last executing test programs: 1m25.777445414s ago: executing program 2 (id=335): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f50009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x14, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 1m22.910983939s ago: executing program 2 (id=343): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x80000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) epoll_create1(0x80000) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, 0x0, &(0x7f0000000880)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0xc}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendto$packet(0xffffffffffffffff, &(0x7f00000002c0), 0x0, 0x4000004, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x6, 0x6, @remote}, 0x14) 1m21.126489514s ago: executing program 2 (id=346): r0 = socket(0x1, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = epoll_create1(0x80000) close(0x3) socket$inet6_sctp(0xa, 0x5, 0x84) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) read$FUSE(r2, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r2, &(0x7f00000000c0)={0x50, 0x0, r3, {0x7, 0x2b, 0xfffffffd, 0x34044504, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x80}}, 0x50) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) 1m20.564808013s ago: executing program 2 (id=349): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) sched_setattr(0x0, 0x0, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', 0x0, 0x2200085, 0x0) 1m20.076125926s ago: executing program 2 (id=353): openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) pipe(&(0x7f0000000600)) socket(0x1d, 0x2, 0x6) epoll_create(0x3) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='fdinfo/3\x00') syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x111, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x2, @empty, 0xa09c}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}}, 0xffffffffffffffff, 0x40099d}}, 0x37) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xff7fffff}, 0x8) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 1m17.263204223s ago: executing program 2 (id=360): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 1m16.969987679s ago: executing program 32 (id=360): creat(&(0x7f0000000140)='./file0\x00', 0x71) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200"], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) 11.341647834s ago: executing program 4 (id=502): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x38, 0xfffffffffffffffe}, 0x10) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000000400000014000500fc010000000000000000000000000800080002"], 0x4c}}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f00000002c0)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 10.619598557s ago: executing program 4 (id=504): sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, 0x0}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_clone(0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x100000000000f7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x8000) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) 7.809126993s ago: executing program 4 (id=510): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 6.653353196s ago: executing program 4 (id=513): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x38, 0xfffffffffffffffe}, 0x10) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000000400000014000500fc010000000000000000000000000800080002"], 0x4c}}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f00000002c0)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 6.575514176s ago: executing program 3 (id=515): syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x2, 0xb3, &(0x7f0000000140)=""/179, 0x41100, 0x7b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x38}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000002c0)="00154e0132", &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, &(0x7f0000000000)) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8c, 0x0) r2 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000300)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'vlan1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80c9}, 0x20000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_create_resource$binfmt(&(0x7f0000000180)='./file1\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) 6.408674708s ago: executing program 0 (id=516): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, 0x0) 6.261128261s ago: executing program 1 (id=517): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x18, r1, 0x1, 0x0, 0x25dfdbfd, {0x1b}, [@HEADER={0x4}]}, 0x18}}, 0x0) 6.186352762s ago: executing program 1 (id=518): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) syz_pidfd_open(r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000080)={[0xe]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r6) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) r8 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0xb}, 0x8) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) write$sysctl(r7, &(0x7f0000000040)='5\x00', 0x2) syz_clone(0x42380, 0x0, 0x0, 0x0, 0x0, 0x0) 6.093215582s ago: executing program 4 (id=519): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8982, &(0x7f0000000480)={0x7, 'pimreg1\x00', {0x7}, 0x8}) sendmsg$rds(r1, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x10000000) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r4, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@dstopts={{0x18}}], 0x18}, 0xc4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r5, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1d, 0x1b, &(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500182a000200000555000000000000000000", @ANYRES32=0x1, @ANYBLOB="00000000080000005047100010000000007701000000000085200000010000004bb90001fcffffff18110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000"], 0x0, 0x2, 0x0, 0x0, 0x41000, 0x22, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7fff}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000001c0)=[{0x1, 0x2, 0x2, 0x9}], 0x10, 0x1}, 0x94) socket$kcm(0x29, 0x5, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x10000003, 0x0, 0x81, 0x1ff, 0x1}, 0x1c) recvmmsg(r6, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x10}], 0x1, 0x2100, 0x0) recvmmsg$unix(r6, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendmmsg(r3, 0x0, 0x0, 0x0) 5.09390799s ago: executing program 1 (id=520): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xfffffffffffffffd) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002700090025bd7000ffd300800100000008000100ac14"], 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000000c0)=[{0x0}], 0x1) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = ioctl$KVM_GET_STATS_FD_cpu(r6, 0xaece) preadv(r7, &(0x7f0000001340)=[{&(0x7f0000000180)=""/66, 0x42}, {&(0x7f00000013c0)=""/85, 0x55}, {&(0x7f0000000280)=""/4096, 0x1000}], 0x3, 0x0, 0x389) fchdir(0xffffffffffffffff) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000080)={0xc}) 4.632300279s ago: executing program 3 (id=521): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000002000000000000000300000018000000030000000000000004000000950000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000002ec0)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x40000000000, 0x3, 0x4, 0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8040) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.339100889s ago: executing program 3 (id=522): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) 3.75474767s ago: executing program 0 (id=523): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x20000050) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="70001000", @ANYRES16=r1, @ANYBLOB="000827bd7000fbdbdf251200000008000600080000004c0001", @ANYRES32=r2, @ANYBLOB="080003000100000069703665727370616e30000000000000080003000200000008000900ff7f000000000000000000000000000043f0460a25c3994b0499f93f1b901579ed951df59b4830b2bb6afbf7276890a4d51c496885ffeaeafd6cbdbc90fce118f78f0a22e53796529f5c52c5dcbd5a1d8d93ae1f3618dc96586f74b3e0224f6021a4cc2f4d9dd88f26f09ba9c787ceebc0ea"], 0x70}, 0x1, 0x0, 0x0, 0x40010}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, 0x0, 0x2040040) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x25, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x1000000) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xa13, 0x4) r5 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r5, &(0x7f0000000080)={&(0x7f0000000000), 0x10, &(0x7f0000000300)={0x0, 0x1}, 0x8}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[], 0x1c}], 0x1, 0x0, 0x0, 0x100}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.694520626s ago: executing program 3 (id=524): ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r0 = syz_io_uring_setup(0x487, &(0x7f0000000100)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000740)=[{&(0x7f00000003c0)=""/201, 0xc9}], 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0xffffffffffffff0e) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, 0xffffffffffffffff, 0x0, r0}) io_uring_enter(r0, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) 3.587145874s ago: executing program 1 (id=525): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4) 3.548630276s ago: executing program 0 (id=526): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000006240)=[{{0x0, 0x0, 0x0}, 0x3ff}, {{0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {0x0}], 0x2}, 0x4}], 0x2, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) syz_io_uring_setup(0x23c, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x0, 0x100000001, 0x4, 0x100, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x3, 0x401, 0x0, 0xee, 0x0, 0x6, 0xfffffffffffffffe, 0x40, 0x0, 0x7f, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd, 0x9, 0x1000, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0xfffffffffffff56c, 0x4, 0x4, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x5, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x80000000000000, 0x800000, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x1, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000, 0x2, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0xc0c0, 0x80000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x4, 0x80]}) 3.498342543s ago: executing program 1 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x11}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) 3.434651188s ago: executing program 3 (id=528): r0 = memfd_create(&(0x7f0000000040)='dev [\x1dx#l', 0x8) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0xc5c}) r1 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='resize', &(0x7f0000000100), 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000000)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x38, 0xfffffffffffffffe}, 0x10) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, &(0x7f0000bbdffc)) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYBLOB="010000000000000000000400000014000500fc010000000000000000000000000800080002"], 0x4c}}, 0x4000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc, 0x15, {0x2}}]}, 0x48}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x201, 0x1, 0x1}, 0x1c) clock_gettime(0x0, &(0x7f00000002c0)) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000080)={'nr0\x00', 0x2000}) 3.148090473s ago: executing program 0 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001600)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x2000a840}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) r4 = fsopen(&(0x7f0000000380)='iso9660\x00', 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) syz_pidfd_open(r1, 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace$PTRACE_SETSIGMASK(0x420b, r1, 0x8, &(0x7f0000000080)={[0xe]}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='c::=/\x10\xcd\xb7@\x88\xedP9\xf5,\xef\x87\xc9G\xeb\xd9\xf9\xcd\xb1\xac!