last executing test programs: 13m3.225182973s ago: executing program 0 (id=1): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 12m52.981545856s ago: executing program 2 (id=17): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_VERIFY(0x1c, 0x0, &(0x7f0000000080)={'enc=', 'oaep', ' hash=', {'blake2s-224-generic\x00'}}, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x109, 0x0, &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0x103, 0x194, &(0x7f0000000980)="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", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x50) 12m52.441158889s ago: executing program 2 (id=18): syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) close(0x3) 12m51.407632515s ago: executing program 2 (id=20): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) quotactl$Q_SETQUOTA(0xffffffff80000802, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) setrlimit(0xa, &(0x7f00000000c0)={0x100000001, 0x3}) mkdirat(0xffffffffffffff9c, 0x0, 0x10) mkdir(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80004}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r6, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x9, 0x58, 0x68, 0x0, 0x6, 0x2f, 0x0, @multicast2, @private=0xa010102}, {{}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x2, 0x3, 0x1, 0x0, 0x7, 0x80}, 0x1, {0x395}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x40, 0x3, 0x1, 0x0, 0x1, 0x8}, 0x2, {0xb, 0x40, 0x3, 0x11, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, &(0x7f0000000600)) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r8, @ANYBLOB="31838016001110f1aac41d54fa5cd9216e903108eea6f3d41f7e15b8543a5d3e7802537e736f87af94dd62ff481f73089c"], 0x14}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 12m48.023550728s ago: executing program 32 (id=9): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = fanotify_init(0x8, 0x80000) write$binfmt_elf64(r1, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c"], 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) lchown(0x0, 0xee00, 0xee00) fcntl$setlease(r0, 0x400, 0x1000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFULA_CFG_CMD={0x0, 0x1, 0x1}]}, 0xfeb3}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 12m47.843080658s ago: executing program 2 (id=23): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x38}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a320000000005000100070000004fb4cd9cd66676c4fe30f694b1a3183070d114a45d6cc77fed38fbc2e41816cd0f2c6679adbca7883fb2a4c7286f039d47a0a810a526ff48d98907a10f2097"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) 12m47.454691531s ago: executing program 33 (id=1): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) open(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x560a, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000700)={{0x0, 0x1}, {0xf, 0x2f}, 0x40}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000024882, 0x0) r9 = dup(r8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r9, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r7, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 12m47.032159137s ago: executing program 34 (id=10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xfffdfffe, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[@ANYBLOB="4325d5e72dd89037"], 0x8) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc000) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) 12m46.990836521s ago: executing program 2 (id=27): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a60800000f00510066b87a000f02d86161300f300fc79d53bf0000c4b961edc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x6a3, 0xccd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfe, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}}}}]}}]}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12m39.874065143s ago: executing program 2 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r3 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r2, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 12m21.864058464s ago: executing program 35 (id=31): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x40900, 0x0) r3 = syz_io_uring_setup(0x494, &(0x7f0000000180)={0x0, 0x191d, 0x8, 0x8000, 0x40000250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x0, @fd=r2, 0x8006, &(0x7f0000000300)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x4be7, 0x4c3, 0x43, 0x0, 0x0) 10m50.136142817s ago: executing program 5 (id=22): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@private2, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00'], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000004, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x12080) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81], 0x5}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) read(r0, 0x0, 0x0) 10m33.748721865s ago: executing program 36 (id=22): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x25dfdbfe, {{@in6=@private0={0xfc, 0x0, '\x00', 0x40}, @in6=@private2, 0x0, 0x400, 0x0, 0x0, 0xa, 0x60, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00\x00\x00'], 0x50) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0xd) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x30) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000240)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000004, 0xfa11, 0xffffffff}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r2 = syz_open_dev$dri(0x0, 0x0, 0x12080) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000000) ioctl$FS_IOC_READ_VERITY_METADATA(0xffffffffffffffff, 0xc0286687, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r4, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4096, 0x1e67}, {&(0x7f00000000c0)=""/250, 0x4}], 0x2, 0x0, 0xd64}}], 0x300, 0x34000, 0x0) r5 = syz_open_dev$vbi(&(0x7f0000000200), 0x1, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r5, 0xc0745645, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x400, 0x0, 0x4, 0x0, 0x0, 0x638, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81], 0x5}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="a787000000ff000000000b00000404000180"], 0x18}}, 0x0) read(r0, 0x0, 0x0) 10m15.564528616s ago: executing program 8 (id=99): socket(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000001c000180060001000200000008000300ac1414aa0800060006"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x6f6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, 0x0, 0x8) 10m15.075778021s ago: executing program 8 (id=100): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10m14.278749208s ago: executing program 8 (id=101): syz_open_dev$MSR(0x0, 0x104, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20280, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) setresuid(0x0, 0xee01, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) 10m13.845950581s ago: executing program 8 (id=102): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e23, @loopback}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000200)={r3, 0x4}, 0x8) 10m13.246979711s ago: executing program 8 (id=104): socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffdffffffffff, 0xfa11, 0xffffffff}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002bbd70000e001000540000"], 0x14}, 0x1, 0x0, 0x0, 0x20000850}, 0x4000000) close(r2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioprio_set$pid(0x2, 0x0, 0x2007) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sg(0x0, 0x5dc, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_uring_setup(0x1684, 0x0) syz_open_dev$vim2m(0x0, 0x8, 0x2) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) accept4(r4, 0x0, 0x0, 0x800) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x3, 0x0, 0x3fc, 0x7, 0x32}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 10m3.235220767s ago: executing program 8 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x6fd3041c41726615, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) 9m46.657487539s ago: executing program 37 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r3, 0x6fd3041c41726615, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) 6m18.386869931s ago: executing program 1 (id=242): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a0", 0x4}], 0x1}, 0x9fc) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 6m15.543771547s ago: executing program 1 (id=247): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m14.76591729s ago: executing program 1 (id=249): eventfd2(0x4, 0x80000) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x27, 0x4c, 0x3, 0x40, 0x5ab, 0x60, 0x1106, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0xd, 0x0, 0x0, [{{0x9, 0x4, 0xa8, 0x0, 0x0, 0xf4, 0x7, 0x50}}]}}]}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 6m10.889280375s ago: executing program 1 (id=255): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x0, 0xfffffffe}, 0xc) r4 = syz_genetlink_get_family_id$smc(&(0x7f00000000c0), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r4, 0x6fd3041c41726615, 0x70bd28, 0x25dfdbfc, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc001}, 0x20000000) 6m7.215414129s ago: executing program 1 (id=261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) userfaultfd(0x80801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) 6m3.974603126s ago: executing program 1 (id=265): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x410040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5m48.314280149s ago: executing program 38 (id=265): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) gettid() r0 = syz_io_uring_complete(0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000340)={0x0, @reserved}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x410040, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0xb}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x6000, @fd=r7, 0xffffffffffffffff, &(0x7f00000006c0)=""/210, 0xd2, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5m37.506370267s ago: executing program 4 (id=304): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) fsopen(&(0x7f0000000140)='ext3\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pipe(&(0x7f0000000080)) pipe2$9p(&(0x7f0000000140), 0x800) creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r0, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 5m33.181673627s ago: executing program 4 (id=306): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x0, 0x14, 0x6, "aed68236a406"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 5m28.286145341s ago: executing program 4 (id=315): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xfffffffa) r1 = epoll_create(0x4000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001cc0)={0xc}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r2 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r2, 0x5423, 0x0) 5m27.715525943s ago: executing program 4 (id=318): socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 5m22.695267998s ago: executing program 4 (id=321): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x14, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x61e0, 0x0) 5m21.495300354s ago: executing program 4 (id=325): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$netlink(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 5m5.56026776s ago: executing program 39 (id=325): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x42000, 0x10) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x373}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) socket$netlink(0x10, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 3m41.449317161s ago: executing program 6 (id=405): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/snmp\x00') bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, r1, 0x26, 0x0, @void}, 0x10) 3m40.7056916s ago: executing program 6 (id=406): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendto$packet(r1, &(0x7f0000000080)="a99c383d33c9c607b1b9d49688a883", 0xf, 0x0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x10022, 0x0) 3m39.501920515s ago: executing program 6 (id=407): pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) ptrace$ARCH_SHSTK_LOCK(0x1e, r1, 0x0, 0x5003) socket$packet(0x11, 0x3, 0x300) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000280)=0xc) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r7, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r8, 0x4e, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, &(0x7f0000000440)) socket$netlink(0x10, 0x3, 0x0) 3m35.627691789s ago: executing program 6 (id=408): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e24, @loopback}}, 0x0, 0x0, 0x2d, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46f672f2a7a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308f3d40aa1c788df6"}, 0xd8) shutdown(0xffffffffffffffff, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x4, 0x4, 0x21, 0x1, 0x8}, &(0x7f0000000040)=0x9c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000080)=0xfffffffa) r3 = epoll_create(0x4000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000001cc0)={0xc}) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x0, 0x4, 0x0, "00769a7d8200010000001495595915303d6000"}) r4 = syz_open_pts(r2, 0x8000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x2) ioprio_set$pid(0x2, 0x0, 0x4000) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000000)='id_legacy\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000f80)='encrypted\x00', &(0x7f0000000fc0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x6000050) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x35) 3m30.582708327s ago: executing program 6 (id=409): landlock_create_ruleset(&(0x7f00000002c0)={0x9, 0x0, 0x6}, 0xc1c4429bc5563d46, 0x0) 3m29.793898543s ago: executing program 6 (id=410): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m13.819200004s ago: executing program 40 (id=410): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x80002, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000900)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0xe9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 29.663172425s ago: executing program 3 (id=532): write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000900)={0x667, 0x7d, 0x0, {{0x500, 0x2b5, 0x0, 0x0, {0x4}, 0x0, 0x0, 0xffffffff, 0x0, 0x2e, '\x04nodZ=\xbfd\x027\xfcb%\xff\xff\xff\x80\x05\x00\x00\x00\x00\x00\x00\xff\x03\xff\x92\xe9\x16\x00\x05\x9beq,\x93\xcb=\xb6\xc21\xd1\x19\xaa\xa1', 0x9a, 'p\x02\x00}\xfag>\xff\xeb\t\xb55\x1f\x9e\xde\x05J\x00\x00\x00\x00\x18{\x82\xd9\xb5i(\xfb\xbf\v\x00\x00+Y_\xcb\x14\xa8\xf3\x0e&\xe5&\xab\xc1\x80jB\xdez\xdc\x81\x06\xb4\x94\xe1\x8d\xb5\x7f\xc1\xac\x8d\x06\x85\x95\xf0\x1c\x1c\xbe\x05\xc2v\x16/\x81\xb4\a\xe5\r\xb6\x939g!\xf3\xed\x9c\xe2\x01\x9e\xe6\xa9F\xe3\xa5Z\x1b@\xee\xb9:\xc2\x9f7[Z\xfd\xf1\xdf\x11,\x9a\xaf\xd3i\x94\xe1e\xb3:\xf7\x86\xc54\x05\x87]7\xa0E\"\x17\x8b7P\x9es\xc7\x02_\xc4\x13\xc7\xd1*\x80\x86?p#hf\x8d', 0x35, '\xcf`7-a\xcc\xea\xb8\xc8\x86A\xeb\x93\xb4\xcc\xf6\x00*\xb8{\xfc\x01\'\x96\t?h0\\M\"(9\xe4F\x1a\xb6*\xeb\x84\x1f \x83~\x01\b\xe2\xe7HP\x1cQH', 0x185, '\xf8\xf6i\xfbqm\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xdb\x80\xe8\xd4\a\x00\x00\x007\x00\x87\x0fFB\xe4\xc5\xde\x87\x14\xa2\xb0\x84L#E\xd8\xdfI\xd7\x00\xef\xc4R\xaf\xb5F\x9e\xaa\xd2\xc8\x85z5$F\xae+N\xa7\b\xfa\"\xc6\xdeH\x82\xe3FAQ\xdfC\xbeZ\'\x9a\x95\xf2\xa9\x00\x17D\xa9tSXF\xe1>-\f\xb4\x9eJ\x0f\xa1u3C\xb8\xa3\xc0\xaf\xca\xe6,\xc4)\xc0\xec}dT\x00\x00B\x8dX\x9du\x9fa~\xa1\x95\"\xc6/\x19$\x80\x11\x9b(\x01\xc9\xc1\x04\x14\x05`\xf2\r8Y\n\x81\x98*\x94\x90\xb3\x95\xe9\x00t\v\xdc\x1a\xb08w&A\x9b\xff\xd5\xc7s}L*\x17\xb9/\x18\xed\xc9\x9c\x10\x99\xe4\x0f\x13\xd8(\x04\x9f<[:\x7f\xe00\xd9\xc7\x8a\xea\x99\x03\xaf\x14#U\xf5I\xab\xb3\xf7\xb4\v\xb0\x10\"+O\xed\xec\xd3\x0e\xa3\x9e\xc49fG\"a\xb0\xd5\xabe\x14Cj\xc3\xb9pn\x01\xeb\xfe^\v\xb34w\xd1\xcfx\xe0l\\\xd5\x83\xa4\x9b3jV\xba\xb25\x90\xba\x87\x0f\xc2Et\xbf\xf1\x8c\xb5\x81\x92\xdet%>\xde\xab\xcc\n\x02\xcd\xc7\xd4>\xc4\x84\x88\x0e\xa7\xfb\xc4\x80e\"\xc7\x8e\x1f\xa7\x06\xda\x87\b\xeaQ~\\\x8b_*\x10w\xf6\xf6\xf3\xdd`\xfd\xf9B\"\xe9\xa2g/\x80:'}, 0x39d, 'odev/n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\fA\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaau\xf8$k\xccB\xea\xa8\xc61\xc0\xc5\x00\x95\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xc0\xfbNL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12.a\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xc2\x00\x00\x000\xe4\xee+\xfc\x7f\x80P\x85\x11C\xe5\x16\x1a\xcdG\x15\n\xcb\xaft8\"\xdf\xe2\x03\xb1\b\xd3~\x91M\xc1\xe5>#LP\x9e\xcaA\a\xa1q,\xaa\x9d\xa5=\x05\x1c6\x88Ly\x18&a\xf3\xca6\xbc\xdb\xfb\xbd&q\t\xf81\x9d\x8d\xd5\xc0p\x99\xeb\x1b\x11\x03\x06U\xf5biOat=\x19B\x1bJ\x19\xef\x8b\x8bL\xe9\xc9\x93\xc7\xd6\xcb0\fNezNP\xa3[\\\xc1k\x8c\x16\x1a\x8e=\xf9\x03k\xbc\xf2\x8a\xdc\xd1\x9alL)\x17\t\xae\xe5\xab>[\xc5\xae)\xf4u\xe4\xd2D\b\xb5\x16}\x0f\xaf_\xc1Vkp\\\x8b`\xaf\xa8\xac\xa4/~\x04i\x18\x8a\x0e\xf0b\xca\x18\xe3\x8f\x9e\xe1\n\xc7}+~\xb9\xd6\x0e\xa7\x9f\xdbUd\x11\xe5\x9d\xfb\xd8\xdb\xb8\xa2\xa6b.\xbc\xf8Lio\xa4\xda!