last executing test programs: 5m10.416703198s ago: executing program 3 (id=875): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 5m10.154789955s ago: executing program 3 (id=877): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 5m9.931251465s ago: executing program 3 (id=879): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x2) r2 = syz_open_dev$vbi(&(0x7f0000000780), 0x0, 0x2) ioctl$VIDIOC_QUERYBUF(r2, 0xc0585609, &(0x7f0000000880)=@multiplanar_mmap={0x6, 0x6, 0x4, 0xe000, 0x1000, {}, {0x1, 0x2, 0x4e, 0xc, 0xc, 0xf8, "d66bb72d"}, 0x4, 0x1, {0x0}, 0x889c}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000300)=0xffffffffffffff86) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) write$dsp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0x4, 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x5, 0xf0) setsockopt$ax25_int(r6, 0x101, 0x5, &(0x7f0000000000)=0x20e, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0xd50d195639973afc, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x100}, @CTA_TIMEOUT_TCP_TIME_WAIT={0x8, 0x7, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048080}, 0x8000) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000014c0)={0x2a8, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x295, 0x20b1, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @nested={0x165, 0x1fc, 0x0, 0x1, [@generic="aacb078fbe8fcbd3844064688b2b4f72c8b118a6a90ed572e0926e98ff65077497ecdfa2dd0b5be86a30b081592ea9aee28a5b9348e4309e890e00a64b80b2f24c4e21bbf0e68a8e654b69e6ffbeb86cad20e8b308763f888071387b6411d1d7a3daf18fa5b322cf482b526b0a09ec57b041b4725cdc1a60af0c680b1c0876c75d014155cffa2183cb7b0cef3d0fb8771666304bb326ae16138cf54860b3b23ea42b6d60982de3c6ad7bddef702a654f13fff71f05637e0a13e0534ac5ddf248333a135ad7629cff78c318eefec08d0d3b67eb20d03f38eb4ac5ec825788c56d07a5ef39bdbc3913dd175f1b1f1fc98ec55124715319", @generic="fae644f50596f81d9ad9081d397c66b15f5eaf36bc97fc82590eed387df8a1852954f8892f18315574824837ae0ffbd6ee87e5a331e118cfdbd0ea0cb2c9afbcc6c7f301d71f0a16bff8718e908545b6008dd320da4618006dccda8c1c3249c67738b4e6ecd1164f16d2ad"]}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="5caea6b5632cbdaeb803efb9c9e1daf5c4b73ad69ccfec1417b90e4f5754149da8393b98f8718558", @nested={0x18, 0xab, 0x0, 0x1, [@typed={0x12, 0x9d, 0x0, 0x0, @str='./cgroup/syz0\x00'}]}]}]}, 0x2a8}], 0x1}, 0x0) 5m6.979080752s ago: executing program 2 (id=884): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_']) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 5m6.854797419s ago: executing program 3 (id=885): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="58e40e00846cfe28047bfd7fa93b3f5cbb44f25b156d7573124866efc79c10d96605be65327671f590c5e09ba5aa934b837d3292f45cf917d49946bad390bfded23371ebfa3ae2dc", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="5e8a34893e3cf479edab117619a8570a16e9d79940efd7f176624dddb0310fc7d75567e83e32b1a1c7ffb456ce17dcbd4a94ba371ecd46b1095fda2aa29b1bc5cb72f795d36e5c344c0758ac3283ee12ddf6ec469ca6f4dbadf0b63ada603197e3ddb53674d2460f2c64d0a1e7fb88c0092b3d9b0a10f710f2a3d53c7807ca08eaff2284a14ed6d8c84dc91fdd74952f9a385b1a81", @ANYRESHEX=r1], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000540)) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r7, 0x10e, 0x2, &(0x7f0000000000), 0x4) 5m5.933623082s ago: executing program 3 (id=886): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x880) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = getpgrp(0xffffffffffffffff) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0xb201ffff) r6 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x400002) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) 5m5.673876938s ago: executing program 2 (id=887): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x1e, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, 0x0, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffb2, 0x0, 0x0, 0x10, 0x5}, 0x94) 5m3.764216489s ago: executing program 3 (id=888): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00"], 0x58}}, 0x0) 5m3.335868539s ago: executing program 2 (id=889): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) io_submit(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 5m3.126714767s ago: executing program 2 (id=890): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYBLOB="58e40e00846cfe28047bfd7fa93b3f5cbb44f25b156d7573124866efc79c10d96605be65327671f590c5e09ba5aa934b837d3292f45cf917d49946bad390bfded23371ebfa3ae2dc", @ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="5e8a34893e3cf479edab117619a8570a16e9d79940efd7f176624dddb0310fc7d75567e83e32b1a1c7ffb456ce17dcbd4a94ba371ecd46b1095fda2aa29b1bc5cb72f795d36e5c344c0758ac3283ee12ddf6ec469ca6f4dbadf0b63ada603197e3ddb53674d2460f2c64d0a1e7fb88c0092b3d9b0a10f710f2a3d53c7807ca08eaff2284a14ed6d8c84dc91fdd74952f9a385b1a81", @ANYRESHEX=r1], 0x48) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r7, 0x10e, 0x2, &(0x7f0000000000), 0x4) 5m1.543704714s ago: executing program 2 (id=891): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x880) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = getpgrp(0xffffffffffffffff) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_pidfd_open(r3, 0x0) pidfd_getfd(r5, 0xffffffffffffffff, 0x0) fsopen(&(0x7f00000001c0)='romfs\x00', 0x0) 4m59.955898464s ago: executing program 2 (id=892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 4m46.874126869s ago: executing program 32 (id=888): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x12) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmmsg$inet6(r5, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000600)="e2", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)}}], 0x56, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd00"], 0x58}}, 0x0) 4m43.647302176s ago: executing program 33 (id=892): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a4c000000030a0fdb00000000000000000a0020050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f75746500000014000000110001"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, 0x0}, 0x0) 2m31.07466645s ago: executing program 4 (id=1068): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m26.888904148s ago: executing program 4 (id=1073): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x1, &(0x7f0000000500)=[{0x6, 0x43, 0x0, 0x7fff0000}]}) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r1, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='wo\b\x00o\xd8\x15g\xa9\x93\xeeP\xddQ\x99#jhce\xe20\xc1\xc3\xd6%5&\xac\xc1\xbb\x942\xfb;\x8b4\x92\xf0\xc7\xe8\x88\x1e\xa8]\x19[\x19\xa35\xbc\xc3\x11\xd4r1>\x8ad\v\xa8`~3`\f{\xf7\b9Y\x1emk\t,\xe3\x1066\x87h_\xfd-\xf1\x0e\xd1\xad\x83\x86n\x9d\xc1m\xe5\xbet\x92\xb8\xcf\xee\a\x19\b@\xa7\xec\x02V\xf4\xdf@\x89E\x980\x12m\xdeK\xba}w\x94\xb1\x825\xc0\x8a\xc8\xd4\xbd\f\x9e\x9c\x95\x8d\xba.\xc0k\xa6\xb3\xeb\xa0\x86\xa0\xf3X\x02\xcd\xfbj6n\xe4!s\x14z\xc2L\x9e\xc1\x06\x10U\x82\xf0\x84\xc0`|\x80\xddR\r\xd3\xbd\x06E', &(0x7f00000000c0)='#(:.', 0x0) 2m18.024966972s ago: executing program 4 (id=1081): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) epoll_create1(0x0) epoll_create1(0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 2m16.945282349s ago: executing program 4 (id=1082): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x18}, 0x20) setpgid(r0, 0x0) setpgid(0x0, r0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r3, 0x9360, 0x800000000000001) 2m16.315556211s ago: executing program 4 (id=1083): syz_open_dev$tty1(0xc, 0x4, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$tipc(0x1e, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 2m13.099523173s ago: executing program 4 (id=1090): socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x102) creat(0x0, 0x26) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e2000905"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2m12.39566892s ago: executing program 34 (id=1090): socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, 0x0, 0x2000, 0x102) creat(0x0, 0x26) r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000c2bd0b20f8061b3039bb0102030109021b0001000000000904ac00018fe7e2000905"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m2.61483815s ago: executing program 1 (id=1178): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_']) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 1m2.227685439s ago: executing program 1 (id=1179): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r1, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='wo\b\x00o\xd8\x15g\xa9\x93\xeeP\xddQ\x99#jhce\xe20\xc1\xc3\xd6%5&\xac\xc1\xbb\x942\xfb;\x8b4\x92\xf0\xc7\xe8\x88\x1e\xa8]\x19[\x19\xa35\xbc\xc3\x11\xd4r1>\x8ad\v\xa8`~3`\f{\xf7\b9Y\x1emk\t,\xe3\x1066\x87h_\xfd-\xf1\x0e\xd1\xad\x83\x86n\x9d\xc1m\xe5\xbet\x92\xb8\xcf\xee\a\x19\b@\xa7\xec\x02V\xf4\xdf@\x89E\x980\x12m\xdeK\xba}w\x94\xb1\x825\xc0\x8a\xc8\xd4\xbd\f\x9e\x9c\x95\x8d\xba.\xc0k\xa6\xb3\xeb\xa0\x86\xa0\xf3X\x02\xcd\xfbj6n\xe4!s\x14z\xc2L\x9e\xc1\x06\x10U\x82\xf0\x84\xc0`|\x80\xddR\r\xd3\xbd\x06E', &(0x7f00000000c0)='#(:.', 0x0) 1m1.510957228s ago: executing program 1 (id=1180): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x1f6, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)}}], 0x1, 0x4000800) 59.955439195s ago: executing program 1 (id=1181): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x18}, 0x20) setpgid(r0, 0x0) setpgid(0x0, r0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 59.852517424s ago: executing program 1 (id=1182): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001980)={0x3, 0x0, [{0x8186000, 0x9a, &(0x7f00000000c0)=""/154}, {0x5000, 0x33, &(0x7f0000000000)=""/51}, {0x0, 0x0, 0x0}]}) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) 59.287309988s ago: executing program 1 (id=1183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 58.687604803s ago: executing program 35 (id=1183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) prlimit64(0x0, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r2, 0x0, 0x200000) 57.426346642s ago: executing program 0 (id=1186): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT, @ANYBLOB=',rootmode=0000000000000000040000,user_id', @ANYRESDEC=0x0, @ANYBLOB=',group_']) r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 57.173085228s ago: executing program 0 (id=1187): openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r6, 0x800448d3, &(0x7f0000000400)={@none, 0x2, 0x6800, 0x9, 0x7, 0x35, "6daea5fcb7105de94a8bc43362b531c4b695a8a4d29df6d009291fe8d771c06f171adf499c8a7949afef39e74ee6ce179279451a4b788c9a9ebe874c22ee5590b20acf7e546dcd6cc09d618bce1cdf069d4874ac934d72f198ece8ec19439b17f67f6cc48d305b2e67db1f4658901d4366d04454ce772ad4cdc183b96e14415a"}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r8 = syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffc00, 0x0) fadvise64(r8, 0xd, 0xfffffffffffff800, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 53.924670865s ago: executing program 0 (id=1188): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 53.740318035s ago: executing program 0 (id=1189): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) fsopen(&(0x7f0000000100)='squashfs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = creat(0x0, 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x18}, 0x20) setpgid(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) 53.548269097s ago: executing program 0 (id=1190): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r3, r1, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 52.971848209s ago: executing program 0 (id=1191): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r0, 0x0, 0x500) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x9, 0xd5}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xb0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x7898, 0x3, 0x10, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x66, 0x0, 0x2, 0x38, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local, 0x41, r5}) sync_file_range(r4, 0x800000000976, 0x80, 0x3) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 52.773183659s ago: executing program 36 (id=1191): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r0, 0x0, 0x500) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x9, 0xd5}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xb0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x7898, 0x3, 0x10, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x66, 0x0, 0x2, 0x38, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local, 0x41, r5}) sync_file_range(r4, 0x800000000976, 0x80, 0x3) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 20.14154848s ago: executing program 9 (id=1195): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r0, 0x0, 0x500) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x9, 0xd5}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xb0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x7898, 0x3, 0x10, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x66, 0x0, 0x2, 0x38, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local, 0x41, r5}) sync_file_range(r4, 0x800000000976, 0x80, 0x3) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18.465677555s ago: executing program 7 (id=1196): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x50) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f0000000200)={[0xffffffff7fffffff, 0x9, 0xfffffffffffffffd, 0x1, 0x10000, 0x3, 0x4002004c2, 0x5, 0x1, 0x0, 0x400, 0x15, 0x88, 0x0, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 18.147356921s ago: executing program 7 (id=1197): socket$kcm(0x10, 0x2, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300), 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x0, r3, 0x4007) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) 16.357128912s ago: executing program 7 (id=1198): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0xe, 0x2000) ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000200)=""/182) 15.798715257s ago: executing program 9 (id=1199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$qrtr(0x2a, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xffff]}, 0x8) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 13.060435231s ago: executing program 9 (id=1200): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) read$qrtrtun(r0, 0x0, 0x500) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc) write$binfmt_script(r1, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x8, 0x9, 0xd5}, 0x14) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xb0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000100)={'ip_vti0\x00', 0x0, 0x8000, 0x7898, 0x3, 0x10, {{0xc, 0x4, 0x1, 0x0, 0x30, 0x66, 0x0, 0x2, 0x38, 0x0, @remote, @rand_addr=0x64010100, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x5, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback, @rand_addr=0x64010100]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f00000002c0)={@local, 0x41, r5}) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.894531375s ago: executing program 8 (id=1201): socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) dup(r0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000440), 0x40000, 0x0) fsopen(&(0x7f0000000300)='fusectl\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='attr/prev\x00') socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_setup(0x1af0, &(0x7f0000000180)={0x0, 0xbc1f, 0x400, 0x1, 0x152}) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[], 0x20) 12.503461931s ago: executing program 8 (id=1202): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r0, r0, 0x0, 0x200000) 12.107700245s ago: executing program 8 (id=1203): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000340)="8b", 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r0, 0xda90) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x60a1, 0x8, 0x1, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_setup(0x10a, &(0x7f0000000680)={0x0, 0x80334c, 0x10, 0x3, 0x3d3, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) syz_io_uring_submit(r4, r3, 0x0) io_uring_enter(r1, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 10.944918703s ago: executing program 8 (id=1204): ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040)) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r1 = getpid() bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r2}, 0xc) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x0, r3, 0x4007) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) 8.916495399s ago: executing program 8 (id=1205): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x104008d}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) 8.815817915s ago: executing program 7 (id=1206): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008890) listen(r2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x20040090) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 8.618408994s ago: