last executing test programs: 22m21.386973156s ago: executing program 1 (id=38): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000180)={0x0, 0x0, 0x7f}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000540)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r6, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r7, 0xffffffffffffffff, 0x0) 22m20.65618253s ago: executing program 1 (id=45): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 22m19.393181905s ago: executing program 1 (id=48): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) getpid() r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x20000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 22m15.78686353s ago: executing program 1 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) unlinkat$binderfs_device(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file3\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file7\x00', 0x0) 22m15.157022682s ago: executing program 1 (id=62): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)={[{0x2b, 'cpu'}]}, 0x5) 22m13.319351483s ago: executing program 1 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) getpid() r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x20000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 22m12.074030702s ago: executing program 32 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0) getpid() r0 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x20000000) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000a0601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070006000000060004404e2100000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 14m39.42057393s ago: executing program 5 (id=1233): r0 = syz_usb_connect(0x1, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920000000109021b1901000000d40904150001da40df0009058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 14m36.634200738s ago: executing program 5 (id=1238): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) 14m35.743453156s ago: executing program 5 (id=1241): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, 0x0) 14m35.313042704s ago: executing program 5 (id=1243): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) 14m34.176445958s ago: executing program 5 (id=1246): connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x239, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x2007, @fd, 0x800, 0x0, 0x0, 0x18, 0x0, {0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000280)={0x0, 0xffffffffffffffff, 0x1, {0x7, 0xa44}, 0x80}, 0x1) 14m31.127524498s ago: executing program 5 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r5, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) syz_pidfd_open(r0, 0x0) 14m14.162616469s ago: executing program 33 (id=1253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) socket$rds(0x15, 0x5, 0x0) syz_open_dev$vim2m(0x0, 0x47b, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x3c, r5, 0x917, 0x0, 0xffffffe4, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044011}, 0x4000) syz_pidfd_open(r0, 0x0) 8m31.588553058s ago: executing program 4 (id=2182): r0 = syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x10, 0xffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x5, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 8m30.881105304s ago: executing program 4 (id=2184): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m30.254455266s ago: executing program 4 (id=2187): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000b00)={0x34, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}]}, @NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_open_dev$vbi(0x0, 0x3, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_ALLOW_SUSPEND(r4, 0x5522) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x200000f, 0x12, 0xffffffffffffffff, 0xffffc000) request_key(&(0x7f0000000340)='id_legacy\x00', 0x0, 0x0, 0xfffffffffffffffe) 8m28.976596612s ago: executing program 4 (id=2189): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r4, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB(r0, 0xc01c64ad, &(0x7f0000000040)={r6}) 8m28.621330868s ago: executing program 4 (id=2191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 8m28.306295186s ago: executing program 4 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x164) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c00c, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 8m27.619366909s ago: executing program 0 (id=2194): r0 = syz_open_dev$dri(&(0x7f0000000580), 0x10000000007fc, 0x0) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x9, 0x10, 0xffff}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x5, 0x0, [0x0]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4}) 8m27.007904319s ago: executing program 0 (id=2195): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0xf0bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x5081}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_IKEY={0x8, 0x4, 0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0xa}]}}}]}, 0x4c}}, 0x20000080) 8m26.812181339s ago: executing program 0 (id=2197): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000140)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m26.678480071s ago: executing program 0 (id=2198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000640)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xac}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x15, 0x3, 0xfffff800) prlimit64(r2, 0x5, &(0x7f0000000000)={0x3, 0xf}, &(0x7f0000000280)) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x20000023896) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000200)='bridge0\x00') 8m25.263175781s ago: executing program 0 (id=2202): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) 8m25.160319612s ago: executing program 0 (id=2203): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c00", @ANYBLOB='L'], 0x0, 0x0, 0x0}, 0x0) 8m13.21448338s ago: executing program 34 (id=2192): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x164) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x21c00c, &(0x7f0000000080)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}}) 8m9.397248793s ago: executing program 35 (id=2203): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c00", @ANYBLOB='L'], 0x0, 0x0, 0x0}, 0x0) 4m24.133326415s ago: executing program 3 (id=2685): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x9, 0x8b}, 0x0) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) write$dsp(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0xf2ffffff) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x3) sched_setaffinity(0x0, 0xfffffd10, &(0x7f0000000200)=0x2000000000006) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x3051c1, 0x0) read$msr(r1, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000000)=0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x0, 0x18c, 0x203, 0x320, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x6}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) inotify_init1(0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x88, 0x7, 0x1, 0x3, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x5a, 0x90, 0xdf, [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x0, 0x0, 0x0, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x5, 0x5, 0x9}}}}}]}}]}}, 0x0) 4m19.13687462s ago: executing program 3 (id=2689): r0 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0x1e5}, &(0x7f0000000240)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) 4m18.467747488s ago: executing program 3 (id=2690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000200)={0x7fff, 0x32315241, 0xf00, 0x870, 0x3, @stepwise={{0x5, 0x5}, {0x3, 0x8}, {0x2, 0x2}}}) timer_create(0x3, 0x0, &(0x7f0000044000)) 4m17.171856628s ago: executing program 3 (id=2692): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x378, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ff010000060000800000000000000001fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000fdffffffffffffff000000000000000000000000000000000500000000000000000000000020000000000000000000000000000000000000010002000000000044000500fe800000000000000000000000000044000004d42b0000000a000000e00000010000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) 