\xba\xd22\r\rh\xe9\xbfCF\xf0ha\x19\xa3\x9e@\x03\x95\xc8\xf2\x82^\xa0i\xae\x0e\x14;\xd1\xa4Ay\xed\x8e<\xea\v^\x9a\x19\xcc\x7f\xfaP\x0f\xa4\x1bl\x80I\xbd\xe4X\'\xd5N\xc9\x01\xd2z\xd1%\x05h\x89\xb33k?\x06\x83\x8c[fz\xe2.\xfe;\xc1[\x82_\x7f\xbc\xe4\x80\'(\x1c\xf9\xfe\x8f\xc2\x1f\xc7|$=\xe2g\x051\x0e\xb8\x1c\xf7M\xe0)1\x92\xa1?j\xd0W\xdea\xfd\x8a\xba\x8e\xf4C\x9b\xc0jE\xb2\xb01bQZ#C:\xfe\xb5*\xed\xb5\xabo3FS8\x05\x15\xf7y\xf3]\xc8\xa7\x8c7w$\x92\xa2(L!\xd2\x13V\xd4s\xf0\x0f\x85\x13|{\xf0cou}5(\x86\x9b?\x00w5\xcf\xf8\\\x9d\x97\x8b\xf5]\xcc&\xd6-%\xe3\b\xf0\x88\'\xa9\x1f\xf4{\xec\x92\xf8\xe9\x1ey\bfT\x00\xaaN9\xb3Y\x86#\x9d\\{\x94\x92\xc5\xbb&\xbcU\xb5[I\xedpHnn}\xa3\x8c \x84P\xf9\xf7\x9e\x1bA\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xae-[\\\x99\xf7\x17\xf0\xa0wI#\x9b]\b\xf8\xc5\xc0\xadyQ\xe0\xa7\xc7\xf3\xdb\x8d\xfd?\x86W%\x8al\x04\xf3-W\xad(s\xdeE\xfa\x98\xb0\xf8&y\x17\xff\x9b\xbe\x9c\rt\xa5\xac\xa2\x06\xfe)\xe0\xc1\x03\x9f\"U<\'GB]\x83\x100x.\xe7\x8f\x8b\xa3]\xe3\x18\xc5?\tO\x92\\\xc9x.\x94\xb6\xc8p\xa4\x87g\x8b\xfa\xe7E\xdf\xf2h\xbd\xa7\xfd\xec\x87<\xe4\xfbK\x8d\xcb\xa0A\x9b0D\x9a\xdf\xefrAb\xbf\xb1\n\xaf\xcf\xeaH\xa6\x7f\xaew3\xcc:\x7f\x1e\xef\x91\xbeR\x85!^\xabA\xf6', 0xffffffffffffffff}}, 0x667) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee200"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[]) 26.740131438s ago: executing program 3 (id=533): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) pipe2$9p(0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 22.61980945s ago: executing program 3 (id=534): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0x5ee}], 0x1}, 0x0) 19.727968361s ago: executing program 3 (id=535): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x6, 0x0, 0xfffffe0000000001, 0xa713, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket(0x1e, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r3, &(0x7f0000000700)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f00000019c0)=""/4096, 0x1000}, {&(0x7f0000000240)=""/18, 0x12}, {&(0x7f0000000400)=""/98, 0x62}, {&(0x7f0000000480)=""/37, 0x25}, {0x0}, {&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000800)=""/192, 0xc0}], 0x9) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)=ANY=[@ANYBLOB="18000000420007010000f9fffbdbdf25017c000004"], 0x18}}, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x2000, 0x3, 0x4, 0x0, 0xd, {}, {0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, "9e2bba01"}, 0x0, 0x1, {0x0}}) 9.476824489s ago: executing program 3 (id=542): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x0, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x15, 0x2, 0x0, "11010000001400000100b64c0000000f4cb85200000400", 0x64737664}) 8.940352039s ago: executing program 3 (id=543): socket$netlink(0x10, 0x3, 0x7) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r2, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r3 = fsopen(&(0x7f0000000600)='devpts\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x1) fchdir(r4) r5 = open(&(0x7f0000000080)='.\x00', 0x480, 0x0) fremovexattr(r5, &(0x7f0000000000)=@known='user.syz\x00') r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r6, r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8, r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r8}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 8.008732855s ago: executing program 9 (id=544): openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10b200, 0x0) r0 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x20, 0x0) read$midi(r0, &(0x7f0000001200)=""/238, 0xee) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) geteuid() execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000001fc0)=""/209, 0xd1}], 0x1) 6.549601273s ago: executing program 9 (id=545): unshare(0xc020680) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r0, 0xff, 0x1, 0x0, &(0x7f00000002c0)=0xfffffffffffffecd) 5.90793424s ago: executing program 9 (id=546): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r3, 0x1000006) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) fcntl$addseals(r3, 0x409, 0x7) socket(0x11, 0xa, 0x5) r4 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r4, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010101, 0x2}, 0x10) shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000000)=""/235) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r5, 0x0, 0xfffd, 0xa00, 0x0, 0x2}]) socket(0x10, 0x803, 0x0) 2.761411766s ago: executing program 9 (id=547): syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x2, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 523.940449ms ago: executing program 9 (id=548): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8002, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x8000b, 0x7f, 0x20000006, 0x4d, 0x6, 0x2000005f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x8, 0x3, 0x5e00, 0x1, 0x24, 0x1, 0x0, 0x3c5b, 0x1, 0x21, 0x6, 0x1, 0x5, 0x200, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c76, 0x80000000, 0x40000, 0x4, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000003, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc0, 0xf9, 0x800, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x1, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x8, 0x6, 0x0, 0x5, 0x4000001, 0x1000005, 0x5f31, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x8, 0x20009, 0x9, 0x9, 0x9, 0x47, 0x8000, 0x4001, 0xfe000000, 0xffff, 0xfffffffb, 0x7, 0x9, 0x5, 0x3, 0x4, 0x9b, 0x3, 0x7, 0xbc45, 0x48c93690, 0x42, 0x3], [0x3, 0x408, 0x8004, 0x0, 0xfffffffe, 0x100, 0x8d2, 0x89, 0x5, 0x7fff, 0x0, 0x1ff, 0xb, 0x8, 0x9, 0x5, 0x4, 0x4a61eab3, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x2000000a, 0x4, 0x6d03, 0x6, 0x1, 0x800003, 0x1fd, 0x7b, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x5, 0xac8, 0x2000af, 0x2, 0x3, 0x800, 0x12e, 0x4, 0x1, 0x0, 0x7, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x6, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x8, 0x9, 0x3, 0x58, 0x451, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x5, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x4, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0x5, 0x9, 0xffffefff, 0x10003, 0x3, 0x7e, 0xfd, 0x9602, 0x7, 0x5, 0x7, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x8d67, 0x5, 0xf3e, 0x9, 0x1, 0xffd, 0xfffffffd, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="c40000001300e99926bd700000000000fe8000000000000000000000000000aae000000100000000000000000000000000000000000000010a0000100c000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000010100000000000c0008"], 0xc4}}, 0x0) 0s ago: executing program 9 (id=549): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb80393884d01a507, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x8001, 0x0, 0x2, 0x7, 0xfffffe0001000001, 0xfa11, 0xffffffff}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r3, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_clone3(&(0x7f0000001780)={0x40208200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) kernel console output (not intermixed with test programs): im0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 709.272164][ T5838] usb 10-1: config 0 has an invalid interface number: 41 but max is 0 [ 709.280844][ T5838] usb 10-1: config 0 has no interface number 0 [ 709.307419][ T5838] usb 10-1: config 0 interface 41 has no altsetting 0 [ 709.374640][ T5838] usb 10-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 709.385197][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.394207][ T5838] usb 10-1: Product: syz [ 709.399315][ T5838] usb 10-1: Manufacturer: syz [ 709.404186][ T5838] usb 10-1: SerialNumber: syz [ 709.417695][ T8150] syzkaller0: entered promiscuous mode [ 709.423531][ T8150] syzkaller0: entered allmulticast mode [ 709.460390][ T5838] usb 10-1: config 0 descriptor?? [ 709.584554][ T8144] tipc: Resetting bearer [ 709.725634][ T8140] tipc: Resetting bearer [ 709.807281][ T8140] tipc: Disabling bearer [ 710.351931][ T5838] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 710.507269][ T8018] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.514857][ T8018] bridge0: port 1(bridge_slave_0) entered disabled state [ 710.627368][ T8018] bridge_slave_0: entered allmulticast mode [ 710.667403][ T8018] bridge_slave_0: entered promiscuous mode [ 710.836156][ T8018] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.844684][ T8018] bridge0: port 2(bridge_slave_1) entered disabled state [ 710.964888][ T8018] bridge_slave_1: entered allmulticast mode [ 710.975720][ T8018] bridge_slave_1: entered promiscuous mode [ 711.186889][ T5786] Bluetooth: hci3: command tx timeout [ 711.276530][ T7922] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 711.342525][ T7922] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 711.460925][ T5838] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 711.472441][ T5838] CoreChips 10-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 711.530233][ T5838] CoreChips 10-1:0.41: probe with driver CoreChips failed with error -71 [ 711.712778][ T5838] usb 10-1: USB disconnect, device number 5 [ 711.867025][ T7922] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 712.015480][ T7922] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 712.455026][ T8018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.711721][ T8018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.263687][ T5786] Bluetooth: hci3: command tx timeout [ 713.600272][ T8018] team0: Port device team_slave_0 added [ 713.620247][ T149] bridge_slave_1: left allmulticast mode [ 713.626148][ T149] bridge_slave_1: left promiscuous mode [ 713.633556][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.741901][ T149] bridge_slave_0: left allmulticast mode [ 713.748040][ T149] bridge_slave_0: left promiscuous mode [ 713.754735][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 715.536933][ T5786] Bluetooth: hci3: command tx timeout [ 717.447117][ T5838] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 717.595872][ T5786] Bluetooth: hci3: command tx timeout [ 717.616904][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 717.647670][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.659276][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.673181][ T5838] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 717.683231][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.755948][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 717.819617][ T5838] usb 7-1: config 0 descriptor?? [ 717.853095][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 717.924945][ T149] bond0 (unregistering): Released all slaves [ 718.053957][ T8018] team0: Port device team_slave_1 added [ 718.333706][ T5838] usbhid 7-1:0.0: can't add hid device: -71 [ 718.340653][ T5838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 718.457376][ T5838] usb 7-1: USB disconnect, device number 9 [ 718.676899][ T7343] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 718.775177][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.782682][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.813824][ T8018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.917453][ T149] hsr_slave_0: left promiscuous mode [ 718.931459][ T149] hsr_slave_1: left promiscuous mode [ 718.942341][ T7343] usb 10-1: config 160 has an invalid interface number: 200 but max is 0 [ 718.951331][ T7343] usb 10-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 718.962519][ T7343] usb 10-1: config 160 has no interface number 0 [ 718.989082][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 719.000620][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 719.027243][ T7343] usb 10-1: config 160 interface 200 has no altsetting 0 [ 719.054578][ T7343] usb 10-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 719.064788][ T7343] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.073401][ T7343] usb 10-1: Product: syz [ 719.078023][ T7343] usb 10-1: Manufacturer: syz [ 719.082936][ T7343] usb 10-1: SerialNumber: syz [ 719.088459][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 719.099661][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 719.147402][ T149] veth1_macvtap: left promiscuous mode [ 719.153174][ T149] veth0_macvtap: left promiscuous mode [ 719.174066][ T149] veth1_vlan: left promiscuous mode [ 719.180089][ T149] veth0_vlan: left promiscuous mode [ 719.501794][ T7343] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 719.547042][ T7343] usb 10-1: MIDIStreaming interface descriptor not found [ 719.740201][ T7343] usb 10-1: USB disconnect, device number 6 [ 720.078481][ T7566] udevd[7566]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.978903][ T149] team0 (unregistering): Port device team_slave_1 removed [ 721.034313][ T149] team0 (unregistering): Port device team_slave_0 removed [ 724.123360][ T8018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 724.131975][ T8018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 724.161153][ T8018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.309350][ T5835] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 725.430314][ T8018] hsr_slave_0: entered promiscuous mode [ 725.463729][ T8018] hsr_slave_1: entered promiscuous mode [ 725.526819][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 725.562970][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 725.574437][ T5835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 725.585073][ T5835] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 725.594573][ T5835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.765650][ T5835] usb 7-1: config 0 descriptor?? [ 726.094794][ T149] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 726.436260][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 726.445161][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 726.540165][ T8147] chnl_net:caif_netlink_parms(): no params data found [ 726.915232][ T149] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.350185][ T8241] lec:lec_atm_close: lec0: Shut down! [ 727.464774][ T5835] usbhid 7-1:0.0: can't add hid device: -71 [ 727.471761][ T5835] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 727.533121][ T149] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.560511][ T5835] usb 7-1: USB disconnect, device number 10 [ 727.568315][ T5784] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 727.579414][ T5784] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 727.590067][ T5784] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 727.613021][ T5784] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 727.623502][ T5784] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 728.174507][ T149] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.737190][ T5784] Bluetooth: hci4: command tx timeout [ 730.620952][ T5838] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 730.807765][ T5838] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 730.816652][ T5838] usb 7-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 730.827868][ T5838] usb 7-1: config 160 has no interface number 0 [ 730.882531][ T5838] usb 7-1: config 160 interface 200 has no altsetting 0 [ 730.919489][ T5838] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 730.928972][ T5838] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.937863][ T5838] usb 7-1: Product: syz [ 730.942155][ T5838] usb 7-1: Manufacturer: syz [ 730.947324][ T5838] usb 7-1: SerialNumber: syz [ 730.978913][ T8147] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.986702][ T8147] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.043315][ T8147] bridge_slave_0: entered allmulticast mode [ 731.087838][ T8147] bridge_slave_0: entered promiscuous mode [ 731.112170][ T8147] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.120285][ T8147] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.135917][ T8147] bridge_slave_1: entered allmulticast mode [ 731.151436][ T8147] bridge_slave_1: entered promiscuous mode [ 731.372086][ T5838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 731.428566][ T5838] usb 7-1: MIDIStreaming interface descriptor not found [ 731.627508][ T5838] usb 7-1: USB disconnect, device number 11 [ 731.707593][ T149] bridge_slave_1: left allmulticast mode [ 731.713501][ T149] bridge_slave_1: left promiscuous mode [ 731.720668][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 731.817160][ T5784] Bluetooth: hci4: command tx timeout [ 731.949826][ T8279] udevd[8279]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 731.959191][ T149] bridge_slave_0: left allmulticast mode [ 731.972649][ T149] bridge_slave_0: left promiscuous mode [ 731.980140][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.511691][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 733.590574][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 733.670024][ T149] bond0 (unregistering): Released all slaves [ 733.897357][ T5784] Bluetooth: hci4: command tx timeout [ 734.093394][ T8147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.976593][ T5784] Bluetooth: hci4: command tx timeout [ 