executing program 5 (id=901): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r2, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x9, 0x0, 0x58, 0x7, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x18addbae, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0xffff1000, 0x1c4213}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r6, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RVERSION(r5, &(0x7f0000000140)=ANY=[], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x7], &(0x7f0000000380), 0x0, 0x1}}, 0x40) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, 0x0, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f00000022c0), 0x0, 0x3, 0x0) 8.614712415s ago: executing program 9 (id=1207): socket$kcm(0x10, 0x2, 0x0) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000180)=0x10000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) r2 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300), 0xc) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioprio_set$pid(0x0, r3, 0x4007) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x0, 0x0, 0x75, "804000"}, 0x0, 0x2, {}, 0x20800}) 8.530499428s ago: executing program 6 (id=906): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="14000000000000002900000000000014000000000000002900000034000000fdffffff00000000180000000000000029000000040000000400000000000000d80000000000000029000000360000005e17000000000000000100000100010800000000000000000728000000030800ff0f66090000000000000700000000000000010000000000000001000000000000000864c8a1"], 0x188}}], 0x1, 0x810) bind$alg(0xffffffffffffffff, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xd4}}, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.995398271s ago: executing program 9 (id=1208): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0) close(r1) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) 5.738183372s ago: executing program 6 (id=1209): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x1a3c82) syz_open_dev$sg(&(0x7f00000008c0), 0x0, 0x482) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x104008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000140), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 5.660930578s ago: executing program 7 (id=1210): open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x0, @val=@tracing={0x0, 0x8000000000000000}}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x4002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@local}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.323523419s ago: executing program 5 (id=1211): sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c00), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r2, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000080)=""/124, 0x7c, 0x0, 0x3, 0x2}}, 0x48) 3.043548457s ago: executing program 5 (id=1212): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4008890) listen(r2, 0x0) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x4, 0x0, 0x0) ioctl$KVM_KVMCLOCK_CTRL(0xffffffffffffffff, 0xaead) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2000c044) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00006dbffc), 0x4) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) landlock_restrict_self(0xffffffffffffffff, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001380)=@newtfilter={0x38, 0x2c, 0xf3f, 0x30bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xfff2, 0x2}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x20040090) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.241931159s ago: executing program 8 (id=1213): socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x4, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) sched_setaffinity(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_dev$evdev(&(0x7f0000000000), 0xfffffffffffffc01, 0x80000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000006c0)={0x0, 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x2) r3 = socket$unix(0x1, 0x1, 0x0) connect$unix(r3, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)="90", 0x1}], 0x1, &(0x7f0000000580)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x8801}}], 0x1, 0x20044034) close_range(r1, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000440)='wo\b\x00o\xd8\x15g\xa9\x93\xeeP\xddQ\x99#jhce\xe20\xc1\xc3\xd6%5&\xac\xc1\xbb\x942\xfb;\x8b4\x92\xf0\xc7\xe8\x88\x1e\xa8]\x19[\x19\xa35\xbc\xc3\x11\xd4r1>\x8ad\v\xa8`~3`\f{\xf7\b9Y\x1emk\t,\xe3\x1066\x87h_\xfd-\xf1\x0e\xd1\xad\x83\x86n\x9d\xc1m\xe5\xbet\x92\xb8\xcf\xee\a\x19\b@\xa7\xec\x02V\xf4\xdf@\x89E\x980\x12m\xdeK\xba}w\x94\xb1\x825\xc0\x8a\xc8\xd4\xbd\f\x9e\x9c\x95\x8d\xba.\xc0k\xa6\xb3\xeb\xa0\x86\xa0\xf3X\x02\xcd\xfbj6n\xe4!s\x14z\xc2L\x9e\xc1\x06\x10U\x82\xf0\x84\xc0`|\x80\xddR\r\xd3\xbd\x06E', &(0x7f00000000c0)='#(:.', 0x0) 2.027129863s ago: executing program 5 (id=1214): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$qrtr(0x2a, 0x2, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0xffff]}, 0x8) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x4a1, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r1, 0x0, 0x0}) io_uring_enter(r2, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) 1.549948042s ago: executing program 6 (id=1215): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000014c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.542777ms ago: executing program 9 (id=1216): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0xfffffffffffffdd9) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000000)='bridge0\x00') r2 = socket$nl_generic(0x11, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x6, 0x0) socket(0x10, 0x80002, 0x0) syz_clone(0x1000000, 0x0, 0xfffffd11, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) r3 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$P9_RVERSION(r3, &(0x7f00000000c0)=ANY=[@ANYRES32=r3], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 0s ago: executing program 7 (id=1217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) kernel console output (not intermixed with test programs): [ 195.139903][ T10] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 195.139931][ T10] usb 2-1: config 0 has no interface number 0 [ 195.139979][ T10] usb 2-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 195.144738][ T10] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 195.144768][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.144788][ T10] usb 2-1: Product: syz [ 195.144803][ T10] usb 2-1: Manufacturer: syz [ 195.144817][ T10] usb 2-1: SerialNumber: syz [ 195.170858][ T10] usb 2-1: config 0 descriptor?? [ 196.658274][ T5660] usb 2-1: USB disconnect, device number 4 [ 197.091301][ T5660] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 197.246403][ T5660] usb 1-1: Using ep0 maxpacket: 16 [ 197.789236][ T5660] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 197.789256][ T5660] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 197.816442][ T5660] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 197.816474][ T5660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.816492][ T5660] usb 1-1: Product: syz [ 197.816504][ T5660] usb 1-1: Manufacturer: syz [ 197.816516][ T5660] usb 1-1: SerialNumber: syz [ 198.019776][ T60] Bluetooth: hci3: unknown advertising packet type: 0x75 [ 198.019820][ T60] Bluetooth: hci3: Malformed LE Event: 0x02 [ 198.075137][ T5660] usb 1-1: 0:2 : does not exist [ 198.075193][ T5660] usb 1-1: unit 12 not found! [ 198.514164][ T5660] usb 1-1: USB disconnect, device number 9 [ 200.532073][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.688656][ T6646] tun0: tun_chr_ioctl cmd 1074025675 [ 200.688680][ T6646] tun0: persist enabled [ 200.688997][ T6646] tun0: tun_chr_ioctl cmd 1074025675 [ 200.689012][ T6646] tun0: persist disabled [ 202.336268][ T5660] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 202.488945][ T5660] usb 3-1: Using ep0 maxpacket: 32 [ 202.491430][ T5660] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.491484][ T5660] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.491642][ T5660] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 202.491668][ T5660] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.556787][ T5660] usb 3-1: config 0 descriptor?? [ 202.589318][ T5660] hub 3-1:0.0: bad descriptor, ignoring hub [ 202.589360][ T5660] hub 3-1:0.0: probe with driver hub failed with error -5 [ 202.592976][ T5660] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 203.281661][ T6670] comedi comedi0: Minor 3 could not be opened [ 204.339475][ T10] usb 3-1: USB disconnect, device number 13 [ 204.698230][ T6675] process 'syz.4.221' launched './file2' with NULL argv: empty string added [ 204.742529][ T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 204.987456][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 205.547849][ T10] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 205.547889][ T10] usb 4-1: config 0 has no interface number 0 [ 205.547939][ T10] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.553968][ T10] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 205.554000][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.554021][ T10] usb 4-1: Product: syz [ 205.554035][ T10] usb 4-1: Manufacturer: syz [ 205.554050][ T10] usb 4-1: SerialNumber: syz [ 205.568683][ T10] usb 4-1: config 0 descriptor?? [ 208.381009][ T10] usb 4-1: USB disconnect, device number 13 [ 208.562050][ T6710] tun0: tun_chr_ioctl cmd 1074025675 [ 208.562067][ T6710] tun0: persist enabled [ 208.576442][ T6710] tun0: tun_chr_ioctl cmd 1074025675 [ 208.577510][ T6710] tun0: persist disabled [ 210.406331][ T6071] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 210.940783][ T5660] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 211.291835][ T6071] usb 4-1: config 171 has an invalid interface number: 109 but max is 0 [ 211.291866][ T6071] usb 4-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 211.291886][ T6071] usb 4-1: config 171 has no interface number 0 [ 211.291938][ T6071] usb 4-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023 [ 211.291963][ T6071] usb 4-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 211.379942][ T6071] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 211.379976][ T6071] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.379997][ T6071] usb 4-1: Product: syz [ 211.380012][ T6071] usb 4-1: Manufacturer: syz [ 211.380027][ T6071] usb 4-1: SerialNumber: syz [ 211.501606][ T6725] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.718700][ T5660] usb 5-1: Using ep0 maxpacket: 32 [ 211.721949][ T5660] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.722009][ T5660] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 211.722053][ T5660] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 211.722076][ T5660] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.778221][ T6071] ath6kl: Failed to submit usb control message: -71 [ 211.778280][ T6071] ath6kl: unable to send the bmi data to the device: -71 [ 211.778295][ T6071] ath6kl: Unable to send get target info: -71 [ 211.778635][ T5660] usb 5-1: config 0 descriptor?? [ 211.781687][ T6071] ath6kl: Failed to init ath6kl core: -71 [ 211.783439][ T6071] ath6kl_usb 4-1:171.109: probe with driver ath6kl_usb failed with error -71 [ 211.858290][ T5660] hub 5-1:0.0: bad descriptor, ignoring hub [ 211.858334][ T5660] hub 5-1:0.0: probe with driver hub failed with error -5 [ 211.860440][ T6071] usb 4-1: USB disconnect, device number 14 [ 212.203873][ T6724] Bluetooth: hci2: command 0x0406 tx timeout [ 212.203903][ T6723] Bluetooth: hci3: command 0x0406 tx timeout [ 212.204622][ T6724] Bluetooth: hci0: command 0x0406 tx timeout [ 212.204688][ T6723] Bluetooth: hci4: command 0x0406 tx timeout [ 212.206065][ T6723] Bluetooth: hci1: command 0x0406 tx timeout [ 212.291500][ T5660] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 212.863707][ T6744] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 212.919866][ T6744] kvm: pic: level sensitive irq not supported [ 212.920025][ T6744] kvm: pic: non byte read [ 212.920276][ T6744] kvm: pic: level sensitive irq not supported [ 212.920389][ T6744] kvm: pic: non byte read [ 212.920633][ T6744] kvm: pic: level sensitive irq not supported [ 212.920692][ T6744] kvm: pic: non byte read [ 212.920925][ T6744] kvm: pic: level sensitive irq not supported [ 212.924070][ T6744] kvm: pic: non byte read [ 212.928784][ T6744] kvm: pic: level sensitive irq not supported [ 212.928875][ T6744] kvm: pic: non byte read [ 212.929312][ T6744] kvm: pic: level sensitive irq not supported [ 212.929830][ T6744] kvm: pic: non byte read [ 212.930304][ T6744] kvm: pic: level sensitive irq not supported [ 212.930633][ T6744] kvm: pic: non byte read [ 212.931290][ T6744] kvm: pic: level sensitive irq not supported [ 212.931599][ T6744] kvm: pic: non byte read [ 212.932053][ T6744] kvm: pic: level sensitive irq not supported [ 212.932116][ T6744] kvm: pic: non byte read [ 212.935243][ T6744] kvm: pic: level sensitive irq not supported [ 212.935318][ T6744] kvm: pic: non byte read [ 213.167082][ T6071] usb 5-1: USB disconnect, device number 6 [ 217.205268][ T6775] tun0: tun_chr_ioctl cmd 1074025675 [ 217.205293][ T6775] tun0: persist enabled [ 217.205492][ T6775] tun0: tun_chr_ioctl cmd 1074025675 [ 217.205507][ T6775] tun0: persist disabled [ 219.693580][ T6785] comedi comedi0: Minor 3 could not be opened [ 220.962030][ T5660] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 221.106238][ T5660] usb 2-1: Using ep0 maxpacket: 32 [ 221.108732][ T5660] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.108789][ T5660] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 221.108836][ T5660] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 221.108860][ T5660] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.296998][ T5660] usb 2-1: config 0 descriptor?? [ 221.665920][ T5660] hub 2-1:0.0: bad descriptor, ignoring hub [ 221.671357][ T5660] hub 2-1:0.0: probe with driver hub failed with error -5 [ 221.900737][ T5660] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 222.977387][ T6071] usb 2-1: USB disconnect, device number 5 [ 226.546424][ T6847] tun0: tun_chr_ioctl cmd 1074025675 [ 226.546448][ T6847] tun0: persist enabled [ 226.546657][ T6847] tun0: tun_chr_ioctl cmd 1074025675 [ 226.546671][ T6847] tun0: persist disabled [ 229.376436][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 229.531030][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 229.536300][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 229.536352][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.536392][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.536413][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.559045][ T31] usb 2-1: config 0 descriptor?? [ 229.569303][ T31] hub 2-1:0.0: bad descriptor, ignoring hub [ 229.569341][ T31] hub 2-1:0.0: probe with driver hub failed with error -5 [ 229.572483][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 229.736698][ T5660] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 229.888918][ T5660] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 229.888950][ T5660] usb 4-1: config 0 has no interface number 0 [ 229.889000][ T5660] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.893781][ T5660] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 229.893811][ T5660] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.893831][ T5660] usb 4-1: Product: syz [ 229.893845][ T5660] usb 4-1: Manufacturer: syz [ 229.893859][ T5660] usb 4-1: SerialNumber: syz [ 230.066468][ T5660] usb 4-1: config 0 descriptor?? [ 230.072767][ T5660] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 230.726105][ T5660] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 230.726357][ T5660] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 231.124567][ T6887] tun0: tun_chr_ioctl cmd 1074025675 [ 231.124590][ T6887] tun0: persist enabled [ 231.124831][ T6887] tun0: tun_chr_ioctl cmd 1074025675 [ 231.124846][ T6887] tun0: persist disabled [ 231.146775][ T809] usb 2-1: USB disconnect, device number 6 [ 232.719397][ T5820] usb 4-1: USB disconnect, device number 15 [ 233.746349][ T5113] Bluetooth: hci2: unknown advertising packet type: 0x75 [ 233.746396][ T5113] Bluetooth: hci2: Malformed LE Event: 0x02 [ 234.381604][ T6925] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.819175][ T5660] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 235.924355][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 236.207402][ T5660] usb 3-1: Using ep0 maxpacket: 16 [ 237.040338][ T5660] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.040367][ T5660] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 237.071461][ T5660] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 237.071493][ T5660] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.071513][ T5660] usb 