\xa7\x9c\x8f\xc98\xcb-\t\xcf-\xdd\xc4\xafK\x8d\xb1R8m\xc1[A\x99g\x9d\x8a\"\x98:\xc1I<\xdf;\x11t\xd3\xd2\x19\x964\xff\x03\xbc\x7fo\xe8\x89\x01:\x8b-\xab[X\x10\x18\x8d\xbf\xe1\x88\x16', 0x0) close(r6) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) r8 = socket(0x28, 0x5, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x3, 0xb}, 0x8) write$vhost_msg(0xffffffffffffffff, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) write$sysctl(r7, &(0x7f0000000040)='5\x00', 0x2) syz_clone(0x42380, 0x0, 0x0, 0x0, 0x0, 0x0) 3.118107896s ago: executing program 3 (id=530): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) io_setup(0x222, &(0x7f0000000180)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f00000009c0)={0x2, 0x4e24, @loopback}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) 1.878383175s ago: executing program 0 (id=531): r0 = fsopen(0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) 1.486946317s ago: executing program 0 (id=532): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={0x0}) 621.339069ms ago: executing program 4 (id=533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) 0s ago: executing program 1 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.136' (ED25519) to the list of known hosts. [ 82.530856][ T5784] cgroup: Unknown subsys name 'net' [ 82.782268][ T5784] cgroup: Unknown subsys name 'cpuset' [ 82.847745][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.583453][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.941318][ T31] cfg80211: failed to load regulatory.db [ 88.715880][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.731664][ T5799] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.735518][ T5799] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.736351][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.738665][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.740272][ T5809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.743520][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.748311][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.751316][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.752165][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.753239][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.759345][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.767136][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.767625][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.768722][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.888379][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.906230][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.916023][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.920524][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.921308][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.959904][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.961972][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.965437][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.985127][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.985826][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.800371][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 89.850403][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 90.042723][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 90.127664][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 90.189232][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 90.779012][ T5116] Bluetooth: hci1: command tx timeout [ 90.779021][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.779386][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.781071][ T5797] bridge_slave_0: entered allmulticast mode [ 90.782891][ T5797] bridge_slave_0: entered promiscuous mode [ 90.814371][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.814496][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.814676][ T5796] bridge_slave_0: entered allmulticast mode [ 90.819682][ T5796] bridge_slave_0: entered promiscuous mode [ 90.848721][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.848842][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.848974][ T5797] bridge_slave_1: entered allmulticast mode [ 90.850498][ T5797] bridge_slave_1: entered promiscuous mode [ 90.937137][ T61] Bluetooth: hci2: command tx timeout [ 90.937340][ T61] Bluetooth: hci0: command tx timeout [ 90.938686][ T5116] Bluetooth: hci3: command tx timeout [ 90.949132][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.949258][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.949415][ T5796] bridge_slave_1: entered allmulticast mode [ 90.952025][ T5796] bridge_slave_1: entered promiscuous mode [ 91.017186][ T5116] Bluetooth: hci4: command tx timeout [ 91.487815][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.488952][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.489092][ T5801] bridge_slave_0: entered allmulticast mode [ 91.490901][ T5801] bridge_slave_0: entered promiscuous mode [ 91.641805][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.643737][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.643837][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.643957][ T5795] bridge_slave_0: entered allmulticast mode [ 91.645495][ T5795] bridge_slave_0: entered promiscuous mode [ 91.674184][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.674388][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.674568][ T5801] bridge_slave_1: entered allmulticast mode [ 91.677958][ T5801] bridge_slave_1: entered promiscuous mode [ 91.685109][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.780660][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.781111][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.781202][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.781311][ T5795] bridge_slave_1: entered allmulticast mode [ 91.782889][ T5795] bridge_slave_1: entered promiscuous mode [ 91.860298][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.860531][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.860656][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.860767][ T5803] bridge_slave_0: entered allmulticast mode [ 91.862798][ T5803] bridge_slave_0: entered promiscuous mode [ 92.348162][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.348291][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.348473][ T5803] bridge_slave_1: entered allmulticast mode [ 92.350548][ T5803] bridge_slave_1: entered promiscuous mode [ 92.510986][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.639190][ T5797] team0: Port device team_slave_0 added [ 92.642565][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.645016][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.646716][ T5796] team0: Port device team_slave_0 added [ 92.769552][ T5797] team0: Port device team_slave_1 added [ 92.771922][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.850010][ T5796] team0: Port device team_slave_1 added [ 92.852994][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.857103][ T5116] Bluetooth: hci1: command tx timeout [ 93.017127][ T5116] Bluetooth: hci3: command tx timeout [ 93.017161][ T5116] Bluetooth: hci0: command tx timeout [ 93.017177][ T5116] Bluetooth: hci2: command tx timeout [ 93.097168][ T5809] Bluetooth: hci4: command tx timeout [ 93.190027][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.370465][ T5801] team0: Port device team_slave_0 added [ 93.768858][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.768869][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.768882][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.772026][ T5795] team0: Port device team_slave_0 added [ 93.773963][ T5801] team0: Port device team_slave_1 added [ 93.774944][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.774953][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.774966][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.868341][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.868357][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.868380][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.872032][ T5795] team0: Port device team_slave_1 added [ 93.948471][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.948484][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.948497][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.951061][ T5803] team0: Port device team_slave_0 added [ 94.096216][ T5803] team0: Port device team_slave_1 added [ 94.168632][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.168649][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.168671][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.230230][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.230241][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.230254][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.231439][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.231453][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.231475][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.438894][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.438911][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.438933][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.738698][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.738713][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.738737][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.864131][ T5797] hsr_slave_0: entered promiscuous mode [ 94.865155][ T5797] hsr_slave_1: entered