4m16.231714909s ago: executing program 3 (id=2694): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x14, r5, 0x511, 0x0, 0xfffffffe, {0x5}}, 0x21}}, 0xa000000) syz_genetlink_get_family_id$ieee802154(0x0, r4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r6, &(0x7f0000000e00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 4m12.614482493s ago: executing program 3 (id=2700): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a4, 0x10, 0x7ffc, 0x38d}, 0x0, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4, 0x0, 0x7}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) nanosleep(&(0x7f0000000300)={0x44, 0xfffffffe}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff9, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x60fbdb0c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}]}}]}, 0x48}}, 0x4) epoll_pwait2(r5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240)={[0x7fffffff]}, 0x8) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) eventfd2(0xff, 0x80001) 3m57.205632763s ago: executing program 36 (id=2700): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49f, &(0x7f0000000080)={0x0, 0xe7a4, 0x10, 0x7ffc, 0x38d}, 0x0, &(0x7f0000000100)) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={0x0, 0x1, 0x6, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, r5}]) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x6, 0x2, 0x4, 0x0, 0x7}) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x2) nanosleep(&(0x7f0000000300)={0x44, 0xfffffffe}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xfff9, 0x8}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x60fbdb0c}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffffa}]}}]}, 0x48}}, 0x4) epoll_pwait2(r5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000140)={0x0, 0x989680}, &(0x7f0000000240)={[0x7fffffff]}, 0x8) ioctl$TIOCVHANGUP(r6, 0x5437, 0x0) eventfd2(0xff, 0x80001) 6.49650267s ago: executing program 6 (id=3046): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r4, r4, 0x0, 0x40008) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) 5.445772901s ago: executing program 6 (id=3049): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x9, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0xffff, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x0, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) 5.272788856s ago: executing program 6 (id=3050): socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') io_setup(0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') 5.020580756s ago: executing program 2 (id=3051): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730137000000000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb30f}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0xc, 0x0, @val=@iter={0x0}}, 0x20) 4.903390376s ago: executing program 2 (id=3052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 4.516225703s ago: executing program 2 (id=3053): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) preadv(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}], 0x1, 0x2, 0x5) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) shmget$private(0x0, 0xfffffffffeffffff, 0x4800, &(0x7f0000ffc000/0x3000)=nil) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x448000, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @win={{0x2, 0x1, 0x80000000, 0xcb81}, 0x1, 0x9, &(0x7f00000007c0)={{0x4, 0xf, 0xbaf, 0x8000}}, 0x7f, 0x0, 0x6}}) memfd_create(0x0, 0x3) 4.105094574s ago: executing program 7 (id=2227): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000500)=ANY=[@ANYBLOB="0000000010000000"]) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 3.494275248s ago: executing program 7 (id=3054): r0 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x3f73, 0x100, 0x4, 0x1b}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0xffffffffffffff3a, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r3, 0x0, 0x0, 0x0, 0x2000, 0x1, {0x1}}) io_uring_enter(r0, 0x3516, 0xf400, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/842], 0x0}, 0x94) 2.084671208s ago: executing program 6 (id=3055): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x40204706, 0x0) 1.88988482s ago: executing program 9 (id=2720): shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0x9, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00004, 0x3c, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) 1.770501383s ago: executing program 2 (id=3056): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'geneve1\x00'}) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r4, r4, 0x0, 0x40008) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x8002, 0x0) 1.660380502s ago: executing program 6 (id=3057): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000002440)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fc], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x7fffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0xff, 0xffffff48, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffe, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x9, 0xfffffffe, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x1, 0xe, 0x5, 0xe4fa}, 0x2, [0x2, 0x9, 0x3, 0x7, 0x7, 0x8, 0x0, 0x5, 0x3, 0x3, 0x101, 0x70, 0x81, 0x7, 0x6, 0x3, 0xe, 0x875, 0x6, 0x6, 0x3, 0x6, 0xb, 0x7, 0x4, 0x7ff, 0xa0, 0x80000000, 0x0, 0xfffffffc, 0xea16, 0x7, 0x11fe, 0x2, 0x642, 0x7, 0x1, 0xbe, 0x31, 0x407c1912, 0x18000000, 0x6, 0xedb1, 0x7, 0x7, 0x1, 0xd7e, 0xffffff36, 0x3, 0x7fffffff, 0xa, 0xffffffff, 0x92, 0xb7, 0x2, 0x7fffffff, 0x9, 0x2, 0x6, 0x3, 0x10000, 0x6, 0x7, 0xf19], [0x27, 0x0, 0x6, 0x9, 0x9, 0x2e6bbd38, 0x1, 0x0, 0x4, 0x7, 0x2, 0x8, 0xf22, 0x7230, 0x9, 0x0, 0xa8b, 0x36, 0x101, 0xa, 0x400, 0x8000, 0x8, 0xffff, 0xe, 0x3, 0x1000, 0xfffffd23, 0x4e, 0x5, 0x10001, 0x1, 0x7, 0x8, 0x5, 0x6808, 0x5, 0x5, 0x58ffede2, 0xdef, 0x7, 0x5, 0x1, 0x3, 0x18, 0xa9, 0x60c2, 0x0, 0xd5, 0xee6, 0x1, 0x5, 0x80000000, 0x0, 0x0, 0xf, 0x2, 0x80003e, 0xc436, 0x0, 0x5, 0xdd, 0x4, 0x100], [0x5, 0x8, 0x5, 0x0, 0x9, 0x2, 0x7, 0x6, 0x4, 0x0, 0xffffffff, 0xff, 0xfffffffc, 0xfd, 0xa373, 0xf7, 0x9, 0x6, 0x1, 0x8, 0x9, 0x3, 0x2, 0x4, 0x4e, 0x8000, 0x46, 0x4, 0x4, 0x0, 0x64, 0x80000000, 0x5, 0xa48, 0x5, 0x200, 0x4, 0xfffffffd, 0x7fff, 0x3, 0x2, 0xb, 0x9, 0xffffffff, 0x0, 0x2, 0x2e, 0x1000, 0x3, 0xec35, 0x0, 0x2e81, 0x0, 0x5, 0x4, 0x9, 0x81, 0xee7, 0x6, 0x7, 0x5, 0x9, 0x3, 0x8], [0x1ff, 0x2, 0x5, 0x8, 0x6, 0x5, 0xe00000, 0x800, 0xc1, 0x6, 0x4, 0x1, 0x5, 0x9, 0x9b, 0x6, 0xfffff801, 0xfffffff6, 0x4, 0xfffff49d, 0x4, 0x0, 0x100, 0x3, 0xffff, 0x2, 0x5db8, 0x0, 0x6, 0xe, 0x2, 0x6, 0x5, 0x9, 0x5, 0x2f4, 0x9, 0x4, 0xffff0000, 0x7, 0x1, 0xdc7a, 0xe8, 0x8, 0x42000, 0x9, 0x2, 0xb, 0x1, 0xa, 0x6, 0x0, 0x6, 0x6, 0x80000001, 0x1, 0x0, 0x34, 0x6, 0xfffffffe, 0x6, 0xae, 0x1, 0x9]}, 0x45c) 486.811719ms ago: executing program 2 (id=3058): pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10) splice(r0, 0x0, r1, 0x0, 0xfffd, 0x0) 452.431066ms ago: executing program 9 (id=3059): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket$netlink(0x10, 0x3, 0xf) socket$packet(0x11, 0xa, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r0}, &(0x7f0000000840), &(0x7f0000000880)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={r1, r3, 0x25, 0x2, @val=@netfilter={0x3, 0x1, 0x0, 0x1}}, 0x20) syz_emit_ethernet(0x6a, &(0x7f00000004c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void, {0x8100, 0x2, 0x1}}, {@mpls_mc={0x8848, {[], @ipv4=@gre={{0x5, 0x4, 0x0, 0x8, 0x58, 0x64, 0x0, 0x86, 0x2f, 0x0, @broadcast, @multicast2}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1}, {0x1}, {0x8, 0x88be, 0x1, {{0xd, 0x1, 0x7f, 0x0, 0x1, 0x1, 0x7, 0xc}, 0x1, {0x40}}}, {0x8, 0x22eb, 0x1, {{0x0, 0x2, 0x2, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x2, {0x3, 0x3, 0x3, 0x5, 0x1, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x2}}}}}}}, 0x0) 300.629124ms ago: executing program 6 (id=3060): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 108.951273ms ago: executing program 2 (id=3061): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, r1, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f00000001c0)={0x30, r2, 0x1, 0x0, 0x0, 0x2, 0xf, 0x0}) 0s ago: executing program 9 (id=3062): syz_emit_ethernet(0xa56, &(0x7f0000000800)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9, 0x3}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "001958", 0xa20, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x1a}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41d5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x22, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x6, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x1f, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743474671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f025"}, {0x21, 0x7, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f021659ff5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x1f, 0x5, "090000000900000036da018dff16a70b8b1400001600e18e88605aa6be1a02a326a6bce65f81ed"}, {0x1f, 0xb, "d4e77f8854c2b77855807444dd5cbd4b0ddeac8f5280f5d9178b66796b4c15a850e4078c8a61f4a1936bfd2868bfb38d16aa1129954c7c1c102f6eea58a67659ed751b2a1dea57caba3e1ce15024c25eb512471954efdf4de80d7ca3c6"}, {0x0, 0xc8, "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"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): kets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.288340][T13850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.569051][T13805] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1095.724768][T13805] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1096.787004][ C1] vkms_vblank_simulate: vblank timer overrun [ 1097.316820][ C1] vkms_vblank_simulate: vblank timer overrun [ 1097.383526][ C1] vkms_vblank_simulate: vblank timer overrun [ 1097.383908][T13805] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1097.679081][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.617647][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.686352][ C1] vkms_vblank_simulate: vblank timer overrun [ 1098.727769][T13805] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1098.799101][T13850] hsr_slave_0: entered promiscuous mode [ 1098.800518][T13850] hsr_slave_1: entered promiscuous mode [ 1098.801532][T13850] debugfs: 'hsr0' already exists in 'hsr' [ 1098.801558][T13850] Cannot create hsr debugfs directory [ 1098.907855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.184931][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.311906][ C1] vkms_vblank_simulate: vblank timer overrun [ 1099.864440][ C1] vkms_vblank_simulate: vblank timer overrun [ 1100.669001][ C1] vkms_vblank_simulate: vblank timer overrun [ 1101.432690][T14335] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2526'. [ 1104.255634][T13850] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1104.920209][T13850] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1105.223135][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1105.227665][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1105.255322][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1105.257112][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1105.258702][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1106.179095][T13850] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1109.826791][ T5119] Bluetooth: hci1: command tx timeout [ 1111.357943][T10204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1111.953386][T10204] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1111.956667][T10204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1111.960431][T10204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1111.962216][T10204] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1111.985693][ T5119] Bluetooth: hci1: command tx timeout [ 1112.457927][T12977] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1112.615819][T12977] usb 3-1: device descriptor read/64, error -71 [ 1112.903758][T12977] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1113.225856][T12977] usb 3-1: device descriptor read/64, error -71 [ 1113.329261][T12977] usb usb3-port1: attempt power cycle [ 1113.669059][T12977] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 1113.693619][T12977] usb 3-1: device descriptor read/8, error -71 [ 1113.699004][ T992] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 1113.851792][ T992] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 1113.851822][ T992] usb 4-1: config 0 has no interface number 0 [ 1113.851899][ T992] usb 4-1: config 0 interface 41 has no altsetting 0 [ 1113.854996][ T992] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1113.855025][ T992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.855047][ T992] usb 4-1: Product: syz [ 1113.855062][ T992] usb 4-1: Manufacturer: syz [ 1113.855077][ T992] usb 4-1: SerialNumber: syz [ 1113.855792][ T2208] IPVS: stop unused estimator thread 0... [ 1113.878921][ T5896] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1113.929055][T12977] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1113.934509][ T992] usb 4-1: config 0 descriptor?? [ 1113.949777][T12977] usb 3-1: device descriptor read/8, error -71 [ 1114.041918][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1114.041954][ T5896] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1114.043503][ T5896] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1114.043533][ T5896] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1114.043555][ T5896] usb 7-1: Manufacturer: syz [ 1114.058957][ T5119] Bluetooth: hci1: command tx timeout [ 1114.059078][T10204] Bluetooth: hci3: command tx timeout [ 1114.060205][T12977] usb usb3-port1: unable to enumerate USB device [ 1114.060878][ T5896] usb 7-1: config 0 descriptor?? [ 1114.573975][ T992] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 1114.602599][ T992] usb 4-1: USB disconnect, device number 48 [ 1115.097959][ T5896] uclogic 0003:256C:006D.000A: failed retrieving string descriptor #100: -71 [ 1115.098028][ T5896] uclogic 0003:256C:006D.000A: failed retrieving pen parameters: -71 [ 1115.098048][ T5896] uclogic 0003:256C:006D.000A: failed probing pen v1 parameters: -71 [ 1115.098100][ T5896] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 1115.098214][ T5896] uclogic 0003:256C:006D.000A: probe with driver uclogic failed with error -71 [ 1115.121701][ T5896] usb 7-1: USB disconnect, device number 27 [ 1115.494505][T14434] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2546'. [ 1116.271694][ T5119] Bluetooth: hci1: command tx timeout [ 1116.271748][T10204] Bluetooth: hci3: command tx timeout [ 1118.309677][T10204] Bluetooth: hci3: command tx timeout [ 1118.515015][T14359] chnl_net:caif_netlink_parms(): no params data found [ 1120.186514][T14399] chnl_net:caif_netlink_parms(): no params data found [ 1120.379140][T10204] Bluetooth: hci3: command tx timeout [ 1120.836742][T14359] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.836955][T14359] bridge0: port 1(bridge_slave_0) entered disabled state [ 1120.837230][T14359] bridge_slave_0: entered allmulticast mode [ 1120.846104][T14359] bridge_slave_0: entered promiscuous mode [ 1120.892876][T14359] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.893036][T14359] bridge0: port 2(bridge_slave_1) entered disabled state [ 1120.893290][T14359] bridge_slave_1: entered allmulticast mode [ 1120.926727][T14359] bridge_slave_1: entered promiscuous mode [ 1121.068919][ T5972] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 1121.198966][ T5972] usb 7-1: device descriptor read/64, error -71 [ 1121.424548][T14359] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1121.439038][ T5972] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1121.468964][ T5993] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1121.513778][T14359] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1121.535531][T14399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.536306][T14399] bridge0: port 1(bridge_slave_0) entered disabled state [ 1121.536575][T14399] bridge_slave_0: entered allmulticast mode [ 1121.542985][T14399] bridge_slave_0: entered promiscuous mode [ 1121.569077][ T5972] usb 7-1: device descriptor read/64, error -71 [ 1121.619187][ T5993] usb 3-1: Using ep0 maxpacket: 16 [ 1121.621466][ T5993] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.621491][ T5993] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.624025][ T5993] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.624056][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.624078][ T5993] usb 3-1: Product: syz [ 1121.624093][ T5993] usb 3-1: Manufacturer: syz [ 1121.624103][ T5993] usb 3-1: SerialNumber: syz [ 1121.692146][ T5972] usb usb7-port1: attempt power cycle [ 1121.711873][T14399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.712415][T14399] bridge0: port 2(bridge_slave_1) entered disabled state [ 1121.712698][T14399] bridge_slave_1: entered allmulticast mode [ 1121.744444][T14399] bridge_slave_1: entered promiscuous mode [ 1121.905100][ T5993] usb 3-1: 0:2 : does not exist [ 1121.922572][T14359] team0: Port device team_slave_0 added [ 1121.941855][ T5993] usb 3-1: USB disconnect, device number 81 [ 1121.968147][T13937] udevd[13937]: setting owner of /dev/bus/usb/003/081 to uid=0, gid=0 failed: No such file or directory [ 1121.997804][T13937] udevd[13937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1122.038964][ T5972] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1122.060253][ T5972] usb 7-1: device descriptor read/8, error -71 [ 1122.303659][ T5972] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 1122.319657][ T5972] usb 7-1: device descriptor read/8, error -71 [ 1122.418060][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.418167][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.442583][ T5972] usb usb7-port1: unable to enumerate USB device [ 1123.282052][T14359] team0: Port device team_slave_1 added [ 1123.412918][T14399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.484331][T14504] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2560'. [ 1123.767291][T14399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1124.353781][T14359] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1124.354230][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1124.354301][T14359] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.165163][T14526] capability: warning: `syz.3.2565' uses deprecated v2 capabilities in a way that may be insecure [ 1128.473806][T14359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1128.473825][T14359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1128.473856][T14359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1128.477270][T14399] team0: Port device team_slave_0 added [ 1128.536668][T14399] team0: Port device team_slave_1 added [ 1128.798952][ T5993] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1129.081700][ T5993] usb 4-1: Using ep0 maxpacket: 16 [ 1129.625184][ T5993] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1129.625221][ T5993] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1129.628492][ T5993] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1129.628525][ T5993] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.628546][ T5993] usb 4-1: Product: syz [ 1129.628562][ T5993] usb 4-1: Manufacturer: syz [ 1129.628577][ T5993] usb 4-1: SerialNumber: syz [ 1129.701323][ T5993] usb 4-1: config 0 descriptor?? [ 1129.718409][ T5993] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1129.718451][ T5993] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1130.047607][T14546] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2570'. [ 1130.422435][ T5993] em28xx 4-1:0.0: chip ID is em2874 [ 1130.585405][T14399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1130.585419][T14399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.585439][T14399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1130.588174][T14399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1130.588188][T14399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1130.588209][T14399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1130.645014][ T5972] usb 4-1: USB disconnect, device number 49 [ 1130.835208][ T5972] em28xx 4-1:0.0: Disconnecting em28xx [ 1131.260555][ T5972] em28xx 4-1:0.0: Freeing device [ 1131.301012][T14359] hsr_slave_0: entered promiscuous mode [ 1131.308635][T14359] hsr_slave_1: entered promiscuous mode [ 1131.325622][T14359] debugfs: 'hsr0' already exists in 'hsr' [ 1131.325655][T14359] Cannot create hsr debugfs directory [ 1131.412207][T14553] 9pnet_fd: Insufficient options for proto=fd [ 1131.519006][ T7461] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1131.668950][ T7461] usb 7-1: Using ep0 maxpacket: 32 [ 1131.671693][ T7461] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1131.671729][ T7461] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1131.675023][ T7461] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1131.675053][ T7461] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.675075][ T7461] usb 7-1: Product: syz [ 1131.675091][ T7461] usb 7-1: Manufacturer: syz [ 1131.675105][ T7461] usb 7-1: SerialNumber: syz [ 1131.742272][T14550] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1132.049577][T14399] hsr_slave_0: entered promiscuous mode [ 1132.053064][T14399] hsr_slave_1: entered promiscuous mode [ 1132.055876][T14399] debugfs: 'hsr0' already exists in 'hsr' [ 1132.059986][T14399] Cannot create hsr debugfs directory [ 1133.200895][ T7461] usb 7-1: USB disconnect, device number 32 [ 1133.347659][ T2208] bridge_slave_1: left allmulticast mode [ 1133.347707][ T2208] bridge_slave_1: left promiscuous mode [ 1133.352070][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.452698][ T2208] bridge_slave_0: left allmulticast mode [ 1133.452730][ T2208] bridge_slave_0: left promiscuous mode [ 1133.453510][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.377662][ T2208] bridge_slave_1: left allmulticast mode [ 1134.377695][ T2208] bridge_slave_1: left promiscuous mode [ 1134.377993][ T2208] bridge0: port 2(bridge_slave_1) entered disabled state [ 1134.762865][ T2208] bridge_slave_0: left allmulticast mode [ 1134.762897][ T2208] bridge_slave_0: left promiscuous mode [ 1134.763149][ T2208] bridge0: port 1(bridge_slave_0) entered disabled state [ 1134.894521][T14596] 9pnet_fd: Insufficient options for proto=fd [ 1134.899231][ T5993] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1135.133637][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1135.133676][ T5993] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1135.169532][ T5993] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1135.169564][ T5993] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1135.169586][ T5993] usb 3-1: Manufacturer: syz [ 1135.193802][ T5993] usb 3-1: config 0 descriptor?? [ 1135.389952][ T2208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.489784][ T2208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1135.555473][ T2208] bond0 (unregistering): Released all slaves [ 1135.631373][ T5993] usbhid 3-1:0.0: can't add hid device: -32 [ 1135.631506][ T5993] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1135.669430][ T5993] usb 3-1: USB disconnect, device number 82 [ 1136.171109][ T2208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1136.301083][ T2208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1136.359900][ T5972] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1136.392692][ T2208] bond0 (unregistering): Released all slaves [ 1136.544223][ T5972] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1136.544257][ T5972] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.567081][ T5972] usb 4-1: config 0 descriptor?? [ 1136.653913][ T5972] cp210x 4-1:0.0: cp210x converter detected [ 1137.019249][ T5972] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1137.226698][ T5972] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 1137.226730][ T5972] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1137.275053][ T5972] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1137.444246][ T5972] usb 4-1: USB disconnect, device number 50 [ 1137.476739][ T5972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1137.477574][ T5972] cp210x 4-1:0.0: device disconnected [ 1137.709078][ T2208] hsr_slave_0: left promiscuous mode [ 1137.729046][ T2208] hsr_slave_1: left promiscuous mode [ 1137.730180][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1137.769871][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1138.980631][ T2208] hsr_slave_0: left promiscuous mode [ 1139.033020][ T2208] hsr_slave_1: left promiscuous mode [ 1139.033878][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1139.094423][T14630] 9pnet_fd: Insufficient options for proto=fd [ 1139.138489][ T2208] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1139.619027][T12977] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1139.769003][T12977] usb 3-1: Using ep0 maxpacket: 32 [ 1139.803899][T12977] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1139.803926][T12977] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1139.855311][T12977] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1139.855369][T12977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.855523][T12977] usb 3-1: Product: syz [ 1139.855583][T12977] usb 3-1: Manufacturer: syz [ 1139.855642][T12977] usb 3-1: SerialNumber: syz [ 1139.927396][T14633] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1140.701665][ T2208] team0 (unregistering): Port device team_slave_1 removed [ 1140.960566][ T2208] team0 (unregistering): Port device team_slave_0 removed [ 1141.635990][T12977] usb 3-1: USB disconnect, device number 83 [ 1144.669731][ T2208] team0 (unregistering): Port device team_slave_1 removed [ 1144.789569][ T2208] team0 (unregistering): Port device team_slave_0 removed [ 1144.838966][T12977] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1145.032031][T12977] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1145.032066][T12977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.036187][T12977] usb 3-1: config 0 descriptor?? [ 1145.046249][T12977] cp210x 3-1:0.0: cp210x converter detected [ 1145.448521][T12977] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1145.715902][T12977] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -121 [ 1145.715935][T12977] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1145.725356][T12977] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1145.918252][T14663] 9pnet_fd: Insufficient options for proto=fd [ 1145.959810][ T5993] usb 3-1: USB disconnect, device number 84 [ 1145.973357][ T5993] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1145.974460][ T5993] cp210x 3-1:0.0: device disconnected [ 1147.111230][ T992] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1148.080000][ T992] usb 7-1: Using ep0 maxpacket: 32 [ 1148.084062][ T992] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1148.084102][ T992] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1148.123063][ T992] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1148.123098][ T992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.123121][ T992] usb 7-1: Product: syz [ 1148.123136][ T992] usb 7-1: Manufacturer: syz [ 1148.123152][ T992] usb 7-1: SerialNumber: syz [ 1148.159118][T14671] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1149.927178][T14696] 9pnet_fd: Insufficient options for proto=fd [ 1150.902152][ T992] usb 7-1: USB disconnect, device number 33 [ 1151.258897][ T5119] Bluetooth: hci5: command 0x1003 tx timeout [ 1151.259055][T10204] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1153.000733][T14359] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1153.100577][T14359] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1153.160089][T14359] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1153.258306][T14359] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1153.739749][ T7461] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1153.825392][T14399] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1153.866693][T14399] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1153.898908][ T7461] usb 3-1: Using ep0 maxpacket: 16 [ 1153.905660][ T7461] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.905681][ T7461] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1153.907265][T14399] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1153.945858][ T7461] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1153.945883][ T7461] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.945900][ T7461] usb 3-1: Product: syz [ 1153.945911][ T7461] usb 3-1: Manufacturer: syz [ 1153.945923][ T7461] usb 3-1: SerialNumber: syz [ 1154.054981][T14399] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1154.261325][ T7461] usb 3-1: 0:2 : does not exist [ 1154.261419][ T7461] usb 3-1: unit 4 not found! [ 1154.339201][ T7461] usb 3-1: USB disconnect, device number 85 [ 1154.565246][T13937] udevd[13937]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1156.560224][T14359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.194383][T14359] 8021q: adding VLAN 0 to HW filter on device team0 [ 1157.268596][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1157.279085][ T2208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1157.338097][T14399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1157.845480][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1157.845580][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1158.086432][T14399] 8021q: adding VLAN 0 to HW filter on device team0 [ 1158.191717][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1158.191883][T13127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1164.909691][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.911917][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1166.039142][ T992] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 1166.376891][ T992] usb 7-1: device descriptor read/64, error -71 [ 1167.390649][ T992] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1167.579396][ T992] usb 7-1: device descriptor read/64, error -71 [ 1167.730334][ T992] usb usb7-port1: attempt power cycle [ 1168.688982][ T992] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 1168.709667][ T992] usb 7-1: device descriptor read/8, error -71 [ 1169.667821][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1169.687979][ T5119] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1169.697912][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1169.709537][ T5119] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1169.711222][ T5119] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1169.748994][ T5896] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1170.260993][ T5896] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1170.261027][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.144250][ T5896] usb 3-1: config 0 descriptor?? [ 1171.157800][ T5896] cp210x 3-1:0.0: cp210x converter detected [ 1171.819370][ T5119] Bluetooth: hci1: command tx timeout [ 1173.898910][ T5119] Bluetooth: hci1: command tx timeout [ 1175.279806][ T5896] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -71 [ 1175.281743][ T5896] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 1175.281771][ T5896] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1175.376854][ T5896] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1175.421287][ T5896] usb 3-1: USB disconnect, device number 86 [ 1175.484072][ T5896] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1175.519734][ T5896] cp210x 3-1:0.0: device disconnected [ 1175.794692][T10204] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1175.804199][T10204] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1175.807859][T10204] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1175.812632][T10204] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1175.817374][T10204] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1175.979924][T10204] Bluetooth: hci1: command tx timeout [ 1177.900576][T10204] Bluetooth: hci3: command tx timeout [ 1178.298477][T10204] Bluetooth: hci1: command tx timeout [ 1179.978915][T10204] Bluetooth: hci3: command tx timeout [ 1182.106746][T10204] Bluetooth: hci3: command tx timeout [ 1183.468997][ T7461] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1183.689343][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1183.689551][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1184.138966][T10204] Bluetooth: hci3: command tx timeout [ 1185.658088][ T7461] usb 4-1: device descriptor read/all, error -71 [ 1190.929040][ T5875] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1191.679222][ T5875] usb 3-1: device descriptor read/64, error -71 [ 1192.028997][ T5875] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1192.158982][ T5875] usb 3-1: device descriptor read/64, error -71 [ 1192.269499][ T5875] usb usb3-port1: attempt power cycle [ 1192.668898][ T5875] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1192.689824][ T5875] usb 3-1: device descriptor read/8, error -71 [ 1192.990078][ T5875] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1193.043512][ T5875] usb 3-1: device descriptor read/8, error -71 [ 1193.150329][ T5875] usb usb3-port1: unable to enumerate USB device [ 1196.386160][T14824] chnl_net:caif_netlink_parms(): no params data found [ 1200.508912][T12977] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1200.614560][T14840] chnl_net:caif_netlink_parms(): no params data found [ 1200.692010][T12977] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.692075][T12977] usb 4-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 1200.692099][T12977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.742924][T12977] usb 4-1: config 0 descriptor?? [ 1200.779130][ T5993] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1200.949001][ T5993] usb 3-1: Using ep0 maxpacket: 16 [ 1200.952222][ T5993] usb 3-1: config 10 has an invalid interface number: 93 but max is 0 [ 1200.952252][ T5993] usb 3-1: config 10 has no interface number 0 [ 1200.956642][ T5993] usb 3-1: New USB device found, idVendor=14aa, idProduct=0301, bcdDevice=1e.08 [ 1200.956670][ T5993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.956737][ T5993] usb 3-1: Product: syz [ 1200.956751][ T5993] usb 3-1: Manufacturer: syz [ 1200.956764][ T5993] usb 3-1: SerialNumber: syz [ 1201.074182][ T5993] dvb-usb: found a 'WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)' in warm state. [ 1201.075042][ T5993] dvb-usb: bulk message failed: -22 (2/0) [ 1201.075143][ T5993] dvb-usb: will use the device's hardware PID filter (table count: 15). [ 1201.110007][ T5993] dvbdev: DVB: registering new adapter (WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U)) [ 1201.110078][ T5993] usb 3-1: media controller created [ 1201.136745][ T5993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1201.281085][ T5993] usb 3-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)... [ 1201.281774][ T5993] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered. [ 1201.289712][T12977] usb 4-1: USB disconnect, device number 53 [ 1201.619057][T11676] bridge_slave_1: left allmulticast mode [ 1201.619089][T11676] bridge_slave_1: left promiscuous mode [ 1201.619373][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1201.726353][T11676] bridge_slave_0: left allmulticast mode [ 1201.726386][T11676] bridge_slave_0: left promiscuous mode [ 1201.726677][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.760058][ T5993] rc_core: IR keymap rc-dtt200u not found [ 1203.760081][ T5993] Registered IR keymap rc-empty [ 1205.653164][ T5993] rc rc0: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 1206.162549][ T5993] input: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input41 [ 1206.196657][ T5993] dvb-usb: schedule remote query interval to 300 msecs. [ 1206.196689][ T5993] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T USB2.0 (WT-200U) successfully initialized and connected. [ 1206.220300][ T5993] usb 3-1: USB disconnect, device number 91 [ 1207.042229][ T5993] dvb-usb: WideView/Yuan/Yakumo/Hama/Typhoon DVB-T successfully deinitialized and disconnected. [ 1211.059017][ T5897] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1211.258933][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 1211.261531][ T5897] usb 4-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1211.261565][ T5897] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1211.264831][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1211.264861][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1211.264883][ T5897] usb 4-1: Product: syz [ 1211.264899][ T5897] usb 4-1: Manufacturer: syz [ 1211.264913][ T5897] usb 4-1: SerialNumber: syz [ 1211.355549][T15060] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1215.457541][ T5897] usb 4-1: USB disconnect, device number 54 [ 1215.485242][T15052] udevd[15052]: setting mode of /dev/bus/usb/004/054 to 020664 failed: No such file or directory [ 1215.485493][T15052] udevd[15052]: setting owner of /dev/bus/usb/004/054 to uid=0, gid=0 failed: No such file or directory [ 1216.168954][T14883] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1216.471169][T14883] usb 3-1: Using ep0 maxpacket: 16 [ 1216.473834][T14883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.473870][T14883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.473914][T14883] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1216.473939][T14883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.485496][T14883] usb 3-1: config 0 descriptor?? [ 1217.218898][T12977] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 1217.493015][T12977] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.493080][T12977] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1217.493127][T12977] usb 7-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 1217.493150][T12977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.547241][T12977] usb 7-1: config 0 descriptor?? [ 1217.599038][T14883] hid-multitouch 0003:1FD2:6007.000B: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 1217.606112][T12977] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1217.678277][T12977] usb 3-1: USB disconnect, device number 92 [ 1217.895768][T15085] fido_id[15085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1218.531539][T11676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1218.591674][T11676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1218.615158][T11676] bond0 (unregistering): Released all slaves [ 1219.007440][T14824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.007897][T14824] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.008158][T14824] bridge_slave_0: entered allmulticast mode [ 1219.013791][T14824] bridge_slave_0: entered promiscuous mode [ 1219.052857][T14824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.053004][T14824] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.053419][T14824] bridge_slave_1: entered allmulticast mode [ 1219.057772][T14824] bridge_slave_1: entered promiscuous mode [ 1219.189328][T11676] hsr_slave_0: left promiscuous mode [ 1219.355095][T14883] usb 7-1: USB disconnect, device number 38 [ 1219.367098][T11676] hsr_slave_1: left promiscuous mode [ 1219.369640][T11676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1219.431045][T11676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1224.308920][T14883] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1224.472755][T14883] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1224.472786][T14883] usb 7-1: config 0 has no interface number 0 [ 1224.472845][T14883] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1224.472868][T14883] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 1224.472896][T14883] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1224.472923][T14883] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 1224.472950][T14883] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 