T1009] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 793.483393][ T1009] usb 5-1: New USB device found: idVendor=0b05, idProduct=183d, bcdDevice=0.00 [ 793.485961][ T1009] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 793.485994][ T1009] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 793.486016][ T1009] usb 5-1: config 0 interface 0 has no altsetting 0 [ 793.486045][ T1009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.545854][ T1009] usb 5-1: config 0 descriptor?? [ 794.066098][ T1009] asus 0003:0B05:183D.0014: ignoring exceeding usage max [ 795.089066][ T1009] asus 0003:0B05:183D.0014: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.4-1/input0 [ 795.206425][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 795.207066][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 795.246230][ T1009] usb 5-1: USB disconnect, device number 75 [ 795.279013][ T4923] Bluetooth: hci6: command tx timeout [ 795.279049][ T4923] Bluetooth: hci0: command 0x0406 tx timeout [ 795.550220][T10948] fido_id[10948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 798.497366][ T5611] Bluetooth: hci0: command 0x0406 tx timeout [ 798.618762][ T5268] 8021q: adding VLAN 0 to HW filter on device eth16 [ 798.652578][ T8352] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 798.863355][ T8352] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 798.864868][ T8352] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 798.864925][ T8352] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.054652][ T5756] usb 5-1: USB disconnect, device number 76 [ 800.273688][ T30] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 800.433587][ T30] usb 9-1: New USB device found: idVendor=0b05, idProduct=183d, bcdDevice=0.00 [ 800.457061][ T30] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 800.457089][ T30] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.457108][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 800.457132][ T30] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.510612][ T30] usb 9-1: config 0 descriptor?? [ 801.033192][ T30] asus 0003:0B05:183D.0015: ignoring exceeding usage max [ 801.058147][ T30] asus 0003:0B05:183D.0015: hidraw0: USB HID v0.10 Joystick [HID 0b05:183d] on usb-dummy_hcd.8-1/input0 [ 801.111107][ T5268] 8021q: adding VLAN 0 to HW filter on device eth20 [ 801.298712][T11003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.299366][T11003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.324357][ T8352] usb 9-1: USB disconnect, device number 45 [ 801.743394][T10847] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.745103][T10847] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.745316][T10847] bridge_slave_0: entered allmulticast mode [ 801.751128][T10847] bridge_slave_0: entered promiscuous mode [ 801.810365][T10847] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.810494][T10847] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.810689][T10847] bridge_slave_1: entered allmulticast mode [ 801.833037][T10847] bridge_slave_1: entered promiscuous mode [ 801.842535][ T9] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 801.993532][ T9] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 801.995105][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.995167][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 801.995214][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.051536][ T9] usb 7-1: config 0 descriptor?? [ 802.074450][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 802.249090][T10851] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.249283][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 802.254489][T10851] bridge_slave_0: entered allmulticast mode [ 802.262198][T10851] bridge_slave_0: entered promiscuous mode [ 802.313760][T10847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.315455][T10851] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.315599][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.315794][T10851] bridge_slave_1: entered allmulticast mode [ 802.320329][T10851] bridge_slave_1: entered promiscuous mode [ 802.409649][T10847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.512859][ T1009] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 802.762696][ T1009] usb 9-1: Using ep0 maxpacket: 32 [ 802.763626][ T1009] usb 9-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 802.768119][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.768158][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.768183][ T1009] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 802.768228][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 802.867297][ T1009] usb 9-1: config 0 descriptor?? [ 802.880930][T10851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.899668][T10847] team0: Port device team_slave_0 added [ 802.924977][T10851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.929779][T10847] team0: Port device team_slave_1 added [ 803.107219][ T9529] Bluetooth: Frame is too long (len 10, expected len 4) [ 803.325647][T10851] team0: Port device team_slave_0 added [ 803.339251][T10847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.339271][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.339302][T10847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.351220][T10851] team0: Port device team_slave_1 added [ 803.363583][T10847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.363605][T10847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.363699][T10847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.537982][ T1009] usbhid 9-1:0.0: can't add hid device: -71 [ 803.538162][ T1009] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 803.579970][ T1009] usb 9-1: USB disconnect, device number 46 [ 803.657776][T10851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.657798][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.657830][T10851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.731491][T10851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.731511][T10851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.731541][T10851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.911479][T10847] hsr_slave_0: entered promiscuous mode [ 803.916157][T10847] hsr_slave_1: entered promiscuous mode [ 803.922192][T10847] debugfs: 'hsr0' already exists in 'hsr' [ 803.922282][T10847] Cannot create hsr debugfs directory [ 804.135843][T10851] hsr_slave_0: entered promiscuous mode [ 804.165875][T10851] hsr_slave_1: entered promiscuous mode [ 804.167429][T10851] debugfs: 'hsr0' already exists in 'hsr' [ 804.167460][T10851] Cannot create hsr debugfs directory [ 804.611329][ T1009] usb 7-1: USB disconnect, device number 29 [ 805.315462][ T9529] Bluetooth: hci2: command 0x0406 tx timeout [ 808.105027][ T9529] Bluetooth: hci2: command 0x0406 tx timeout [ 809.558132][T11081] Invalid ELF header magic: != ELF [ 809.705833][ T5268] 8021q: adding VLAN 0 to HW filter on device eth21 [ 809.826242][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 810.130166][ T464] bridge_slave_1: left allmulticast mode [ 810.130207][ T464] bridge_slave_1: left promiscuous mode [ 810.130480][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 810.273269][ T464] bridge_slave_0: left allmulticast mode [ 810.273309][ T464] bridge_slave_0: left promiscuous mode [ 810.273597][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 810.602665][T11107] netlink: 'syz.8.970': attribute type 39 has an invalid length. [ 811.130904][T11112] overlayfs: overlapping lowerdir path [ 811.736172][ T464] bridge_slave_1: left allmulticast mode [ 811.736213][ T464] bridge_slave_1: left promiscuous mode [ 811.736494][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.792625][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 811.816540][ T464] bridge_slave_0: left allmulticast mode [ 811.816574][ T464] bridge_slave_0: left promiscuous mode [ 811.816754][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 811.943665][ T9] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 811.945029][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.945087][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 811.945118][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.949572][ T9] usb 7-1: config 0 descriptor?? [ 812.004450][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 812.563267][ T464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.643324][ T464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.710830][ T464] bond0 (unregistering): Released all slaves [ 812.963292][ T464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.025674][ T464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.068242][ T464] bond0 (unregistering): Released all slaves [ 813.093072][T11110] tipc: Started in network mode [ 813.093109][T11110] tipc: Node identity 0010000000000000002, cluster identity 1 [ 814.058690][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.058762][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.200905][ T9] usb 7-1: USB disconnect, device number 30 [ 818.187399][T11139] overlayfs: overlapping lowerdir path [ 819.468726][T11136] tipc: Started in network mode [ 819.468766][T11136] tipc: Node identity 0010000000000000002, cluster identity 1 [ 820.020690][T11147] Invalid ELF header magic: != ELF [ 820.352628][ T464] hsr_slave_0: left promiscuous mode [ 820.375015][ T464] hsr_slave_1: left promiscuous mode [ 820.376333][ T464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.406608][ T464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 820.503102][ T464] hsr_slave_0: left promiscuous mode [ 820.523213][ T464] hsr_slave_1: left promiscuous mode [ 820.524508][ T464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.553425][ T464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.512589][ T1009] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 821.667586][ T1009] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 821.670670][ T1009] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 821.670749][ T1009] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 821.670795][ T1009] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.286363][ T1009] usb 5-1: config 0 descriptor?? [ 822.322972][ T1009] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 822.613490][ T464] team0 (unregistering): Port device team_slave_1 removed [ 822.674314][ T464] team0 (unregistering): Port device team_slave_0 removed [ 823.989855][ T464] team0 (unregistering): Port device team_slave_1 removed [ 824.235110][ T464] team0 (unregistering): Port device team_slave_0 removed [ 824.478684][ T5268] 8021q: adding VLAN 0 to HW filter on device eth22 [ 825.102607][ T1009] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 825.303750][ T1009] usb 9-1: New USB device found: idVendor=1532, idProduct=011d, bcdDevice=0.00 [ 825.305532][ T1009] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.305568][ T1009] usb 9-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.305593][ T1009] usb 9-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.305622][ T1009] usb 9-1: config 0 interface 0 has no altsetting 0 [ 825.305658][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.324298][ T1009] usb 9-1: config 0 descriptor?? [ 826.080830][ T9] usb 5-1: USB disconnect, device number 77 [ 826.114938][ T1009] usbhid 9-1:0.0: can't add hid device: -71 [ 826.115074][ T1009] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 826.194103][ T1009] usb 9-1: USB disconnect, device number 47 [ 826.391579][T11192] netlink: 'syz.4.984': attribute type 39 has an invalid length. [ 827.071312][T11202] 9p: Bad value for 'rfdno' [ 827.593945][ T1009] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 827.935950][ T1009] usb 7-1: not running at top