promiscuous mode [ 94.867991][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.868005][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.868028][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.881499][ T5796] hsr_slave_0: entered promiscuous mode [ 94.883913][ T5796] hsr_slave_1: entered promiscuous mode [ 94.885037][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 94.885154][ T5796] Cannot create hsr debugfs directory [ 94.947375][ T5809] Bluetooth: hci1: command tx timeout [ 95.097295][ T5116] Bluetooth: hci0: command tx timeout [ 95.097306][ T61] Bluetooth: hci3: command tx timeout [ 95.097449][ T5809] Bluetooth: hci2: command tx timeout [ 95.177086][ T5809] Bluetooth: hci4: command tx timeout [ 95.294246][ T5801] hsr_slave_0: entered promiscuous mode [ 95.295162][ T5801] hsr_slave_1: entered promiscuous mode [ 95.295885][ T5801] debugfs: 'hsr0' already exists in 'hsr' [ 95.295912][ T5801] Cannot create hsr debugfs directory [ 95.483123][ T5795] hsr_slave_0: entered promiscuous mode [ 95.485848][ T5795] hsr_slave_1: entered promiscuous mode [ 95.486481][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 95.486503][ T5795] Cannot create hsr debugfs directory [ 95.643892][ T5803] hsr_slave_0: entered promiscuous mode [ 95.644750][ T5803] hsr_slave_1: entered promiscuous mode [ 95.645297][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 95.645317][ T5803] Cannot create hsr debugfs directory [ 97.017510][ T5809] Bluetooth: hci1: command tx timeout [ 97.077699][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.107087][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.142045][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.177230][ T5116] Bluetooth: hci2: command tx timeout [ 97.177263][ T5116] Bluetooth: hci0: command tx timeout [ 97.177300][ T5809] Bluetooth: hci3: command tx timeout [ 97.204975][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.257711][ T61] Bluetooth: hci4: command tx timeout [ 97.333998][ T5797] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.382854][ T5797] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.421633][ T5797] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.451423][ T5797] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.551025][ T5801] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.586748][ T5801] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.612483][ T5801] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.653528][ T5801] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.784567][ T5795] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.829340][ T5795] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.867399][ T5795] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.925538][ T5795] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.065696][ T5803] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.106694][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.117623][ T5803] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.171196][ T5803] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.220948][ T5803] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.319811][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.363946][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.364739][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.391500][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.409588][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.409713][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.483290][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.485549][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.535505][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.535783][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.584576][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.584732][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.612959][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.642214][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.661782][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.661987][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.703960][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.704169][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.774871][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.820592][ T3481] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.820902][ T3481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.825926][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.865984][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.866139][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.954043][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.015842][ T1176] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.016185][ T1176] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.074570][ T1176] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.075477][ T1176] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.199361][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.369301][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.454596][ T5796] veth0_vlan: entered promiscuous mode [ 99.517932][ T5796] veth1_vlan: entered promiscuous mode [ 99.530478][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.612087][ T5797] veth0_vlan: entered promiscuous mode [ 99.656490][ T5797] veth1_vlan: entered promiscuous mode [ 99.718348][ T5796] veth0_macvtap: entered promiscuous mode [ 99.744136][ T5796] veth1_macvtap: entered promiscuous mode [ 99.811247][ T5801] veth0_vlan: entered promiscuous mode [ 99.832538][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.853967][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.865536][ T5797] veth0_macvtap: entered promiscuous mode [ 99.870684][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.875157][ T5801] veth1_vlan: entered promiscuous mode [ 99.895646][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.902100][ T5797] veth1_macvtap: entered promiscuous mode [ 99.924693][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.931154][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.943535][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.960331][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.037534][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.106001][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.211899][ T5801] veth0_macvtap: entered promiscuous mode [ 100.234392][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.267410][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.271798][ T5801] veth1_macvtap: entered promiscuous mode [ 100.273932][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.292958][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.360289][ T5795] veth0_vlan: entered promiscuous mode [ 100.407816][ T3506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.407841][ T3506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.486042][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.490492][ T5795] veth1_vlan: entered promiscuous mode [ 100.586508][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.598525][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.598542][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.655825][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.685241][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.722243][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.744340][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.748560][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.748578][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.858787][ T5803] veth0_vlan: entered promiscuous mode [ 100.932134][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.932152][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.942993][ T5795] veth0_macvtap: entered promiscuous mode [ 101.040349][ T5803] veth1_vlan: entered promiscuous mode [ 101.043365][ T5795] veth1_macvtap: entered promiscuous mode [ 101.175633][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.175653][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.191130][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.221040][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.278393][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.323200][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.363217][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.366583][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.395650][ T5921] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.402717][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.402739][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.467645][ T5803] veth0_macvtap: entered promiscuous mode [ 101.571570][ T5803] veth1_macvtap: entered promiscuous mode [ 101.786959][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.929185][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.031267][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.031288][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.404579][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.406888][ T5932] netlink: 'syz.2.3': attribute type 3 has an invalid length. [ 102.407797][ T5932] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.924257][ T68] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x20 [ 102.946000][ T1176] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.976656][ T1176] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.987864][ T1176] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.011897][ T1176] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.111209][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.111231][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.355474][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.355494][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.481521][ T1230] IPVS: starting estimator thread 0... [ 103.558795][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.584517][ T5945] IPVS: using max 8 ests per chain, 19200 per kthread [ 103.690509][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.690530][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.725085][ T5872] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 103.725102][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.099942][ T5872] usb 1-1: config 0 descriptor?? [ 104.341354][ T5938] netlink: zone id is out of range [ 104.354300][ T5938] tipc: Started in network mode [ 104.354315][ T5938] tipc: Node identity 46, cluster identity 4711 [ 104.354322][ T5938] tipc: Node number set to 70 [ 104.367448][ T5938] ======================================================= [ 104.367448][ T5938] WARNING: The