736.563540][ T8147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.204825][ T149] hsr_slave_0: left promiscuous mode [ 737.234364][ T149] hsr_slave_1: left promiscuous mode [ 737.246258][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.254189][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.273764][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.283301][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 737.337165][ T149] veth1_macvtap: left promiscuous mode [ 737.342984][ T149] veth0_macvtap: left promiscuous mode [ 737.352389][ T149] veth1_vlan: left promiscuous mode [ 737.358302][ T149] veth0_vlan: left promiscuous mode [ 738.226243][ T5838] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 738.436995][ T5838] usb 7-1: Using ep0 maxpacket: 32 [ 738.497180][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 738.508939][ T5838] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 738.519414][ T5838] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 738.529072][ T5838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.633888][ T5838] usb 7-1: config 0 descriptor?? [ 738.767087][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 738.785294][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 738.829458][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 738.861779][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 738.874751][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 739.120358][ T149] team0 (unregistering): Port device team_slave_1 removed [ 739.207795][ T149] team0 (unregistering): Port device team_slave_0 removed [ 739.340474][ T8310] lec:lec_atm_close: lec0: Shut down! [ 739.376969][ T5838] usbhid 7-1:0.0: can't add hid device: -71 [ 739.383660][ T5838] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 739.442937][ T5838] usb 7-1: USB disconnect, device number 12 [ 739.667241][ T6526] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 739.895351][ T6526] usb 10-1: config 160 has an invalid interface number: 200 but max is 0 [ 739.904548][ T6526] usb 10-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 739.915644][ T6526] usb 10-1: config 160 has no interface number 0 [ 739.936506][ T8147] team0: Port device team_slave_0 added [ 739.944598][ T5835] infiniband syz0: ib_query_port failed (-19) [ 739.996696][ T6526] usb 10-1: config 160 interface 200 has no altsetting 0 [ 740.025815][ T8147] team0: Port device team_slave_1 added [ 740.092428][ T6526] usb 10-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 740.102034][ T6526] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.110632][ T6526] usb 10-1: Product: syz [ 740.115171][ T6526] usb 10-1: Manufacturer: syz [ 740.120178][ T6526] usb 10-1: SerialNumber: syz [ 740.444007][ T8257] chnl_net:caif_netlink_parms(): no params data found [ 740.538195][ T6526] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 740.565615][ T6526] usb 10-1: MIDIStreaming interface descriptor not found [ 740.718937][ T6526] usb 10-1: USB disconnect, device number 7 [ 740.936669][ T5786] Bluetooth: hci5: command tx timeout [ 741.201574][ T8260] udevd[8260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.289364][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 741.296887][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.327368][ T8147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 741.498967][ T8147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 741.506169][ T8147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 741.535879][ T8147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 743.017012][ T5786] Bluetooth: hci5: command tx timeout [ 744.800917][ T8147] hsr_slave_0: entered promiscuous mode [ 744.840526][ T8147] hsr_slave_1: entered promiscuous mode [ 744.888303][ T8147] debugfs: 'hsr0' already exists in 'hsr' [ 744.894186][ T8147] Cannot create hsr debugfs directory [ 745.098759][ T5786] Bluetooth: hci5: command tx timeout [ 745.121469][ T5786] Bluetooth: hci1: unexpected event for opcode 0x200f [ 745.604415][ T8257] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.612220][ T8257] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.646098][ T8257] bridge_slave_0: entered allmulticast mode [ 745.666821][ T8257] bridge_slave_0: entered promiscuous mode [ 745.686060][ T8257] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.693975][ T8257] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.704635][ T8257] bridge_slave_1: entered allmulticast mode [ 745.715970][ T8257] bridge_slave_1: entered promiscuous mode [ 745.793868][ T10] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 746.030182][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 746.081850][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 746.093324][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 746.104031][ T10] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 746.113439][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.198995][ T10] usb 7-1: config 0 descriptor?? [ 746.221415][ T5838] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 746.451393][ T5838] usb 10-1: config 160 has an invalid interface number: 200 but max is 0 [ 746.460551][ T5838] usb 10-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 746.471447][ T5838] usb 10-1: config 160 has no interface number 0 [ 746.495845][ T8257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.524449][ T5838] usb 10-1: config 160 interface 200 has no altsetting 0 [ 746.567264][ T5838] usb 10-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 746.577593][ T5838] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.585925][ T5838] usb 10-1: Product: syz [ 746.590774][ T5838] usb 10-1: Manufacturer: syz [ 746.595760][ T5838] usb 10-1: SerialNumber: syz [ 746.725790][ T8257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.882278][ T8358] lec:lec_atm_close: lec0: Shut down! [ 746.908453][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 746.915126][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 746.986308][ T10] usb 7-1: USB disconnect, device number 13 [ 747.006318][ T5838] usb 10-1: Quirk or no altset; falling back to MIDI 1.0 [ 747.025054][ T5838] usb 10-1: MIDIStreaming interface descriptor not found [ 747.144288][ T8257] team0: Port device team_slave_0 added [ 747.177551][ T5786] Bluetooth: hci5: command tx timeout [ 747.238325][ T5838] usb 10-1: USB disconnect, device number 8 [ 747.401635][ T8257] team0: Port device team_slave_1 added [ 747.547560][ T8260] udevd[8260]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 748.042214][ T8381] loop6: detected capacity change from 0 to 2640 [ 748.053525][ T8381] buffer_io_error: 11 callbacks suppressed [ 748.053609][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.081466][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.090695][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.153771][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.187302][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.220687][ T8379] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.229278][ T8383] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.261802][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.315046][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.343825][ T8381] Buffer I/O error on dev loop6, logical block 0, async page read [ 748.352382][ T8381] ldm_validate_partition_table(): Disk read failed. [ 748.377709][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.388182][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.416097][ T8257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.428536][ T8381] Dev loop6: unable to read RDB block 0 [ 748.478133][ T8381] loop6: unable to read partition table [ 748.514628][ T8257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 748.522061][ T8257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 748.548857][ T8257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 748.632509][ T8381] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 749.058417][ T8317] chnl_net:caif_netlink_parms(): no params data found [ 749.191633][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 749.203806][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 749.212931][ T5786] Bluetooth: hci1: hardware error 0x00 [ 749.486807][ T7363] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 749.632067][ T6094] bridge_slave_1: left allmulticast mode [ 749.638416][ T6094] bridge_slave_1: left promiscuous mode [ 749.645243][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.662062][ T6094] bridge_slave_0: left allmulticast mode [ 749.668565][ T6094] bridge_slave_0: left promiscuous mode [ 749.675235][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.686679][ T7363] usb 7-1: Using ep0 maxpacket: 32 [ 749.719594][ T7363] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 749.736170][ T7363] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 749.750093][ T7363] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 749.759708][ T7363] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.785752][ T6094] bridge_slave_1: left allmulticast mode [ 749.792071][ T6094] bridge_slave_1: left promiscuous mode [ 749.799067][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.845607][ T7363] usb 7-1: config 0 descriptor?? [ 749.887364][ T6094] bridge_slave_0: left allmulticast mode [ 749.893463][ T6094] bridge_slave_0: left promiscuous mode [ 749.902569][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.932134][ T7363] hub 7-1:0.0: bad descriptor, ignoring hub [ 749.939235][ T7363] hub 7-1:0.0: probe with driver hub failed with error -5 [ 749.988098][ T8398] cgroup: fork rejected by pids controller in /syz9 [ 750.204883][ T7363] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 751.302256][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 751.347943][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 751.410996][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 751.481993][ T6094] bond0 (unregistering): Released all slaves [ 752.172424][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 752.215729][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 752.333046][ T6094] bond0 (unregistering): Released all slaves [ 752.488907][ T7363] usb 7-1: USB disconnect, device number 14 [ 752.933625][ T6094] hsr_slave_0: left promiscuous mode [ 752.954692][ T6094] hsr_slave_1: left promiscuous mode [ 753.012484][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.035664][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.080676][ T6094] hsr_slave_0: left promiscuous mode [ 753.095581][ T6094] hsr_slave_1: left promiscuous mode [ 753.145706][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 753.159740][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 753.600609][ T8423] hfsplus: unable to find HFS+ superblock [ 753.943077][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 753.984493][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 755.093466][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 755.167909][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 755.826243][ T8257] hsr_slave_0: entered promiscuous mode [ 755.863373][ T8257] hsr_slave_1: entered promiscuous mode [ 756.231330][ T10] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 756.423508][ T10] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 756.435082][ T10] usb 7-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config [ 756.445798][ T10] usb 7-1: config 160 has no interface number 0 [ 756.496567][ T10] usb 7-1: config 160 interface 200 has no altsetting 0 [ 756.554267][ T10] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 756.563945][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.574286][ T10] usb 7-1: Product: syz [ 756.579194][ T10] usb 7-1: Manufacturer: syz [ 756.584011][ T10] usb 7-1: SerialNumber: syz [ 756.919073][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 756.936978][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 757.127141][ T10] usb 7-1: USB disconnect, device number 15 [ 757.162542][ T8317] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.170371][ T8317] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.227379][ T8317] bridge_slave_0: entered allmulticast mode [ 757.278527][ T8317] bridge_slave_0: entered promiscuous mode [ 757.613306][ T8260] udevd[8260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 757.644879][ T8317] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.652880][ T8317] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.701563][ T8317] bridge_slave_1: entered allmulticast mode [ 757.722642][ T8317] bridge_slave_1: entered promiscuous mode [ 758.061049][ T6094] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.311526][ T6094] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.399008][ T8317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.525720][ T8317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 758.575338][ T6094] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.817519][ T8147] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 758.934337][ T6094] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.193012][ T8147] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 759.275455][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 759.285485][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 759.341385][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 759.359415][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 759.371559][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 759.444960][ T8317] team0: Port device team_slave_0 added [ 759.467632][ T8317] team0: Port device team_slave_1 added [ 759.473702][ T8147] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 759.630348][ T8452] loop6: detected capacity change from 0 to 2640 [ 759.676023][ T8246] buffer_io_error: 572 callbacks suppressed [ 759.676107][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.694327][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.727287][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.736039][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.750856][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.759636][ T8453] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.782073][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.793939][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.812413][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.814962][ T8147] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 759.820835][ T8246] ldm_validate_partition_table(): Disk read failed. [ 759.837203][ T8246] Buffer I/O error on dev loop6, logical block 0, async page read [ 759.847510][ T8246] Dev loop6: unable to read RDB block 0 [ 759.857961][ T8246] loop6: unable to read partition table [ 759.870664][ T8452] ldm_validate_partition_table(): Disk read failed. [ 759.889419][ T8452] Dev loop6: unable to read RDB block 0 [ 759.973199][ T8452] loop6: unable to read partition table [ 760.001499][ T8452] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 760.058382][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 760.065593][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.093154][ T8317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.238885][ T8317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.246229][ T8317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.273914][ T8317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.573459][ T6094] bridge_slave_1: left allmulticast mode [ 760.579957][ T6094] bridge_slave_1: left promiscuous mode [ 760.586852][ T6094] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.627901][ T6094] bridge_slave_0: left allmulticast mode [ 760.633855][ T6094] bridge_slave_0: left promiscuous mode [ 760.641091][ T6094] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.407453][ T6094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.417471][ T5784] Bluetooth: hci0: command tx timeout [ 761.435300][ T6094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.459233][ T6094] bond0 (unregistering): Released all slaves [ 761.609529][ T8317] hsr_slave_0: entered promiscuous mode [ 761.641090][ T8317] hsr_slave_1: entered promiscuous mode [ 761.669597][ T8317] debugfs: 'hsr0' already exists in 'hsr' [ 761.675570][ T8317] Cannot create hsr debugfs directory [ 762.296900][ T7356] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 762.457090][ T7356] usb 7-1: Using ep0 maxpacket: 32 [ 762.495376][ T7356] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.524859][ T7356] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 762.538500][ T7356] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 762.548099][ T7356] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.610165][ T7356] usb 7-1: config 0 descriptor?? [ 762.633465][ T7356] hub 7-1:0.0: bad descriptor, ignoring hub [ 762.642965][ T7356] hub 7-1:0.0: probe with driver hub failed with error -5 [ 762.676681][ T6094] hsr_slave_0: left promiscuous mode [ 762.717637][ T6094] hsr_slave_1: left promiscuous mode [ 762.735762][ T7356] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 762.751195][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.758983][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.844029][ T6094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.852158][ T6094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.939340][ T6094] veth1_macvtap: left promiscuous mode [ 762.945141][ T6094] veth0_macvtap: left promiscuous mode [ 762.985280][ T6094] veth1_vlan: left promiscuous mode [ 762.991279][ T6094] veth0_vlan: left promiscuous mode [ 763.496895][ T5784] Bluetooth: hci0: command tx timeout [ 763.743542][ T6094] team0 (unregistering): Port device team_slave_1 removed [ 763.792760][ T6094] team0 (unregistering): Port device team_slave_0 removed [ 764.268370][ T8257] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 764.302033][ T8257] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 764.404268][ T8257] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 764.433336][ T8257] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 765.022732][ T8449] chnl_net:caif_netlink_parms(): no params data found [ 765.317760][ T7356] usb 7-1: USB disconnect, device number 16 [ 765.536000][ T8147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 765.586634][ T5784] Bluetooth: hci0: command tx timeout [ 765.902720][ T8147] 8021q: adding VLAN 0 to HW filter on device team0 [ 765.913246][ T8317] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 765.972738][ T8317] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 766.065598][ T8317] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 766.111666][ T6659] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.119394][ T6659] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.287015][ T8317] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 766.353330][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.361168][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.403057][ T8502] netlink: 'syz.6.395': attribute type 33 has an invalid length. [ 766.411309][ T8502] netlink: 152 bytes leftover after parsing attributes in process `syz.6.395'. [ 766.467259][ T8449] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.474958][ T8449] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.485286][ T8449] bridge_slave_0: entered allmulticast mode [ 766.516294][ T8449] bridge_slave_0: entered promiscuous mode [ 766.539861][ T8449] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.547810][ T8449] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.556061][ T8449] bridge_slave_1: entered allmulticast mode [ 766.575181][ T8449] bridge_slave_1: entered promiscuous mode [ 766.836166][ T8449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.935551][ T8449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.122723][ T8449] team0: Port device team_slave_0 added [ 767.156939][ T5840] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 767.189713][ T8449] team0: Port device team_slave_1 added [ 767.313515][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.321148][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.348668][ T8449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.383448][ T8449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.391053][ T8449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.417527][ T5840] usb 7-1: config 160 has an invalid interface number: 200 but max is 0 [ 767.417682][ T5840] usb 7-1: config 160 has no interface number 0 [ 767.417824][ T5840] usb 7-1: config 160 interface 200 has no altsetting 0 [ 767.441487][ T8449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.469291][ T5840] usb 7-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 767.479106][ T5840] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.488342][ T5840] usb 7-1: Product: syz [ 767.492737][ T5840] usb 7-1: Manufacturer: syz [ 767.498048][ T5840] usb 7-1: SerialNumber: syz [ 767.657360][ T5784] Bluetooth: hci0: command tx timeout [ 767.710127][ T8257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.823609][ T5840] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 767.848267][ T5840] usb 7-1: MIDIStreaming interface descriptor not found [ 768.033265][ T5840] usb 7-1: USB disconnect, device number 17 [ 768.283466][ T8260] udevd[8260]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:160.200/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 768.360600][ T8449] hsr_slave_0: entered promiscuous mode [ 768.371662][ T8449] hsr_slave_1: entered promiscuous mode [ 768.409069][ T8449] debugfs: 'hsr0' already exists in 'hsr' [ 768.415026][ T8449] Cannot create hsr debugfs directory [ 768.878289][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 768.894377][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 768.904257][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 768.928963][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 768.945013][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 769.014611][ T8257] 8021q: adding VLAN 0 to HW filter on device team0 [ 769.454803][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.462565][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 769.758892][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 769.766680][ T7621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 770.071679][ T8317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.027423][ T5786] Bluetooth: hci1: command tx timeout [ 771.455989][ T8317] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.050723][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.058687][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.984608][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.992291][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.098223][ T5786] Bluetooth: hci1: command tx timeout [ 774.215633][ T7621] bridge_slave_1: left allmulticast mode [ 774.222074][ T7621] bridge_slave_1: left promiscuous mode [ 774.228956][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.272879][ T7621] bridge_slave_0: left allmulticast mode [ 774.280081][ T7621] bridge_slave_0: left promiscuous mode [ 774.288503][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.934355][ T7621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.955670][ T7621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.976707][ T5840] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 774.991741][ T7621] bond0 (unregistering): Released all slaves [ 775.172855][ T5840] usb 7-1: Using ep0 maxpacket: 32 [ 775.199762][ T5786] Bluetooth: hci1: command tx timeout [ 775.238188][ T8508] chnl_net:caif_netlink_parms(): no params data found [ 775.250718][ T5840] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.276707][ T5840] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.290140][ T5840] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 775.300018][ T5840] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.331689][ T5840] usb 7-1: config 0 descriptor?? [ 775.378078][ T5840] hub 7-1:0.0: bad descriptor, ignoring hub [ 775.384467][ T5840] hub 7-1:0.0: probe with driver hub failed with error -5 [ 775.442996][ T5840] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 775.444607][ T8449] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 775.551149][ T7621] hsr_slave_0: left promiscuous mode [ 775.566229][ T7621] hsr_slave_1: left promiscuous mode [ 775.588163][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 775.602035][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 775.990783][ T7621] team0 (unregistering): Port device team_slave_1 removed [ 776.022817][ T7621] team0 (unregistering): Port device team_slave_0 removed [ 776.318440][ T8449] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 776.519995][ T8449] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 776.643990][ T8449] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 777.259089][ T5786] Bluetooth: hci1: command tx timeout [ 777.356025][ T8257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.529124][ T8508] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.536875][ T8508] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.552348][ T8508] bridge_slave_0: entered allmulticast mode [ 777.563010][ T8508] bridge_slave_0: entered promiscuous mode [ 777.607294][ T8508] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.614872][ T8508] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.635747][ T8508] bridge_slave_1: entered allmulticast mode [ 777.648950][ T8508] bridge_slave_1: entered promiscuous mode [ 777.961730][ T7364] usb 7-1: USB disconnect, device number 18 [ 778.128161][ T8508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 778.153339][ T8508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 778.352110][ T8508] team0: Port device team_slave_0 added [ 778.455201][ T8508] team0: Port device team_slave_1 added [ 778.738348][ T8317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 778.759420][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 778.767621][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.795350][ T8508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 778.839706][ T8508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.847041][ T8508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 778.873902][ T8508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.465107][ T8449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 779.655154][ T8449] 8021q: adding VLAN 0 to HW filter on device team0 [ 779.989724][ T8257] veth0_vlan: entered promiscuous mode [ 780.301657][ T6649] bridge0: port 1(bridge_slave_0) entered blocking state [ 780.309488][ T6649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 780.370367][ T6649] bridge0: port 2(bridge_slave_1) entered blocking state [ 780.378157][ T6649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 780.709038][ T8508] hsr_slave_0: entered promiscuous mode [ 780.747902][ T8508] hsr_slave_1: entered promiscuous mode [ 780.776116][ T8508] debugfs: 'hsr0' already exists in 'hsr' [ 780.783243][ T8508] Cannot create hsr debugfs directory [ 780.913531][ T8257] veth1_vlan: entered promiscuous mode [ 782.343306][ T8257] veth0_macvtap: entered promiscuous mode [ 782.564814][ T8257] veth1_macvtap: entered promiscuous mode [ 783.012321][ T8317] veth0_vlan: entered promiscuous mode [ 783.213529][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 783.416073][ T8257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 783.432563][ T8317] veth1_vlan: entered promiscuous mode [ 783.772002][ T6094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 783.954568][ T6094] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.100609][ T6094] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.379921][ T6094] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 784.803339][ T8317] veth0_macvtap: entered promiscuous mode [ 784.908963][ T8508] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 785.053000][ T8317] veth1_macvtap: entered promiscuous mode [ 785.114141][ T8508] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 785.159040][ T8508] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 785.250098][ T8508] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 785.519388][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.650954][ T8449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.705823][ T8317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.981986][ T6094] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.045556][ T6094] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.134418][ T6094] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 786.212107][ T6094] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.135880][ T8508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 787.495956][ T8508] 8021q: adding VLAN 0 to HW filter on device team0 [ 787.672752][ T2981] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.680421][ T2981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 787.880265][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 787.887145][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 787.960574][ T5900] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.968254][ T5900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 788.469813][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 788.483557][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 788.494480][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 788.538408][ T5784] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 788.579758][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 789.928575][ T8449] veth0_vlan: entered promiscuous mode [ 790.340394][ T6649] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.414495][ T8449] veth1_vlan: entered promiscuous mode [ 790.516534][ T6649] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.698181][ T5784] Bluetooth: hci3: command tx timeout [ 790.722898][ T6649] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 790.882308][ T6649] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.458340][ T8508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.877390][ T8585] chnl_net:caif_netlink_parms(): no params data found [ 792.058430][ T8449] veth0_macvtap: entered promiscuous mode [ 792.199767][ T6649] bridge_slave_1: left allmulticast mode [ 792.205666][ T6649] bridge_slave_1: left promiscuous mode [ 792.214140][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.311804][ T6649] bridge_slave_0: left allmulticast mode [ 792.318245][ T6649] bridge_slave_0: left promiscuous mode [ 792.324977][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.784168][ T5784] Bluetooth: hci3: command tx timeout [ 792.943320][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 792.992693][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.011665][ T6649] bond0 (unregistering): Released all slaves [ 793.162820][ T8449] veth1_macvtap: entered promiscuous mode [ 793.617361][ T6649] hsr_slave_0: left promiscuous mode [ 793.658695][ T6649] hsr_slave_1: left promiscuous mode [ 793.688853][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 793.696827][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 793.733647][ T6649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 793.745623][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.848270][ T6649] veth1_macvtap: left promiscuous mode [ 793.854071][ T6649] veth0_macvtap: left promiscuous mode [ 793.899760][ T6649] veth1_vlan: left promiscuous mode [ 793.917322][ T6649] veth0_vlan: left promiscuous mode [ 794.861383][ T5784] Bluetooth: hci3: command tx timeout [ 796.110699][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 796.173034][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 796.634293][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.670617][ T8449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.937310][ T5784] Bluetooth: hci3: command tx timeout [ 797.217478][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.468349][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.708456][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.874552][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.924058][ T8508] veth0_vlan: entered promiscuous mode [ 797.993514][ T7621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 798.002395][ T7621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 798.416105][ T8508] veth1_vlan: entered promiscuous mode [ 800.260573][ T8585] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.268908][ T8585] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.451096][ T8585] bridge_slave_0: entered allmulticast mode [ 800.554639][ T8585] bridge_slave_0: entered promiscuous mode [ 800.664663][ T8585] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.672611][ T8585] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.760631][ T8585] bridge_slave_1: entered allmulticast mode [ 800.856066][ T8585] bridge_slave_1: entered promiscuous mode [ 801.737569][ T8585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.089537][ T8585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.156486][ T8508] veth0_macvtap: entered promiscuous mode [ 802.548769][ T8508] veth1_macvtap: entered promiscuous mode [ 802.612268][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 802.632211][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 802.662600][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 802.704093][ T8585] team0: Port device team_slave_0 added [ 802.725132][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 802.743158][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 802.965330][ T8585] team0: Port device team_slave_1 added [ 803.623946][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.631876][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.659103][ T8585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.895914][ T8585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.903628][ T8585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.930105][ T8585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 804.304327][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 804.857965][ T5786] Bluetooth: hci4: command tx timeout [ 804.973242][ T8508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 805.342603][ T8585] hsr_slave_0: entered promiscuous mode [ 805.398187][ T8585] hsr_slave_1: entered promiscuous mode [ 805.499773][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.637204][ T2981] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 805.743348][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.992072][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.053189][ T2981] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.287962][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.381546][ T2981] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.600567][ T2981] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.939179][ T5786] Bluetooth: hci4: command tx timeout [ 808.378659][ T8663] chnl_net:caif_netlink_parms(): no params data found [ 808.869771][ T2981] bridge_slave_1: left allmulticast mode [ 808.875770][ T2981] bridge_slave_1: left promiscuous mode [ 808.884409][ T2981] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.938375][ T2981] bridge_slave_0: left allmulticast mode [ 808.944296][ T2981] bridge_slave_0: left promiscuous mode [ 808.951227][ T2981] bridge0: port 1(bridge_slave_0) entered disabled state [ 809.018757][ T5786] Bluetooth: hci4: command tx timeout [ 809.915159][ T2981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.954914][ T2981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 809.990315][ T2981] bond0 (unregistering): Released all slaves [ 811.047505][ T2981] hsr_slave_0: left promiscuous mode [ 811.097066][ T5786] Bluetooth: hci4: command tx timeout [ 811.137824][ T2981] hsr_slave_1: left promiscuous mode [ 811.146087][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 811.155251][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 811.219334][ T2981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 811.227449][ T2981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 811.281737][ T2981] veth1_macvtap: left promiscuous mode [ 811.289083][ T2981] veth0_macvtap: left promiscuous mode [ 811.295023][ T2981] veth1_vlan: left promiscuous mode [ 811.331292][ T2981] veth0_vlan: left promiscuous mode [ 812.544323][ T2981] team0 (unregistering): Port device team_slave_1 removed [ 812.604757][ T2981] team0 (unregistering): Port device team_slave_0 removed [ 813.062605][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.071599][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.927957][ T5900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 813.935934][ T5900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 813.948739][ T8663] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.956553][ T8663] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.988737][ T8663] bridge_slave_0: entered allmulticast mode [ 814.015346][ T8663] bridge_slave_0: entered promiscuous mode [ 814.139208][ T8663] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.147351][ T8663] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.168383][ T8663] bridge_slave_1: entered allmulticast mode [ 814.192112][ T8663] bridge_slave_1: entered promiscuous mode [ 814.493755][ T8585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 814.589662][ T8585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 814.707369][ T8585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 814.785697][ T8663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 814.815388][ T8585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 814.876113][ T8663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.367975][ T8663] team0: Port device team_slave_0 added [ 815.457088][ T5840] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 815.535662][ T8663] team0: Port device team_slave_1 added [ 815.652188][ T5840] usb 10-1: Using ep0 maxpacket: 32 [ 815.720133][ T5840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.733183][ T5840] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.744349][ T5840] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 815.753880][ T5840] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.780772][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.788047][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 815.814393][ T8663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.855827][ T5840] usb 10-1: config 0 descriptor?? [ 815.979903][ T8663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.990482][ T8663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.017667][ T8663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.713221][ T8747] lec:lec_atm_close: lec0: Shut down! [ 816.728649][ T5840] usbhid 10-1:0.0: can't add hid device: -71 [ 816.735388][ T5840] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 816.802801][ T5840] usb 10-1: USB disconnect, device number 9 [ 816.945026][ T8663] hsr_slave_0: entered promiscuous mode [ 816.962738][ T8663] hsr_slave_1: entered promiscuous mode [ 816.974072][ T8663] debugfs: 'hsr0' already exists in 'hsr' [ 816.980497][ T8663] Cannot create hsr debugfs directory [ 817.836818][ T2981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 817.844826][ T2981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.299953][ T8585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.629619][ T5892] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.637921][ T5892] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.984554][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 819.232292][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.239978][ T7621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 819.587038][ T5892] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.594597][ T5892] bridge0: port 2(bridge_slave_1) entered forwarding state [ 820.118562][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 820.130615][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 820.140874][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 820.157215][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 820.173113][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 820.283860][ T8585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 820.294765][ T8585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 821.914093][ T8781] fuse: Bad value for 'fd' [ 822.240427][ T5784] Bluetooth: hci5: command tx timeout [ 824.396878][ T5784] Bluetooth: hci5: command tx timeout [ 826.458137][ T5786] Bluetooth: hci5: command tx timeout [ 828.420120][ T8663] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 828.537595][ T5786] Bluetooth: hci5: command tx timeout [ 828.688670][ T8663] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 828.987956][ T8663] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 829.219973][ T8663] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 829.894495][ T8585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 830.244376][ T8813] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 831.233180][ T8822] process 'syz.3.420' launched './file1' with NULL argv: empty string added [ 834.187709][ T8585] veth0_vlan: entered promiscuous mode [ 837.035392][ T8775] chnl_net:caif_netlink_parms(): no params data found [ 838.450912][ T8832] fuse: Bad value for 'fd' [ 838.681898][ T8663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.874338][ T8585] veth1_vlan: entered promiscuous mode [ 840.621262][ T8663] 8021q: adding VLAN 0 to HW filter on device team0 [ 840.891162][ T6094] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.898725][ T6094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.802609][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.810434][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 844.101656][ T8585] veth0_macvtap: entered promiscuous mode [ 844.153961][ T8585] veth1_macvtap: entered promiscuous mode [ 844.700322][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 845.033980][ T8585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 845.411441][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.422065][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.473611][ T8775] bridge_slave_0: entered allmulticast mode [ 845.569032][ T8775] bridge_slave_0: entered promiscuous mode [ 845.687050][ T6094] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 845.706547][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.714249][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.868708][ T8775] bridge_slave_1: entered allmulticast mode [ 845.910767][ T8775] bridge_slave_1: entered promiscuous mode [ 846.308460][ T5892] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 846.798825][ T8867] vlan2: entered allmulticast mode [ 846.804400][ T8867] macvtap0: entered allmulticast mode [ 846.810264][ T8867] veth0_macvtap: entered allmulticast mode [ 847.090682][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.104975][ T5892] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.150007][ T5892] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 847.359212][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.065059][ T8775] team0: Port device team_slave_0 added [ 848.178997][ T8775] team0: Port device team_slave_1 added [ 849.317669][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.324541][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.872276][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 849.879758][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 849.907574][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.153181][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.160498][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 850.190207][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.383762][ T5784] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 850.393895][ T5784] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 850.415059][ T5784] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 850.430204][ T5784] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 850.442420][ T5784] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 852.559329][ T5784] Bluetooth: hci6: command tx timeout [ 854.287927][ T8663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.470952][ T8775] hsr_slave_0: entered promiscuous mode [ 854.532606][ T8775] hsr_slave_1: entered promiscuous mode [ 854.622754][ T8775] debugfs: 'hsr0' already exists in 'hsr' [ 854.628973][ T8775] Cannot create hsr debugfs directory [ 854.652196][ T5784] Bluetooth: hci6: command tx timeout [ 855.655456][ T7559] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.036194][ T7559] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.444356][ T7559] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 856.507792][ T7364] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 856.696848][ T5784] Bluetooth: hci6: command tx timeout [ 856.706796][ T7364] usb 4-1: Using ep0 maxpacket: 8 [ 856.743617][ T7364] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 856.752320][ T7364] usb 4-1: config 2 has no interface number 0 [ 856.760550][ T7364] usb 4-1: config 2 interface 31 has no altsetting 0 [ 856.789609][ T7364] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 856.799144][ T7364] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 856.807828][ T7364] usb 4-1: Product: syz [ 856.812228][ T7364] usb 4-1: Manufacturer: syz [ 856.817175][ T7364] usb 4-1: SerialNumber: syz [ 856.843591][ T7559] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.027877][ T7364] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 858.057218][ T7364] usb 4-1: USB disconnect, device number 2 [ 858.777330][ T5784] Bluetooth: hci6: command tx timeout [ 858.806683][ T7362] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 859.113964][ T7559] bridge_slave_1: left allmulticast mode [ 859.121515][ T7559] bridge_slave_1: left promiscuous mode [ 859.131067][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.208810][ T7559] bridge_slave_0: left allmulticast mode [ 859.214742][ T7559] bridge_slave_0: left promiscuous mode [ 859.222246][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.583224][ T7362] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 860.593245][ T7362] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 860.604582][ T7362] usb 4-1: config 220 has no interface number 2 [ 860.686706][ T7362] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 860.701767][ T7362] usb 4-1: config 220 interface 0 has no altsetting 0 [ 860.709417][ T7362] usb 4-1: config 220 interface 76 has no altsetting 0 [ 860.719125][ T7362] usb 4-1: config 220 interface 1 has no altsetting 0 [ 860.870388][ T7362] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 860.880177][ T7362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.888682][ T7362] usb 4-1: Product: syz [ 860.893037][ T7362] usb 4-1: Manufacturer: syz [ 860.898013][ T7362] usb 4-1: SerialNumber: syz [ 861.380085][ T7362] usb 4-1: selecting invalid altsetting 0 [ 861.413997][ T7362] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 861.424555][ T7362] uvcvideo 4-1:220.0: No valid video chain found. [ 861.552390][ T7362] usb 4-1: selecting invalid altsetting 0 [ 861.558619][ T7362] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 861.641561][ T7362] usb 4-1: USB disconnect, device number 3 [ 862.957949][ T7559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.232342][ T7559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 863.314446][ T7559] bond0 (unregistering): Released all slaves [ 864.099821][ T7362] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 864.402071][ T7559] tipc: Left network mode [ 864.437056][ T7362] usb 10-1: Using ep0 maxpacket: 32 [ 864.491523][ T7362] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.506209][ T7362] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.517984][ T7362] usb 10-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 864.527528][ T7362] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 865.002096][ T7362] usb 10-1: config 0 descriptor?? [ 866.836588][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 866.879112][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 866.896932][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 866.918606][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 866.937841][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 867.466883][ T7362] usbhid 10-1:0.0: can't add hid device: -71 [ 867.477069][ T7362] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 867.587453][ T7362] usb 10-1: USB disconnect, device number 10 [ 867.767420][ T8893] chnl_net:caif_netlink_parms(): no params data found [ 868.001765][ T7559] hsr_slave_0: left promiscuous mode [ 868.036764][ T7559] hsr_slave_1: left promiscuous mode [ 868.048323][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 868.056039][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.135145][ T7559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 868.143700][ T7559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 868.288428][ T7559] veth1_macvtap: left promiscuous mode [ 868.345462][ T7559] veth0_macvtap: left promiscuous mode [ 868.358145][ T7559] veth1_vlan: left promiscuous mode [ 868.363794][ T7559] veth0_vlan: left promiscuous mode [ 868.708947][ T8979] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 869.117461][ T5784] Bluetooth: hci2: command tx timeout [ 871.176994][ T5784] Bluetooth: hci2: command tx timeout [ 872.054371][ T7559] team0 (unregistering): Port device team_slave_1 removed [ 872.168476][ T7559] team0 (unregistering): Port device team_slave_0 removed [ 873.277007][ T5784] Bluetooth: hci2: command tx timeout [ 875.346724][ T5784] Bluetooth: hci2: command tx timeout [ 877.538359][ T8775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 877.846899][ T8775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 877.928454][ T8775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 878.013492][ T8775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 878.047017][ T5838] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 878.224905][ T5838] usb 4-1: Using ep0 maxpacket: 32 [ 878.299066][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 878.311279][ T5838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 878.324372][ T5838] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 878.335194][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.519228][ T5838] usb 4-1: config 0 descriptor?? [ 880.013016][ T7362] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 880.805111][ T7362] usb 10-1: Using ep0 maxpacket: 8 [ 880.890531][ T7362] usb 10-1: config 7 has an invalid interface number: 5 but max is 0 [ 880.899151][ T7362] usb 10-1: config 7 has no interface number 0 [ 881.031914][ T7362] usb 10-1: config 7 interface 5 has no altsetting 0 [ 881.347448][ T7362] usb 10-1: string descriptor 0 read error: -71 [ 881.354831][ T7362] usb 10-1: New USB device found, idVendor=0572, idProduct=c699, bcdDevice=48.04 [ 881.364796][ T7362] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.688254][ T7362] usb 10-1: can't set config #7, error -71 [ 881.833791][ T7362] usb 10-1: USB disconnect, device number 11 [ 881.853273][ T5838] usbhid 4-1:0.0: can't add hid device: -71 [ 881.862586][ T5838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 882.017664][ T5838] usb 4-1: USB disconnect, device number 4 [ 882.063242][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 882.533034][ T8893] bridge0: port 1(bridge_slave_0) entered blocking state [ 882.540772][ T8893] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.547982][ T7364] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 882.605759][ T8893] bridge_slave_0: entered allmulticast mode [ 882.631954][ T8893] bridge_slave_0: entered promiscuous mode [ 882.637035][ T5840] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 882.737157][ T7364] usb 10-1: Using ep0 maxpacket: 32 [ 882.809595][ T7364] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 882.818171][ T7364] usb 10-1: config 0 has no interface number 0 [ 882.884480][ T5840] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 882.893422][ T5840] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 882.902851][ T5840] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 882.913586][ T5840] usb 4-1: config 220 has no interface number 2 [ 882.999815][ T7364] usb 10-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 883.009706][ T7364] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.018414][ T7364] usb 10-1: Product: syz [ 883.023031][ T7364] usb 10-1: Manufacturer: syz [ 883.028208][ T7364] usb 10-1: SerialNumber: syz [ 883.075397][ T5840] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 883.089328][ T5840] usb 4-1: config 220 interface 0 has no altsetting 0 [ 883.090128][ T8893] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.096610][ T5840] usb 4-1: config 220 interface 76 has no altsetting 0 [ 883.096742][ T5840] usb 4-1: config 220 interface 1 has no altsetting 0 [ 883.121430][ T8893] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.161906][ T7364] usb 10-1: config 0 descriptor?? [ 883.198448][ T5840] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 883.208570][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 883.217153][ T5840] usb 4-1: Product: syz [ 883.221533][ T5840] usb 4-1: Manufacturer: syz [ 883.226518][ T5840] usb 4-1: SerialNumber: syz [ 883.263142][ T7364] usb 10-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 883.272635][ T7364] usb 10-1: selecting invalid altsetting 1 [ 883.279038][ T7364] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 883.287052][ T8893] bridge_slave_1: entered allmulticast mode [ 883.320944][ T8893] bridge_slave_1: entered promiscuous mode [ 883.371257][ T7364] usb 10-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 883.379415][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 883.388505][ T7364] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 883.388948][ T7364] usb 10-1: media controller created [ 883.470664][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 883.482149][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 883.505180][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 883.519485][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.628661][ T5840] usb 4-1: selecting invalid altsetting 0 [ 883.647175][ T5840] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 883.657786][ T5840] uvcvideo 4-1:220.0: No valid video chain found. [ 883.864479][ T5840] usb 4-1: selecting invalid altsetting 0 [ 883.870932][ T5840] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 883.892976][ T7364] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 884.032919][ T5840] usb 4-1: USB disconnect, device number 5 [ 884.393430][ T8965] chnl_net:caif_netlink_parms(): no params data found [ 884.539031][ T9038] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 884.573909][ T7364] usb 10-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 884.582130][ T7364] zl10353_read_register: readreg error (reg=127, ret==-32) [ 884.646913][ T7364] usb 10-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 884.720562][ T8893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.033099][ T8893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.147669][ T5840] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 885.283849][ T7364] usb 10-1: USB disconnect, device number 12 [ 885.327820][ T5840] usb 4-1: device descriptor read/64, error -71 [ 885.588042][ T5786] Bluetooth: hci3: command tx timeout [ 885.616982][ T5840] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 885.810842][ T5840] usb 4-1: device descriptor read/64, error -71 [ 885.937110][ T5840] usb usb4-port1: attempt power cycle [ 885.966035][ T8893] team0: Port device team_slave_0 added [ 886.081293][ T149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.219852][ T8893] team0: Port device team_slave_1 added [ 886.331014][ T5840] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 886.381796][ T5840] usb 4-1: device descriptor read/8, error -71 [ 886.541917][ T149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 886.627299][ T5840] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 886.703087][ T5840] usb 4-1: device descriptor read/8, error -71 [ 886.739917][ T9068] netlink: 20 bytes leftover after parsing attributes in process `syz.9.459'. [ 886.844179][ T5840] usb usb4-port1: unable to enumerate USB device [ 886.967528][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.974885][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.001312][ T8893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.405842][ T149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.610301][ T8893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.618391][ T8893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 887.646861][ T8893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.661679][ T5786] Bluetooth: hci3: command tx timeout [ 887.845894][ T149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.152910][ T9032] udevd[9032]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 888.214173][ T8965] bridge0: port 1(bridge_slave_0) entered blocking state [ 888.221934][ T8965] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.290201][ T9010] udevd[9010]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 888.302735][ T8965] bridge_slave_0: entered allmulticast mode [ 888.325970][ T8965] bridge_slave_0: entered promiscuous mode [ 889.309523][ T8965] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.317344][ T8965] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.756679][ T5784] Bluetooth: hci3: command tx timeout [ 890.109812][ T8965] bridge_slave_1: entered allmulticast mode [ 890.421061][ T8965] bridge_slave_1: entered promiscuous mode [ 890.453082][ T8893] hsr_slave_0: entered promiscuous mode [ 890.464889][ T8893] hsr_slave_1: entered promiscuous mode [ 890.474887][ T8893] debugfs: 'hsr0' already exists in 'hsr' [ 890.481811][ T8893] Cannot create hsr debugfs directory [ 891.816842][ T5786] Bluetooth: hci3: command tx timeout [ 892.306727][ T5784] Bluetooth: hci1: command 0x0406 tx timeout [ 892.565038][ T8965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 893.191411][ T8965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 895.050963][ T8965] team0: Port device team_slave_0 added [ 895.352436][ T9096] overlayfs: failed to get inode (-116) [ 895.359309][ T9096] overlayfs: failed to get inode (-116) [ 895.369598][ T9096] overlayfs: failed to get inode (-116) [ 895.376024][ T9096] overlayfs: failed to get inode (-116) [ 895.386738][ T7343] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 895.451410][ T8965] team0: Port device team_slave_1 added [ 895.597077][ T7343] usb 4-1: Using ep0 maxpacket: 32 [ 895.628196][ T149] bridge_slave_1: left allmulticast mode [ 895.636972][ T149] bridge_slave_1: left promiscuous mode [ 895.644378][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.660852][ T7343] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 895.670078][ T7343] usb 4-1: config 0 has no interface number 0 [ 895.695440][ T149] bridge_slave_0: left allmulticast mode [ 895.702240][ T149] bridge_slave_0: left promiscuous mode [ 895.709100][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.737132][ T7343] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 895.746727][ T7343] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.754969][ T7343] usb 4-1: Product: syz [ 895.760626][ T7343] usb 4-1: Manufacturer: syz [ 895.765495][ T7343] usb 4-1: SerialNumber: syz [ 895.808430][ T149] bridge_slave_1: left allmulticast mode [ 895.814443][ T149] bridge_slave_1: left promiscuous mode [ 895.821468][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.851165][ T7343] usb 4-1: config 0 descriptor?? [ 895.884609][ T7343] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 895.894029][ T7343] usb 4-1: selecting invalid altsetting 1 [ 895.900256][ T7343] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 895.928094][ T149] bridge_slave_0: left allmulticast mode [ 895.933986][ T149] bridge_slave_0: left promiscuous mode [ 895.943539][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.984131][ T7343] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 896.009763][ T7343] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 896.044594][ T7343] usb 4-1: media controller created [ 896.241421][ T7343] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 897.189709][ T7362] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 897.207428][ T9094] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 897.248100][ T7343] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 897.255637][ T7343] zl10353_read_register: readreg error (reg=127, ret==-71) [ 897.277629][ T7343] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 897.314404][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.341178][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.365154][ T7362] usb 10-1: device descriptor read/64, error -71 [ 897.370532][ T149] bond0 (unregistering): Released all slaves [ 897.622652][ T7362] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 897.700914][ T7343] usb 4-1: USB disconnect, device number 10 [ 897.835078][ T7362] usb 10-1: device descriptor read/64, error -71 [ 897.903016][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.944785][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.964370][ T7362] usb usb10-port1: attempt power cycle [ 898.001546][ T149] bond0 (unregistering): Released all slaves [ 898.199714][ T9043] chnl_net:caif_netlink_parms(): no params data found [ 898.359790][ T7362] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 898.428105][ T7362] usb 10-1: device descriptor read/8, error -71 [ 898.747093][ T7362] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 898.791623][ T7362] usb 10-1: device descriptor read/8, error -71 [ 898.842773][ T149] hsr_slave_0: left promiscuous mode [ 898.873978][ T149] hsr_slave_1: left promiscuous mode [ 898.905153][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 898.914853][ T7362] usb usb10-port1: unable to enumerate USB device [ 898.926929][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.001672][ T149] hsr_slave_0: left promiscuous mode [ 899.019668][ T149] hsr_slave_1: left promiscuous mode [ 899.038598][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 899.049663][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.118193][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.125888][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.226798][ T149] veth1_macvtap: left promiscuous mode [ 899.232622][ T149] veth0_macvtap: left promiscuous mode [ 899.253839][ T149] veth1_vlan: left promiscuous mode [ 899.264131][ T149] veth0_vlan: left promiscuous mode [ 903.120489][ T9139] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.507663][ T9142] netlink: 'syz.9.470': attribute type 10 has an invalid length. [ 903.989201][ T149] team0 (unregistering): Port device team_slave_1 removed [ 904.133728][ T149] team0 (unregistering): Port device team_slave_0 removed [ 905.990606][ T149] team0 (unregistering): Port device team_slave_1 removed [ 906.108328][ T149] team0 (unregistering): Port device team_slave_0 removed [ 907.027226][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 907.034538][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 907.061584][ T8965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 907.753486][ T9142] 8021q: adding VLAN 0 to HW filter on device team0 [ 907.931784][ T9142] bond0: (slave team0): Enslaving as an active interface with an up link [ 908.037737][ T8965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 908.044945][ T8965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 908.071823][ T8965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 910.737619][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.744314][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.351226][ T8965] hsr_slave_0: entered promiscuous mode [ 911.390469][ T8965] hsr_slave_1: entered promiscuous mode [ 912.657933][ T5786] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 912.682573][ T5786] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 912.729298][ T5786] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 912.745952][ T5786] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 912.763913][ T5786] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 913.473102][ T9043] bridge0: port 1(bridge_slave_0) entered blocking state [ 913.480891][ T9043] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.537036][ T9043] bridge_slave_0: entered allmulticast mode [ 913.557178][ T9043] bridge_slave_0: entered promiscuous mode [ 913.788486][ T9043] bridge0: port 2(bridge_slave_1) entered blocking state [ 913.796049][ T9043] bridge0: port 2(bridge_slave_1) entered disabled state [ 913.857122][ T9043] bridge_slave_1: entered allmulticast mode [ 913.917151][ T9043] bridge_slave_1: entered promiscuous mode [ 914.351544][ T7362] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 914.401482][ T9043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 914.507196][ T7343] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 914.542081][ T7362] usb 4-1: Using ep0 maxpacket: 32 [ 914.559647][ T7362] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 914.568563][ T7362] usb 4-1: config 0 has no interface number 0 [ 914.637051][ T7362] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 914.647706][ T7362] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.655994][ T7362] usb 4-1: Product: syz [ 914.664232][ T7362] usb 4-1: Manufacturer: syz [ 914.669399][ T7362] usb 4-1: SerialNumber: syz [ 914.692681][ T9043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 914.697606][ T7343] usb 10-1: Using ep0 maxpacket: 8 [ 914.734416][ T7343] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 914.753613][ T7343] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.763394][ T7343] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.799004][ T7362] usb 4-1: config 0 descriptor?? [ 914.859585][ T5786] Bluetooth: hci4: command tx timeout [ 914.899114][ T7362] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 914.917504][ T7362] usb 4-1: selecting invalid altsetting 1 [ 914.923485][ T7362] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 914.971675][ T7362] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 915.016752][ T7362] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 915.025348][ T7362] usb 4-1: media controller created [ 915.263756][ T7362] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 915.588323][ T9043] team0: Port device team_slave_0 added [ 915.672118][ T6649] bridge_slave_1: left allmulticast mode [ 915.678469][ T6649] bridge_slave_1: left promiscuous mode [ 915.685389][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 915.717957][ T6649] bridge_slave_0: left allmulticast mode [ 915.724004][ T6649] bridge_slave_0: left promiscuous mode [ 915.731902][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 916.093082][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 916.132738][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 916.140088][ T9190] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 916.163616][ T6649] bond0 (unregistering): Released all slaves [ 916.182551][ T7362] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 916.190204][ T7362] zl10353_read_register: readreg error (reg=127, ret==-71) [ 916.218789][ T7362] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 916.318148][ T9043] team0: Port device team_slave_1 added [ 916.558304][ T7362] usb 4-1: USB disconnect, device number 11 [ 916.645295][ T6649] hsr_slave_0: left promiscuous mode [ 916.666673][ T6649] hsr_slave_1: left promiscuous mode [ 916.674857][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.699127][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.947978][ T5786] Bluetooth: hci4: command tx timeout [ 