speed; connect to a high speed hub [ 827.935996][ T1009] usb 7-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 827.937485][ T1009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 827.937510][ T1009] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 827.937562][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.041115][ T1009] uvcvideo 7-1:1.0: Found UVC 1.00 device (046d:0825) [ 828.041155][ T1009] uvcvideo 7-1:1.0: No valid video chain found. [ 829.293287][ T1009] usb 7-1: USB disconnect, device number 31 [ 829.612033][T11220] netlink: 12 bytes leftover after parsing attributes in process `syz.4.989'. [ 830.220557][ T5268] 8021q: adding VLAN 0 to HW filter on device eth23 [ 836.944073][T10847] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 837.002261][T10847] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 837.022618][T10847] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 837.122736][T10847] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 837.152562][T10847] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 837.192568][ T1009] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 837.230669][T10847] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 837.281022][T10847] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 837.343488][ T1009] usb 7-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 837.344889][ T1009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.344948][ T1009] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 837.344980][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.419371][T10847] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 837.903706][ T9] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 838.047089][T10851] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 838.074247][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 838.074292][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 838.075791][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 838.075817][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 838.075872][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.152343][ T9] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 838.152434][ T9] uvcvideo 5-1:1.0: No valid video chain found. [ 838.158670][T10851] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 838.191441][T10851] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 838.286105][T10851] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 838.303743][T10851] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 838.361461][T10851] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 838.370847][ T1009] usb 5-1: USB disconnect, device number 78 [ 838.387134][T10851] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 838.473075][T10851] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 838.889323][T10847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.115223][T10847] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.867307][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.868835][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.890722][T10851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.895959][ T1508] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.896185][ T1508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.019354][T10193] usb 7-1: USB disconnect, device number 32 [ 841.465040][T10851] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.572290][ T987] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.610748][ T987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 841.642914][T10193] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 841.711904][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.725585][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 841.793450][T10193] usb 7-1: New USB device found: idVendor=0853, idProduct=0148, bcdDevice=0.40 [ 841.795258][T10193] usb 7-1: config 1 interface 0 has no altsetting 0 [ 841.801771][T10193] usb 7-1: string descriptor 0 read error: -22 [ 841.801922][T10193] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.303429][T10193] usbhid 7-1:1.0: can't add hid device: -32 [ 842.303563][T10193] usbhid 7-1:1.0: probe with driver usbhid failed with error -32 [ 842.355789][T10193] usb 7-1: USB disconnect, device number 33 [ 843.794833][T11363] FAULT_INJECTION: forcing a failure. [ 843.794833][T11363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 843.794879][T11363] CPU: 1 UID: 0 PID: 11363 Comm: syz.6.1005 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 843.794916][T11363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 843.794932][T11363] Call Trace: [ 843.794941][T11363] [ 843.794951][T11363] dump_stack_lvl+0xe8/0x150 [ 843.794998][T11363] should_fail_ex+0x46b/0x600 [ 843.795036][T11363] _copy_from_user+0x2d/0xb0 [ 843.795067][T11363] ucma_listen+0xa0/0x440 [ 843.795239][T11363] ? __pfx_ucma_listen+0x10/0x10 [ 843.795283][T11363] ucma_write+0x252/0x2f0 [ 843.795314][T11363] ? __pfx_ucma_write+0x10/0x10 [ 843.795340][T11363] ? security_file_permission+0x75/0x260 [ 843.795377][T11363] ? rw_verify_area+0x209/0x4d0 [ 843.795409][T11363] ? __pfx_ucma_write+0x10/0x10 [ 843.795436][T11363] vfs_write+0x29f/0xbb0 [ 843.795484][T11363] ? __pfx_vfs_write+0x10/0x10 [ 843.795506][T11363] ? __fget_files+0x2a/0x420 [ 843.795538][T11363] ? __fget_files+0x3a8/0x420 [ 843.795557][T11363] ? __fget_files+0x2a/0x420 [ 843.795580][T11363] ? fdget+0x1b2/0x250 [ 843.795605][T11363] ksys_write+0x156/0x270 [ 843.795629][T11363] ? __pfx_ksys_write+0x10/0x10 [ 843.795659][T11363] do_syscall_64+0x166/0x520 [ 843.795686][T11363] ? trace_irq_disable+0x3b/0x140 [ 843.795703][T11363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.795720][T11363] ? clear_bhb_loop+0x70/0xc0 [ 843.795740][T11363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.795756][T11363] RIP: 0033:0x7f755daff559 [ 843.795773][T11363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.795786][T11363] RSP: 002b:00007f755bd4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 843.795805][T11363] RAX: ffffffffffffffda RBX: 00007f755dd85fa0 RCX: 00007f755daff559 [ 843.795817][T11363] RDX: 00000000fffffcda RSI: 0000200000000fc0 RDI: 0000000000000008 [ 843.795827][T11363] RBP: 00007f755db96b20 R08: 0000000000000000 R09: 0000000000000000 [ 843.795837][T11363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.795848][T11363] R13: 00007f755dd86038 R14: 00007f755dd85fa0 R15: 00007fff27caf348 [ 843.795913][T11363] [ 844.412873][ T9529] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 844.462253][ T9529] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 844.475628][ T9529] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 844.491726][ T9529] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 844.502793][ T9529] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 845.585013][ T9529] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 845.647458][ T9529] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 845.654909][ T9529] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 845.662715][ T9529] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 845.666666][ T9529] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 846.773466][ T9529] Bluetooth: hci3: command tx timeout [ 848.052876][ T9] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 848.239749][ T9] usb 5-1: not running at top speed; connect to a high speed hub [ 848.239800][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 848.274419][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 848.274450][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 848.274505][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.383370][ T9] uvcvideo 5-1:1.0: Found UVC 1.00 device (046d:0825) [ 848.383410][ T9] uvcvideo 5-1:1.0: No valid video chain found. [ 848.576386][ T1009] usb 5-1: USB disconnect, device number 79 [ 848.852567][ T9529] Bluetooth: hci3: command tx timeout [ 848.852715][ T5611] Bluetooth: hci5: command tx timeout [ 849.079377][T11422] 9p: Bad value for 'rfdno' [ 849.892660][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 850.958130][ T9529] Bluetooth: hci3: command tx timeout [ 850.958239][ T5611] Bluetooth: hci5: command tx timeout [ 852.063685][T11368] rxe_eth0 speed is unknown, defaulting to 1000 [ 852.363012][T10193] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 852.527760][T10193] usb 9-1: Using ep0 maxpacket: 16 [ 852.538376][T10193] usb 9-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 852.551696][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 852.551754][T10193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.611917][T10193] usb 9-1: config 0 descriptor?? [ 852.671734][T11437] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 853.087011][ T9529] Bluetooth: hci3: command tx timeout [ 853.087082][ T5611] Bluetooth: hci5: command tx timeout [ 854.218254][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.256864][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.319102][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319132][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319152][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319173][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319192][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319212][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319231][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319251][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319271][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.319290][T10193] hid-sensor-hub 0003:0C70:F00D.0016: unknown main item tag 0x0 [ 854.430317][T10193] hid-sensor-hub 0003:0C70:F00D.0016: collection stack underflow [ 854.430356][T10193] hid-sensor-hub 0003:0C70:F00D.0016: item 0 1 0 12 parsing failed [ 854.442704][T10193] hid-sensor-hub 0003:0C70:F00D.0016: parse failed [ 854.443418][T10193] hid-sensor-hub 0003:0C70:F00D.0016: probe with driver hid-sensor-hub failed with error -22 [ 854.539933][T10193] aquacomputer_d5next 0003:0C70:F00D.0016: collection stack underflow [ 854.539960][T10193] aquacomputer_d5next 0003:0C70:F00D.0016: item 0 1 0 12 parsing failed [ 854.540733][T10193] aquacomputer_d5next 0003:0C70:F00D.0016: probe with driver aquacomputer_d5next failed with error -22 [ 854.696137][T10193] usb 9-1: USB disconnect, device number 48 [ 854.982641][ T5737] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 855.092817][ T5611] Bluetooth: hci5: command tx timeout [ 855.174486][ T5737] usb 7-1: New USB device found: idVendor=1532, idProduct=011d, bcdDevice=0.00 [ 855.181620][ T5737] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 855.181658][ T5737] usb 7-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.181684][ T5737] usb 7-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 855.181715][ T5737] usb 7-1: config 0 interface 0 has no altsetting 0 [ 855.181752][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.250593][ T5737] usb 7-1: config 0 descriptor?? [ 855.495691][T11482] netlink: 'syz.8.1021': attribute type 1 has an invalid length. [ 855.874655][T11389] rxe_eth0 speed is unknown, defaulting to 1000 [ 855.961261][ T5737] usbhid 7-1:0.0: can't add hid device: -71 [ 855.961397][ T5737] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 856.029313][ T5737] usb 7-1: USB disconnect, device number 34 [ 856.406297][T11482] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.016320][T11503] Invalid ELF header magic: != ELF [ 860.515356][T11518] FAULT_INJECTION: forcing a failure. [ 860.515356][T11518] name failslab, interval 1, probability 0, space 0, times 0 [ 860.515409][T11518] CPU: 0 UID: 0 PID: 11518 Comm: syz.6.1028 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 860.515437][T11518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 