3-1: Product: syz [ 237.071528][ T5660] usb 3-1: Manufacturer: syz [ 237.071543][ T5660] usb 3-1: SerialNumber: syz [ 237.468030][ T5660] usb 3-1: 0:2 : does not exist [ 237.473684][ T5660] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 238.546746][ T5660] usb 3-1: USB disconnect, device number 14 [ 238.666303][ T5984] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 238.828878][ T5984] usb 2-1: config 0 has an invalid interface number: 172 but max is 0 [ 238.828907][ T5984] usb 2-1: config 0 has no interface number 0 [ 238.828956][ T5984] usb 2-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 238.834349][ T5984] usb 2-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 238.834383][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.834403][ T5984] usb 2-1: Product: syz [ 238.834417][ T5984] usb 2-1: Manufacturer: syz [ 238.834432][ T5984] usb 2-1: SerialNumber: syz [ 238.903151][ T5984] usb 2-1: config 0 descriptor?? [ 239.118008][ T5984] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 239.870147][ T5984] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 239.870772][ T5984] gspca_pac7302 2-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 241.902589][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.302'. [ 242.075871][ T5660] usb 2-1: USB disconnect, device number 7 [ 243.946343][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.130632][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 244.164575][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 244.164680][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.226834][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.227026][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.227184][ T31] usb 1-1: Product: syz [ 244.227336][ T31] usb 1-1: Manufacturer: syz [ 244.227499][ T31] usb 1-1: SerialNumber: syz [ 244.564161][ T7000] netlink: 20 bytes leftover after parsing attributes in process `syz.1.305'. [ 244.565119][ T7000] netlink: 12 bytes leftover after parsing attributes in process `syz.1.305'. [ 244.920010][ T31] usb 1-1: 0:2 : does not exist [ 244.936963][ T31] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 245.062022][ T31] usb 1-1: USB disconnect, device number 10 [ 245.182019][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.216332][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 247.416342][ T10] usb 4-1: device descriptor read/64, error -71 [ 248.716381][ T10] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 248.846283][ T10] usb 4-1: device descriptor read/64, error -71 [ 248.958799][ T10] usb usb4-port1: attempt power cycle [ 249.300665][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 249.327563][ T10] usb 4-1: device descriptor read/8, error -71 [ 249.566401][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 249.576238][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 249.598825][ T10] usb 4-1: device descriptor read/8, error -71 [ 249.706785][ T10] usb usb4-port1: unable to enumerate USB device [ 249.726352][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 249.732892][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.732937][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.744637][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.744665][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.744683][ T31] usb 3-1: Product: syz [ 249.744696][ T31] usb 3-1: Manufacturer: syz [ 249.744709][ T31] usb 3-1: SerialNumber: syz [ 250.268529][ T31] usb 3-1: 0:2 : does not exist [ 250.302411][ T31] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 251.886489][ T31] usb 3-1: USB disconnect, device number 15 [ 252.858851][ T5113] Bluetooth: hci1: unknown advertising packet type: 0x75 [ 252.859091][ T5113] Bluetooth: hci1: Malformed LE Event: 0x02 [ 254.269321][ T7103] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 255.187655][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 255.806605][ T809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 255.996515][ T809] usb 5-1: Using ep0 maxpacket: 16 [ 256.336811][ T809] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 256.337414][ T809] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 256.337772][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.337964][ T809] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 256.338129][ T809] usb 5-1: config 0 has no interface number 0 [ 256.339606][ T809] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 256.339908][ T809] usb 5-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.340074][ T809] usb 5-1: config 0 interface 125 has no altsetting 0 [ 256.835860][ T809] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 256.835894][ T809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.835914][ T809] usb 5-1: Product: syz [ 256.835928][ T809] usb 5-1: Manufacturer: syz [ 256.835942][ T809] usb 5-1: SerialNumber: syz [ 256.888617][ T809] usb 5-1: config 0 descriptor?? [ 256.893547][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.893653][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.147371][ T5660] usb 5-1: USB disconnect, device number 7 [ 264.321667][ T36] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 264.557344][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 265.074744][ T36] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 265.074842][ T36] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 265.074891][ T36] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.074937][ T36] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 265.074985][ T36] usb 4-1: config 0 has no interface number 0 [ 265.075416][ T36] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 265.075576][ T36] usb 4-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 265.075631][ T36] usb 4-1: config 0 interface 125 has no altsetting 0 [ 265.565866][ T36] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 265.565901][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.565921][ T36] usb 4-1: Product: syz [ 265.565936][ T36] usb 4-1: Manufacturer: syz [ 265.565950][ T36] usb 4-1: SerialNumber: syz [ 265.604330][ T36] usb 4-1: config 0 descriptor?? [ 266.947085][ T5880] usb 4-1: USB disconnect, device number 20 [ 270.244767][ T7217] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 272.386850][ T5984] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 272.748141][ T5984] usb 3-1: Using ep0 maxpacket: 16 [ 272.759240][ T5984] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 272.759270][ T5984] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 272.759290][ T5984] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.759308][ T5984] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 272.759327][ T5984] usb 3-1: config 0 has no interface number 0 [ 272.759377][ T5984] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 272.759405][ T5984] usb 3-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.759432][ T5984] usb 3-1: config 0 interface 125 has no altsetting 0 [ 272.796522][ T5984] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 272.796555][ T5984] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.796575][ T5984] usb 3-1: Product: syz [ 272.796589][ T5984] usb 3-1: Manufacturer: syz [ 272.796604][ T5984] usb 3-1: SerialNumber: syz [ 272.878270][ T5984] usb 3-1: config 0 descriptor?? [ 273.093209][ T5984] usb 3-1: USB disconnect, device number 16 [ 290.427757][ T5880] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 290.736826][ T5880] usb 5-1: device descriptor read/64, error -71 [ 291.106989][ T5880] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 291.875683][ T5880] usb 5-1: device descriptor read/64, error -71 [ 291.985538][ T5880] usb usb5-port1: attempt power cycle [ 296.288824][ T36] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 297.537625][ T7431] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.426'. [ 297.537733][ T7431] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.426'. [ 298.704499][ T36] usb 4-1: device descriptor read/64, error -71 [ 298.986281][ T36] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 301.896312][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 302.048956][ T10] usb 1-1: config 171 has an invalid interface number: 109 but max is 0 [ 302.048988][ T10] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config [ 302.049007][ T10] usb 1-1: config 171 has no interface number 0 [ 302.049057][ T10] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 255 [ 302.049082][ T10] usb 1-1: config 171 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 302.053661][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 302.053689][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.053709][ T10] usb 1-1: Product: syz [ 302.053723][ T10] usb 1-1: Manufacturer: syz [ 302.053738][ T10] usb 1-1: SerialNumber: syz [ 302.262606][ T7464] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 303.358613][ T10] ath6kl: Failed to submit usb control message: -110 [ 303.358676][ T10] ath6kl: unable to send the bmi data to the device: -110 [ 303.358691][ T10] ath6kl: Unable to send get target info: -110 [ 303.412790][ T10] ath6kl: Failed to init ath6kl core: -110 [ 303.414540][ T10] ath6kl_usb 1-1:171.109: probe with driver ath6kl_usb failed with error -110 [ 303.713767][ T809] usb 1-1: USB disconnect, device number 11 [ 304.736238][ T809] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 304.916309][ T809] usb 4-1: device descriptor read/64, error -71 [ 305.186732][ T809] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 306.056256][ T809] usb 4-1: device descriptor read/64, error -71 [ 306.168632][ T809] usb usb4-port1: attempt power cycle [ 307.841530][ T809] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 308.140961][ T809] usb 4-1: device descriptor read/8, error -71 [ 309.133639][ T7528] netlink: 20 bytes leftover after parsing attributes in process `syz.4.462'. [ 309.133683][ T7528] netlink: 12 bytes leftover after parsing attributes in process `syz.4.462'. [ 313.197460][ T36] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 313.364049][ T36] usb 4-1: device descriptor read/64, error -71 [ 313.789312][ T36] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 313.919963][ T36] usb 4-1: device descriptor read/64, error -71 [ 314.117884][ T36] usb usb4-port1: attempt power cycle [ 315.460063][ T36] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 315.479586][ T36] usb 4-1: device descriptor read/8, error -71 [ 315.726245][ T36] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 315.752106][ T36] usb 4-1: device descriptor read/8, error -71 [ 315.866611][ T36] usb usb4-port1: unable to enumerate USB device [ 317.636899][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.636967][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.496246][ T5880] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 323.656419][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 323.722152][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.722171][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 323.748966][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 323.749000][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.749021][ T5880] usb 3-1: Product: syz [ 323.749035][ T5880] usb 3-1: Manufacturer: syz [ 323.749050][ T5880] usb 3-1: SerialNumber: syz [ 324.046851][ T5880] usb 3-1: 0:2 : does not exist [ 324.532129][ T5880] usb 3-1: USB disconnect, device number 17 [ 326.909877][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 333.434146][ T5660] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 333.586460][ T5660] usb 5-1: Using ep0 maxpacket: 16 [ 333.589081][ T5660] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.589107][ T5660] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 333.592233][ T5660] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 333.592261][ T5660] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.592280][ T5660] usb 5-1: Product: syz [ 333.592295][ T5660] usb 5-1: Manufacturer: syz [ 333.592309][ T5660] usb 5-1: SerialNumber: syz [ 335.805328][ T5660] usb 5-1: 0:2 : does not exist [ 336.018863][ T5660] usb 5-1: USB disconnect, device number 11 [ 336.194751][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 341.866238][ T5660] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 342.016163][ T5660] usb 2-1: Using ep0 maxpacket: 16 [ 342.019415][ T5660] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.019441][ T5660] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.022495][ T5660] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.022523][ T5660] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.022543][ T5660] usb 2-1: Product: syz [ 342.022558][ T5660] usb 2-1: Manufacturer: syz [ 342.022572][ T5660] usb 2-1: SerialNumber: syz [ 343.206295][ T5660] usb 2-1: 0:2 : does not exist [ 343.231502][ T5660] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 343.463314][ T5660] usb 2-1: USB disconnect, device number 8 [ 343.570653][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.326199][ T31] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 346.476234][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 346.478859][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.478945][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.539084][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 346.539117][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.539137][ T31] usb 3-1: Product: syz [ 346.539151][ T31] usb 3-1: Manufacturer: syz [ 346.539166][ T31] usb 3-1: SerialNumber: syz [ 347.162596][ T31] usb 3-1: 0:2 : does not exist [ 347.918561][ T31] usb 3-1: USB disconnect, device number 18 [ 350.262036][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.416244][ T943] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 356.596510][ T943] usb 2-1: Using ep0 maxpacket: 16 [ 357.392485][ T943] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.392515][ T943] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.418140][ T943] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.418175][ T943] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.418195][ T943] usb 2-1: Product: syz [ 357.418209][ T943] usb 2-1: Manufacturer: syz [ 357.418223][ T943] usb 2-1: SerialNumber: syz [ 357.851696][ T943] usb 2-1: 0:2 : does not exist [ 358.022821][ T7889] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.560'. [ 358.022888][ T7889] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.560'. [ 358.416751][ T943] usb 2-1: USB disconnect, device number 9 [ 361.331782][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.813101][ T7909] netlink: 132 bytes leftover after parsing attributes in process `syz.1.565'. [ 369.352833][ T7948] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 369.353701][ T7948] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 369.371968][ T7948] vhci_hcd vhci_hcd.0: Device attached [ 369.716336][ T5984] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 370.115870][ T7949] vhci_hcd: connection reset by peer [ 370.147675][ T7665] vhci_hcd vhci_hcd.1: stop threads [ 370.151463][ T7665] vhci_hcd vhci_hcd.1: release socket [ 370.208082][ T7665] vhci_hcd vhci_hcd.1: disconnect device [ 371.893823][ T7966] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.578'. [ 371.893933][ T7966] netlink: 5052 bytes leftover after parsing attributes in process `syz.0.578'. [ 374.086211][ T5880] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 374.366231][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 374.368781][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.368808][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.372257][ T5880] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 374.372287][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.372308][ T5880] usb 3-1: Product: syz [ 374.372322][ T5880] usb 3-1: Manufacturer: syz [ 374.372336][ T5880] usb 3-1: SerialNumber: syz [ 374.540569][ T7990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.585'. [ 375.114557][ T7990] IPv6: sit1: Disabled Multicast RS [ 375.115951][ T7990] sit1: entered allmulticast mode [ 375.176343][ T5984] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 375.781761][ T5880] usb 3-1: 0:2 : does not exist [ 376.319204][ T5880] usb 3-1: USB disconnect, device number 19 [ 376.374744][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 379.654667][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.654713][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.541078][ T8043] netlink: 16 bytes leftover after parsing attributes in process `syz.0.597'. [ 382.611937][ T8043] IPv6: sit1: Disabled Multicast RS [ 382.631525][ T8043] sit1: entered allmulticast mode [ 384.060847][ T8050] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.601'. [ 384.060907][ T8050] netlink: 