917.358786][ T7362] usb 10-1: USB disconnect, device number 17 [ 917.619606][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 917.754229][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 919.017706][ T5786] Bluetooth: hci4: command tx timeout [ 921.146728][ T5786] Bluetooth: hci4: command tx timeout [ 923.277066][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 923.287006][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.313832][ T9043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 923.479012][ T9043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 923.488403][ T9043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 923.516561][ T9043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 924.143099][ T9043] hsr_slave_0: entered promiscuous mode [ 924.163095][ T9043] hsr_slave_1: entered promiscuous mode [ 924.177792][ T9043] debugfs: 'hsr0' already exists in 'hsr' [ 924.183753][ T9043] Cannot create hsr debugfs directory [ 924.196928][ T6649] bridge_slave_1: left allmulticast mode [ 924.205290][ T6649] bridge_slave_1: left promiscuous mode [ 924.212870][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 924.337845][ T6649] bridge_slave_0: left allmulticast mode [ 924.343744][ T6649] bridge_slave_0: left promiscuous mode [ 924.350746][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 926.477046][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.609345][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.718468][ T6649] bond0 (unregistering): Released all slaves [ 927.181839][ T9176] chnl_net:caif_netlink_parms(): no params data found [ 927.834551][ T6649] hsr_slave_0: left promiscuous mode [ 928.046238][ T6649] hsr_slave_1: left promiscuous mode [ 928.128483][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.158853][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.183444][ T5784] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 928.229139][ T5784] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 928.243548][ T5784] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 928.283938][ T5784] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 928.317188][ T5784] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 928.762325][ T9240] binder: 9236:9240 unknown command 0 [ 929.162856][ T9240] binder: 9236:9240 ioctl c0306201 200000000080 returned -22 [ 929.939671][ T9242] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 930.457206][ T5786] Bluetooth: hci5: command tx timeout [ 932.232284][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 932.349108][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 932.557017][ T5786] Bluetooth: hci5: command tx timeout [ 932.908292][ T7343] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 933.096815][ T7343] usb 10-1: Using ep0 maxpacket: 8 [ 933.135170][ T7343] usb 10-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 933.157303][ T7343] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 933.167453][ T7343] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.890205][ T6649] bridge_slave_1: left allmulticast mode [ 933.896129][ T6649] bridge_slave_1: left promiscuous mode [ 933.903107][ T6649] bridge0: port 2(bridge_slave_1) entered disabled state [ 933.957491][ T6649] bridge_slave_0: left allmulticast mode [ 933.963399][ T6649] bridge_slave_0: left promiscuous mode [ 933.970324][ T6649] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.310523][ T6649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 934.333979][ T6649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 934.369456][ T6649] bond0 (unregistering): Released all slaves [ 934.618259][ T5786] Bluetooth: hci5: command tx timeout [ 935.123654][ T6649] hsr_slave_0: left promiscuous mode [ 935.154503][ T6649] hsr_slave_1: left promiscuous mode [ 935.181027][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 935.201202][ T6649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 936.260150][ T7343] usb 10-1: USB disconnect, device number 18 [ 936.697976][ T5786] Bluetooth: hci5: command tx timeout [ 936.847856][ T6649] team0 (unregistering): Port device team_slave_1 removed [ 936.974189][ T6649] team0 (unregistering): Port device team_slave_0 removed [ 938.849506][ T9176] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.857582][ T9176] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.901111][ T9176] bridge_slave_0: entered allmulticast mode [ 938.937366][ T9176] bridge_slave_0: entered promiscuous mode [ 939.730309][ T9176] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.738093][ T9176] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.748187][ T9176] bridge_slave_1: entered allmulticast mode [ 939.758791][ T9176] bridge_slave_1: entered promiscuous mode [ 939.887277][ T9288] overlayfs: failed to resolve './file1': -2 [ 940.431146][ T9176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.534499][ T9176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 940.941823][ T9043] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 941.089054][ T9043] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 941.219055][ T9176] team0: Port device team_slave_0 added [ 941.344679][ T9043] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 941.524124][ T9176] team0: Port device team_slave_1 added [ 941.532013][ T9238] chnl_net:caif_netlink_parms(): no params data found [ 941.672484][ T9043] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 942.251984][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 942.259479][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.286838][ T9176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 942.397178][ T9176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 942.404370][ T9176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 942.434206][ T9176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 943.134629][ T9176] hsr_slave_0: entered promiscuous mode [ 943.210957][ T9176] hsr_slave_1: entered promiscuous mode [ 943.768264][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 943.817750][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 943.827511][ T5784] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 943.852395][ T5784] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 943.867692][ T5784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 945.505864][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.513673][ T9238] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.592802][ T9238] bridge_slave_0: entered allmulticast mode [ 945.665837][ T9238] bridge_slave_0: entered promiscuous mode [ 945.758165][ T9238] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.765992][ T9238] bridge0: port 2(bridge_slave_1) entered disabled state [ 945.843652][ T9238] bridge_slave_1: entered allmulticast mode [ 945.970324][ T9238] bridge_slave_1: entered promiscuous mode [ 945.987580][ T5784] Bluetooth: hci2: command tx timeout [ 947.704741][ T9238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 948.056584][ T5784] Bluetooth: hci2: command tx timeout [ 948.317213][ T9238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 949.074524][ T9339] overlayfs: failed to resolve './file1': -2 [ 950.365852][ T5784] Bluetooth: hci2: command tx timeout [ 950.427211][ T9337] ======================================================= [ 950.427211][ T9337] WARNING: The mand mount option has been deprecated and [ 950.427211][ T9337] and is ignored by this kernel. Remove the mand [ 950.427211][ T9337] option from the mount to silence this warning. [ 950.427211][ T9337] ======================================================= [ 950.934779][ T9337] netlink: 28 bytes leftover after parsing attributes in process `syz.9.503'. [ 951.137398][ T9238] team0: Port device team_slave_0 added [ 951.215883][ T9238] team0: Port device team_slave_1 added [ 952.097740][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 952.105077][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.133536][ T9238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 952.219936][ T9238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 952.228089][ T9238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 952.255056][ T9238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 952.379699][ T5784] Bluetooth: hci2: command tx timeout [ 953.127809][ T9238] hsr_slave_0: entered promiscuous mode [ 953.146736][ T9238] hsr_slave_1: entered promiscuous mode [ 953.168386][ T9238] debugfs: 'hsr0' already exists in 'hsr' [ 953.174255][ T9238] Cannot create hsr debugfs directory [ 953.813804][ T9176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 953.907462][ T7621] bridge_slave_1: left allmulticast mode [ 953.913361][ T7621] bridge_slave_1: left promiscuous mode [ 953.920253][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.986636][ T7621] bridge_slave_0: left allmulticast mode [ 953.992530][ T7621] bridge_slave_0: left promiscuous mode [ 954.002253][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 954.538257][ T7621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.618685][ T7621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.644649][ T7621] bond0 (unregistering): Released all slaves [ 954.707358][ T9176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 954.918483][ T9176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 955.050026][ T7621] hsr_slave_0: left promiscuous mode [ 955.073668][ T7621] hsr_slave_1: left promiscuous mode [ 955.105059][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 955.133646][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 958.575823][ T7621] team0 (unregistering): Port device team_slave_1 removed [ 958.657994][ T7621] team0 (unregistering): Port device team_slave_0 removed [ 959.347298][ T9317] chnl_net:caif_netlink_parms(): no params data found [ 959.460462][ T9176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.854087][ T9394] overlayfs: failed to resolve './file1': -2 [ 963.403466][ T9404] kAFS: unable to lookup cell '(,c¾ûL' [ 964.299819][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.307637][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.333514][ T9317] bridge_slave_0: entered allmulticast mode [ 964.371693][ T9317] bridge_slave_0: entered promiscuous mode [ 964.406063][ T9238] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 964.493471][ T9238] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 964.569398][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.577562][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.587632][ T7362] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 964.603601][ T9317] bridge_slave_1: entered allmulticast mode [ 964.673980][ T9317] bridge_slave_1: entered promiscuous mode [ 964.745385][ T9238] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 964.777168][ T7362] usb 10-1: Using ep0 maxpacket: 32 [ 964.795485][ T7362] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 964.804591][ T7362] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 964.813676][ T7362] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 964.824197][ T7362] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 964.833534][ T7362] usb 10-1: config 1 has no interface number 0 [ 964.892695][ T7362] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 964.906769][ T7362] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 964.916180][ T7362] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.028597][ T7362] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 965.184684][ T7362] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 965.195273][ T7362] snd_usb_pod 10-1:1.1: invalid control EP [ 965.201546][ T7362] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 965.225990][ T7362] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 965.249003][ T7362] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 965.400918][ T9238] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 965.410967][ T7362] usb 10-1: USB disconnect, device number 19 [ 965.620765][ T9317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.749930][ T9317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.836133][ T9176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 966.175311][ T9317] team0: Port device team_slave_0 added [ 966.262071][ T9317] team0: Port device team_slave_1 added [ 966.610043][ T9176] 8021q: adding VLAN 0 to HW filter on device team0 [ 966.708704][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.715862][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.742525][ T9317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.845992][ T9317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.853331][ T9317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.879891][ T9317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.392584][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.400033][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 967.603991][ T9317] hsr_slave_0: entered promiscuous mode [ 967.655254][ T9317] hsr_slave_1: entered promiscuous mode [ 967.711915][ T9317] debugfs: 'hsr0' already exists in 'hsr' [ 967.718025][ T9317] Cannot create hsr debugfs directory [ 967.783252][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 967.790905][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.174156][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.181877][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.561374][ T9238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.938620][ T9238] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.083932][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.091577][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.398745][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.406497][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 974.744663][ T9317] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 974.879131][ T9317] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 974.985822][ T9317] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 975.155897][ T9317] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 975.183245][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 975.201928][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 975.211547][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 975.235606][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 975.248861][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 975.465445][ T9238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 976.057533][ T7356] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 976.298949][ T7356] usb 10-1: Using ep0 maxpacket: 32 [ 976.367489][ T7356] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 976.376506][ T7356] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 976.385448][ T7356] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 976.396669][ T7356] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 976.405956][ T7356] usb 10-1: config 1 has no interface number 0 [ 976.549609][ T7356] usb 10-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 976.566005][ T7356] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 976.576037][ T7356] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 976.721056][ T7356] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 976.887099][ T7356] snd_usb_pod 10-1:1.1: endpoint not available, using fallback values [ 976.896109][ T7356] snd_usb_pod 10-1:1.1: invalid control EP [ 976.902454][ T7356] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 977.011076][ T7356] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 977.037653][ T7356] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 977.104619][ T7356] usb 10-1: USB disconnect, device number 20 [ 977.341632][ T5786] Bluetooth: hci3: command tx timeout [ 978.003891][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 978.612244][ T9317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.786183][ T9317] 8021q: adding VLAN 0 to HW filter on device team0 [ 979.091206][ T9317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 979.103506][ T9317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 979.492442][ T5786] Bluetooth: hci3: command tx timeout [ 979.607763][ T6065] bridge0: port 1(bridge_slave_0) entered blocking state [ 979.615427][ T6065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 979.744717][ T6065] bridge0: port 2(bridge_slave_1) entered blocking state [ 979.752520][ T6065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 980.745029][ T9463] chnl_net:caif_netlink_parms(): no params data found [ 981.254736][ T7621] bridge_slave_1: left allmulticast mode [ 981.261553][ T7621] bridge_slave_1: left promiscuous mode [ 981.268982][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.353011][ T7621] bridge_slave_0: left allmulticast mode [ 981.359303][ T7621] bridge_slave_0: left promiscuous mode [ 981.365945][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.577493][ T5786] Bluetooth: hci3: command tx timeout [ 982.475332][ T7621] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.525402][ T7621] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.588175][ T7621] bond0 (unregistering): Released all slaves [ 983.151483][ T7621] hsr_slave_0: left promiscuous mode [ 983.189431][ T7621] hsr_slave_1: left promiscuous mode [ 983.238551][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.313517][ T7621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.659009][ T5786] Bluetooth: hci3: command tx timeout [ 983.806665][ T5835] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 983.986561][ T5835] usb 4-1: Using ep0 maxpacket: 32 [ 984.020732][ T5835] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 984.029725][ T5835] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 984.038716][ T5835] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 984.049208][ T5835] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 984.058647][ T5835] usb 4-1: config 1 has no interface number 0 [ 984.084868][ T5835] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 984.098408][ T5835] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 984.109613][ T5835] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.222146][ T5835] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 984.360480][ T5835] snd_usb_pod 4-1:1.1: endpoint not available, using fallback values [ 984.393247][ T5835] snd_usb_pod 4-1:1.1: invalid control EP [ 984.399778][ T5835] snd_usb_pod 4-1:1.1: cannot start listening: -22 [ 984.465383][ T5835] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 984.502668][ T5835] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 984.597004][ T5835] usb 4-1: USB disconnect, device number 12 [ 984.877076][ T7621] team0 (unregistering): Port device team_slave_1 removed [ 985.005203][ T7621] team0 (unregistering): Port device team_slave_0 removed [ 986.185828][ T9317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 990.905943][ T9463] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.913672][ T9463] bridge0: port 1(bridge_slave_0) entered disabled state [ 990.996837][ T9463] bridge_slave_0: entered allmulticast mode [ 991.066478][ T9463] bridge_slave_0: entered promiscuous mode [ 991.207225][ T9463] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.214787][ T9463] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.317012][ T9463] bridge_slave_1: entered allmulticast mode [ 991.377967][ T9463] bridge_slave_1: entered promiscuous mode [ 991.427075][ T9548] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 991.457629][ T9548] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 991.469281][ T9548] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 991.507036][ T9548] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 991.538890][ T9548] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 992.163420][ T9463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.196145][ T9317] veth0_vlan: entered promiscuous mode [ 992.355856][ T9463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.395772][ T9317] veth1_vlan: entered promiscuous mode [ 992.924790][ T9463] team0: Port device team_slave_0 added [ 993.188850][ T9463] team0: Port device team_slave_1 added [ 993.578116][ T5786] Bluetooth: hci4: command tx timeout [ 993.693548][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 993.701144][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.727701][ T9463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.949728][ T9463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.957104][ T9463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 993.983907][ T9463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 995.592158][ T9463] hsr_slave_0: entered promiscuous mode [ 995.633018][ T9463] hsr_slave_1: entered promiscuous mode [ 995.661021][ T5786] Bluetooth: hci4: command tx timeout [ 996.059450][ T9317] veth0_macvtap: entered promiscuous mode [ 997.042989][ T9317] veth1_macvtap: entered promiscuous mode [ 997.776520][ T5786] Bluetooth: hci4: command tx timeout [ 999.467728][ T9545] chnl_net:caif_netlink_parms(): no params data found [ 999.819915][ T5786] Bluetooth: hci4: command tx timeout [ 1000.156823][ T5835] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 1000.377066][ T5835] usb 10-1: Using ep0 maxpacket: 32 [ 1000.428858][ T5835] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1000.437871][ T5835] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1000.447196][ T5835] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1000.456682][ T5835] usb 10-1: config 1 has no interface number 0 [ 1000.533328][ T5835] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1000.543872][ T5835] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1000.557489][ T5835] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1000.566929][ T5835] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.585601][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1000.741035][ T5835] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1000.922208][ T5835] snd_usb_pod 10-1:1.1: invalid control EP [ 1000.928419][ T5835] snd_usb_pod 10-1:1.1: cannot start listening: -22 [ 1000.983208][ T9317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.008029][ T5835] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1001.040050][ T5892] bridge_slave_1: left allmulticast mode [ 1001.045939][ T5892] bridge_slave_1: left promiscuous mode [ 1001.053291][ T5892] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.068074][ T5835] snd_usb_pod 10-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 1001.122591][ T5892] bridge_slave_0: left allmulticast mode [ 1001.128864][ T5892] bridge_slave_0: left promiscuous mode [ 1001.135751][ T5892] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.157677][ T5835] usb 10-1: USB disconnect, device number 21 [ 1002.150860][ T5892] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1002.194675][ T5892] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1002.275019][ T5892] bond0 (unregistering): Released all slaves [ 1002.436641][ T5838] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 1002.619312][ T5892] hsr_slave_0: left promiscuous mode [ 1002.626801][ T5838] usb 10-1: Using ep0 maxpacket: 32 [ 1002.642975][ T5838] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 1002.652002][ T5838] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1002.661360][ T5838] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1002.670869][ T5838] usb 10-1: config 1 has no interface number 0 [ 1002.677701][ T5892] hsr_slave_1: left promiscuous mode [ 1002.685805][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.747047][ T5892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1002.774913][ T5838] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1002.786671][ T5838] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1002.800245][ T5838] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1002.809882][ T5838] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.960519][ T5838] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 1003.228959][ T5838] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 1003.670127][ T5835] usb 10-1: USB disconnect, device number 22 [ 1003.719692][ T5835] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 1004.555954][ T9548] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1004.565814][ T9548] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1004.575428][ T9548] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1004.595841][ T9548] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1004.606418][ T9548] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1004.799759][ T5892] team0 (unregistering): Port device team_slave_1 removed [ 1004.853695][ T5892] team0 (unregistering): Port device team_slave_0 removed [ 1006.595981][ T9463] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1006.696611][ T9548] Bluetooth: hci5: command tx timeout [ 1006.715097][ T9463] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1007.547116][ T9463] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1007.668758][ T9644] overlayfs: failed to resolve './file0': -2 [ 1008.846721][ T9548] Bluetooth: hci5: command tx timeout [ 1009.989193][ T9545] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.997332][ T9545] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.098522][ T9545] bridge_slave_0: entered allmulticast mode [ 1010.142216][ T9545] bridge_slave_0: entered promiscuous mode [ 1010.172905][ T9463] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1010.396993][ T9545] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.404529][ T9545] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.446959][ T9545] bridge_slave_1: entered allmulticast mode [ 1010.530268][ T9545] bridge_slave_1: entered promiscuous mode [ 1010.651938][ T5835] usb 10-1: new full-speed USB device number 23 using dummy_hcd [ 1010.856811][ T9548] Bluetooth: hci5: command tx timeout [ 1010.869122][ T5835] usb 10-1: config 220 has an invalid interface number: 76 but max is 2 [ 1010.878097][ T5835] usb 10-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1010.887565][ T5835] usb 10-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.898195][ T5835] usb 10-1: config 220 has no interface number 2 [ 1010.906967][ T5835] usb 10-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1010.920649][ T5835] usb 10-1: config 220 interface 0 has no altsetting 0 [ 1010.927996][ T5835] usb 10-1: config 220 interface 76 has no altsetting 0 [ 1010.937199][ T5835] usb 10-1: config 220 interface 1 has no altsetting 0 [ 1010.986952][ T5835] usb 10-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1010.996523][ T5835] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.004847][ T5835] usb 10-1: Product: syz [ 1011.010024][ T5835] usb 10-1: Manufacturer: syz [ 1011.014921][ T5835] usb 10-1: SerialNumber: syz [ 1011.401604][ T5835] uvcvideo 10-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1011.410319][ T5835] uvcvideo 10-1:220.0: No valid video chain found. [ 1011.422673][ T9545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.488203][ T5835] usb 10-1: selecting invalid altsetting 0 [ 1011.562264][ T5835] usb 10-1: selecting invalid altsetting 0 [ 1011.568747][ T5835] usbtest 10-1:220.1: probe with driver usbtest failed with error -22 [ 1011.640466][ T9545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.687403][ T5835] usb 10-1: USB disconnect, device number 23 [ 1012.466373][ T9545] team0: Port device team_slave_0 added [ 1012.704116][ T9545] team0: Port device team_slave_1 added [ 1012.947735][ T9548] Bluetooth: hci5: command tx timeout [ 1013.516759][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.523916][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.550485][ T9545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1013.599865][ T9545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1013.607442][ T9545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1013.634215][ T9545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1013.762588][ T9626] chnl_net:caif_netlink_parms(): no params data found [ 1014.409612][ T9673] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1014.426133][ T9673] ===================================================== [ 1014.433660][ T9673] BUG: KMSAN: uninit-value in pfn_reader_next+0x1d4c/0x3e40 [ 1014.441393][ T9673] pfn_reader_next+0x1d4c/0x3e40 [ 1014.446963][ T9673] pfn_reader_first+0xbdc/0xcc0 [ 1014.452006][ T9673] iopt_area_fill_domains+0x20c/0x13a0 [ 1014.458149][ T9673] iopt_map_pages+0x1b97/0x2120 [ 1014.463216][ T9673] iopt_map_common+0x224/0x610 [ 1014.468402][ T9673] iopt_map_user_pages+0x148/0x1c0 [ 1014.473879][ T9673] iommufd_ioas_map+0x6a2/0x9b0 [ 1014.479227][ T9673] iommufd_fops_ioctl+0x82a/0x9e0 [ 1014.484514][ T9673] __se_sys_ioctl+0x23c/0x400 [ 1014.489567][ T9673] __x64_sys_ioctl+0x97/0xe0 [ 1014.494352][ T9673] x64_sys_call+0x18a7/0x3e70 [ 1014.499561][ T9673] do_syscall_64+0xc9/0xf80 [ 1014.504279][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.510997][ T9673] [ 1014.513431][ T9673] Local variable pfns created at: [ 1014.520666][ T9673] iopt_area_fill_domains+0x5c/0x13a0 [ 1014.526969][ T9673] iopt_map_pages+0x1b97/0x2120 [ 1014.532029][ T9673] [ 1014.534491][ T9673] CPU: 1 UID: 0 PID: 9673 Comm: syz.9.549 Tainted: G L syzkaller #0 PREEMPT(voluntary) [ 1014.546346][ T9673] Tainted: [L]=SOFTLOCKUP [ 1014.550799][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1014.561357][ T9673] ===================================================== [ 1014.568548][ T9673] Disabling lock debugging due to kernel taint [ 1014.574832][ T9673] Kernel panic - not syncing: kmsan.panic set ... [ 1014.581417][ T9673] CPU: 1 UID: 0 PID: 9673 Comm: syz.9.549 Tainted: G B L syzkaller #0 PREEMPT(voluntary) [ 1014.592861][ T9673] Tainted: [B]=BAD_PAGE, [L]=SOFTLOCKUP [ 1014.598525][ T9673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1014.608739][ T9673] Call Trace: [ 1014.612140][ T9673] [ 1014.615199][ T9673] __dump_stack+0x26/0x30 [ 1014.619770][ T9673] dump_stack_lvl+0x50/0x1c0 [ 1014.624568][ T9673] ? dump_stack+0x12/0x25 [ 1014.629045][ T9673] dump_stack+0x1e/0x25 [ 1014.633310][ T9673] vpanic+0x435/0xd40 [ 1014.637419][ T9673] panic+0x15d/0x160 [ 1014.641469][ T9673] kmsan_report+0x31a/0x320 [ 1014.646128][ T9673] ? __msan_warning+0x1b/0x30 [ 1014.651008][ T9673] ? pfn_reader_next+0x1d4c/0x3e40 [ 1014.656318][ T9673] ? pfn_reader_first+0xbdc/0xcc0 [ 1014.661524][ T9673] ? iopt_area_fill_domains+0x20c/0x13a0 [ 1014.667352][ T9673] ? iopt_map_pages+0x1b97/0x2120 [ 1014.672497][ T9673] ? iopt_map_common+0x224/0x610 [ 1014.677557][ T9673] ? iopt_map_user_pages+0x148/0x1c0 [ 1014.682965][ T9673] ? iommufd_ioas_map+0x6a2/0x9b0 [ 1014.688141][ T9673] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 1014.693502][ T9673] ? __se_sys_ioctl+0x23c/0x400 [ 1014.698478][ T9673] ? __x64_sys_ioctl+0x97/0xe0 [ 1014.703357][ T9673] ? x64_sys_call+0x18a7/0x3e70 [ 1014.708338][ T9673] ? do_syscall_64+0xc9/0xf80 [ 1014.713148][ T9673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.719334][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.724612][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.729972][ T9673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1014.735951][ T9673] ? pfn_reader_user_pin+0x1d9e/0x20b0 [ 1014.741531][ T9673] ? iopt_map_pages+0x1b97/0x2120 [ 1014.746685][ T9673] ? iopt_map_common+0x224/0x610 [ 1014.751776][ T9673] ? iopt_map_user_pages+0x148/0x1c0 [ 1014.757220][ T9673] ? iommufd_ioas_map+0x6a2/0x9b0 [ 1014.762383][ T9673] ? iommufd_fops_ioctl+0x82a/0x9e0 [ 1014.767728][ T9673] ? __se_sys_ioctl+0x23c/0x400 [ 1014.772748][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.778076][ T9673] __msan_warning+0x1b/0x30 [ 1014.782817][ T9673] pfn_reader_next+0x1d4c/0x3e40 [ 1014.787877][ T9673] ? should_fail_ex+0x45/0x8c0 [ 1014.792768][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.798036][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.803307][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.808583][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.813871][ T9673] pfn_reader_first+0xbdc/0xcc0 [ 1014.818895][ T9673] iopt_area_fill_domains+0x20c/0x13a0 [ 1014.824565][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.829952][ T9673] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1014.836520][ T9673] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1014.842838][ T9673] ? kmsan_get_metadata+0xf1/0x160 [ 1014.848103][ T9673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1014.854075][ T9673] iopt_map_pages+0x1b97/0x2120 [ 1014.859112][ T9673] iopt_map_common+0x224/0x610 [ 1014.864010][ T9673] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1014.869984][ T9673] iopt_map_user_pages+0x148/0x1c0 [ 1014.875230][ T9673] iommufd_ioas_map+0x6a2/0x9b0 [ 1014.880291][ T9673] ? __pfx_iommufd_ioas_map+0x10/0x10 [ 1014.885919][ T9673] iommufd_fops_ioctl+0x82a/0x9e0 [ 1014.891236][ T9673] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 1014.896938][ T9673] __se_sys_ioctl+0x23c/0x400 [ 1014.901752][ T9673] __x64_sys_ioctl+0x97/0xe0 [ 1014.906500][ T9673] x64_sys_call+0x18a7/0x3e70 [ 1014.911324][ T9673] do_syscall_64+0xc9/0xf80 [ 1014.915954][ T9673] ? clear_bhb_loop+0x40/0x90 [ 1014.920746][ T9673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.926783][ T9673] RIP: 0033:0x7f969859aeb9 [ 1014.931350][ T9673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.951144][ T9673] RSP: 002b:00007f969939f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1014.959681][ T9673] RAX: ffffffffffffffda RBX: 00007f9698816180 RCX: 00007f969859aeb9 [ 1014.967742][ T9673] RDX: 0000200000000180 RSI: 0000000000003b85 RDI: 0000000000000006 [ 1014.975792][ T9673] RBP: 00007f9698608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1014.983839][ T9673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1014.991898][ T9673] R13: 00007f9698816218 R14: 00007f9698816180 R15: 00007ffcab7a4fb8 [ 1014.999997][ T9673] [ 1015.003759][ T9673] Kernel Offset: disabled [ 1015.008162][ T9673] Rebooting in 86400 seconds..