1224.472976][T14883] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1224.473021][T14883] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1224.473045][T14883] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.610724][T14883] usb 7-1: config 0 descriptor?? [ 1224.611808][T15127] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1224.612063][T15127] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1224.679022][T14883] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1224.923565][T14883] usb 7-1: USB disconnect, device number 39 [ 1224.940984][T14883] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1225.165574][T11676] team0 (unregistering): Port device team_slave_1 removed [ 1225.397481][T12977] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1225.449708][T11676] team0 (unregistering): Port device team_slave_0 removed [ 1225.552828][T12977] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1225.552860][T12977] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1225.552880][T12977] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.552899][T12977] usb 3-1: config 220 has no interface number 2 [ 1225.552977][T12977] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1225.553006][T12977] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1225.553024][T12977] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1225.553044][T12977] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1225.556273][T12977] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1225.556305][T12977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.556327][T12977] usb 3-1: Product: syz [ 1225.556343][T12977] usb 3-1: Manufacturer: syz [ 1225.556357][T12977] usb 3-1: SerialNumber: syz [ 1225.847967][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1225.861602][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1225.867351][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1225.907995][T12977] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1225.908047][T12977] uvcvideo 3-1:220.0: No valid video chain found. [ 1225.908128][T12977] usb 3-1: selecting invalid altsetting 0 [ 1225.962446][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1225.978754][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1225.991217][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1225.997318][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1226.004166][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1226.012276][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1226.019492][T15137] kvm: kvm [15135]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x6ee [ 1226.073588][T12977] usb 3-1: selecting invalid altsetting 0 [ 1226.073647][T12977] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1226.078466][T12977] usb 3-1: USB disconnect, device number 93 [ 1227.290897][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1227.312956][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1227.362636][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1227.391663][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1227.394818][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1230.939435][T10204] Bluetooth: hci5: command tx timeout [ 1232.421955][T15164] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 1232.841800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.018961][T10204] Bluetooth: hci5: command tx timeout [ 1233.040540][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.142743][ C1] vkms_vblank_simulate: vblank timer overrun [ 1233.255016][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1233.351904][T14883] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1233.389666][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1233.392997][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1233.395051][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1233.421160][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1233.502111][T14883] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1233.502144][T14883] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1233.502163][T14883] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1233.502185][T14883] usb 3-1: config 220 has no interface number 2 [ 1233.502280][T14883] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1233.502309][T14883] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1233.502329][T14883] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1233.502347][T14883] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1233.505514][T14883] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1233.505545][T14883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.505569][T14883] usb 3-1: Product: syz [ 1233.505584][T14883] usb 3-1: Manufacturer: syz [ 1233.505599][T14883] usb 3-1: SerialNumber: syz [ 1233.551832][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.349855][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.506277][T14883] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1234.506315][T14883] uvcvideo 3-1:220.0: No valid video chain found. [ 1234.506378][T14883] usb 3-1: selecting invalid altsetting 0 [ 1234.588108][T14883] usb 3-1: selecting invalid altsetting 0 [ 1234.588152][T14883] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1234.611034][T14883] usb 3-1: USB disconnect, device number 94 [ 1234.613214][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.660438][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.679649][T15052] udevd[15052]: setting owner of /dev/bus/usb/003/094 to uid=0, gid=0 failed: No such file or directory [ 1234.755380][ C1] vkms_vblank_simulate: vblank timer overrun [ 1234.949217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.062865][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.098959][ T5119] Bluetooth: hci5: command tx timeout [ 1235.149007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1235.514234][ T5119] Bluetooth: hci6: command tx timeout [ 1235.653802][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.113036][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.363352][T14840] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1236.401626][ C1] vkms_vblank_simulate: vblank timer overrun [ 1236.522393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.066890][ C1] vkms_vblank_simulate: vblank timer overrun [ 1237.180460][ T5119] Bluetooth: hci5: command tx timeout [ 1237.588826][ T5119] Bluetooth: hci6: command tx timeout [ 1238.443735][ C1] vkms_vblank_simulate: vblank timer overrun [ 1238.589425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.660731][ T5119] Bluetooth: hci6: command tx timeout [ 1241.759122][ T5119] Bluetooth: hci6: command tx timeout [ 1243.722330][T10204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1243.763555][T10204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1243.774367][T10204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1243.819661][T10204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1243.832145][T10204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1244.608811][ T5972] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1245.216694][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.216772][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.531820][ T5972] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1245.531856][ T5972] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.536186][ T5972] usb 3-1: config 0 descriptor?? [ 1245.563798][ T5972] cp210x 3-1:0.0: cp210x converter detected [ 1245.758992][T14883] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1245.898986][ T5119] Bluetooth: hci1: command tx timeout [ 1245.921263][T14883] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1245.921295][T14883] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1245.921316][T14883] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.921337][T14883] usb 7-1: config 220 has no interface number 2 [ 