860.515452][T11518] Call Trace: [ 860.515466][T11518] [ 860.515476][T11518] dump_stack_lvl+0xe8/0x150 [ 860.515522][T11518] should_fail_ex+0x46b/0x600 [ 860.515559][T11518] should_failslab+0xa8/0x100 [ 860.515585][T11518] __kmalloc_noprof+0xf6/0x790 [ 860.515627][T11518] ? hash_ipport6_add+0xdba/0x2100 [ 860.515796][T11518] ? hash_ipport6_add+0xdba/0x2100 [ 860.515839][T11518] hash_ipport6_add+0xdba/0x2100 [ 860.515884][T11518] ? hash_ipport6_add+0x82/0x2100 [ 860.515941][T11518] hash_ipport6_uadt+0x801/0xaa0 [ 860.515983][T11518] ? __pfx_hash_ipport6_add+0x10/0x10 [ 860.516017][T11518] ? __pfx_hash_ipport6_uadt+0x10/0x10 [ 860.516049][T11518] ? __nla_validate_parse+0x2429/0x2d50 [ 860.516140][T11518] call_ad+0x2ec/0xa30 [ 860.516186][T11518] ? __pfx_call_ad+0x10/0x10 [ 860.516231][T11518] ? __nla_parse+0x40/0x60 [ 860.516268][T11518] ip_set_ad+0x82a/0x9d0 [ 860.516307][T11518] ? __pfx_ip_set_ad+0x10/0x10 [ 860.516362][T11518] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 860.516410][T11518] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 860.516455][T11518] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 860.516530][T11518] ? unwind_get_return_address+0x4d/0x90 [ 860.516572][T11518] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 860.516619][T11518] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 860.516684][T11518] ? hook_capable+0x1c3/0x5e0 [ 860.516738][T11518] netlink_rcv_skb+0x226/0x4a0 [ 860.516803][T11518] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 860.516831][T11518] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 860.516870][T11518] ? bpf_lsm_capable+0x9/0x20 [ 860.516898][T11518] ? security_capable+0x7e/0x2c0 [ 860.516944][T11518] nfnetlink_rcv+0x2b9/0x28d0 [ 860.516965][T11518] ? __local_bh_enable+0x1e3/0x2f0 [ 860.517004][T11518] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 860.517036][T11518] ? lockdep_hardirqs_on+0x7b/0x110 [ 860.517109][T11518] ? __dev_queue_xmit+0x2a0/0x3a70 [ 860.517221][T11518] ? __dev_queue_xmit+0x1f26/0x3a70 [ 860.517256][T11518] ? ___sys_sendmsg+0x2a5/0x360 [ 860.517331][T11518] ? __x64_sys_sendmsg+0x1b7/0x290 [ 860.517368][T11518] ? __dev_queue_xmit+0x2a0/0x3a70 [ 860.517425][T11518] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 860.517461][T11518] ? __pfx___dev_queue_xmit+0x10/0x10 [ 860.517510][T11518] ? __copy_skb_header+0xa3/0x4a0 [ 860.517573][T11518] ? __asan_memcpy+0x40/0x70 [ 860.517604][T11518] ? __skb_clone+0x5c/0x760 [ 860.517642][T11518] ? __skb_clone+0x4a2/0x760 [ 860.517684][T11518] ? skb_clone+0x246/0x3a0 [ 860.517721][T11518] ? __netlink_deliver_tap+0x681/0x6e0 [ 860.517745][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.517778][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.517804][T11518] ? netlink_deliver_tap+0x2e/0x1b0 [ 860.517836][T11518] netlink_unicast+0x90c/0xac0 [ 860.517879][T11518] netlink_sendmsg+0x7f0/0xb20 [ 860.517944][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.517967][T11518] ? __lock_acquire+0x747/0x2de0 [ 860.518008][T11518] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 860.518045][T11518] ? __pfx_netlink_sendmsg+0x10/0x10 [ 860.518071][T11518] sock_sendmsg_nosec+0x14e/0x190 [ 860.518100][T11518] ____sys_sendmsg+0x565/0x870 [ 860.518144][T11518] ? __pfx_____sys_sendmsg+0x10/0x10 [ 860.518188][T11518] ? import_iovec+0x73/0xa0 [ 860.518222][T11518] ___sys_sendmsg+0x2a5/0x360 [ 860.518253][T11518] ? __lock_acquire+0x747/0x2de0 [ 860.518293][T11518] ? __pfx____sys_sendmsg+0x10/0x10 [ 860.518330][T11518] ? futex_wait+0x2a2/0x390 [ 860.518409][T11518] ? __fget_files+0x3a8/0x420 [ 860.518438][T11518] ? __fget_files+0x2a/0x420 [ 860.518478][T11518] __x64_sys_sendmsg+0x1b7/0x290 [ 860.518514][T11518] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 860.518570][T11518] do_syscall_64+0x166/0x520 [ 860.518603][T11518] ? trace_irq_disable+0x3b/0x140 [ 860.518625][T11518] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.518649][T11518] ? clear_bhb_loop+0x70/0xc0 [ 860.518678][T11518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.518701][T11518] RIP: 0033:0x7f755daff559 [ 860.518725][T11518] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.518744][T11518] RSP: 002b:00007f755bd4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 860.518770][T11518] RAX: ffffffffffffffda RBX: 00007f755dd85fa0 RCX: 00007f755daff559 [ 860.518787][T11518] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 0000000000000009 [ 860.518802][T11518] RBP: 00007f755db96b20 R08: 0000000000000000 R09: 0000000000000000 [ 860.518816][T11518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.518830][T11518] R13: 00007f755dd86038 R14: 00007f755dd85fa0 R15: 00007fff27caf348 [ 860.518869][T11518] [ 860.832286][ T5756] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 861.102502][ T5756] usb 5-1: Using ep0 maxpacket: 16 [ 861.106493][ T5756] usb 5-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 861.109721][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 861.109757][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.152936][ T5756] usb 5-1: config 0 descriptor?? [ 861.156050][T11521] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 861.601165][T11521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.615316][T11521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.694647][ T5756] hid_parser_main: 534 callbacks suppressed [ 861.694676][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.694714][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.694743][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.694772][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.694801][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.696461][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.696497][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.696527][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.696660][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.696692][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: unknown main item tag 0x0 [ 861.790002][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: collection stack underflow [ 861.790038][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: item 0 1 0 12 parsing failed [ 861.791187][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: parse failed [ 861.791300][ T5756] hid-sensor-hub 0003:0C70:F00D.0017: probe with driver hid-sensor-hub failed with error -22 [ 861.838874][ T5756] aquacomputer_d5next 0003:0C70:F00D.0017: collection stack underflow [ 861.838913][ T5756] aquacomputer_d5next 0003:0C70:F00D.0017: item 0 1 0 12 parsing failed [ 861.840263][ T5756] aquacomputer_d5next 0003:0C70:F00D.0017: probe with driver aquacomputer_d5next failed with error -22 [ 861.914239][T10193] usb 5-1: USB disconnect, device number 80 [ 863.600716][T11550] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 864.305094][T11368] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.305230][T11368] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.305419][T11368] bridge_slave_0: entered allmulticast mode [ 864.308500][T11368] bridge_slave_0: entered promiscuous mode [ 864.351966][T11368] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.352225][T11368] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.368255][T11368] bridge_slave_1: entered allmulticast mode [ 864.371285][T11368] bridge_slave_1: entered promiscuous mode [ 864.423320][ T8352] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 864.573174][ T8352] usb 7-1: Using ep0 maxpacket: 32 [ 864.574167][ T8352] usb 7-1: New USB device found: idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 864.575778][ T8352] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.602931][ T8352] usb 7-1: config 0 descriptor?? [ 864.757058][ T5954] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 864.818171][T11368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 864.970755][T11368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 865.191344][ T5954] usb 9-1: Using ep0 maxpacket: 32 [ 865.797038][ T5954] usb 9-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 865.798601][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 865.798636][ T5954] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 865.798677][ T5954] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.849842][ T5954] usb 9-1: config 0 descriptor?? [ 866.013294][ T8352] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 866.069463][ T8352] usb 7-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 866.069520][ T8352] usb 7-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 866.297181][ T13] bridge_slave_1: left allmulticast mode [ 866.297222][ T13] bridge_slave_1: left promiscuous mode [ 866.297914][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.494610][ T13] bridge_slave_0: left allmulticast mode [ 866.494648][ T13] bridge_slave_0: left promiscuous mode [ 866.494893][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.526410][ T5954] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 866.722631][ T5954] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.8-1/input0 [ 866.925294][ T5954] ft260 0003:0403:6030.0018: failed to retrieve status: -5, no wakeup [ 867.143928][ T5954] ft260 0003:0403:6030.0018: failed to retrieve status: -71 [ 867.146470][ T5954] ft260 0003:0403:6030.0018: failed to reset I2C controller: -71 [ 867.265339][ T5954] usb 9-1: USB disconnect, device number 49 [ 870.125437][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.198745][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.246695][ T13] bond0 (unregistering): Released all slaves [ 870.377547][T11368] team0: Port device team_slave_0 added [ 870.438468][T11368] team0: Port device team_slave_1 added [ 870.488841][T11368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.488858][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.488882][T11368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.536452][T11368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.536471][T11368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.536502][T11368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 871.100724][T11368] hsr_slave_0: entered promiscuous mode [ 871.125543][T11368] hsr_slave_1: entered promiscuous mode [ 871.139281][T11368] debugfs: 'hsr0' already exists in 'hsr' [ 871.139314][T11368] Cannot create hsr debugfs directory [ 872.242589][ T5737] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 872.322772][ T13] hsr_slave_0: left promiscuous mode [ 872.362934][ T13] hsr_slave_1: left promiscuous mode [ 872.364233][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 872.407384][ T5737] usb 5-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 872.408726][ T5737] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 872.408781][ T5737] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 872.408829][ T5737] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.408882][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.466367][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.246914][ T9004] usb 5-1: USB disconnect, device number 81 [ 875.395504][T11634] netlink: 'syz.4.1055': attribute type 39 has an invalid length. [ 875.495463][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.495521][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.553900][ T13] team0 (unregistering): Port device team_slave_1 removed [ 875.711459][ T13] team0 (unregistering): Port device team_slave_0 removed [ 876.387914][ T5268] 8021q: adding VLAN 0 to HW filter on device eth21 [ 876.466961][T11389] bridge0: port 1(bridge_slave_0) entered blocking state [ 876.467130][T11389] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.467272][T11389] bridge_slave_0: entered