5052 bytes leftover after parsing attributes in process `syz.2.601'. [ 385.590675][ T8064] netlink: 44 bytes leftover after parsing attributes in process `syz.2.604'. [ 385.590704][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 385.617082][ T8064] netlink: 204 bytes leftover after parsing attributes in process `syz.2.604'. [ 386.542305][ T8081] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 386.648482][ T8078] kvm: pic: single mode not supported [ 386.648610][ T8078] picdev_read: 6 callbacks suppressed [ 386.648631][ T8078] kvm: pic: non byte read [ 386.648914][ T8078] kvm: pic: single mode not supported [ 386.648920][ T8078] pic_ioport_write: 6 callbacks suppressed [ 386.648929][ T8078] kvm: pic: level sensitive irq not supported [ 386.649062][ T8078] kvm: pic: non byte read [ 386.649291][ T8078] kvm: pic: non byte read [ 386.649465][ T8078] kvm: pic: single mode not supported [ 386.649516][ T8078] kvm: pic: non byte read [ 387.799815][ T8095] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.612'. [ 387.799878][ T8095] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.612'. [ 394.826363][ T5867] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 394.976399][ T5867] usb 2-1: Using ep0 maxpacket: 16 [ 395.011670][ T5867] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.011700][ T5867] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.348917][ T8136] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 395.410479][ T8136] kvm: pic: single mode not supported [ 395.411251][ T8136] kvm: pic: non byte read [ 395.414092][ T8136] kvm: pic: single mode not supported [ 395.414105][ T8136] kvm: pic: level sensitive irq not supported [ 395.415513][ T8136] kvm: pic: non byte read [ 395.419735][ T8136] kvm: pic: non byte read [ 395.426549][ T8136] kvm: pic: single mode not supported [ 395.430051][ T8136] kvm: pic: non byte read [ 395.607516][ T5867] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 395.607548][ T5867] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.615172][ T5867] usb 2-1: can't set config #1, error -71 [ 395.647102][ T5867] usb 2-1: USB disconnect, device number 10 [ 398.804491][ T8162] netlink: 'syz.3.632': attribute type 1 has an invalid length. [ 398.971609][ T8168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.632'. [ 402.616233][ T5867] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 402.884534][ T5867] usb 4-1: Using ep0 maxpacket: 16 [ 402.887047][ T5867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 402.887073][ T5867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 402.894871][ T5867] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 402.894900][ T5867] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.894922][ T5867] usb 4-1: Product: syz [ 402.894936][ T5867] usb 4-1: Manufacturer: syz [ 402.894951][ T5867] usb 4-1: SerialNumber: syz [ 403.218778][ T5867] usb 4-1: 0:2 : does not exist [ 404.050099][ T8207] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 404.067708][ T5867] usb 4-1: USB disconnect, device number 31 [ 405.117996][ T5912] udevd[5912]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.550290][ T8240] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.650'. [ 406.550392][ T8240] netlink: 5052 bytes leftover after parsing attributes in process `syz.1.650'. [ 411.035910][ T8262] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 411.098088][ T8262] kvm: pic: single mode not supported [ 411.098419][ T8262] kvm: pic: non byte read [ 411.098725][ T8262] kvm: pic: single mode not supported [ 411.098734][ T8262] kvm: pic: level sensitive irq not supported [ 411.098904][ T8262] kvm: pic: non byte read [ 411.099430][ T8262] kvm: pic: non byte read [ 411.099714][ T8262] kvm: pic: single mode not supported [ 411.099906][ T8262] kvm: pic: non byte read [ 415.985020][ T8307] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.665'. [ 415.985083][ T8307] netlink: 5052 bytes leftover after parsing attributes in process `syz.4.665'. [ 423.203096][ T8356] netlink: 132 bytes leftover after parsing attributes in process `syz.1.686'. [ 430.014462][ T8409] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.702'. [ 430.014568][ T8409] netlink: 5052 bytes leftover after parsing attributes in process `syz.3.702'. [ 430.015149][ T8410] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 433.971292][ T5809] Bluetooth: hci4: command 0x0406 tx timeout [ 437.526398][ T8464] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 440.344676][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.344783][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.466192][ T5867] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 449.627113][ T8533] bridge0: entered promiscuous mode [ 449.627181][ T8533] macsec1: entered promiscuous mode [ 449.702795][ T5867] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 449.702839][ T5867] usb 3-1: can't read configurations, error -71 [ 451.457949][ T8552] netlink: 'syz.2.742': attribute type 1 has an invalid length. [ 453.142840][ T8566] netlink: 132 bytes leftover after parsing attributes in process `syz.2.745'. [ 454.410597][ T8576] macsec1: entered promiscuous mode [ 454.410613][ T8576] bridge0: entered promiscuous mode [ 460.383002][ T8636] netlink: 204 bytes leftover after parsing attributes in process `syz.1.768'. [ 461.687040][ T8650] netlink: 'syz.2.771': attribute type 1 has an invalid length. [ 462.895791][ T8655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.773'. [ 469.889373][ T8687] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 470.067762][ T8694] kvm: pic: single mode not supported [ 470.068351][ T8694] kvm: pic: non byte read [ 470.069578][ T8694] kvm: pic: single mode not supported [ 470.069585][ T8694] kvm: pic: level sensitive irq not supported [ 470.077978][ T8694] kvm: pic: non byte read [ 470.079947][ T8694] kvm: pic: non byte read [ 470.081189][ T8694] kvm: pic: single mode not supported [ 470.082926][ T8694] kvm: pic: non byte read [ 476.971032][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 477.346502][ T8756] netlink: 'syz.2.801': attribute type 1 has an invalid length. [ 481.539245][ T8799] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 481.618748][ T8806] netlink: 32 bytes leftover after parsing attributes in process `syz.1.814'. [ 482.112633][ T8819] netlink: 'syz.0.813': attribute type 1 has an invalid length. [ 484.115734][ T8836] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 485.249714][ T8846] ptrace attach of "./syz-executor exec"[8847] was attempted by "./syz-executor exec"[8846] [ 485.807633][ T8855] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 486.416284][ T8858] ptrace attach of "./syz-executor exec"[8859] was attempted by "./syz-executor exec"[8858] [ 487.733717][ T8861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.828'. [ 487.751426][ T8855] netlink: 28 bytes leftover after parsing attributes in process `syz.0.828'. [ 487.777606][ T8855] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.403740][ T8868] netlink: 16 bytes leftover after parsing attributes in process `syz.0.831'. [ 491.388989][ T8884] netlink: 'syz.1.836': attribute type 1 has an invalid length. [ 492.117397][ T8884] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.064944][ T8886] 8021q: adding VLAN 0 to HW filter on device bond2 [ 493.070385][ T8886] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 493.093831][ T8886] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 494.128117][ T8895] ptrace attach of "./syz-executor exec"[8896] was attempted by "./syz-executor exec"[8895] [ 496.255675][ T8901] ptrace attach of "./syz-executor exec"[8902] was attempted by "./syz-executor exec"[8901] [ 499.778691][ T8918] ptrace attach of "./syz-executor exec"[8919] was attempted by "./syz-executor exec"[8918] [ 501.712548][ T8927] ptrace attach of "./syz-executor exec"[8928] was attempted by "./syz-executor exec"[8927] [ 502.616985][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.617065][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.492931][ T8936] netlink: 16 bytes leftover after parsing attributes in process `syz.4.850'. [ 506.002236][ T8947] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 508.005361][ T8958] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 510.144188][ T8980] ptrace attach of "./syz-executor exec"[8981] was attempted by "./syz-executor exec"[8980] [ 510.871705][ T8982] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 511.000483][ T8974] kvm: pic: non byte read [ 511.001677][ T8974] kvm: pic: single mode not supported [ 511.001688][ T8974] kvm: pic: level sensitive irq not supported [ 511.004081][ T8974] kvm: pic: non byte read [ 511.037858][ T8974] kvm: pic: non byte read [ 511.038124][ T8974] kvm: pic: single mode not supported [ 511.084109][ T8974] kvm: pic: non byte read [ 511.084682][ T8974] kvm: pic: non byte read [ 511.967717][ T8990] ptrace attach of "./syz-executor exec"[8995] was attempted by "./syz-executor exec"[8990] [ 513.677102][ T9002] ptrace attach of "./syz-executor exec"[9003] was attempted by "./syz-executor exec"[9002] [ 519.506594][ T9031] netlink: 212 bytes leftover after parsing attributes in process `syz.0.876'. [ 520.573442][ T9044] ptrace attach of "./syz-executor exec"[9045] was attempted by "./syz-executor exec"[9044] [ 524.515949][ T9061] ptrace attach of "./syz-executor exec"[9062] was attempted by "./syz-executor exec"[9061] [ 529.315764][ T9079] ptrace attach of ""[9078] was attempted by "./syz-executor exec"[9079] [ 529.891965][ T9085] netlink: 'syz.1.894': attribute type 1 has an invalid length. [ 530.301231][ T9085] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.037106][ T9087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 537.040175][ T9087] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 537.157384][ T9087] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 539.751045][ T9107] ptrace attach of "./syz-executor exec"[9108] was attempted by "./syz-executor exec"[9107] [ 541.481414][ T9114] ptrace attach of "./syz-executor exec"[9115] was attempted by "./syz-executor exec"[9114] [ 543.619614][ T9122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 543.622688][ T9122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 543.624150][ T9122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 543.638633][ T9122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 543.655121][ T9122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 543.971754][ T9125] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 544.741094][ T9125] 8021q: adding VLAN 0 to HW filter on device bond4 [ 545.763677][ T5113] Bluetooth: hci5: command tx timeout [ 546.174695][ T9126] 8021q: adding VLAN 0 to HW filter on device bond4 [ 546.175004][ T9126] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 546.204041][ T9126] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 546.347322][ T9122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 546.351082][ T9122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 546.352237][ T9122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 546.353542][ T9122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 546.354467][ T9122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 547.453033][ T9138] ptrace attach of "./syz-executor exec"[9139] was attempted by "./syz-executor exec"[9138] [ 548.347199][ T5113] Bluetooth: hci5: command tx timeout [ 548.561978][ T5113] Bluetooth: hci4: command tx timeout [ 549.586881][ T9143] ptrace attach of "./syz-executor exec"[9144] was attempted by "./syz-executor exec"[9143] [ 550.528037][ T9122] Bluetooth: hci5: command tx timeout [ 550.643397][ T9122] Bluetooth: hci4: command tx timeout [ 552.556284][ T9122] Bluetooth: hci5: command tx timeout [ 552.726398][ T9122] Bluetooth: hci4: command tx timeout [ 552.853412][ T9158] netlink: 'syz.0.912': attribute type 1 has an invalid length. [ 554.613120][ T9158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 554.836863][ T9122] Bluetooth: hci4: command tx timeout [ 556.705963][ T9159] 8021q: adding VLAN 0 to HW filter on device bond2 [ 556.708781][ T9159] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 556.736712][ T9159] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 557.264981][ T9178] netlink: 'syz.4.915': attribute type 1 has an invalid length. [ 563.130147][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.130195][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.445201][ T7645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.608704][ T9178] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 564.197076][ T9199] netlink: 16 bytes leftover after parsing attributes in process `syz.1.920'. [ 564.870837][ T9199] IPv6: sit2: Disabled Multicast RS [ 564.872171][ T9199] sit2: entered allmulticast mode [ 565.281116][ T7645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.798014][ T9231] ptrace attach of "./syz-executor exec"[9232] was attempted by "./syz-executor exec"[9231] [ 568.657493][ T7645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.395524][ T7645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.743755][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 572.779914][ T9134] chnl_net:caif_netlink_parms(): no params data found [ 573.443496][ T9271] ptrace attach of "./syz-executor exec"[9272] was attempted by "./syz-executor exec"[9271] [ 575.176573][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.176718][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.176950][ T9120] bridge_slave_0: entered allmulticast mode [ 575.180122][ T9120] bridge_slave_0: entered promiscuous mode [ 575.310220][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.310378][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.310993][ T9120] bridge_slave_1: entered allmulticast mode [ 575.314069][ T9120] bridge_slave_1: entered promiscuous mode [ 575.485375][ T7645] bridge_slave_1: left allmulticast mode [ 575.485547][ T7645] bridge_slave_1: left promiscuous mode [ 575.501202][ T7645] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.630960][ T7645] bridge_slave_0: left allmulticast mode [ 575.630994][ T7645] bridge_slave_0: left promiscuous mode [ 575.632972][ T7645] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.308073][ T7645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.377188][ T7645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.428848][ T7645] bond0 (unregistering): Released all slaves [ 583.434637][ T7645] bond1 (unregistering): Released all slaves [ 583.669556][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 583.850532][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 583.852545][ T9134] bridge0: port 1(bridge_slave_0) entered blocking state [ 583.852681][ T9134] bridge0: port 1(bridge_slave_0) entered disabled state [ 583.852879][ T9134] bridge_slave_0: entered allmulticast mode [ 583.897402][ T9134] bridge_slave_0: entered promiscuous mode [ 583.934975][ T9134] bridge0: port 2(bridge_slave_1) entered blocking state [ 583.961874][ T9134] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.962149][ T9134] bridge_slave_1: entered allmulticast mode [ 584.016655][ T9134] bridge_slave_1: entered promiscuous mode [ 584.249157][ T9120] team0: Port device team_slave_0 added [ 584.275753][ T9120] team0: Port device team_slave_1 added [ 585.082534][ T9134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.393845][ T9134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 585.519224][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 585.519242][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.519268][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.598220][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.598238][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 585.598265][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.914738][ T9134] team0: Port device team_slave_0 added [ 586.055892][ T9134] team0: Port device team_slave_1 added [ 586.174439][ T9120] hsr_slave_0: entered promiscuous mode [ 586.197205][ T9120] hsr_slave_1: entered promiscuous mode [ 586.904389][ T9354] [U] üÿ [ 587.148631][ T7645] hsr_slave_0: left promiscuous mode [ 587.811032][ T9373] ptrace attach of "./syz-executor exec"[9374] was attempted by "./syz-executor exec"[9373] [ 591.693723][ T7645] hsr_slave_1: left promiscuous mode [ 591.695745][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 591.695842][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 591.776649][ T7645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 591.776679][ T7645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 591.934482][ T7645] veth1_macvtap: left promiscuous mode [ 591.934718][ T7645] veth0_macvtap: left promiscuous mode [ 591.936776][ T7645] veth1_vlan: left promiscuous mode [ 591.937519][ T7645] veth0_vlan: left promiscuous mode [ 592.866991][ T7645] team0 (unregistering): Port device team_slave_1 removed [ 592.937690][ T7645] team0 (unregistering): Port device team_slave_0 removed [ 593.314215][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.314233][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.314260][ T9134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.507867][ T9134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.507896][ T9134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.507924][ T9134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.290663][ T9395] ptrace attach of "./syz-executor exec"[9396] was attempted by "./syz-executor exec"[9395] [ 596.763122][ T9134] hsr_slave_0: entered promiscuous mode [ 596.764726][ T9134] hsr_slave_1: entered promiscuous mode [ 596.765772][ T9134] debugfs: 'hsr0' already exists in 'hsr' [ 596.765797][ T9134] Cannot create hsr debugfs directory [ 600.498022][ T9120] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 600.841549][ T9120] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 601.078793][ T9122] Bluetooth: hci4: link tx timeout [ 601.080403][ T9122] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 601.153125][ T9120] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 603.482095][ T5113] Bluetooth: hci4: command 0x0406 tx timeout [ 604.439502][ T9120] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 604.762279][ T9134] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 605.193342][ T9134] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 606.160502][ T9463] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 606.164809][ T9463] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 606.167805][ T9463] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 606.186295][ T9463] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 606.192003][ T9463] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 606.971851][ T9478] ptrace attach of "./syz-executor exec"[9479] was attempted by "./syz-executor exec"[9478] [ 608.241738][ T9122] Bluetooth: hci0: command tx timeout [ 608.432398][ T9463] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 608.445010][ T9463] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 608.456304][ T9463] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 608.469224][ T9463] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 608.472178][ T9463] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 611.786134][ T9122] Bluetooth: hci0: command tx timeout [ 611.786202][ T9122] Bluetooth: hci6: command tx timeout [ 613.839151][ T9122] Bluetooth: hci0: command tx timeout [ 614.665683][ T9463] Bluetooth: hci6: command tx timeout [ 616.217463][ T9463] Bluetooth: hci0: command tx timeout [ 616.740731][ T9463] Bluetooth: hci6: command tx timeout [ 616.771762][ T1360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.973875][ T9521] sp0: Synchronizing with TNC [ 616.995659][ T9520] [U] è`` [ 617.809555][ T1360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.797017][ T9463] Bluetooth: hci6: command tx timeout [ 619.045429][ T1360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.474742][ T1360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.706878][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.706957][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.657119][ T9578] netlink: 'syz.0.1002': attribute type 1 has an invalid length. [ 625.991448][ T943] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 626.231139][ T943] usb 5-1: Using ep0 maxpacket: 16 [ 626.284300][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 626.284369][ T943] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 626.284393][ T943] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 626.284438][ T943] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 626.284496][ T943] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.456998][ T943] usb 5-1: config 0 descriptor?? [ 628.500622][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.500744][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.524588][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.524703][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.524781][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.524883][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.524959][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.525019][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.525136][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 628.525205][ T943] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 629.267423][ T943] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 629.267461][ T943] microsoft 0003:045E:07DA.0004: no inputs found [ 629.268727][ T943] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 629.651422][ T943] usb 5-1: USB disconnect, device number 12 [ 630.623859][ T9595] fido_id[9595]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 631.028860][ T9578] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 631.529999][ T9471] chnl_net:caif_netlink_parms(): no params data found [ 632.637874][ T9487] chnl_net:caif_netlink_parms(): no params data found [ 632.671113][ T9627] netlink: 'syz.0.1010': attribute type 1 has an invalid length. [ 632.747454][ T9632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1010'. [ 632.808750][ T1360] bridge_slave_1: left allmulticast mode [ 632.808782][ T1360] bridge_slave_1: left promiscuous mode [ 632.809082][ T1360] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.887466][ T1360] bridge_slave_0: left allmulticast mode [ 632.887498][ T1360] bridge_slave_0: left promiscuous mode [ 632.887778][ T1360] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.047176][ T9639] netlink: 'syz.4.1013': attribute type 1 has an invalid length. [ 634.552221][ T9645] netlink: 'syz.1.1014': attribute type 1 has an invalid length. [ 641.786427][ T9663] ptrace attach of "./syz-executor exec"[9665] was attempted by "./syz-executor exec"[9663] [ 642.329460][ T1360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.457013][ T1360] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.498571][ T1360] bond0 (unregistering): Released all slaves [ 642.564785][ T9632] 8021q: adding VLAN 0 to HW filter on device bond3 [ 642.680460][ T9645] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 643.420838][ T9471] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.420986][ T9471] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.421245][ T9471] bridge_slave_0: entered allmulticast mode [ 643.469028][ T9471] bridge_slave_0: entered promiscuous mode [ 644.237712][ T9681] ptrace attach of "./syz-executor exec"[9682] was attempted by "./syz-executor exec"[9681] [ 645.617823][ T9471] bridge0: port 2(bridge_slave_1) entered blocking state [ 645.617954][ T9471] bridge0: port 2(bridge_slave_1) entered disabled state [ 645.618162][ T9471] bridge_slave_1: entered allmulticast mode [ 645.650092][ T9471] bridge_slave_1: entered promiscuous mode [ 645.842970][ T9487] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.843153][ T9487] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.843381][ T9487] bridge_slave_0: entered allmulticast mode [ 645.878036][ T9487] bridge_slave_0: entered promiscuous mode [ 646.070259][ T9487] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.070403][ T9487] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.070605][ T9487] bridge_slave_1: entered allmulticast mode [ 646.073591][ T9487] bridge_slave_1: entered promiscuous mode [ 646.188219][ T9471] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.248955][ T9471] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.477687][ T9487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.578488][ T9487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.737375][ T1360] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 646.737407][ T1360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 646.791531][ T1360] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 646.791559][ T1360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 646.958260][ T1360] veth1_macvtap: left promiscuous mode [ 646.958382][ T1360] veth0_macvtap: left promiscuous mode [ 646.958694][ T1360] veth1_vlan: left promiscuous mode [ 646.958887][ T1360] veth0_vlan: left promiscuous mode [ 650.936970][ T1360] team0 (unregistering): Port device team_slave_1 removed [ 650.986966][ T1360] team0 (unregistering): Port device team_slave_0 removed [ 652.593961][ T9471] team0: Port device team_slave_0 added [ 652.942072][ T9471] team0: Port device team_slave_1 added [ 653.088611][ T9487] team0: Port device team_slave_0 added [ 653.167354][ T9487] team0: Port device team_slave_1 added [ 653.172784][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 653.172801][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.172828][ T9471] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 653.527407][ T9471] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 653.527427][ T9471] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 653.527455][ T9471] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 653.598733][ T9731] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 654.282086][ T9731] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1028'. [ 654.506162][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 654.506180][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.506207][ T9487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 654.522348][ T9731] 8021q: adding VLAN 0 to HW filter on device bond5 [ 654.536220][ T9487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 654.536236][ T9487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 654.536260][ T9487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.582951][ T36] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 656.765916][ T9471] hsr_slave_0: entered promiscuous mode [ 656.766079][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 656.769088][ T36] usb 1-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 656.769114][ T36] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.774675][ T36] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 656.774704][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.774724][ T36] usb 1-1: Product: syz [ 656.774738][ T36] usb 1-1: Manufacturer: syz [ 656.774752][ T36] usb 1-1: SerialNumber: syz [ 656.851101][ T9471] hsr_slave_1: entered promiscuous mode [ 656.854768][ T9471] debugfs: 'hsr0' already exists in 'hsr' [ 656.854796][ T9471] Cannot create hsr debugfs directory [ 656.935425][ T9487] hsr_slave_0: entered promiscuous mode [ 656.966315][ T9487] hsr_slave_1: entered promiscuous mode [ 656.969952][ T9487] debugfs: 'hsr0' already exists in 'hsr' [ 656.969980][ T9487] Cannot create hsr debugfs directory [ 657.121177][ T36] usb 1-1: 0:2 : does not exist [ 657.121274][ T36] usb 1-1: unit 11 not found! [ 658.789703][ T36] usb 1-1: USB disconnect, device number 12 [ 658.935421][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 661.430462][ T9783] netlink: 'syz.0.1041': attribute type 1 has an invalid length. [ 661.488866][ T9785] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1041'. [ 661.725047][ T9785] 8021q: adding VLAN 0 to HW filter on device bond4 [ 665.426178][ T31] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 665.576784][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 665.584304][ T9122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 665.611679][ T31] usb 2-1: config 1 has an invalid descriptor of length 176, skipping remainder of the config [ 665.611708][ T31] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 665.643455][ T31] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 665.643486][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.643507][ T31] usb 2-1: Product: syz [ 665.643521][ T31] usb 2-1: Manufacturer: syz [ 665.643536][ T31] usb 2-1: SerialNumber: syz [ 665.693400][ T9122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 665.704408][ T9122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 665.707389][ T9122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 665.709349][ T9122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 665.965234][ T31] usb 2-1: 0:2 : does not exist [ 666.039882][ T31] usb 2-1: unit 11 not found! [ 666.316086][ T31] usb 2-1: USB disconnect, device number 11 [ 666.445519][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.706998][ T9821] netlink: 'syz.0.1051': attribute type 1 has an invalid length. [ 666.846480][ T9823] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'. [ 666.948929][ T9823] 8021q: adding VLAN 0 to HW filter on device bond5 [ 667.009230][ T9122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 667.072042][ T9122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 667.075814][ T9122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 667.084842][ T9122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 667.085921][ T9122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 668.154323][ T9463] Bluetooth: hci4: command tx timeout [ 668.189872][ T9837] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 669.456240][ T9463] Bluetooth: hci5: command tx timeout [ 670.907754][ T9463] Bluetooth: hci4: command tx timeout [ 671.717542][ T9463] Bluetooth: hci5: command tx timeout [ 673.840997][ T9463] Bluetooth: hci4: command tx timeout [ 673.841036][ T9463] Bluetooth: hci5: command tx timeout [ 675.918322][ T9122] Bluetooth: hci5: command tx timeout [ 675.918372][ T9122] Bluetooth: hci4: command tx timeout [ 676.696119][ T9900] netlink: 'syz.1.1065': attribute type 1 has an invalid length. [ 683.740190][ T9807] chnl_net:caif_netlink_parms(): no params data found [ 684.254208][ T9939] netlink: 'syz.1.1075': attribute type 1 has an invalid length. [ 686.642468][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.642567][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.589864][ T68] bridge_slave_1: left allmulticast mode [ 690.589887][ T68] bridge_slave_1: left promiscuous mode [ 690.590059][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.687695][ T68] bridge_slave_0: left allmulticast mode [ 690.687729][ T68] bridge_slave_0: left promiscuous mode [ 690.688023][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.820708][ T68] bridge_slave_1: left allmulticast mode [ 690.820738][ T68] bridge_slave_1: left promiscuous mode [ 690.821001][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.948778][ T68] bridge_slave_0: left allmulticast mode [ 690.948811][ T68] bridge_slave_0: left promiscuous mode [ 690.949106][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 691.392145][ T9971] netlink: 'syz.1.1080': attribute type 1 has an invalid length. [ 693.166970][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.296839][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 693.374462][ T68] bond0 (unregistering): Released all slaves [ 693.766899][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 693.827332][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.487546][ T68] bond0 (unregistering): Released all slaves [ 695.766860][ T9971] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 696.360232][ T9807] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.360419][ T9807] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.360685][ T9807] bridge_slave_0: entered allmulticast mode [ 696.363687][ T9807] bridge_slave_0: entered promiscuous mode [ 696.420952][ T9824] chnl_net:caif_netlink_parms(): no params data found [ 696.618132][ T9807] bridge0: port 2(bridge_slave_1) entered blocking state [ 696.618371][ T9807] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.618644][ T9807] bridge_slave_1: entered allmulticast mode [ 696.677990][ T9807] bridge_slave_1: entered promiscuous mode [ 697.621167][T10010] netlink: 'syz.0.1092': attribute type 1 has an invalid length. [ 698.368827][ T9122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 698.396722][ T9122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 698.398667][ T9122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 698.400590][ T9122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 698.401710][ T9122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 698.526215][ T68] hsr_slave_0: left promiscuous mode [ 698.580794][ T68] hsr_slave_1: left promiscuous mode [ 698.765515][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.885453][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 699.316112][ T68] hsr_slave_0: left promiscuous mode [ 699.357264][ T68] hsr_slave_1: left promiscuous mode [ 699.358390][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.379573][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 700.867605][ T9463] Bluetooth: hci0: command tx timeout [ 