mand mount option has been deprecated and [ 104.367448][ T5938] and is ignored by this kernel. Remove the mand [ 104.367448][ T5938] option from the mount to silence this warning. [ 104.367448][ T5938] ======================================================= [ 104.367601][ T5938] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 104.419156][ T5872] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 104.420571][ T5872] [drm:udl_init] *ERROR* Selecting channel failed [ 104.732345][ T5872] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 104.732372][ T5872] [drm] Initialized udl on minor 2 [ 104.746005][ T5872] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.748763][ T5872] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 104.756134][ T5873] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.830210][ T5873] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.830689][ T5873] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 104.908153][ T5872] usb 1-1: USB disconnect, device number 2 [ 105.795422][ T5966] overlayfs: failed to resolve './bus': -2 [ 106.617058][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.797072][ T5872] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.797128][ T5872] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 106.797148][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.876170][ T5872] usb 1-1: config 0 descriptor?? [ 106.979377][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 107.497654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.556336][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 107.575765][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 107.576541][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 107.590503][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 107.591165][ T5872] pwc: recv_control_msg error -32 req 04 val 1300 [ 107.593992][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 107.596515][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 107.632108][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 107.682762][ T5872] pwc: recv_control_msg error -32 req 02 val 2100 [ 107.705631][ T5872] pwc: recv_control_msg error -71 req 04 val 1500 [ 107.716140][ T5872] pwc: recv_control_msg error -71 req 02 val 2500 [ 107.726700][ T5872] pwc: recv_control_msg error -71 req 02 val 2400 [ 107.746276][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 107.755743][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 107.756286][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 107.772448][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 107.777150][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 107.974346][ T5872] pwc: Registered as video103. [ 107.988844][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 108.030143][ T5872] usb 1-1: USB disconnect, device number 3 [ 109.226872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.234375][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.136902][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.677101][ T5997] syz.0.22 (5997) used greatest stack depth: 18128 bytes left [ 117.146888][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.147145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.147206][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.147270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.147318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.854071][ T6030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.964247][ T6030] bond0: (slave rose0): Enslaving as an active interface with an up link [ 123.986916][ T5973] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 124.310565][ T44] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 124.533127][ T6048] Zero length message leads to an empty skb [ 125.226928][ T44] usb 1-1: Using ep0 maxpacket: 32 [ 125.229430][ T44] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.235171][ T44] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 125.235199][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.235216][ T44] usb 1-1: Product: syz [ 125.235229][ T44] usb 1-1: Manufacturer: syz [ 125.235240][ T44] usb 1-1: SerialNumber: syz [ 125.243068][ T44] usb 1-1: config 0 descriptor?? [ 125.255006][ T44] usb 1-1: bad CDC descriptors [ 125.270308][ T44] usb 1-1: unsupported MDLM descriptors [ 125.890154][ T5973] usb 1-1: USB disconnect, device number 4 [ 126.690951][ T5888] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 127.423262][ T5888] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 127.423291][ T5888] usb 5-1: config 0 interface 0 has no altsetting 0 [ 128.417730][ T5888] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.417757][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.417773][ T5888] usb 5-1: Product: syz [ 128.417785][ T5888] usb 5-1: Manufacturer: syz [ 128.417797][ T5888] usb 5-1: SerialNumber: syz [ 128.436688][ T5888] usb 5-1: config 0 descriptor?? [ 128.500786][ T5888] usb 5-1: selecting invalid altsetting 0 [ 129.864016][ T6083] overlayfs: overlapping lowerdir path [ 131.670335][ T5888] usb 5-1: USB disconnect, device number 3 [ 132.197037][ T5872] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 133.051701][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.051796][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.218308][ T5872] usb 2-1: Using ep0 maxpacket: 32 [ 133.219833][ T5872] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.225911][ T5872] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 133.225927][ T5872] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.225937][ T5872] usb 2-1: Product: syz [ 133.225943][ T5872] usb 2-1: Manufacturer: syz [ 133.225950][ T5872] usb 2-1: SerialNumber: syz [ 133.282626][ T5872] usb 2-1: config 0 descriptor?? [ 133.301832][ T6014] udevd[6014]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.499289][ T5872] usb 2-1: bad CDC descriptors [ 133.500527][ T5872] usb 2-1: unsupported MDLM descriptors [ 133.567056][ T5872] usb 2-1: USB disconnect, device number 3 [ 135.125051][ T6145] syzkaller1: entered promiscuous mode [ 135.125074][ T6145] syzkaller1: entered allmulticast mode [ 136.533674][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.793180][ T6183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 137.793196][ T6183] IPv6: NLM_F_CREATE should be set when creating new route [ 138.894838][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.267851][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 139.436889][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 139.439296][ T10] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 139.439321][ T10] usb 5-1: config 0 has no interface number 0 [ 139.445328][ T10] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 139.445355][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.445371][ T10] usb 5-1: Product: syz [ 139.445382][ T10] usb 5-1: Manufacturer: syz [ 139.445394][ T10] usb 5-1: SerialNumber: syz [ 139.460937][ T10] usb 5-1: config 0 descriptor?? [ 139.478913][ T10] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 139.823648][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.397259][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.679353][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.947280][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.067074][ T10] usb 5-1: qt2_attach - failed to power on unit: -71 [ 142.067395][ T10] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 142.108462][ T10] usb 5-1: USB disconnect, device number 4 [ 142.434492][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.502572][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.791696][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.981731][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.367671][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.629355][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.064237][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.037793][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.130101][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.166270][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.767957][ T6253] veth0_to_team: entered promiscuous mode [ 145.767985][ T6253] veth0_to_team: entered allmulticast mode [ 145.890610][ C0] vkms_vblank_simulate: vblank timer overrun [ 146.079330][ T6258] netlink: 20 bytes leftover after parsing attributes in process `syz.1.82'. [ 146.495240][ C0] vkms_vblank_simulate: vblank timer overrun [ 147.467077][ T5973] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 147.637198][ T5973] usb 5-1: Using ep0 maxpacket: 32 [ 147.644739][ T5973] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 147.644764][ T5973] usb 5-1: config 0 has no interface number 0 [ 147.669468][ T5973] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 147.669495][ T5973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.669514][ T5973] usb 5-1: Product: syz [ 147.669526][ T5973] usb 5-1: Manufacturer: syz [ 147.669539][ T5973] usb 5-1: SerialNumber: syz [ 147.730823][ T5973] usb 5-1: config 0 descriptor?? [ 147.749792][ T5973] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 148.794471][ T6278] Process accounting resumed [ 149.772599][ T6286] netlink: zone id is out of range [ 151.216964][ T5973] usb 5-1: qt2_attach - failed to power on unit: -71 [ 151.224703][ T5973] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71 [ 151.557017][ T6294] 9pnet_fd: Insufficient options for proto=fd [ 151.770068][ T5973] usb 5-1: USB disconnect, device number 5 [ 156.404276][ T6346] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.404302][ T6346] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 156.404655][ T6346] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 156.404673][ T6346] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 156.826971][ T6343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.826988][ T6343] IPv6: NLM_F_CREATE should be set when creating new route [ 160.383857][ T6369] 9pnet_fd: Insufficient options for proto=fd [ 161.277076][ C0] vkms_vblank_simulate: vblank timer overrun [ 161.445906][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.267794][ C0] vkms_vblank_simulate: vblank timer overrun [ 162.271318][ T6381] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 162.752882][ T5973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.143875][ C0] vkms_vblank_simulate: vblank timer overrun [ 163.308383][ T5973] usb 2-1: device descriptor read/64, error -71 [ 163.548628][ T5973] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 163.706922][ T5973] usb 2-1: device descriptor read/64, error -71 [ 164.067501][ C0] vkms_vblank_simulate: vblank timer overrun [ 164.070127][ T5973] usb usb2-port1: attempt power cycle [ 165.719303][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.980865][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.091765][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.328632][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.576701][ C0] vkms_vblank_simulate: vblank timer overrun [ 166.885866][ C0] vkms_vblank_simulate: vblank timer overrun [ 167.008995][ C0] vkms_vblank_simulate: vblank timer overrun [ 169.270385][ T6456] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 169.331551][ T6457] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 169.628173][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 170.506926][ T10] usb 1-1: device descriptor read/64, error -71 [ 170.758180][ T10] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 170.887199][ T10] usb 1-1: device descriptor read/64, error -71 [ 174.908270][ T10] usb usb1-port1: attempt power cycle [ 176.275022][ T6498] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 176.464983][ T6498] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 178.396877][ T992] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 179.857564][ T992] usb 4-1: device descriptor read/all, error -71 [ 180.300296][ T6510] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 180.514195][ T6519] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.514212][ T6519] IPv6: NLM_F_CREATE should be set when creating new route [ 181.036187][ T6528] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.036211][ T6528] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 181.036420][ T6528] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 181.036436][ T6528] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 182.067075][ T992] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 182.692140][ T992] usb 3-1: device descriptor read/64, error -71 [ 183.417039][ T992] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 183.546999][ T992] usb 3-1: device descriptor read/64, error -71 [ 183.658094][ T992] usb usb3-port1: attempt power cycle [ 185.587097][ T992] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 185.713814][ T992] usb 3-1: device descriptor read/8, error -71 [ 186.251087][ T6553] siw: device registration error -23 [ 191.037582][ T6577] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 192.660405][ T5809] Bluetooth: hci4: command 0x0405 tx timeout [ 193.470188][ T6591] siw: device registration error -23 [ 193.547402][ T992] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 195.670452][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.670523][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.674058][ T992] usb 4-1: device descriptor read/64, error -71 [ 195.859302][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.087661][ T992] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 196.466967][ T992] usb 4-1: device descriptor read/64, error -71 [ 196.577349][ T992] usb usb4-port1: attempt power cycle [ 197.695386][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.163278][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.237085][ T5973] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 202.414965][ T5973] usb 3-1: Using ep0 maxpacket: 32 [ 202.434935][ T5973] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.622371][ T5973] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 202.622399][ T5973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.622417][ T5973] usb 3-1: Product: syz [ 202.622428][ T5973] usb 3-1: Manufacturer: syz [ 202.622441][ T5973] usb 3-1: SerialNumber: syz [ 203.055061][ T5973] usb 3-1: config 0 descriptor?? [ 203.066062][ T5973] usb 3-1: bad CDC descriptors [ 203.072736][ T5973] usb 3-1: unsupported MDLM descriptors [ 203.342949][ T1897] usb 3-1: USB disconnect, device number 6 [ 203.376495][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 203.388762][ T6671] team0: Port device batadv1 added [ 204.609950][ T6678] hub 9-0:1.0: USB hub found [ 204.632063][ T6678] hub 9-0:1.0: 1 port detected [ 205.455958][ T6696] fuse: Unknown parameter '0x000000000000000c' [ 206.069525][ T6688] netlink: 'syz.4.207': attribute type 17 has an invalid length. [ 206.069546][ T6688] netlink: 5 bytes leftover after parsing attributes in process `syz.4.207'. [ 206.188958][ T6695] veth0_to_team: entered promiscuous mode [ 206.188983][ T6695] veth0_to_team: entered allmulticast mode [ 206.285121][ T6688] macvtap0: entered allmulticast mode [ 206.285144][ T6688] veth0_macvtap: entered allmulticast mode [ 206.326517][ T6688] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 208.647015][ T6712] netlink: zone id is out of range [ 208.884366][ T6719] netlink: zone id is out of range [ 208.884636][ T6719] netlink: zone id is out of range [ 208.884844][ T6719] netlink: zone id is out of range [ 208.884903][ T6719] netlink: zone id is out of range [ 208.885002][ T6719] netlink: zone id is out of range [ 208.885059][ T6719] netlink: zone id is out of range [ 208.885117][ T6719] netlink: zone id is out of range [ 208.885215][ T6719] netlink: zone id is out of range [ 208.944832][ T6720] comedi comedi0: dt2815: I/O port conflict (0x8002f,2) [ 209.499866][ T6719] batadv_slave_0: entered promiscuous mode [ 209.539179][ T6719] batman_adv: batadv0: Adding interface: macvtap1 [ 209.539196][ T6719] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 209.539227][ T6719] batman_adv: batadv0: Interface activated: macvtap1 [ 209.755086][ C1] vkms_vblank_simulate: vblank timer overrun [ 210.272940][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.363541][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.456293][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.793927][ C1] vkms_vblank_simulate: vblank timer overrun [ 211.802006][ T5806] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 213.017415][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.019421][ T5806] usb 3-1: device descriptor read/64, error -71 [ 213.023664][ T5799] Bluetooth: hci0: command 0x0406 tx timeout [ 213.023699][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 213.023824][ T5799] Bluetooth: hci2: command 0x0406 tx timeout [ 213.023849][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 213.055502][ T5799] Bluetooth: hci4: command 0x0405 tx timeout [ 213.300210][ C1] vkms_vblank_simulate: vblank timer overrun [ 213.301454][ T5806] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 213.426914][ T5806] usb 3-1: device descriptor read/64, error -71 [ 213.520255][ T6745] netlink: 'syz.4.227': attribute type 17 has an invalid length. [ 213.520280][ T6745] netlink: 5 bytes leftover after parsing attributes in process `syz.4.227'. [ 213.563298][ T5806] usb usb3-port1: attempt power cycle [ 214.822626][ T6775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 214.850954][ T6775] team0: Port device batadv1 added [ 215.055708][ T6775] hub 9-0:1.0: USB hub found [ 215.056161][ T6775] hub 9-0:1.0: 1 port detected [ 215.774838][ C1] vkms_vblank_simulate: vblank timer overrun [ 215.975986][ C1] vkms_vblank_simulate: vblank timer overrun [ 216.547199][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.247656][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.716226][ C1] vkms_vblank_simulate: vblank timer overrun [ 217.723684][ T6795] trusted_key: encrypted_key: insufficient parameters specified [ 217.809719][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 217.947037][ T10] usb 3-1: device descriptor read/64, error -71 [ 218.217416][ T10] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.707330][ T10] usb 3-1: device descriptor read/64, error -71 [ 222.190981][ T10] usb usb3-port1: attempt power cycle [ 223.217335][ T6805] netlink: 40 bytes leftover after parsing attributes in process `syz.1.245'. [ 223.436146][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.455777][ T6815] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 224.258435][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.498118][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.759539][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.944612][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.099250][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.468113][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.759709][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.863788][ T6833] trusted_key: encrypted_key: insufficient parameters specified [ 227.127436][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.219281][ C1] vkms_vblank_simulate: vblank timer overrun [ 227.345337][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.117458][ C1] vkms_vblank_simulate: vblank timer overrun [ 228.551798][ C1] vkms_vblank_simulate: vblank timer overrun [ 229.037140][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.281024][ T6858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.261'. [ 232.013581][ T6876] trusted_key: encrypted_key: insufficient parameters specified [ 232.978052][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 232.980297][ T6882] team0: Port device batadv1 added [ 236.486970][ T44] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 236.595883][ T6914] netlink: 48 bytes leftover after parsing attributes in process `syz.1.277'. [ 236.640225][ T44] usb 3-1: unable to get BOS descriptor or descriptor too short [ 236.640814][ T44] usb 3-1: not running at top speed; connect to a high speed hub [ 236.642167][ T44] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 236.642181][ T44] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 236.682012][ T44] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 236.682029][ T44] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.682039][ T44] usb 3-1: Product: syz [ 236.682045][ T44] usb 3-1: Manufacturer: syz [ 236.682052][ T44] usb 3-1: SerialNumber: syz [ 236.866983][ T6365] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.017114][ T6365] usb 5-1: Using ep0 maxpacket: 8 [ 237.251044][ T6365] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 237.251070][ T6365] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 237.251117][ T6365] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.251137][ T6365] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.337968][ T44] usb 3-1: 0:2 : does not exist [ 237.531920][ T44] usb 3-1: USB disconnect, device number 13 [ 237.614389][ T6921] trusted_key: encrypted_key: insufficient parameters specified [ 237.951570][ T6501] udevd[6501]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.888805][ T5888] usb 5-1: USB disconnect, device number 6 [ 239.973098][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'. [ 240.497074][ T5888] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 240.887474][ T6966] trusted_key: encrypted_key: insufficient parameters specified [ 240.950111][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.950879][ T5888] usb 5-1: not running at top speed; connect to a high speed hub [ 240.952463][ T5888] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.952483][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 240.955527][ T5888] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 240.955550][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.955568][ T5888] usb 5-1: Product: syz [ 240.955580][ T5888] usb 5-1: Manufacturer: syz [ 240.955592][ T5888] usb 5-1: SerialNumber: syz [ 244.497449][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.528581][ T6365] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 244.654310][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.302'. [ 244.677881][ T6365] usb 2-1: Using ep0 maxpacket: 32 [ 244.680475][ T6365] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 244.695641][ T6365] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 244.695667][ T6365] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.695685][ T6365] usb 2-1: Product: syz [ 244.695697][ T6365] usb 2-1: Manufacturer: syz [ 244.695708][ T6365] usb 2-1: SerialNumber: syz [ 244.739252][ T6365] usb 2-1: config 0 descriptor?? [ 244.749696][ T6365] usb 2-1: bad CDC descriptors [ 244.773099][ T6365] usb 2-1: unsupported MDLM descriptors [ 244.866222][ C0] vkms_vblank_simulate: vblank timer overrun [ 244.913877][ T5888] usb 5-1: 0:2 : does not exist [ 244.977619][ T5873] usb 2-1: USB disconnect, device number 7 [ 245.070200][ T5888] usb 5-1: USB disconnect, device number 7 [ 245.156623][ T6501] udevd[6501]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.186305][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.245633][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.528923][ C0] vkms_vblank_simulate: vblank timer overrun [ 246.609890][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.012171][ C0] vkms_vblank_simulate: vblank timer overrun [ 247.917116][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.977207][ T5880] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 249.187076][ T5880] usb 2-1: Using ep0 maxpacket: 32 [ 249.642013][ T5880] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 249.642040][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.642056][ T5880] usb 2-1: config 0 has no interface number 0 [ 249.642428][ T5880] usb 2-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 250.137165][ T5873] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 250.137796][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 250.238106][ T5880] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 250.238135][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.238151][ T5880] usb 2-1: Product: syz [ 250.238162][ T5880] usb 2-1: Manufacturer: syz [ 250.238175][ T5880] usb 2-1: SerialNumber: syz [ 250.651296][ T5873] usb 3-1: device descriptor read/64, error -32 [ 251.042193][ T7055] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 251.042217][ T7055] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 251.042434][ T7055] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 251.042450][ T7055] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 251.234699][ T7054] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 251.347532][ T5873] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 251.532499][ T5873] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 251.532528][ T5873] usb 3-1: config 0 interface 0 has no altsetting 0 [ 251.590627][ T5880] usb 2-1: config 0 descriptor?? [ 251.592746][ T5880] usb 2-1: can't set config #0, error -71 [ 251.610750][ T5880] usb 2-1: USB disconnect, device number 8 [ 251.660363][ T5873] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 251.660392][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 251.660408][ T5873] usb 3-1: Product: syz [ 251.660419][ T5873] usb 3-1: Manufacturer: syz [ 251.660430][ T5873] usb 3-1: SerialNumber: syz [ 251.700067][ T5873] usb 3-1: config 0 descriptor?? [ 251.754936][ T5873] usb 3-1: selecting invalid altsetting 0 [ 251.856969][ T5888] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 252.159674][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 252.439977][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.440001][ T5888] usb 4-1: config 0 has no interfaces? [ 252.440032][ T5888] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 252.440052][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.200507][ T5888] usb 4-1: config 0 descriptor?? [ 253.243242][ T5873] usb 3-1: USB disconnect, device number 15 [ 253.782502][ T6484] udevd[6484]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 254.439699][ T5873] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 254.672441][ T5873] usb 3-1: Using ep0 maxpacket: 32 [ 255.008504][ T5873] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 255.008571][ T5873] usb 3-1: config 0 has no interface number 0 [ 255.008736][ T5873] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 255.343292][ T5873] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 255.343321][ T5873] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.343378][ T5873] usb 3-1: Product: syz [ 255.343427][ T5873] usb 3-1: Manufacturer: syz [ 255.343441][ T5873] usb 3-1: SerialNumber: syz [ 255.528782][ T5873] usb 3-1: config 0 descriptor?? [ 255.540148][ T5873] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 255.600753][ T5887] usb 4-1: USB disconnect, device number 7 [ 255.667309][ T7102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 255.862203][ T7110] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 255.930651][ T7110] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.990083][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.990951][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.010939][ T7114] netlink: 'syz.0.341': attribute type 10 has an invalid length. [ 256.017774][ T5873] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 256.018010][ T5873] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 256.051589][ T10] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 256.544461][ T7103] delete_channel: no stack [ 256.596528][ T10] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 256.596557][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 256.602341][ T7110] bond0: (slave team0): Enslaving as an active interface with an up link [ 256.632096][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.632123][ T10] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.632140][ T10] usb 2-1: Product: syz [ 256.632153][ T10] usb 2-1: Manufacturer: syz [ 256.632165][ T10] usb 2-1: SerialNumber: syz [ 256.757590][ T10] usb 2-1: config 0 descriptor?? [ 256.838060][ T10] usb 2-1: selecting invalid altsetting 0 [ 256.900321][ T5887] usb 3-1: USB disconnect, device number 16 [ 256.932916][ T7118] capability: warning: `syz.4.342' uses deprecated v2 capabilities in a way that may be insecure [ 256.969467][ T7114] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 257.079535][ T7110] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 258.991325][ T7120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 259.206304][ T44] usb 2-1: USB disconnect, device number 9 [ 259.792774][ T7145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 259.850649][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 260.066946][ T5888] usb 4-1: Using ep0 maxpacket: 8 [ 260.072607][ T5888] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 260.072630][ T5888] usb 4-1: config 0 has no interfaces? [ 260.072660][ T5888] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 260.072680][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.114453][ T5888] usb 4-1: config 0 descriptor?? [ 260.742826][ T7146] delete_channel: no stack [ 262.657011][ T44] usb 4-1: USB disconnect, device number 8 [ 262.928350][ T7168] ip_vti0: Master is either lo or non-ether device [ 262.947056][ T5887] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 263.099598][ T5887] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 263.099627][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.102626][ T5887] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 263.102651][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 263.102669][ T5887] usb 2-1: Product: syz [ 263.102681][ T5887] usb 2-1: Manufacturer: syz [ 263.102694][ T5887] usb 2-1: SerialNumber: syz [ 263.273455][ T5887] usb 2-1: config 0 descriptor?? [ 263.308792][ T5887] usb 2-1: selecting invalid altsetting 0 [ 263.817278][ T7175] delete_channel: no stack [ 265.410666][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 265.432343][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 265.477876][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 265.592005][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 265.632632][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 265.950999][ T176] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.258571][ T10] usb 2-1: USB disconnect, device number 10 [ 267.190534][ T7207] hub 9-0:1.0: USB hub found [ 267.192740][ T7207] hub 9-0:1.0: 1 port detected [ 267.385453][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.388057][ T7206] team0: Port device batadv1 added [ 268.054129][ T5116] Bluetooth: hci3: command tx timeout [ 268.526179][ T176] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.369501][ T7225] delete_channel: no stack [ 270.057001][ T5116] Bluetooth: hci3: command tx timeout [ 270.874358][ T176] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.137067][ T5116] Bluetooth: hci3: command tx timeout [ 272.600839][ T176] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.687100][ T7260] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.787239][ T7265] delete_channel: no stack [ 274.306827][ T5116] Bluetooth: hci3: command tx timeout [ 275.116658][ T176] bridge_slave_1: left allmulticast mode [ 275.119143][ T176] bridge_slave_1: left promiscuous mode [ 275.121832][ T176] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.387026][ T5873] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 275.390816][ T176] bridge_slave_0: left allmulticast mode [ 275.390834][ T176] bridge_slave_0: left promiscuous mode [ 275.391924][ T176] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.559767][ T5873] usb 4-1: Using ep0 maxpacket: 32 [ 275.569217][ T5873] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.572678][ T5873] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 275.572705][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.572722][ T5873] usb 4-1: Product: syz [ 275.572735][ T5873] usb 4-1: Manufacturer: syz [ 275.572748][ T5873] usb 4-1: SerialNumber: syz [ 275.607269][ T5873] usb 4-1: config 0 descriptor?? [ 275.624359][ T5873] usb 4-1: bad CDC descriptors [ 275.626770][ T5873] usb 4-1: unsupported MDLM descriptors [ 276.197668][ T5873] usb 4-1: USB disconnect, device number 9 [ 277.832536][ T7306] delete_channel: no stack [ 280.627632][ T176] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.708436][ T176] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.729936][ T176] bond0 (unregistering): Released all slaves [ 280.794090][ T7329] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 280.924187][ T7189] chnl_net:caif_netlink_parms(): no params data found [ 287.860586][ T7378] delete_channel: no stack [ 287.983970][ T7392] siw: device registration error -23 [ 290.907065][ T7405] veth0_to_team: entered promiscuous mode [ 290.907084][ T7405] veth0_to_team: entered allmulticast mode [ 291.121224][ T7386] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 291.243349][ T7189] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.243586][ T7189] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.243825][ T7189] bridge_slave_0: entered allmulticast mode [ 291.284272][ T7189] bridge_slave_0: entered promiscuous mode [ 291.300157][ T7189] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.300359][ T7189] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.300598][ T7189] bridge_slave_1: entered allmulticast mode [ 291.305145][ T7189] bridge_slave_1: entered promiscuous mode [ 291.308529][ T7417] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 293.678419][ T7443] delete_channel: no stack [ 294.595770][ T7453] veth0_to_team: entered promiscuous mode [ 294.595798][ T7453] veth0_to_team: entered allmulticast mode [ 295.534966][ T7189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.573581][ T7189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.258412][ T176] hsr_slave_0: left promiscuous mode [ 297.707985][ T176] hsr_slave_1: left promiscuous mode [ 297.727482][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.727647][ T176] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.122444][ T176] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.122471][ T176] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.776890][ T7492] delete_channel: no stack [ 299.120469][ T176] veth1_macvtap: left promiscuous mode [ 299.120644][ T176] veth0_macvtap: left promiscuous mode [ 299.120810][ T176] veth1_vlan: left promiscuous mode [ 299.121005][ T176] veth0_vlan: left promiscuous mode [ 303.557630][ T176] team0 (unregistering): Port device team_slave_1 removed [ 303.757544][ T176] team0 (unregistering): Port device team_slave_0 removed [ 304.307064][ T5887] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 304.500514][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short [ 304.501159][ T5887] usb 4-1: not running at top speed; connect to a high speed hub [ 304.502532][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.502558][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.505015][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.505039][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.505052][ T5887] usb 4-1: Product: syz [ 304.505059][ T5887] usb 4-1: Manufacturer: syz [ 304.505065][ T5887] usb 4-1: SerialNumber: syz [ 306.207162][ T7506] veth0_to_team: entered promiscuous mode [ 306.207189][ T7506] veth0_to_team: entered allmulticast mode [ 306.787695][ T5873] infiniband syz0: ib_query_port failed (-19) [ 307.323342][ T7529] delete_channel: no stack [ 307.559788][ T5887] usb 4-1: 0:2 : does not exist [ 307.684421][ T5887] usb 4-1: USB disconnect, device number 10 [ 308.122224][ T7189] team0: Port device team_slave_0 added [ 308.130444][ T7189] team0: Port device team_slave_1 added [ 308.196474][ T7537] udevd[7537]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 308.256975][ T992] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 308.506918][ T992] usb 5-1: Using ep0 maxpacket: 8 [ 308.535130][ T992] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 308.535190][ T992] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 308.535209][ T992] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 308.535228][ T992] usb 5-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 308.535243][ T992] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.535287][ T992] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 308.535306][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.625345][ T992] usbtmc 5-1:16.0: bulk endpoints not found [ 309.449936][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.449954][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.449978][ T7189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.454768][ T7189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.454782][ T7189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.454806][ T7189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.407001][ T5887] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 310.556909][ T5887] usb 1-1: Using ep0 maxpacket: 32 [ 310.559934][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 310.559952][ T5887] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.559973][ T5887] usb 1-1: New USB device found, idVendor=056a, idProduct=0315, bcdDevice= 0.00 [ 310.559984][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.620568][ T5887] usb 1-1: config 0 descriptor?? [ 310.643774][ T7189] hsr_slave_0: entered promiscuous mode [ 310.656312][ T7189] hsr_slave_1: entered promiscuous mode [ 310.680676][ T7189] debugfs: 'hsr0' already exists in 'hsr' [ 310.680705][ T7189] Cannot create hsr debugfs directory [ 310.781036][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.810777][ T5806] usb 5-1: USB disconnect, device number 8 [ 311.419565][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.619716][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.808501][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.060671][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.139976][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.730223][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.004660][ T7583] delete_channel: no stack [ 314.213690][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.199886][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.360169][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.637734][ T5887] usb 1-1: USB disconnect, device number 8 [ 316.112147][ T7606] netlink: 28 bytes leftover after parsing attributes in process `syz.4.467'. [ 316.679429][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 316.862379][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 316.873406][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 316.873432][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.955936][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 316.955953][ T10] pvrusb2: ********** [ 316.955961][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 316.955972][ T10] pvrusb2: Important functionality might not be entirely working. [ 316.955979][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 316.955989][ T10] pvrusb2: ********** [ 317.018109][ T7606] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 317.184560][ T2361] pvrusb2: Invalid write control endpoint [ 317.378206][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.380751][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.792873][ T5887] usb 2-1: USB disconnect, device number 11 [ 318.232747][ T2361] pvrusb2: Invalid write control endpoint [ 318.232763][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 318.232770][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 318.232775][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 318.232783][ T2361] pvrusb2: Device being rendered inoperable [ 318.286497][ T7189] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.299488][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 318.299572][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 318.324030][ T2361] pvrusb2: Attached sub-driver cx25840 [ 318.324040][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 318.324045][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 318.450885][ T7189] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 318.617184][ T7189] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 319.454023][ T7640] delete_channel: no stack [ 319.739320][ T7189] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.874195][ T7189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.064340][ T7189] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.092418][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.092734][ T6478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.123705][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.124600][ T6478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.807169][ T5873] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 321.827073][ T5887] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 321.955902][ T7189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.978566][ T5887] usb 4-1: Using ep0 maxpacket: 32 [ 321.981164][ T5887] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 321.981187][ T5887] usb 4-1: config 0 has no interface number 0 [ 321.996958][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 321.999081][ T5873] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 321.999105][ T5873] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.016956][ T5887] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 322.016983][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.016999][ T5887] usb 4-1: Product: syz [ 322.017010][ T5887] usb 4-1: Manufacturer: syz [ 322.017023][ T5887] usb 4-1: SerialNumber: syz [ 322.092290][ T5887] usb 4-1: config 0 descriptor?? [ 322.164056][ T5887] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 322.320716][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 322.320734][ T5873] pvrusb2: ********** [ 322.320740][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 322.320750][ T5873] pvrusb2: Important functionality might not be entirely working. [ 322.320758][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 322.320772][ T5873] pvrusb2: ********** [ 322.384477][ T2361] pvrusb2: Invalid write control endpoint [ 323.286536][ T5873] usb 1-1: USB disconnect, device number 9 [ 323.454609][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 323.564914][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 324.256027][ T2361] pvrusb2: Invalid write control endpoint [ 