allmulticast mode [ 876.494260][T11389] bridge_slave_0: entered promiscuous mode [ 876.531094][T11389] bridge0: port 2(bridge_slave_1) entered blocking state [ 876.531392][T11389] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.531527][T11389] bridge_slave_1: entered allmulticast mode [ 876.561237][T11389] bridge_slave_1: entered promiscuous mode [ 876.799452][T11389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 876.923039][T11389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.018344][T11389] team0: Port device team_slave_0 added [ 877.024008][ T9004] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 877.046949][T11389] team0: Port device team_slave_1 added [ 877.245694][ T9] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 877.255778][ T9004] usb 5-1: New USB device found: idVendor=0853, idProduct=0148, bcdDevice=0.40 [ 877.261732][ T9004] usb 5-1: config 1 interface 0 has no altsetting 0 [ 877.276293][ T9004] usb 5-1: string descriptor 0 read error: -22 [ 877.276431][ T9004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.434646][ T9] usb 9-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 877.437321][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.437352][ T9] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 877.437391][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.463368][ T9] usb 9-1: config 0 descriptor?? [ 877.674879][T11389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.674974][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.675006][T11389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 877.761085][ T9004] usbhid 5-1:1.0: can't add hid device: -32 [ 877.761218][ T9004] usbhid 5-1:1.0: probe with driver usbhid failed with error -32 [ 877.780820][ T9004] usb 5-1: USB disconnect, device number 82 [ 877.852975][T11389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 877.852994][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 877.853021][T11389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.259020][T11389] hsr_slave_0: entered promiscuous mode [ 878.260445][T11389] hsr_slave_1: entered promiscuous mode [ 878.261543][T11389] debugfs: 'hsr0' already exists in 'hsr' [ 878.261571][T11389] Cannot create hsr debugfs directory [ 878.823801][ T987] IPVS: starting estimator thread 0... [ 878.825944][T11662] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 878.912690][T11663] IPVS: using max 11 ests per chain, 26400 per kthread [ 879.966788][T11672] overlayfs: overlapping lowerdir path [ 880.553549][ T9] usb 9-1: USB disconnect, device number 50 [ 880.624199][T11670] tipc: Cannot configure node identity twice [ 883.244215][T11684] netlink: 'syz.6.1065': attribute type 39 has an invalid length. [ 883.453498][ T5737] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 883.603387][ T5737] usb 5-1: New USB device found: idVendor=047f, idProduct=0418, bcdDevice=0.00 [ 883.607564][ T5737] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 883.607590][ T5737] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 883.607607][ T5737] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 883.607627][ T5737] usb 5-1: config 0 interface 0 has no altsetting 0 [ 883.607652][ T5737] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.689576][ T5737] usb 5-1: config 0 descriptor?? [ 884.083384][T11689] Invalid ELF header magic: != ELF [ 884.201538][ T5737] usbhid 5-1:0.0: can't add hid device: -71 [ 884.201652][ T5737] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 884.238835][ T5737] usb 5-1: USB disconnect, device number 83 [ 884.712834][ T5954] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 884.892533][ T5954] usb 9-1: Using ep0 maxpacket: 32 [ 884.893595][ T5954] usb 9-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 884.895228][ T5954] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 884.895258][ T5954] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 884.895279][ T5954] usb 9-1: config 0 has no interfaces? [ 884.899762][ T5954] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 884.899791][ T5954] usb 9-1: Product: syz [ 884.899807][ T5954] usb 9-1: Manufacturer: syz [ 884.899823][ T5954] usb 9-1: SerialNumber: syz [ 884.934314][ T5954] usb 9-1: config 0 descriptor?? [ 888.228460][ T9] usb 9-1: USB disconnect, device number 51 [ 888.530303][T11720] fuse: Unknown parameter '0x0000000000000003' [ 889.152308][ T9004] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 889.493462][ T9004] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 889.495348][ T9004] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 889.495411][ T9004] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 889.495436][ T9004] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 889.495461][ T9004] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 889.498615][ T9004] usb 9-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 889.498665][ T9004] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 889.498682][ T9004] usb 9-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 889.498699][ T9004] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 889.646804][ T9004] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 889.646835][ T9004] usb 9-1: Product: syz [ 889.646851][ T9004] usb 9-1: Manufacturer: syz [ 889.646866][ T9004] usb 9-1: SerialNumber: syz [ 889.831805][ T9004] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 889.871051][ T9004] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 889.909766][ T9004] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 890.017497][T11721] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 890.045283][ T9004] usb 9-1: USB disconnect, device number 52 [ 890.189676][ T9004] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 890.228513][ T9004] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 890.233805][ T9004] ti_usb_3410_5052 9-1:2.0: device disconnected [ 890.703158][T11732] netlink: 'syz.4.1074': attribute type 1 has an invalid length. [ 891.746064][T11732] 8021q: adding VLAN 0 to HW filter on device bond2 [ 893.083543][ T36] audit: type=1326 audit(1793025489.076:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11752 comm="syz.6.1076" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f755daff559 code=0x0 [ 893.432768][ T13] bridge_slave_1: left allmulticast mode [ 893.432811][ T13] bridge_slave_1: left promiscuous mode [ 893.433157][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.603909][ T13] bridge_slave_0: left allmulticast mode [ 893.603940][ T13] bridge_slave_0: left promiscuous mode [ 893.656071][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.084084][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.163880][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 895.217105][ T13] bond0 (unregistering): Released all slaves [ 895.495917][T11773] netlink: 'syz.6.1077': attribute type 39 has an invalid length. [ 896.132613][ T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 896.293676][ T9] usb 5-1: New USB device found: idVendor=047f, idProduct=0418, bcdDevice=0.00 [ 896.295347][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.295391][ T9] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.295421][ T9] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 896.295451][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 896.295488][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.548486][ T9] usb 5-1: config 0 descriptor?? [ 896.700640][T11780] tipc: Cannot configure node identity twice [ 896.806134][T11780] overlayfs: overlapping lowerdir path [ 897.937291][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 897.937425][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 898.028000][ T9] usb 5-1: USB disconnect, device number 84 [ 901.195817][ T9004] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 901.354496][ T9004] usb 5-1: Using ep0 maxpacket: 16 [ 901.355328][ T9004] usb 5-1: New USB device found: idVendor=1d6b, idProduct=0101, bcdDevice=0.40 [ 901.356397][ T9004] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 901.356415][ T9004] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 901.362937][ T9004] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.363061][ T9004] usb 5-1: Product: syz [ 901.363079][ T9004] usb 5-1: Manufacturer: syz [ 901.365204][ T9004] usb 5-1: SerialNumber: syz [ 901.656028][ T13] hsr_slave_0: left promiscuous mode [ 901.691402][ T9004] usb 5-1: 0:2 : does not exist [ 901.697567][ T13] hsr_slave_1: left promiscuous mode [ 902.867094][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 903.017096][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 903.047934][ T9004] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 903.533859][T11814] FAULT_INJECTION: forcing a failure. [ 903.533859][T11814] name failslab, interval 1, probability 0, space 0, times 0 [ 903.533892][T11814] CPU: 0 UID: 0 PID: 11814 Comm: syz.8.1086 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 903.533912][T11814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 903.533922][T11814] Call Trace: [ 903.533929][T11814] [ 903.533936][T11814] dump_stack_lvl+0xe8/0x150 [ 903.533981][T11814] should_fail_ex+0x46b/0x600 [ 903.534009][T11814] should_failslab+0xa8/0x100 [ 903.534029][T11814] __kmalloc_cache_noprof+0x9c/0x670 [ 903.534055][T11814] ? cma_alloc_port+0xb5/0x670 [ 903.534169][T11814] ? cma_alloc_port+0xb5/0x670 [ 903.534198][T11814] cma_alloc_port+0xb5/0x670 [ 903.534223][T11814] rdma_bind_addr_dst+0xe23/0x3590 [ 903.534267][T11814] rdma_listen+0x25c/0xe90 [ 903.534291][T11814] ? __pfx_rdma_listen+0x10/0x10 [ 903.534311][T11814] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 903.534338][T11814] ? mutex_lock_nested+0x14d/0x1d0 [ 903.534356][T11814] ? ucma_listen+0x328/0x440 [ 903.534379][T11814] ucma_listen+0x34c/0x440 [ 903.534405][T11814] ? __pfx_ucma_listen+0x10/0x10 [ 903.534436][T11814] ucma_write+0x252/0x2f0 [ 903.534458][T11814] ? __pfx_ucma_write+0x10/0x10 [ 903.534479][T11814] ? security_file_permission+0x75/0x260 [ 903.534506][T11814] ? rw_verify_area+0x209/0x4d0 [ 903.534528][T11814] ? __pfx_ucma_write+0x10/0x10 [ 903.534547][T11814] vfs_write+0x29f/0xbb0 [ 903.534575][T11814] ? __pfx_vfs_write+0x10/0x10 [ 903.534598][T11814] ? __fget_files+0x2a/0x420 [ 903.534618][T11814] ? __fget_files+0x3a8/0x420 [ 903.534637][T11814] ? __fget_files+0x2a/0x420 [ 903.534661][T11814] ? fdget+0x1b2/0x250 [ 903.534685][T11814] ksys_write+0x156/0x270 [ 903.534709][T11814] ? __pfx_ksys_write+0x10/0x10 [ 903.534740][T11814] do_syscall_64+0x166/0x520 [ 903.534764][T11814] ? trace_irq_disable+0x3b/0x140 [ 903.534781][T11814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.534798][T11814] ? clear_bhb_loop+0x70/0xc0 [ 903.534818][T11814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 903.534834][T11814] RIP: 0033:0x7fcc28f4f559 [ 903.534850][T11814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 903.534864][T11814] RSP: 002b:00007fcc271a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 903.534882][T11814] RAX: ffffffffffffffda RBX: 00007fcc291d5fa0 RCX: 00007fcc28f4f559 [ 903.534894][T11814] RDX: 00000000fffffcda RSI: 0000200000000fc0 RDI: 0000000000000008 [ 903.534905][T11814] RBP: 00007fcc28fe6b20 R08: 0000000000000000 R09: 0000000000000000 [ 903.534915][T11814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 903.534924][T11814] R13: 00007fcc291d6038 R14: 00007fcc291d5fa0 R15: 00007ffc6dc3fb98 [ 903.534950][T11814] [ 904.155113][ T9004] usb 5-1: USB disconnect, device number 85 [ 904.377618][T11712] udevd[11712]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 904.435339][T11822] netlink: 'syz.4.1088': attribute type 39 has an invalid length. [ 904.688181][ T9529] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 