701.459021][T10032] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1096'. [ 701.881148][ T68] team0 (unregistering): Port device team_slave_1 removed [ 701.906614][ T68] team0 (unregistering): Port device team_slave_0 removed [ 701.976129][ T5820] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 702.216039][ T5820] usb 1-1: Using ep0 maxpacket: 16 [ 702.218176][ T5820] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 702.218202][ T5820] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 702.220483][ T5820] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 702.220508][ T5820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.220524][ T5820] usb 1-1: Product: syz [ 702.220531][ T5820] usb 1-1: Manufacturer: syz [ 702.220539][ T5820] usb 1-1: SerialNumber: syz [ 702.376688][ T68] team0 (unregistering): Port device team_slave_1 removed [ 702.428759][ T68] team0 (unregistering): Port device team_slave_0 removed [ 702.551663][ T5820] usb 1-1: 0:2 : does not exist [ 702.551770][ T5820] usb 1-1: unit 6 not found! [ 702.676559][ T5820] usb 1-1: USB disconnect, device number 13 [ 702.738901][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 702.872310][ T9807] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.877687][ T9122] Bluetooth: hci0: command tx timeout [ 702.942390][ T9807] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.044575][ T9122] Bluetooth: hci0: command tx timeout [ 705.073593][ T9807] team0: Port device team_slave_0 added [ 705.247072][ T9807] team0: Port device team_slave_1 added [ 705.406332][ T9824] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.406489][ T9824] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.406751][ T9824] bridge_slave_0: entered allmulticast mode [ 705.413814][ T9824] bridge_slave_0: entered promiscuous mode [ 705.611428][ T9824] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.611570][ T9824] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.611818][ T9824] bridge_slave_1: entered allmulticast mode [ 706.595594][ T9824] bridge_slave_1: entered promiscuous mode [ 706.988934][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.988952][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 706.988983][ T9807] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.116678][ T9122] Bluetooth: hci0: command tx timeout [ 707.178672][ T9807] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.178691][ T9807] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.178719][ T9807] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.246607][ T9824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.284417][ T9824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.755425][T10065] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 708.150802][ T9824] team0: Port device team_slave_0 added [ 708.475607][ T9824] team0: Port device team_slave_1 added [ 708.503578][ T9807] hsr_slave_0: entered promiscuous mode [ 708.505211][ T9807] hsr_slave_1: entered promiscuous mode [ 709.005718][T10074] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 710.064572][ T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 710.101501][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 710.101520][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.101547][ T9824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 710.216057][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 710.220327][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.220355][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.223479][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 710.223506][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.223527][ T10] usb 2-1: Product: syz [ 710.223542][ T10] usb 2-1: Manufacturer: syz [ 710.223556][ T10] usb 2-1: SerialNumber: syz [ 710.346678][ T9824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 710.347587][ T9824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 710.347621][ T9824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 711.196801][ T10] usb 2-1: 0:2 : does not exist [ 711.196898][ T10] usb 2-1: unit 6 not found! [ 711.290794][ T10] usb 2-1: USB disconnect, device number 12 [ 711.459430][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 711.694631][T10090] netlink: 'syz.0.1114': attribute type 1 has an invalid length. [ 714.701784][ T9824] hsr_slave_0: entered promiscuous mode [ 714.702652][ T9824] hsr_slave_1: entered promiscuous mode [ 714.703259][ T9824] debugfs: 'hsr0' already exists in 'hsr' [ 714.703275][ T9824] Cannot create hsr debugfs directory [ 719.998871][ T943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 720.876833][T10012] chnl_net:caif_netlink_parms(): no params data found [ 720.941652][ T9807] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 721.095113][ T9807] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 721.096212][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 721.138860][ T943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.138914][ T943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 721.175439][ T943] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 721.175473][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.175494][ T943] usb 1-1: Product: syz [ 721.175509][ T943] usb 1-1: Manufacturer: syz [ 721.175523][ T943] usb 1-1: SerialNumber: syz [ 721.633438][ T943] usb 1-1: 0:2 : does not exist [ 721.635177][ T943] usb 1-1: unit 6 not found! [ 721.774317][ T943] usb 1-1: USB disconnect, device number 14 [ 721.862896][ T9738] udevd[9738]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 721.894340][ T68] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.023628][ T9807] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 722.105340][ T9807] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 723.588390][ T68] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.598144][T10177] netlink: 'syz.0.1129': attribute type 1 has an invalid length. [ 725.158190][T10180] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1131'. [ 725.295695][ T68] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 725.792167][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.792364][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.792630][T10012] bridge_slave_0: entered allmulticast mode [ 725.795681][T10012] bridge_slave_0: entered promiscuous mode [ 726.847605][ T9463] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 726.876878][ T9463] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 726.878525][ T9463] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 726.879804][ T9463] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 726.880665][ T9463] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 726.987911][ T5809] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 727.009640][ T5809] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 727.011408][ T5809] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 727.012798][ T5809] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 727.013948][ T5809] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 729.004419][ T68] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.177606][ T5809] Bluetooth: hci6: command tx timeout [ 729.519276][ T5809] Bluetooth: hci3: command tx timeout [ 729.743927][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.744071][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.744279][T10012] bridge_slave_1: entered allmulticast mode [ 729.768592][T10012] bridge_slave_1: entered promiscuous mode [ 730.408616][T10212] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 730.450162][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 731.077490][T10212] 8021q: adding VLAN 0 to HW filter on device bond6 [ 731.286982][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 731.308588][ T5809] Bluetooth: hci6: command tx timeout [ 731.700612][ T5809] Bluetooth: hci3: command tx timeout [ 733.366130][ T5809] Bluetooth: hci6: command tx timeout [ 733.435100][T10012] team0: Port device team_slave_0 added [ 733.542913][T10012] team0: Port device team_slave_1 added [ 733.786438][ T5809] Bluetooth: hci3: command tx timeout [ 735.446091][ T5809] Bluetooth: hci6: command tx timeout [ 736.205472][ T5809] Bluetooth: hci3: command tx timeout [ 736.511431][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.511451][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.511478][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.654913][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.654932][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.654961][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.964396][ T68] bridge_slave_1: left allmulticast mode [ 736.964428][ T68] bridge_slave_1: left promiscuous mode [ 736.964695][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.007902][ T68] bridge_slave_0: left allmulticast mode [ 737.007934][ T68] bridge_slave_0: left promiscuous mode [ 737.008303][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.284577][ T68] bridge_slave_1: left allmulticast mode [ 738.284609][ T68] bridge_slave_1: left promiscuous mode [ 738.284883][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.507941][ T68] bridge_slave_0: left allmulticast mode [ 738.507974][ T68] bridge_slave_0: left promiscuous mode [ 738.508249][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.602627][ T68] bridge_slave_1: left allmulticast mode [ 738.602649][ T68] bridge_slave_1: left promiscuous mode [ 738.602814][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.687914][ T68] bridge_slave_0: left allmulticast mode [ 738.687946][ T68] bridge_slave_0: left promiscuous mode [ 738.688214][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 742.063121][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.116726][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.159399][ T68] bond0 (unregistering): Released all slaves [ 742.566647][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.646628][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.669755][ T68] bond0 (unregistering): Released all slaves [ 742.816702][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 742.886806][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 742.937485][ T68] bond0 (unregistering): Released all slaves [ 743.128309][T10012] hsr_slave_0: entered promiscuous mode [ 743.130147][T10012] hsr_slave_1: entered promiscuous mode [ 743.131174][T10012] debugfs: 'hsr0' already exists in 'hsr' [ 743.131207][T10012] Cannot create hsr debugfs directory [ 744.423921][T10191] chnl_net:caif_netlink_parms(): no params data found [ 744.513608][T10190] chnl_net:caif_netlink_parms(): no params data found [ 745.495095][T10191] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.495238][T10191] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.495453][T10191] bridge_slave_0: entered allmulticast mode [ 745.498925][T10191] bridge_slave_0: entered promiscuous mode [ 745.680591][T10191] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.680737][T10191] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.680960][T10191] bridge_slave_1: entered allmulticast mode [ 745.683988][T10191] bridge_slave_1: entered promiscuous mode [ 746.118642][T10190] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.126572][T10190] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.126841][T10190] bridge_slave_0: entered allmulticast mode [ 746.129532][T10190] bridge_slave_0: entered promiscuous mode [ 747.469167][T10190] bridge0: port 2(bridge_slave_1) entered blocking state [ 747.469305][T10190] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.469580][T10190] bridge_slave_1: entered allmulticast mode [ 747.502711][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502759][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.505782][T10190] bridge_slave_1: entered promiscuous mode [ 748.129424][T10191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 748.147070][T10012] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 749.875720][T10191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.886676][T10012] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.944524][T10190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.089319][T10012] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 750.144866][T10190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.179646][T10012] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 750.240060][T10191] team0: Port device team_slave_0 added [ 750.267369][T10191] team0: Port device team_slave_1 added [ 750.273806][T10190] team0: Port device team_slave_0 added [ 750.306977][T10190] team0: Port device team_slave_1 added [ 750.451511][ T68] hsr_slave_0: left promiscuous mode [ 750.467490][ T68] hsr_slave_1: left promiscuous mode [ 750.468712][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.510003][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 750.669284][ T68] hsr_slave_0: left promiscuous mode [ 750.686213][ T68] hsr_slave_1: left promiscuous mode [ 750.687075][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 750.687092][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 750.761399][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 750.761429][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.128013][T10332] netlink: 'syz.0.1157': attribute type 1 has an invalid length. [ 752.016185][ T68] hsr_slave_0: left promiscuous mode [ 753.206456][ T68] hsr_slave_1: left promiscuous mode [ 753.207227][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.267760][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.368685][ T68] veth1_macvtap: left promiscuous mode [ 753.368809][ T68] veth0_macvtap: left promiscuous mode [ 753.369113][ T68] veth1_vlan: left promiscuous mode [ 753.369320][ T68] veth0_vlan: left promiscuous mode [ 756.361165][ T68] team0 (unregistering): Port device team_slave_1 removed [ 756.476007][ T68] team0 (unregistering): Port device team_slave_0 removed [ 757.728880][ T9122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 757.746471][ T9122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 757.749416][ T9122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 757.751175][ T9122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 757.752045][ T9122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 759.347630][ T68] team0 (unregistering): Port device team_slave_1 removed [ 759.500489][ T68] team0 (unregistering): Port device team_slave_0 removed [ 759.900453][ T9122] Bluetooth: hci4: command tx timeout [ 761.916181][ T9122] Bluetooth: hci4: command tx timeout [ 763.996175][ T9122] Bluetooth: hci4: command tx timeout [ 764.553775][T10392] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 765.703772][ T68] team0 (unregistering): Port device team_slave_1 removed [ 765.762985][ T68] team0 (unregistering): Port device team_slave_0 removed [ 766.076338][ T9122] Bluetooth: hci4: command tx timeout [ 766.335670][T10191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.335691][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.335721][T10191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.696980][T10191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.696999][T10191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.697027][T10191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.900417][T10190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.900438][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.900468][T10190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.040924][T10190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.040942][T10190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.040971][T10190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.779037][T10191] hsr_slave_0: entered promiscuous mode [ 767.780863][T10191] hsr_slave_1: entered promiscuous mode [ 767.781966][T10191] debugfs: 'hsr0' already exists in 'hsr' [ 767.781993][T10191] Cannot create hsr debugfs directory [ 768.015867][T10190] hsr_slave_0: entered promiscuous mode [ 768.021830][T10190] hsr_slave_1: entered promiscuous mode [ 768.022925][T10190] debugfs: 'hsr0' already exists in 'hsr' [ 768.022951][T10190] Cannot create hsr debugfs directory [ 772.122473][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 772.128866][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 772.130274][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 772.141790][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 772.146917][ T5809] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 772.458754][T10365] chnl_net:caif_netlink_parms(): no params data found [ 774.236306][ T9122] Bluetooth: hci0: command tx timeout [ 775.959252][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.960115][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.960390][T10365] bridge_slave_0: entered allmulticast mode [ 