324.256041][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 324.256049][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 324.256057][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 324.256066][ T2361] pvrusb2: Device being rendered inoperable [ 324.256092][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 324.256139][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 324.347537][ T5887] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 324.354455][ T5809] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 324.369164][ T5809] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 324.370738][ T5809] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 324.378028][ T2361] pvrusb2: Attached sub-driver cx25840 [ 324.378041][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 324.378047][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 324.386483][ T5809] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 324.391770][ T5809] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 324.518509][ T5887] usb 4-1: USB disconnect, device number 11 [ 325.946288][ T5887] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 325.959639][ T5887] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 325.960236][ T5887] quatech2 4-1:0.51: device disconnected [ 326.633996][ T5116] Bluetooth: hci5: command tx timeout [ 328.266972][ T5880] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 328.417335][ T5880] usb 4-1: Using ep0 maxpacket: 8 [ 328.432512][ T5880] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 328.432537][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.569346][ T5880] pvrusb2: Hardware description: Terratec Grabster AV400 [ 328.569364][ T5880] pvrusb2: ********** [ 328.569369][ T5880] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 328.569380][ T5880] pvrusb2: Important functionality might not be entirely working. [ 328.569388][ T5880] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 328.569397][ T5880] pvrusb2: ********** [ 328.696917][ T5116] Bluetooth: hci5: command tx timeout [ 328.725915][ T2361] pvrusb2: Invalid write control endpoint [ 328.961484][ T5873] usb 4-1: USB disconnect, device number 12 [ 329.010567][ T2361] pvrusb2: Invalid write control endpoint [ 329.010582][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 329.010590][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 329.010597][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 329.010605][ T2361] pvrusb2: Device being rendered inoperable [ 329.010630][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 329.010677][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 329.154087][ T2361] pvrusb2: Attached sub-driver cx25840 [ 329.154103][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 329.154112][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 331.989592][ T5116] Bluetooth: hci5: command tx timeout [ 333.307332][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 333.767003][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 333.917013][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 333.919989][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 333.920017][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.986855][ T7805] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 334.774280][ T5116] Bluetooth: hci5: command tx timeout [ 335.025473][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 335.025491][ T10] pvrusb2: ********** [ 335.025497][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 335.025507][ T10] pvrusb2: Important functionality might not be entirely working. [ 335.025514][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 335.025524][ T10] pvrusb2: ********** [ 335.261790][ T7813] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 335.286444][ T2361] pvrusb2: Invalid write control endpoint [ 335.551982][ T10] usb 1-1: USB disconnect, device number 10 [ 335.705099][ T2361] pvrusb2: Invalid write control endpoint [ 335.705114][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 335.705122][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 335.705129][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 335.705138][ T2361] pvrusb2: Device being rendered inoperable [ 335.748097][ T2361] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 335.748162][ T2361] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 335.751718][ T2361] pvrusb2: Attached sub-driver cx25840 [ 335.751732][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 335.751740][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 339.477041][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 339.628657][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 339.636607][ T10] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 339.636633][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.694368][ T10] pvrusb2: Hardware description: Terratec Grabster AV400 [ 339.694384][ T10] pvrusb2: ********** [ 339.694390][ T10] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 339.694401][ T10] pvrusb2: Important functionality might not be entirely working. [ 339.694409][ T10] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 339.694418][ T10] pvrusb2: ********** [ 339.888982][ T2361] pvrusb2: Invalid write control endpoint [ 339.947401][ T10] ================================================================== [ 339.947416][ T10] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 339.947445][ T10] Read of size 8 at addr ffffc90013134008 by task kworker/0:1/10 [ 339.947459][ T10] [ 339.947483][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.947502][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.947513][ T10] Workqueue: usb_hub_wq hub_event [ 339.947548][ T10] Call Trace: [ 339.947558][ T10] [ 339.947567][ T10] dump_stack_lvl+0x189/0x250 [ 339.947592][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.947612][ T10] ? __pfx__printk+0x10/0x10 [ 339.947629][ T10] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 339.947650][ T10] ? __virt_addr_valid+0xdc/0x5c0 [ 339.947668][ T10] ? __virt_addr_valid+0xdc/0x5c0 [ 339.947687][ T10] print_report+0xca/0x240 [ 339.947704][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 339.947719][ T10] kasan_report+0x118/0x150 [ 339.947740][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 339.947759][ T10] __list_add_valid_or_report+0x4e/0x130 [ 339.947776][ T10] kcov_remote_stop+0x52d/0x660 [ 339.947797][ T10] hub_event+0x45d2/0x4a20 [ 339.947830][ T10] ? __pfx_hub_event+0x10/0x10 [ 339.947844][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 339.947863][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.947880][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 339.947895][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 339.947911][ T10] process_scheduled_works+0xae1/0x17b0 [ 339.947938][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.947960][ T10] worker_thread+0x8a0/0xda0 [ 339.947986][ T10] kthread+0x711/0x8a0 [ 339.948006][ T10] ? __pfx_worker_thread+0x10/0x10 [ 339.948021][ T10] ? __pfx_kthread+0x10/0x10 [ 339.948042][ T10] ? rt_spin_unlock+0x150/0x200 [ 339.948059][ T10] ? rt_spin_unlock+0x161/0x200 [ 339.948073][ T10] ? __pfx_kthread+0x10/0x10 [ 339.948091][ T10] ret_from_fork+0x4bc/0x870 [ 339.948108][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 339.948126][ T10] ? __switch_to_asm+0x39/0x70 [ 339.948139][ T10] ? __switch_to_asm+0x33/0x70 [ 339.948151][ T10] ? __pfx_kthread+0x10/0x10 [ 339.948174][ T10] ret_from_fork_asm+0x1a/0x30 [ 339.948194][ T10] [ 339.948199][ T10] [ 339.948203][ T10] The buggy address belongs to a vmalloc virtual mapping [ 339.948218][ T10] Memory state around the buggy address: [ 339.948231][ T10] ffffc90013133f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 339.948240][ T10] ffffc90013133f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 339.948249][ T10] >ffffc90013134000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 339.948259][ T10] ^ [ 339.948266][ T10] ffffc90013134080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 339.948275][ T10] ffffc90013134100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 339.948281][ T10] ================================================================== [ 339.948294][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 339.948304][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.948320][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 339.948328][ T10] Workqueue: usb_hub_wq hub_event [ 339.948342][ T10] Call Trace: [ 339.948347][ T10] [ 339.948353][ T10] dump_stack_lvl+0x99/0x250 [ 339.948371][ T10] ? __asan_memcpy+0x40/0x70 [ 339.948386][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.948403][ T10] ? __pfx__printk+0x10/0x10 [ 339.948423][ T10] vpanic+0x237/0x6d0 [ 339.948436][ T10] ? __pfx_vpanic+0x10/0x10 [ 339.948453][ T10] panic+0xb9/0xc0 [ 339.948465][ T10] ? __pfx_panic+0x10/0x10 [ 339.948478][ T10] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 339.948496][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 339.948515][ T10] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 339.948534][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 339.948550][ T10] check_panic_on_warn+0x89/0xb0 [ 339.948564][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 339.948579][ T10] end_report+0x78/0x160 [ 339.948596][ T10] kasan_report+0x129/0x150 [ 339.948614][ T10] ? __list_add_valid_or_report+0x4e/0x130 [ 339.948633][ T10] __list_add_valid_or_report+0x4e/0x130 [ 339.948650][ T10] kcov_remote_stop+0x52d/0x660 [ 339.948669][ T10] hub_event+0x45d2/0x4a20 [ 339.948702][ T10] ? __pfx_hub_event+0x10/0x10 [ 339.948716][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 339.948734][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 339.948751][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 339.948766][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 339.948782][ T10] process_scheduled_works+0xae1/0x17b0 [ 339.948808][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 339.948830][ T10] worker_thread+0x8a0/0xda0 [ 339.948855][ T10] kthread+0x711/0x8a0 [ 339.948874][ T10] ? __pfx_worker_thread+0x10/0x10 [ 339.948889][ T10] ? __pfx_kthread+0x10/0x10 [ 339.948906][ T10] ? rt_spin_unlock+0x150/0x200 [ 339.948923][ T10] ? rt_spin_unlock+0x161/0x200 [ 339.948937][ T10] ? __pfx_kthread+0x10/0x10 [ 339.948955][ T10] ret_from_fork+0x4bc/0x870 [ 339.948971][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 339.948988][ T10] ? __switch_to_asm+0x39/0x70 [ 339.949001][ T10] ? __switch_to_asm+0x33/0x70 [ 339.949014][ T10] ? __pfx_kthread+0x10/0x10 [ 339.949032][ T10] ret_from_fork_asm+0x1a/0x30 [ 339.949051][ T10] [ 339.949200][ T10] Kernel Offset: disabled