904.721485][ T9529] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 904.740248][ T9529] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 904.774130][ T9529] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 904.782173][ T9529] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 905.589262][ T13] team0 (unregistering): Port device team_slave_1 removed [ 905.663428][ T13] team0 (unregistering): Port device team_slave_0 removed [ 905.909406][ T5268] 8021q: adding VLAN 0 to HW filter on device eth21 [ 906.412755][T11843] FAULT_INJECTION: forcing a failure. [ 906.412755][T11843] name failslab, interval 1, probability 0, space 0, times 0 [ 906.412803][T11843] CPU: 0 UID: 0 PID: 11843 Comm: syz.8.1090 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 906.412835][T11843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 906.412850][T11843] Call Trace: [ 906.412860][T11843] [ 906.412871][T11843] dump_stack_lvl+0xe8/0x150 [ 906.412921][T11843] should_fail_ex+0x46b/0x600 [ 906.412963][T11843] should_failslab+0xa8/0x100 [ 906.412995][T11843] __kmalloc_noprof+0xf6/0x790 [ 906.413034][T11843] ? hash_ipport6_add+0x186c/0x2100 [ 906.413071][T11843] ? hash_ipport6_add+0x186c/0x2100 [ 906.413119][T11843] hash_ipport6_add+0x186c/0x2100 [ 906.413171][T11843] ? hash_ipport6_add+0x82/0x2100 [ 906.413236][T11843] hash_ipport6_uadt+0x801/0xaa0 [ 906.413282][T11843] ? __pfx_hash_ipport6_add+0x10/0x10 [ 906.413320][T11843] ? __pfx_hash_ipport6_uadt+0x10/0x10 [ 906.413354][T11843] ? __nla_validate_parse+0x2429/0x2d50 [ 906.413422][T11843] call_ad+0x2ec/0xa30 [ 906.413465][T11843] ? __pfx_call_ad+0x10/0x10 [ 906.413517][T11843] ? __nla_parse+0x40/0x60 [ 906.413559][T11843] ip_set_ad+0x82a/0x9d0 [ 906.413601][T11843] ? __pfx_ip_set_ad+0x10/0x10 [ 906.413664][T11843] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 906.413719][T11843] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 906.413769][T11843] nfnetlink_rcv_msg+0xcd6/0x12c0 [ 906.413801][T11843] ? unwind_get_return_address+0x4d/0x90 [ 906.413840][T11843] ? nfnetlink_rcv_msg+0x22e/0x12c0 [ 906.413894][T11843] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 906.413972][T11843] ? hook_capable+0x1c3/0x5e0 [ 906.414022][T11843] netlink_rcv_skb+0x226/0x4a0 [ 906.414053][T11843] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 906.414083][T11843] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 906.414128][T11843] ? bpf_lsm_capable+0x9/0x20 [ 906.414159][T11843] ? security_capable+0x7e/0x2c0 [ 906.414197][T11843] nfnetlink_rcv+0x2b9/0x28d0 [ 906.414222][T11843] ? __local_bh_enable+0x1e3/0x2f0 [ 906.414266][T11843] ? __local_bh_enable_ip+0x1ad/0x2b0 [ 906.414302][T11843] ? lockdep_hardirqs_on+0x7b/0x110 [ 906.414344][T11843] ? __dev_queue_xmit+0x2a0/0x3a70 [ 906.414387][T11843] ? __dev_queue_xmit+0x1f26/0x3a70 [ 906.414425][T11843] ? ___sys_sendmsg+0x2a5/0x360 [ 906.414459][T11843] ? __x64_sys_sendmsg+0x1b7/0x290 [ 906.414499][T11843] ? __dev_queue_xmit+0x2a0/0x3a70 [ 906.414553][T11843] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 906.414592][T11843] ? __pfx___dev_queue_xmit+0x10/0x10 [ 906.414646][T11843] ? __copy_skb_header+0xa3/0x4a0 [ 906.414721][T11843] ? __asan_memcpy+0x40/0x70 [ 906.414756][T11843] ? __skb_clone+0x5c/0x760 [ 906.414799][T11843] ? __skb_clone+0x4a2/0x760 [ 906.414846][T11843] ? skb_clone+0x246/0x3a0 [ 906.414891][T11843] ? __netlink_deliver_tap+0x681/0x6e0 [ 906.414918][T11843] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.414956][T11843] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.414985][T11843] ? netlink_deliver_tap+0x2e/0x1b0 [ 906.415022][T11843] netlink_unicast+0x90c/0xac0 [ 906.415072][T11843] netlink_sendmsg+0x7f0/0xb20 [ 906.415111][T11843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.415154][T11843] ? __lock_acquire+0x747/0x2de0 [ 906.415198][T11843] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 906.415238][T11843] ? __pfx_netlink_sendmsg+0x10/0x10 [ 906.415265][T11843] sock_sendmsg_nosec+0x14e/0x190 [ 906.415296][T11843] ____sys_sendmsg+0x565/0x870 [ 906.415343][T11843] ? __pfx_____sys_sendmsg+0x10/0x10 [ 906.415392][T11843] ? import_iovec+0x73/0xa0 [ 906.415430][T11843] ___sys_sendmsg+0x2a5/0x360 [ 906.415464][T11843] ? __lock_acquire+0x747/0x2de0 [ 906.415511][T11843] ? __pfx____sys_sendmsg+0x10/0x10 [ 906.415555][T11843] ? futex_wait+0x2a2/0x390 [ 906.415637][T11843] ? __fget_files+0x3a8/0x420 [ 906.415669][T11843] ? __fget_files+0x2a/0x420 [ 906.415724][T11843] __x64_sys_sendmsg+0x1b7/0x290 [ 906.415765][T11843] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 906.415828][T11843] do_syscall_64+0x166/0x520 [ 906.415866][T11843] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.415894][T11843] ? clear_bhb_loop+0x70/0xc0 [ 906.415926][T11843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.415950][T11843] RIP: 0033:0x7fcc28f4f559 [ 906.415973][T11843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.415994][T11843] RSP: 002b:00007fcc271a6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 906.416023][T11843] RAX: ffffffffffffffda RBX: 00007fcc291d5fa0 RCX: 00007fcc28f4f559 [ 906.416043][T11843] RDX: 0000000000000080 RSI: 00002000000007c0 RDI: 0000000000000009 [ 906.416059][T11843] RBP: 00007fcc28fe6b20 R08: 0000000000000000 R09: 0000000000000000 [ 906.416076][T11843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.416091][T11843] R13: 00007fcc291d6038 R14: 00007fcc291d5fa0 R15: 00007ffc6dc3fb98 [ 906.416134][T11843] [ 906.923209][ T5611] Bluetooth: hci4: command tx timeout [ 907.317616][ T9529] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 907.362254][ T9529] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 907.707904][ T9529] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 908.349922][ T9529] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 908.353399][ T9529] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 908.854037][T11856] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 908.934531][ T9529] Bluetooth: hci4: command tx timeout [ 910.042642][ T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 910.249310][ T9] usb 5-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 910.251853][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 910.251897][ T9] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 910.251913][ T9] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 910.251930][ T9] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 910.254254][ T9] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 910.254317][ T9] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 910.254346][ T9] usb 5-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 910.254364][ T9] usb 5-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 910.258387][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.258416][ T9] usb 5-1: Product: syz [ 910.258433][ T9] usb 5-1: Manufacturer: syz [ 910.258450][ T9] usb 5-1: SerialNumber: syz [ 910.433749][ T9] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 910.611993][ T9] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 910.630614][ T9] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 910.738716][T11826] rxe_eth0 speed is unknown, defaulting to 1000 [ 910.816548][T11872] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 910.855908][ T9529] Bluetooth: hci6: command tx timeout [ 910.881267][ T9] usb 5-1: USB disconnect, device number 86 [ 910.928123][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 910.963684][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 910.967158][ T9] ti_usb_3410_5052 5-1:2.0: device disconnected [ 911.012713][ T9529] Bluetooth: hci4: command tx timeout [ 912.932477][ T9529] Bluetooth: hci6: command tx timeout [ 913.092524][ T9529] Bluetooth: hci4: command tx timeout [ 913.491052][T11850] rxe_eth0 speed is unknown, defaulting to 1000 [ 915.012709][ T9529] Bluetooth: hci6: command tx timeout [ 916.442688][ T3327] bridge_slave_1: left allmulticast mode [ 916.442719][ T3327] bridge_slave_1: left promiscuous mode [ 916.442923][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 916.648724][ T3327] bridge_slave_0: left allmulticast mode [ 916.648767][ T3327] bridge_slave_0: left promiscuous mode [ 916.649046][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 917.707662][ T9529] Bluetooth: hci6: command tx timeout [ 918.106765][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 918.165359][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 918.225279][ T3327] bond0 (unregistering): Released all slaves [ 921.002819][ T30] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 921.022603][ T5756] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 921.152701][ T30] usb 9-1: Using ep0 maxpacket: 32 [ 921.153644][ T30] usb 9-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 921.155201][ T30] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 921.155222][ T30] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 921.155246][ T30] usb 9-1: config 0 interface 0 has no altsetting 0 [ 921.159537][ T30] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 921.159559][ T30] usb 9-1: Product: syz [ 921.159569][ T30] usb 9-1: Manufacturer: syz [ 921.159580][ T30] usb 9-1: SerialNumber: syz [ 921.224710][ T5756] usb 5-1: New USB device found: idVendor=18b1, idProduct=0037, bcdDevice=0.00 [ 921.225854][ T5756] usb 5-1: config 0 interface 0 has no altsetting 0 [ 921.225881][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.308860][ T5756] usb 5-1: config 0 descriptor?? [ 921.370980][ T30] usb 9-1: config 0 descriptor?? [ 921.426266][ T30] ldusb 9-1:0.0: Interrupt in endpoint not found [ 921.786177][ T5756] hid_parser_main: 536 callbacks suppressed [ 921.786197][ T5756] petalynx 0003:18B1:0037.0019: unknown main item tag 0x0 [ 921.786218][ T5756] petalynx 0003:18B1:0037.0019: unbalanced collection at end of report description [ 921.786834][ T5756] petalynx 0003:18B1:0037.0019: parse failed [ 921.786887][ T5756] petalynx 0003:18B1:0037.0019: probe with driver petalynx failed with error -22 [ 922.025719][ T5756] usb 5-1: USB disconnect, device number 87 [ 922.302764][ T3327] hsr_slave_0: left promiscuous mode [ 922.324579][ T3327] hsr_slave_1: left promiscuous mode [ 922.325908][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 922.363861][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 924.183112][ T30] usb 9-1: USB disconnect, device number 53 [ 924.463177][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 924.526809][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 927.060595][ T8352] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 927.060686][ T8352] dvb_usb_az6027 7-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 927.372188][ T8352] usb 7-1: USB disconnect, device number 35 [ 928.049685][T11826] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.050759][T11826] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.050964][T11826] bridge_slave_0: entered allmulticast mode [ 928.120656][T11826] bridge_slave_0: entered promiscuous mode [ 928.155263][T11826] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.155398][T11826] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.155610][T11826] bridge_slave_1: entered allmulticast mode [ 928.158050][T11826] bridge_slave_1: entered promiscuous mode [ 929.206338][T11826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.341940][T11826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 930.269737][T11826] team0: Port device team_slave_0 added [ 930.333490][T11826] team0: Port device team_slave_1 added [ 932.549394][T11850] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.549631][T11850] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.549812][T11850] bridge_slave_0: entered allmulticast mode [ 