775.963610][T10365] bridge_slave_0: entered promiscuous mode [ 776.016935][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 776.017086][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.017280][T10365] bridge_slave_1: entered allmulticast mode [ 776.018881][T10365] bridge_slave_1: entered promiscuous mode [ 776.316278][ T9122] Bluetooth: hci0: command tx timeout [ 776.363047][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 776.570059][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 776.837418][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 776.860167][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 776.863548][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 776.886941][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 776.887667][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 776.990662][T10365] team0: Port device team_slave_0 added [ 777.006256][T10365] team0: Port device team_slave_1 added [ 777.267055][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.267076][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.267094][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.516925][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 777.516946][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 777.516975][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.241626][T10434] chnl_net:caif_netlink_parms(): no params data found [ 778.406190][ T9122] Bluetooth: hci0: command tx timeout [ 778.694219][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 778.764827][T10365] hsr_slave_0: entered promiscuous mode [ 778.765697][T10365] hsr_slave_1: entered promiscuous mode [ 778.769746][T10365] debugfs: 'hsr0' already exists in 'hsr' [ 778.769771][T10365] Cannot create hsr debugfs directory [ 778.956257][ T9122] Bluetooth: hci1: command tx timeout [ 778.962712][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.098302][T10434] bridge0: port 1(bridge_slave_0) entered blocking state [ 779.098410][T10434] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.098531][T10434] bridge_slave_0: entered allmulticast mode [ 779.100059][T10434] bridge_slave_0: entered promiscuous mode [ 779.260948][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.305440][T10434] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.305598][T10434] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.305769][T10434] bridge_slave_1: entered allmulticast mode [ 779.308960][T10434] bridge_slave_1: entered promiscuous mode [ 779.554186][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.589754][T10191] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 779.642370][T10434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.643382][T10191] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 779.699825][T10434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.699913][T10191] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 779.788174][T10191] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 779.924240][T10434] team0: Port device team_slave_0 added [ 779.959478][T10434] team0: Port device team_slave_1 added [ 780.213235][T10434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 780.213254][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.213283][T10434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 780.332956][T10190] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 780.372166][T10434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 780.372184][T10434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 780.372213][T10434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 780.476256][ T9122] Bluetooth: hci0: command tx timeout [ 780.765028][T10190] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 780.845035][T10482] chnl_net:caif_netlink_parms(): no params data found [ 780.861574][T10190] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 780.917258][T10190] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 781.036421][ T9122] Bluetooth: hci1: command tx timeout [ 781.369830][ T68] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 781.544397][T10434] hsr_slave_0: entered promiscuous mode [ 781.545261][T10434] hsr_slave_1: entered promiscuous mode [ 781.562125][T10434] debugfs: 'hsr0' already exists in 'hsr' [ 781.562157][T10434] Cannot create hsr debugfs directory [ 781.889764][ T68] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.283999][ T68] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.318118][T10482] bridge0: port 1(bridge_slave_0) entered blocking state [ 782.318302][T10482] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.318499][T10482] bridge_slave_0: entered allmulticast mode [ 782.320117][T10482] bridge_slave_0: entered promiscuous mode [ 782.353331][T10482] bridge0: port 2(bridge_slave_1) entered blocking state [ 782.353488][T10482] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.353754][T10482] bridge_slave_1: entered allmulticast mode [ 782.355420][T10482] bridge_slave_1: entered promiscuous mode [ 782.446659][T10482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.610401][ T68] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.669276][T10482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 782.831618][T10482] team0: Port device team_slave_0 added [ 782.859746][T10482] team0: Port device team_slave_1 added [ 782.960725][T10482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 782.960739][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 782.960755][T10482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.000614][T10482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.000632][T10482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.000656][T10482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.117382][ T9122] Bluetooth: hci1: command tx timeout [ 783.140560][T10365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 783.193962][T10365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 783.283332][T10365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 783.350024][T10365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 783.396950][T10482] hsr_slave_0: entered promiscuous mode [ 783.397847][T10482] hsr_slave_1: entered promiscuous mode [ 783.398466][T10482] debugfs: 'hsr0' already exists in 'hsr' [ 783.398482][T10482] Cannot create hsr debugfs directory [ 783.514424][ T68] bridge_slave_1: left allmulticast mode [ 783.514457][ T68] bridge_slave_1: left promiscuous mode [ 783.514714][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.578258][ T68] bridge_slave_0: left allmulticast mode [ 783.578281][ T68] bridge_slave_0: left promiscuous mode [ 783.578484][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.680034][ T68] bridge_slave_1: left allmulticast mode [ 783.680058][ T68] bridge_slave_1: left promiscuous mode [ 783.680226][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.737293][ T68] bridge_slave_0: left allmulticast mode [ 783.737317][ T68] bridge_slave_0: left promiscuous mode [ 783.737496][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.811233][ T68] bridge_slave_1: left allmulticast mode [ 783.811258][ T68] bridge_slave_1: left promiscuous mode [ 783.811423][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.877418][ T68] bridge_slave_0: left allmulticast mode [ 783.877442][ T68] bridge_slave_0: left promiscuous mode [ 783.877652][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.949842][ T68] bridge_slave_1: left allmulticast mode [ 783.949865][ T68] bridge_slave_1: left promiscuous mode [ 783.950043][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.018148][ T68] bridge_slave_0: left allmulticast mode [ 784.018181][ T68] bridge_slave_0: left promiscuous mode [ 784.018492][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.069762][ T68] bridge_slave_1: left allmulticast mode [ 784.069783][ T68] bridge_slave_1: left promiscuous mode [ 784.069939][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.137270][ T68] bridge_slave_0: left allmulticast mode [ 784.137294][ T68] bridge_slave_0: left promiscuous mode [ 784.137466][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.159044][ T68] bridge0 (unregistering): left promiscuous mode [ 785.206256][ T9122] Bluetooth: hci1: command tx timeout [ 785.297083][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 785.389092][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 785.408262][ T68] bond0 (unregistering): Released all slaves [ 785.414321][ T68] bond1 (unregistering): Released all slaves [ 785.430864][ T68] bond2 (unregistering): Released all slaves [ 785.446257][ T68] bond3 (unregistering): Released all slaves [ 785.463644][ T68] bond4 (unregistering): Released all slaves [ 785.479100][ T68] bond5 (unregistering): Released all slaves [ 785.976800][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.036595][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.083386][ T68] bond0 (unregistering): Released all slaves [ 786.091735][ T68] bond1 (unregistering): Released all slaves [ 786.106387][ T68] bond2 (unregistering): Released all slaves [ 786.117217][ T68] bond3 (unregistering): Released all slaves [ 786.134517][ T68] bond4 (unregistering): Released all slaves [ 786.160658][ T68] bond5 (unregistering): Released all slaves [ 786.197585][ T68] bond6 (unregistering): Released all slaves [ 786.348326][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 786.350982][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 786.370525][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 786.372391][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 786.373316][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 786.518312][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.616577][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 786.677608][ T68] bond0 (unregistering): Released all slaves [ 786.886872][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 786.967170][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.028848][ T68] bond0 (unregistering): Released all slaves [ 787.220800][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.271948][ T9122] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 787.288761][ T9122] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 787.290300][ T9122] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 787.291400][ T9122] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 787.292408][ T9122] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 787.332035][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.387500][ T68] bond0 (unregistering): Released all slaves [ 787.956020][T10434] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 788.003437][T10434] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 788.071677][T10434] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 788.140699][T10434] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 788.482767][ T5809] Bluetooth: hci2: command tx timeout [ 789.357679][ T5809] Bluetooth: hci5: command tx timeout [ 789.903642][T10482] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 790.035222][T10482] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 790.107148][T10482] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 790.165791][T10482] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 790.273697][T10561] chnl_net:caif_netlink_parms(): no params data found [ 790.333964][T10564] chnl_net:caif_netlink_parms(): no params data found [ 790.536279][ T68] hsr_slave_0: left promiscuous mode [ 790.556152][ T5809] Bluetooth: hci2: command tx timeout [ 790.576158][ T68] hsr_slave_1: left promiscuous mode [ 790.576886][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.576904][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.638696][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.638723][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.796324][ T68] hsr_slave_0: left promiscuous mode [ 790.816206][ T68] hsr_slave_1: left promiscuous mode [ 790.816913][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.816931][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.870865][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.870892][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.038030][ T68] hsr_slave_0: left promiscuous mode [ 791.077790][ T68] hsr_slave_1: left promiscuous mode [ 791.078528][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.098526][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.256179][ T68] hsr_slave_0: left promiscuous mode [ 791.276045][ T68] hsr_slave_1: left promiscuous mode [ 791.276813][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.317770][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.436135][ T5809] Bluetooth: hci5: command tx timeout [ 791.476129][ T68] hsr_slave_0: left promiscuous mode [ 791.496180][ T68] hsr_slave_1: left promiscuous mode [ 791.496901][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.540840][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.618675][ T68] veth1_macvtap: left promiscuous mode [ 791.618750][ T68] veth0_macvtap: left promiscuous mode [ 791.618918][ T68] veth1_vlan: left promiscuous mode [ 791.619032][ T68] veth0_vlan: left promiscuous mode [ 791.767667][ T68] veth1_macvtap: left promiscuous mode [ 791.767795][ T68] veth0_macvtap: left promiscuous mode [ 791.767950][ T68] veth1_vlan: left promiscuous mode [ 791.768066][ T68] veth0_vlan: left promiscuous mode [ 792.606690][ T68] team0 (unregistering): Port device team_slave_1 removed [ 792.636013][ T5809] Bluetooth: hci2: command tx timeout [ 792.654809][ T68] team0 (unregistering): Port device team_slave_0 removed [ 793.246611][ T68] team0 (unregistering): Port device team_slave_1 removed [ 793.286635][ T68] team0 (unregistering): Port device team_slave_0 removed [ 793.516381][ T5809] Bluetooth: hci5: command tx timeout [ 793.717297][ T68] team0 (unregistering): Port device team_slave_1 removed [ 793.746910][ T68] team0 (unregistering): Port device team_slave_0 removed [ 794.143050][ T68] team0 (unregistering): Port device team_slave_1 removed [ 794.206893][ T68] team0 (unregistering): Port device team_slave_0 removed [ 794.596731][ T68] team0 (unregistering): Port device team_slave_1 removed [ 794.648749][ T68] team0 (unregistering): Port device team_slave_0 removed [ 794.715996][ T5809] Bluetooth: hci2: command tx timeout [ 794.973523][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.021998][T10561] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.022222][T10561] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.022446][T10561] bridge_slave_0: entered allmulticast mode [ 795.024068][T10561] bridge_slave_0: entered promiscuous mode [ 795.073097][T10561] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.073253][T10561] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.073446][T10561] bridge_slave_1: entered allmulticast mode [ 795.075082][T10561] bridge_slave_1: entered promiscuous mode [ 795.090529][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.090665][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.090853][T10564] bridge_slave_0: entered allmulticast mode [ 795.093445][T10564] bridge_slave_0: entered promiscuous mode [ 795.151627][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.151803][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.152014][T10564] bridge_slave_1: entered allmulticast mode [ 795.153873][T10564] bridge_slave_1: entered promiscuous mode [ 795.258588][T10561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.285490][T10561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.355703][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 795.387475][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 795.402236][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.445537][T10561] team0: Port device team_slave_0 added [ 795.502269][T10561] team0: Port device team_slave_1 added [ 795.504853][T10434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.510976][T10564] team0: Port device team_slave_0 added [ 795.537995][T10564] team0: Port device team_slave_1 added [ 795.596596][ T5809] Bluetooth: hci5: command tx timeout [ 795.810169][ T760] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.810308][ T760] bridge0: port 1(bridge_slave_0) entered forwarding state [ 795.843942][T10561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.843955][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.843971][T10561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.872161][T10561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.872179][T10561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.872203][T10561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.878182][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 795.878198][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.878222][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 