932.552193][T11850] bridge_slave_0: entered promiscuous mode [ 932.606727][T11826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 932.606749][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.606781][T11826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.607585][T11850] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.607714][T11850] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.607895][T11850] bridge_slave_1: entered allmulticast mode [ 932.609655][T11850] bridge_slave_1: entered promiscuous mode [ 932.749972][T11826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.750003][T11826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.750036][T11826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.752715][ T5756] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 933.073416][ T5756] usb 9-1: New USB device found: idVendor=0451, idProduct=505f, bcdDevice=1.00 [ 933.935991][ T5756] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 933.965327][ T5756] usb 9-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 934.001744][ T5756] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.001774][ T5756] usb 9-1: Product: syz [ 934.001791][ T5756] usb 9-1: Manufacturer: syz [ 934.001808][ T5756] usb 9-1: SerialNumber: syz [ 934.060008][ T5756] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 934.081927][ T5756] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 934.107106][ T5756] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 934.175668][T11850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.254223][T11850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 934.378272][T12007] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 934.464447][ T9] usb 9-1: USB disconnect, device number 54 [ 934.519257][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 934.764933][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 934.790798][ T9] ti_usb_3410_5052 9-1:2.0: device disconnected [ 934.879476][T11850] team0: Port device team_slave_0 added [ 934.928090][T11826] hsr_slave_0: entered promiscuous mode [ 934.941049][T11826] hsr_slave_1: entered promiscuous mode [ 934.949133][T11826] debugfs: 'hsr0' already exists in 'hsr' [ 934.949165][T11826] Cannot create hsr debugfs directory [ 934.965963][T11850] team0: Port device team_slave_1 added [ 935.677915][T11850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 935.677931][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.677952][T11850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 935.816799][T11850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 935.816820][T11850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 935.816854][T11850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 936.228083][T11850] hsr_slave_0: entered promiscuous mode [ 936.229685][T11850] hsr_slave_1: entered promiscuous mode [ 936.230775][T11850] debugfs: 'hsr0' already exists in 'hsr' [ 936.230804][T11850] Cannot create hsr debugfs directory [ 936.777760][ T3327] bridge_slave_1: left allmulticast mode [ 936.777791][ T3327] bridge_slave_1: left promiscuous mode [ 936.777993][ T3327] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.832641][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 936.857633][ T3327] bridge_slave_0: left allmulticast mode [ 936.857663][ T3327] bridge_slave_0: left promiscuous mode [ 936.857880][ T3327] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.940209][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.940261][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.967120][ T5756] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 936.986985][ T9] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 936.988756][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.988788][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.988818][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 936.988836][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 936.988902][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.193035][ T9] usb 5-1: config 0 descriptor?? [ 937.336872][ T5756] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 937.369055][ T5756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.369083][ T5756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.369100][ T5756] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 937.369131][ T5756] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.406099][ T5756] usb 9-1: config 0 descriptor?? [ 937.522610][ T3327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.771342][ T3327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.869427][ T3327] bond0 (unregistering): Released all slaves [ 937.957634][T12034] fuse: Unknown parameter 'ÿ0xffffffffffffffffUv1µÊîœtÈz}§' [ 938.056183][ T9] plantronics 0003:047F:FFFF.001A: unknown main item tag 0x2 [ 938.362610][ T5737] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 938.409241][ T9] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 938.522485][ T5737] usb 7-1: Using ep0 maxpacket: 32 [ 938.523417][ T5737] usb 7-1: New USB device found: idVendor=0458, idProduct=5011, bcdDevice=0.00 [ 938.525033][ T5737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 938.525078][ T5737] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 938.525103][ T5737] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 938.525148][ T5737] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.604391][ T5737] usb 7-1: config 0 descriptor?? [ 938.693879][ T9] usb 5-1: USB disconnect, device number 88 [ 938.827966][ T5756] usbhid 9-1:0.0: can't add hid device: -71 [ 938.848149][ T5756] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 938.937182][ T5756] usb 9-1: USB disconnect, device number 55 [ 939.325632][T12038] fido_id[12038]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 939.479490][ T5737] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.001B/input/input25 [ 940.392546][ T8353] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 940.517436][ T5737] input: HID 0458:5011 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5011.001B/input/input26 [ 940.553907][ T8353] usb 9-1: New USB device found: idVendor=0471, idProduct=081e, bcdDevice=1.00 [ 940.555717][ T8353] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 940.555775][ T8353] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.555808][ T8353] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 940.555853][ T8353] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.784261][ T5737] kye 0003:0458:5011.001B: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.6-1/input0 [ 940.819786][ T8353] spcp8x5 9-1:1.0: required endpoints missing [ 940.862478][ T9] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 941.013573][ T9] usb 5-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 941.015069][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.015092][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 941.015126][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.074823][ T5756] usb 7-1: USB disconnect, device number 36 [ 941.103885][ T9] usb 5-1: config 0 descriptor?? [ 942.784468][ T1009] usb 5-1: USB disconnect, device number 89 [ 942.831712][ T5756] usb 9-1: USB disconnect, device number 56 [ 943.573750][ T3327] hsr_slave_0: left promiscuous mode [ 943.593670][ T3327] hsr_slave_1: left promiscuous mode [ 943.594806][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 943.648564][ T3327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.215247][ T3327] team0 (unregistering): Port device team_slave_1 removed [ 944.250622][ T3327] team0 (unregistering): Port device team_slave_0 removed [ 945.174686][ T5756] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 945.181193][ T8353] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 945.385743][ T5756] usb 5-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 945.387344][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.414122][ T8353] usb 7-1: Using ep0 maxpacket: 32 [ 945.426269][ T8353] usb 7-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 945.444727][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.444779][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 945.444807][ T5756] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 945.444849][ T5756] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.462017][ T8353] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 945.462185][ T8353] usb 7-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 945.462271][ T8353] usb 7-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 945.463664][ T8353] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 945.550629][ T8353] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.550662][ T8353] usb 7-1: Product: syz [ 945.550678][ T8353] usb 7-1: Manufacturer: syz [ 945.550695][ T8353] usb 7-1: SerialNumber: syz [ 945.551701][ T5756] usb 5-1: config 0 descriptor?? [ 945.711403][ C0] imon 7-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 947.013399][ T5756] plantronics 0003:047F:FFFF.001C: unknown main item tag 0x2 [ 947.071524][ T8353] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/input/input27 [ 947.275247][ T5756] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 947.305518][ T5756] usb 5-1: USB disconnect, device number 90 [ 947.462615][T12083] fido_id[12083]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 947.515354][ T8353] imon 7-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 947.515379][ T8353] (id 0x00) [ 947.713750][ T8353] rc_core: IR keymap rc-imon-pad not found [ 947.713776][ T8353] Registered IR keymap rc-empty [ 947.713870][ T8353] imon 7-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 947.713890][ T8353] imon 7-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 947.806733][ T8353] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0 [ 947.993682][ T8353] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:155.0/rc/rc0/input29 [ 948.042837][ T8353] imon 7-1:155.0: iMON device (15c2:ffdc) on usb<7:37> initialized [ 948.112573][ T5756] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 948.247707][T12084] imon:vfd_write: invalid payload size [ 948.262547][ T5756] usb 5-1: Using ep0 maxpacket: 32 [ 948.263527][ T5756] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 948.272802][ T5756] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 948.272838][ T5756] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.311836][ T5756] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 948.311867][ T5756] usb 5-1: Product: syz [ 948.311884][ T5756] usb 5-1: Manufacturer: syz [ 948.386904][ T5756] hub 5-1:4.0: USB hub found [ 948.628907][ T5756] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 948.698148][ T5756] usb 5-1: USB disconnect, device number 91 [ 949.142574][ T5756] usb 5-1: new full-speed USB device number 92 using dummy_hcd [ 949.291506][ T9004] usb 7-1: USB disconnect, device number 37 [ 949.308068][ T5756] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 949.327400][ T5756] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 949.327438][ T5756] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.331249][ T5756] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 949.331279][ T5756] usb 5-1: Product: syz [ 949.331296][ T5756] usb 5-1: Manufacturer: syz [ 949.402699][ T5756] hub 5-1:4.0: USB hub found [ 949.448845][T11826] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 949.567467][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 949.570197][T11826] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 949.786823][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 949.795891][T11826] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 949.840243][ T5756] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 