795.884808][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.887989][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.930607][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 795.930624][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.930649][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 795.982624][T10434] 8021q: adding VLAN 0 to HW filter on device team0 [ 796.111326][T10561] hsr_slave_0: entered promiscuous mode [ 796.112904][T10561] hsr_slave_1: entered promiscuous mode [ 796.180555][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.180794][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.199330][T10564] hsr_slave_0: entered promiscuous mode [ 796.203182][T10564] hsr_slave_1: entered promiscuous mode [ 796.204127][T10564] debugfs: 'hsr0' already exists in 'hsr' [ 796.204150][T10564] Cannot create hsr debugfs directory [ 796.460826][ T1430] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.461069][ T1430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.963716][T10482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.422967][T10482] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.658379][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.659374][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.693814][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.693965][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.043768][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 798.543824][T10434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.270233][T10482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.590118][T10365] veth0_vlan: entered promiscuous mode [ 799.842475][T10365] veth1_vlan: entered promiscuous mode [ 800.196525][T10434] veth0_vlan: entered promiscuous mode [ 800.424770][T10434] veth1_vlan: entered promiscuous mode [ 800.450315][T10365] veth0_macvtap: entered promiscuous mode [ 800.509395][T10365] veth1_macvtap: entered promiscuous mode [ 800.762057][T10482] veth0_vlan: entered promiscuous mode [ 800.772818][T10561] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 800.816208][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 800.824458][T10561] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 800.860943][T10561] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 800.976391][T10561] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 801.009819][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 801.144932][T10434] veth0_macvtap: entered promiscuous mode [ 801.152638][T10482] veth1_vlan: entered promiscuous mode [ 801.174416][ T68] bridge_slave_1: left allmulticast mode [ 801.174448][ T68] bridge_slave_1: left promiscuous mode [ 801.174705][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.247019][ T68] bridge_slave_0: left allmulticast mode [ 801.247042][ T68] bridge_slave_0: left promiscuous mode [ 801.247220][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.312283][ T68] bridge_slave_1: left allmulticast mode [ 801.312306][ T68] bridge_slave_1: left promiscuous mode [ 801.312470][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 801.367007][ T68] bridge_slave_0: left allmulticast mode [ 801.367029][ T68] bridge_slave_0: left promiscuous mode [ 801.367205][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.767511][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.847624][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.908021][ T68] bond0 (unregistering): Released all slaves [ 802.276573][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.376765][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.438462][ T68] bond0 (unregistering): Released all slaves [ 802.473188][ T1430] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.486391][ T1430] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.487122][T10434] veth1_macvtap: entered promiscuous mode [ 802.533148][ T1430] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.561870][ T1430] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.572678][T10564] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 802.621957][T10564] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 802.717282][T10564] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 802.771523][T10564] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 802.930643][T10434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.079789][T10434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.238121][ T68] hsr_slave_0: left promiscuous mode [ 803.277214][ T68] hsr_slave_1: left promiscuous mode [ 803.278310][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.308476][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.466148][ T68] hsr_slave_0: left promiscuous mode [ 803.506105][ T68] hsr_slave_1: left promiscuous mode [ 803.507522][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.529563][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 803.948443][ T68] team0 (unregistering): Port device team_slave_1 removed [ 803.987176][ T68] team0 (unregistering): Port device team_slave_0 removed [ 804.386548][ T68] team0 (unregistering): Port device team_slave_1 removed [ 804.448119][ T68] team0 (unregistering): Port device team_slave_0 removed [ 804.699809][ T5963] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.732182][ T5963] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.736320][T10482] veth0_macvtap: entered promiscuous mode [ 804.753775][ T5963] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.772126][ T5963] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.775607][ T7650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.775628][ T7650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.783775][T10482] veth1_macvtap: entered promiscuous mode [ 805.095845][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.096434][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.125487][T10482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 805.191267][T10482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.238848][ T7650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.238872][ T7650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.261786][ T1360] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.265810][ T1360] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.267139][ T1360] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.267182][ T1360] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.315656][T10561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 805.445463][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.445480][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.462460][T10561] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.390067][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.390218][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.572726][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.572851][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.612918][T10564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.640788][ T1360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.640811][ T1360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.775246][T10564] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.796891][ T5963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.796925][ T5963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.869026][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.869572][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.974310][ T1360] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.974575][ T1360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 809.007040][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.007111][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.185066][T10561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 811.490950][T10564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 816.321192][T10561] veth0_vlan: entered promiscuous mode [ 816.430900][T10561] veth1_vlan: entered promiscuous mode [ 816.726138][T10564] veth0_vlan: entered promiscuous mode [ 816.820234][T10564] veth1_vlan: entered promiscuous mode [ 816.870161][T10561] veth0_macvtap: entered promiscuous mode [ 816.954686][T10561] veth1_macvtap: entered promiscuous mode [ 817.171986][T10561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.177129][T10564] veth0_macvtap: entered promiscuous mode [ 817.227057][T10561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.244392][T10564] veth1_macvtap: entered promiscuous mode [ 817.268333][ T7657] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.297462][ T7657] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.318449][ T7657] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.320343][ T7657] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.475513][T10564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 817.560855][T10564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 817.626107][ T9653] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 817.661474][ T69] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.667753][ T69] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.716761][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.741725][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 817.797857][ T9653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.797880][ T9653] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.797905][ T9653] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 817.797919][ T9653] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.801454][ T9653] usb 8-1: config 0 descriptor?? [ 817.869381][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.869494][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.232324][ T9653] hid_parser_main: 24 callbacks suppressed [ 818.232352][ T9653] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 818.232499][ T9653] cm6533_jd 0003:0D8C:0022.0005: unknown main item tag 0x0 [ 818.313331][ T9653] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:0D8C:0022.0005/input/input9 [ 818.395079][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.395102][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.476863][ T9653] cm6533_jd 0003:0D8C:0022.0005: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 818.622865][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.622887][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.716286][T10706] usb 8-1: USB disconnect, device number 2 [ 818.845372][ T7645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.845396][ T7645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 820.784725][T10777] fido_id[10777]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 823.626376][T10784] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1206'. [ 827.000101][T10821] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1212'. [ 828.980903][T10707] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 829.506022][T10707] usb 7-1: Using ep0 maxpacket: 16 [ 829.508867][T10707] usb 7-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 829.508898][T10707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.508898][T10707] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.514918][T10707] usb 7-1: config 0 descriptor?? [ 829.520806][T10707] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 829.546021][ T7650] ------------[ cut here ]------------ [ 829.546039][ T7650] in_task() && kcov_mode_enabled(mode) [ 829.546047][ T7650] WARNING: kernel/kcov.c:884 at kcov_remote_start+0x5d8/0x710, CPU#1: kworker/u8:18/7650 [ 829.546094][ T7650] Modules linked in: [ 829.546113][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 829.546136][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.546150][ T7650] Workqueue: events_unbound cfg80211_wiphy_work [ 829.546179][ T7650] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 829.546206][ T7650] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 829.546224][ T7650] RSP: 0018:ffffc9001c1a79d8 EFLAGS: 00010202 [ 829.546244][ T7650] RAX: 0000000000000002 RBX: ffff88805d539e80 RCX: 0000000000000000 [ 829.546260][ T7650] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 829.546275][ T7650] RBP: ffff88801ef63640 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 829.546290][ T7650] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff88805dc0dd08 [ 829.546306][ T7650] R13: ffff88805f9607c0 R14: 0000000000000000 R15: ffff88805dc0dd20 [ 829.546321][ T7650] FS: 0000000000000000(0000) GS:ffff88812643c000(0000) knlGS:0000000000000000 [ 829.546338][ T7650] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 829.546354][ T7650] CR2: 00007faf3993deb8 CR3: 000000003351c000 CR4: 00000000003526f0 [ 829.546376][ T7650] Call Trace: [ 829.546384][ T7650] [ 829.546400][ T7650] ieee80211_iface_work+0x211/0x1340 [ 829.546442][ T7650] cfg80211_wiphy_work+0x2ab/0x4a0 [ 829.546469][ T7650] ? process_scheduled_works+0xa8d/0x18c0 [ 829.546501][ T7650] process_scheduled_works+0xb6e/0x18c0 [ 829.546570][ T7650] ? __pfx_process_scheduled_works+0x10/0x10 [ 829.546628][ T7650] ? assign_work+0x3d5/0x5e0 [ 829.546666][ T7650] worker_thread+0xa53/0xfc0 [ 829.546756][ T7650] kthread+0x388/0x470 [ 829.546779][ T7650] ? __pfx_worker_thread+0x10/0x10 [ 829.546804][ T7650] ? __pfx_kthread+0x10/0x10 [ 829.546827][ T7650] ret_from_fork+0x51e/0xb90 [ 829.546857][ T7650] ? __pfx_ret_from_fork+0x10/0x10 [ 829.546881][ T7650] ? __switch_to+0xc7d/0x1450 [ 829.546910][ T7650] ? __pfx_kthread+0x10/0x10 [ 829.546932][ T7650] ret_from_fork_asm+0x1a/0x30 [ 829.546969][ T7650] [ 829.546980][ T7650] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 829.546995][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 829.547016][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 829.547028][ T7650] Workqueue: events_unbound cfg80211_wiphy_work [ 829.547051][ T7650] Call Trace: [ 829.547059][ T7650] [ 829.547066][ T7650] vpanic+0x56c/0xa60 [ 829.547095][ T7650] ? __pfx__printk+0x10/0x10 [ 829.547116][ T7650] ? __pfx_vpanic+0x10/0x10 [ 829.547141][ T7650] ? is_bpf_text_address+0x292/0x2b0 [ 829.547166][ T7650] ? is_bpf_text_address+0x26/0x2b0 [ 829.547201][ T7650] panic+0xc5/0xd0 [ 829.547227][ T7650] ? __pfx_panic+0x10/0x10 [ 829.547265][ T7650] ? ret_from_fork_asm+0x1a/0x30 [ 829.547290][ T7650] __warn+0x315/0x4f0 [ 829.547316][ T7650] ? kcov_remote_start+0x5d8/0x710 [ 829.547340][ T7650] ? kcov_remote_start+0x5d8/0x710 [ 829.547364][ T7650] __report_bug+0x29a/0x540 [ 829.547398][ T7650] ? kcov_remote_start+0x5d8/0x710 [ 829.547421][ T7650] ? __pfx___report_bug+0x10/0x10 [ 829.547450][ T7650] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.547475][ T7650] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 829.547502][ T7650] ? do_raw_spin_lock+0x12b/0x2f0 [ 829.547535][ T7650] ? kcov_remote_start+0x5d8/0x710 [ 829.547557][ T7650] report_bug+0x16a/0x220 [ 829.547583][ T7650] ? kcov_remote_start+0x5d8/0x710 [ 829.547603][ T7650] ? kcov_remote_start+0x5da/0x710 [ 829.547624][ T7650] handle_bug+0x9c/0x200 [ 829.547645][ T7650] exc_invalid_op+0x1a/0x50 [ 829.547665][ T7650] asm_exc_invalid_op+0x1a/0x20 [ 829.547685][ T7650] RIP: 0010:kcov_remote_start+0x5d8/0x710 [ 829.547707][ T7650] Code: 00 5b 41 5c 41 5d 41 5e 41 5f 5d e9 a2 7b d9 02 90 0f 0b 90 e9 62 fa ff ff 90 0f 0b 90 0f b7 83 c0 04 00 00 e9 a3 fa ff ff 90 <0f> 0b 90 eb 04 90 0f 0b 90 e8 fa 65 5e 09 89 c0 48 c7 c7 20 d4 4e [ 829.547723][ T7650] RSP: 0018:ffffc9001c1a79d8 EFLAGS: 00010202 [ 829.547747][ T7650] RAX: 0000000000000002 RBX: ffff88805d539e80 RCX: 0000000000000000 [ 829.547760][ T7650] RDX: 0000000000000000 RSI: ffffffff8ba666e0 RDI: ffffffff8ba666a0 [ 829.547774][ T7650] RBP: ffff88801ef63640 R08: ffffffff8b2521d0 R09: ffffffff8ddcb980 [ 829.547788][ T7650] R10: dffffc0000000000 R11: fffffbfff1ed4797 R12: ffff88805dc0dd08 [ 829.547802][ T7650] R13: ffff88805f9607c0 R14: 0000000000000000 R15: ffff88805dc0dd20 [ 829.547824][ T7650] ? rt_spin_lock+0x1e0/0x400 [ 829.547855][ T7650] ? kcov_remote_start+0xe0/0x710 [ 829.547881][ T7650] ieee80211_iface_work+0x211/0x1340 [ 829.547914][ T7650] cfg80211_wiphy_work+0x2ab/0x4a0 [ 829.547937][ T7650] ? process_scheduled_works+0xa8d/0x18c0 [ 829.547965][ T7650] process_scheduled_works+0xb6e/0x18c0 [ 829.548024][ T7650] ? __pfx_process_scheduled_works+0x10/0x10 [ 829.548058][ T7650] ? assign_work+0x3d5/0x5e0 [ 829.548091][ T7650] worker_thread+0xa53/0xfc0 [ 829.548147][ T7650] kthread+0x388/0x470 [ 829.548168][ T7650] ? __pfx_worker_thread+0x10/0x10 [ 829.548192][ T7650] ? __pfx_kthread+0x10/0x10 [ 829.548214][ T7650] ret_from_fork+0x51e/0xb90 [ 829.548243][ T7650] ? __pfx_ret_from_fork+0x10/0x10 [ 829.548268][ T7650] ? __switch_to+0xc7d/0x1450 [ 829.548295][ T7650] ? __pfx_kthread+0x10/0x10 [ 829.548318][ T7650] ret_from_fork_asm+0x1a/0x30 [ 829.548355][ T7650] [ 829.548807][ T7650] Kernel Offset: disabled