949.905548][ T5756] usb 5-1: USB disconnect, device number 92 [ 949.967831][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 950.067679][T11826] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 950.270122][T11826] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 950.811950][T12116] gadgetfs: bound to dummy_udc driver [ 952.019786][T12122] fuse: Unknown parameter '0x0000000000000003' [ 952.727978][T12125] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized [ 954.306595][T12135] fuse: Unknown parameter '0x0000000000000003' [ 958.377202][T11850] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 958.457188][T11850] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 958.487756][T11850] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 958.527564][T11850] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 958.542152][T11850] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 958.607748][T11850] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 958.612561][ T1009] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 958.632742][T11850] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 958.704510][T11850] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.760780][T11826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.773739][ T1009] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 958.775454][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.775486][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.775512][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 958.775539][ T1009] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 958.775578][ T1009] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.845022][ T1009] usb 9-1: config 0 descriptor?? [ 959.024889][T11826] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.095061][ T3327] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.095380][ T3327] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.214446][ T1466] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.214595][ T1466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.292558][ T30] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 959.292916][ T1009] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x2 [ 959.318942][ T1009] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 959.442509][ T30] usb 5-1: Using ep0 maxpacket: 16 [ 959.443479][ T30] usb 5-1: New USB device found: idVendor=0c70, idProduct=f00d, bcdDevice=0.00 [ 959.444720][ T30] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 959.444769][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.489076][ T30] usb 5-1: config 0 descriptor?? [ 959.490295][T12169] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 959.558115][T12154] plantronics 0003:047F:FFFF.001D: usb_submit_urb(out) failed: -90 [ 959.561887][ T5954] usb 9-1: USB disconnect, device number 57 [ 959.745516][T12170] fido_id[12170]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 959.945818][T11850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.951840][T12169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 959.957826][T12169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 960.008304][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008345][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008376][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008406][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008444][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008475][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008504][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008536][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.008566][ T30] hid-sensor-hub 0003:0C70:F00D.001E: unknown main item tag 0x0 [ 960.090363][ T30] hid-sensor-hub 0003:0C70:F00D.001E: collection stack underflow [ 960.090402][ T30] hid-sensor-hub 0003:0C70:F00D.001E: item 0 1 0 12 parsing failed [ 960.113403][ T30] hid-sensor-hub 0003:0C70:F00D.001E: parse failed [ 960.113527][ T30] hid-sensor-hub 0003:0C70:F00D.001E: probe with driver hid-sensor-hub failed with error -22 [ 960.120033][ T30] aquacomputer_d5next 0003:0C70:F00D.001E: collection stack underflow [ 960.120068][ T30] aquacomputer_d5next 0003:0C70:F00D.001E: item 0 1 0 12 parsing failed [ 960.121252][ T30] aquacomputer_d5next 0003:0C70:F00D.001E: probe with driver aquacomputer_d5next failed with error -22 [ 960.206551][ T9] usb 5-1: USB disconnect, device number 93 [ 960.315866][T11850] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.356906][ T1002] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.357050][ T1002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.419598][ T1002] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.419738][ T1002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 962.355344][ T9] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 962.500042][T12177] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 962.535380][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 962.536257][ T9] usb 5-1: New USB device found: idVendor=046d, idProduct=c314, bcdDevice=0.40 [ 962.537861][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 962.537894][ T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 962.607944][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 962.607967][ T9] usb 5-1: Product: syz [ 962.607978][ T9] usb 5-1: Manufacturer: syz [ 962.712519][ T9] hub 5-1:4.0: USB hub found [ 962.906051][ T9] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 962.983323][ T9] usb 5-1: USB disconnect, device number 94 [ 963.136809][T12201] fuse: Unknown parameter '0x0000000000000003' [ 964.003103][ T9] usb 5-1: new full-speed USB device number 95 using dummy_hcd [ 964.003578][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 964.325698][T11826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 964.363389][ T9] usb 5-1: device descriptor read/64, error -32 [ 965.112523][ T9] usb 5-1: new full-speed USB device number 96 using dummy_hcd [ 967.653045][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 967.871087][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.915623][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.935498][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.983145][ T5611] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 968.010418][ T5611] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 969.934977][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.942105][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 970.022008][ T5611] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 970.031202][ T5611] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 970.052634][ T5611] Bluetooth: hci3: command tx timeout [ 970.068486][ T5611] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 971.707875][T12223] rxe_eth0 speed is unknown, defaulting to 1000 [ 972.134030][ T5611] Bluetooth: hci3: command tx timeout [ 972.303819][T10193] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 972.382600][ T5611] Bluetooth: hci4: command tx timeout [ 972.463859][T10193] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 972.466023][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 972.466060][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 972.466087][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 972.466116][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 972.466157][T10193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 972.554725][T10193] usb 9-1: config 0 descriptor?? [ 972.875708][T12262] fuse: Unknown parameter '0x0000000000000003' [ 973.571555][T10193] usbhid 9-1:0.0: can't add hid device: -71 [ 973.571701][T10193] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 973.728544][T10193] usb 9-1: USB disconnect, device number 58 [ 974.212816][ T5611] Bluetooth: hci3: command tx timeout [ 974.452551][ T5611] Bluetooth: hci4: command tx timeout [ 976.292519][ T5611] Bluetooth: hci3: command tx timeout [ 976.300417][T12278] netlink: 'syz.8.1171': attribute type 1 has an invalid length. [ 976.382647][T10193] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 976.485416][T12278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 976.533606][ T5611] Bluetooth: hci4: command tx timeout [ 976.548459][T10193] usb 7-1: Using ep0 maxpacket: 32 [ 976.549319][T10193] usb 7-1: New USB device found: idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 976.552015][T10193] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 976.552058][T10193] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 976.552101][T10193] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 976.552125][T10193] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 976.552156][T10193] usb 7-1: config 0 interface 0 has no altsetting 0 [ 976.576517][T10193] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 976.576539][T10193] usb 7-1: Product: syz [ 976.576551][T10193] usb 7-1: Manufacturer: syz [ 976.576579][T10193] usb 7-1: SerialNumber: syz [ 976.650959][T10193] usb 7-1: config 0 descriptor?? [ 976.664929][T10193] ldusb 7-1:0.0: Interrupt in endpoint not found [ 978.612535][ T5611] Bluetooth: hci4: command tx timeout [ 978.801216][T12243] rxe_eth0 speed is unknown, defaulting to 1000 [ 979.063041][T12292] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 979.146628][ T1009] usb 7-1: USB disconnect, device number 38 [ 982.012853][ T9] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 982.163268][ T9] usb 7-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 982.165158][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.165181][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.165198][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 982.165217][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 982.165243][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.204155][ T9] usb 7-1: config 0 descriptor?? [ 982.452183][T12223] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.453818][T12223] bridge0: port 1(bridge_slave_0) entered disabled state [ 982.454047][T12223] bridge_slave_0: entered allmulticast mode [ 982.487525][T12223] bridge_slave_0: entered promiscuous mode [ 982.648751][T12223] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.649051][T12223] bridge0: port 2(bridge_slave_1) entered disabled state [ 982.649355][T12223] bridge_slave_1: entered allmulticast mode [ 982.673475][T12223] bridge_slave_1: entered promiscuous mode [ 982.751736][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 982.751828][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 982.768238][ T987] bridge_slave_1: left allmulticast mode [ 982.768275][ T987] bridge_slave_1: left promiscuous mode [ 982.768536][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.008922][ T9] usb 7-1: USB disconnect, device number 39 [ 988.356722][ T987] bridge_slave_0: left allmulticast mode [ 988.356765][ T987] bridge_slave_0: left promiscuous mode [ 988.357017][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.325429][T12346] Invalid ELF header magic: != ELF [ 991.733280][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 991.774994][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 991.795947][ T987] bond0 (unregistering): Released all slaves [ 992.104480][T12223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.169330][T12223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.376756][T12223] team0: Port device team_slave_0 added [ 992.400751][T12223] team0: Port device team_slave_1 added [ 994.276583][T12223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.276604][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.276635][T12223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.302683][ T9] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 994.351523][T12223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.351544][T12223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 994.351576][T12223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.563971][ T9] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 994.571950][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.571988][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.572014][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 994.572041][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 994.572082][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.001994][ T9] usb 9-1: config 0 descriptor?? [ 995.574648][ T9] usbhid 9-1:0.0: can't add hid device: -71 [ 995.574781][ T9] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 995.619400][ T9] usb 9-1: USB disconnect, device number 59 [ 995.828344][ T987] hsr_slave_0: left promiscuous mode [ 995.871287][ T987] hsr_slave_1: left promiscuous mode [ 995.879142][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 995.914033][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 999.286658][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.286820][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.634762][ T987] team0 (unregistering): Port device team_slave_1 removed [ 1000.672586][ T987] team0 (unregistering): Port device team_slave_0 removed [ 1001.074295][T10193] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1001.194405][ T5268] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1002.182090][T10193] usb 5-1: Using ep0 maxpacket: 16 [ 1002.230767][T10193] usb 5-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=b.00 [ 1002.247162][T10193] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.247223][T10193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.261731][T10193] usb 5-1: config 0 descriptor?? [ 1002.476715][T12414] IPVS: set_ctl: invalid protocol: 2 255.255.255.255:21 [ 1002.952474][T10193] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1002.981728][T12223] hsr_slave_0: entered promiscuous mode [ 1002.988914][T12223] hsr_slave_1: entered promiscuous mode [ 1002.989553][T12223] debugfs: 'hsr0' already exists in 'hsr' [ 1002.989573][T12223] Cannot create hsr debugfs directory [ 1003.145324][T10193] usb 9-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 1003.146755][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1003.146780][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1003.146797][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1003.146815][T10193] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1003.146842][T10193] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.245901][T10193] usb 9-1: config 0 descriptor?? [ 1003.506487][T12425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.513905][T12425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.720333][T10193] usbhid 9-1:0.0: can't add hid device: -71 [ 1003.720468][T10193] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1003.743805][T10193] usb 9-1: USB disconnect, device number 60 [ 1003.855893][T12427] 9p: Could not find request transport: fd0x0000000000000003 [ 1004.158136][T12433] netlink: 'syz.6.1203': attribute type 1 has an invalid length. [ 1004.392702][T12433] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1004.742096][T10193] usb 5-1: USB disconnect, device number 97 [ 1007.336037][T12243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.336257][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.336415][T12243] bridge_slave_0: entered allmulticast mode [ 1007.370847][T12243] bridge_slave_0: entered promiscuous mode [ 1009.223110][T12243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.223246][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.223460][T12243] bridge_slave_1: entered allmulticast mode [ 1009.232070][T12243] bridge_slave_1: entered promiscuous mode [ 1009.583420][T12243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.614455][T12243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.760742][T12243] team0: Port device team_slave_0 added [ 1009.775414][T12243] team0: Port device team_slave_1 added [ 1012.229542][T12479] 9p: Could not find request transport: fd0x0000000000000003 [ 1012.343466][ T1009] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1012.504802][ T1009] usb 7-1: New USB device found: idVendor=1ba6, idProduct=0001, bcdDevice=0.01 [ 1012.506480][ T1009] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.506541][ T1009] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.667158][ T1009] as10x_usb: device has been detected [ 1012.682090][ T1009] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 1012.702526][ T9] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1012.862641][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1012.863496][ T9] usb 9-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=b.00 [ 1012.864855][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.864910][ T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.913409][ T9] usb 9-1: config 0 descriptor?? [ 1013.011049][T12243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.011071][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.011099][T12243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.347791][ T5268] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1013.349438][T12243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.349455][T12243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.349482][T12243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.645957][ T1009] usb 7-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 1013.963019][T12489] INFO: trying to register non-static key. [ 1013.968946][T12489] The code is fine but needs lockdep annotation, or maybe [ 1013.976089][T12489] you didn't initialize this object before use? [ 1013.982507][T12489] turning off the locking correctness validator. [ 1013.988872][T12489] CPU: 0 UID: 0 PID: 12489 Comm: syz.6.1212 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1013.998808][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1014.008902][T12489] Call Trace: [ 1014.012215][T12489] [ 1014.015181][T12489] dump_stack_lvl+0xe8/0x150 [ 1014.019874][T12489] assign_lock_key+0x133/0x150 [ 1014.024672][T12489] register_lock_class+0xcc/0x2e0 [ 1014.029738][T12489] __lock_acquire+0x10c/0x2de0 [ 1014.034537][T12489] ? add_lock_to_list+0xc7/0x100 [ 1014.039502][T12489] ? lockdep_unlock+0x5c/0xd0 [ 1014.044210][T12489] ? __lock_acquire+0x1511/0x2de0 [ 1014.049300][T12489] lock_acquire+0x115/0x350 [ 1014.053834][T12489] ? as102_stream_ctrl+0x27/0xc0 [ 1014.058891][T12489] ? as102_stream_ctrl+0x27/0xc0 [ 1014.063863][T12489] ? as102_stream_ctrl+0x27/0xc0 [ 1014.068817][T12489] mutex_lock_interruptible_nested+0x55/0x1c0 [ 1014.074919][T12489] ? as102_stream_ctrl+0x27/0xc0 [ 1014.079880][T12489] as102_stream_ctrl+0x27/0xc0 [ 1014.084673][T12489] __dvb_frontend_open+0x2ef/0xcb0 [ 1014.089907][T12489] ? dvb_frontend_open+0x1d4/0x880 [ 1014.095055][T12489] ? mutex_lock_nested+0x14d/0x1d0 [ 1014.100196][T12489] ? __pfx_dvb_frontend_open+0x10/0x10 [ 1014.105688][T12489] dvb_device_open+0x258/0x350 [ 1014.110475][T12489] chrdev_open+0x4dc/0x600 [ 1014.114938][T12489] ? __pfx_chrdev_open+0x10/0x10 [ 1014.119920][T12489] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0 [ 1014.126282][T12489] ? __pfx_chrdev_open+0x10/0x10 [ 1014.131238][T12489] do_dentry_open+0x841/0x1410 [ 1014.136036][T12489] vfs_open_consume+0x4a/0x360 [ 1014.140823][T12489] ? path_openat+0x16e6/0x2100 [ 1014.145619][T12489] path_openat+0x1701/0x2100 [ 1014.150248][T12489] do_file_open+0x23e/0x4a0 [ 1014.154805][T12489] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1014.160645][T12489] ? __pfx_do_file_open+0x10/0x10 [ 1014.165712][T12489] ? alloc_fd+0x6b2/0x760 [ 1014.170071][T12489] do_sys_openat2+0x115/0x200 [ 1014.174767][T12489] ? __pfx_do_sys_openat2+0x10/0x10 [ 1014.179989][T12489] __x64_sys_openat+0x138/0x170 [ 1014.184862][T12489] do_syscall_64+0x166/0x520 [ 1014.189482][T12489] ? trace_irq_disable+0x3b/0x140 [ 1014.194533][T12489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.200628][T12489] ? clear_bhb_loop+0x70/0xc0 [ 1014.205331][T12489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.211246][T12489] RIP: 0033:0x7f755dabfd8e [ 1014.215684][T12489] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1014.235324][T12489] RSP: 002b:00007f755b8e8b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1014.243763][T12489] RAX: ffffffffffffffda RBX: 00007f755b8e96c0 RCX: 00007f755dabfd8e [ 1014.251757][T12489] RDX: 0000000000000802 RSI: 00007f755b8e8c00 RDI: ffffffffffffff9c SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1014.259754][T12489] RBP: 00007f755b8e8c00 R08: 0000000000000000 R09: 0000000000000000 [ 1014.267744][T12489] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 1014.275736][T12489] R13: 00007f755dd86308 R14: 00007f755dd86270 R15: 00007fff27caf348 [ 1014.283735][T12489] [ 1014.290984][T12488] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1014.291347][T12488] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1014.297628][ T1009] as10x_usb: error during firmware upload part1 [ 1014.298005][ T1009] Registered device Abilis Systems DVB-Titan [ 1016.203797][ T1009] usb 9-1: USB disconnect, device number 61 [ 1016.913283][ T987] bridge_slave_1: left allmulticast mode [ 1016.913306][ T987] bridge_slave_1: left promiscuous mode [ 1016.913475][ T987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.044042][ T987] bridge_slave_0: left allmulticast mode [ 1017.044082][ T987] bridge_slave_0: left promiscuous mode [ 1017.044265][ T987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.683029][ T987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1017.763472][ T987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1017.804182][ T987] bond0 (unregistering): Released all slaves [ 1018.393190][ T987] hsr_slave_0: left promiscuous mode [ 1018.432774][ T987] hsr_slave_1: left promiscuous mode [ 1018.433855][ T987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1018.483966][ T987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1019.023186][ T987] team0 (unregistering): Port device team_slave_1 removed [ 1019.083042][ T987] team0 (unregistering): Port device team_slave_0 removed [ 1019.653250][ T5268] 8021q: adding VLAN 0 to HW filter on device eth21 [ 1020.144241][ T5268] 8021q: adding VLAN 0 to HW filter on device eth22 [ 1020.194422][ T5954] usb 7-1: USB disconnect, device number 40 [ 1020.205178][ T5954] Unregistered device Abilis Systems DVB-Titan [ 1020.210924][ T5954] as10x_usb: device has been disconnected [ 1020.595137][ T987] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.634448][ T5268] 8021q: adding VLAN 0 to HW filter on device eth23 [ 1020.914129][ T987] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.987379][ T5268] 8021q: adding VLAN 0 to HW filter on device eth24 [ 1021.193979][ T987] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.454960][ T987] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.915530][ T987] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.021626][ T5268] 8021q: adding VLAN 0 to HW filter on device eth25 [ 1022.245626][ T987] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.371804][ T5268] 8021q: adding VLAN 0 to HW filter on device eth26 [ 1022.555256][ T987] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.894089][ T987] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.959361][ T5268] 8021q: adding VLAN 0 to HW filter on device eth27 [ 1023.394092][ T987] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1023.443777][ T5268] 8021q: adding VLAN 0 to HW filter on device eth28 [ 1023.704164][ T987] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0