1245.921416][T14883] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1245.921446][T14883] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1245.921467][T14883] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1245.921485][T14883] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1245.924634][T14883] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1245.924666][T14883] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1245.924689][T14883] usb 7-1: Product: syz [ 1245.924705][T14883] usb 7-1: Manufacturer: syz [ 1245.924718][T14883] usb 7-1: SerialNumber: syz [ 1245.968317][ T5972] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1246.050225][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1246.070888][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1246.160530][ T5972] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1246.198268][T15145] chnl_net:caif_netlink_parms(): no params data found [ 1246.283888][T14883] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1246.283924][T14883] uvcvideo 7-1:220.0: No valid video chain found. [ 1246.283984][T14883] usb 7-1: selecting invalid altsetting 0 [ 1246.306739][ T5972] usb 3-1: USB disconnect, device number 95 [ 1246.362409][T14883] usb 7-1: selecting invalid altsetting 0 [ 1246.362452][T14883] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1246.386912][T14883] usb 7-1: USB disconnect, device number 40 [ 1246.525048][ T5972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1246.640515][T15173] chnl_net:caif_netlink_parms(): no params data found [ 1246.659199][ T5972] cp210x 3-1:0.0: device disconnected [ 1247.198923][T14883] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1247.356189][T14883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.356217][T14883] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1247.357794][T14883] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1247.357822][T14883] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1247.357843][T14883] usb 3-1: Manufacturer: syz [ 1247.404716][T14883] usb 3-1: config 0 descriptor?? [ 1247.978977][ T5119] Bluetooth: hci1: command tx timeout [ 1248.504435][T15145] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.504655][T15145] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.504904][T15145] bridge_slave_0: entered allmulticast mode [ 1248.506897][T15145] bridge_slave_0: entered promiscuous mode [ 1248.534860][T15145] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.535052][T15145] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.535325][T15145] bridge_slave_1: entered allmulticast mode [ 1248.542841][T15145] bridge_slave_1: entered promiscuous mode [ 1249.085198][T15173] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.085340][T15173] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.085596][T15173] bridge_slave_0: entered allmulticast mode [ 1249.087563][T15173] bridge_slave_0: entered promiscuous mode [ 1249.116636][T15145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.117295][T15173] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.117501][T15173] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.117702][T15173] bridge_slave_1: entered allmulticast mode [ 1249.122231][T15173] bridge_slave_1: entered promiscuous mode [ 1249.130569][T15145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.643718][T15173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.652356][T15145] team0: Port device team_slave_0 added [ 1249.667408][T15173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.852464][T15145] team0: Port device team_slave_1 added [ 1249.977763][ T9] usb 3-1: USB disconnect, device number 96 [ 1250.058950][ T5119] Bluetooth: hci1: command tx timeout [ 1251.261477][T15173] team0: Port device team_slave_0 added [ 1251.345607][T15145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.345621][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.345641][T15145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.401637][T15173] team0: Port device team_slave_1 added [ 1251.408118][T15145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.408137][T15145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.408167][T15145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.519065][T14421] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1251.679486][T14421] usb 3-1: Using ep0 maxpacket: 16 [ 1251.691368][T14421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1251.691405][T14421] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1251.691451][T14421] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1251.691476][T14421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.702678][T14421] usb 3-1: config 0 descriptor?? [ 1251.788551][T15173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1251.788569][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.788600][T15173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1251.858967][ T5897] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 1251.921642][T15173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1251.921660][T15173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1251.921688][T15173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1251.922763][T15215] chnl_net:caif_netlink_parms(): no params data found [ 1252.018304][ T5897] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1252.018334][ T5897] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1252.018354][ T5897] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.018455][ T5897] usb 7-1: config 220 has no interface number 2 [ 1252.018601][ T5897] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1252.018631][ T5897] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1252.018651][ T5897] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1252.018670][ T5897] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1252.071624][ T5897] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1252.071729][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1252.071755][ T5897] usb 7-1: Product: syz [ 1252.071773][ T5897] usb 7-1: Manufacturer: syz [ 1252.071790][ T5897] usb 7-1: SerialNumber: syz [ 1252.139050][ T5119] Bluetooth: hci1: command tx timeout [ 1252.174616][T14421] usbhid 3-1:0.0: can't add hid device: -71 [ 1252.174881][T14421] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1252.192043][T14421] usb 3-1: USB disconnect, device number 97 [ 1252.301201][T15145] hsr_slave_0: entered promiscuous mode [ 1252.302730][T15145] hsr_slave_1: entered promiscuous mode [ 1252.415905][ T5897] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1252.415941][ T5897] uvcvideo 7-1:220.0: No valid video chain found. [ 1252.416005][ T5897] usb 7-1: selecting invalid altsetting 0 [ 1252.496731][ T5897] usb 7-1: selecting invalid altsetting 0 [ 1252.496775][ T5897] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1252.503929][ T5897] usb 7-1: USB disconnect, device number 41 [ 1253.452157][T15173] hsr_slave_0: entered promiscuous mode [ 1253.457182][T15173] hsr_slave_1: entered promiscuous mode [ 1253.458531][T15173] debugfs: 'hsr0' already exists in 'hsr' [ 1253.458567][T15173] Cannot create hsr debugfs directory [ 1253.916001][T11676] bridge_slave_1: left allmulticast mode [ 1253.916035][T11676] bridge_slave_1: left promiscuous mode [ 1253.916309][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.460226][T11676] bridge_slave_0: left allmulticast mode [ 1254.460252][T11676] bridge_slave_0: left promiscuous mode [ 1254.460464][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.265126][T11676] bridge_slave_1: left allmulticast mode [ 1256.265150][T11676] bridge_slave_1: left promiscuous mode [ 1256.265320][T11676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.363561][T11676] bridge_slave_0: left allmulticast mode [ 1256.363591][T11676] bridge_slave_0: left promiscuous mode [ 1256.363840][T11676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.718901][T11676] bond0 (unregistering): Released all slaves [ 1256.885500][T11676] bond0 (unregistering): Released all slaves [ 1258.198274][T15358] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2750'. [ 1258.852093][T11676] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1258.909668][T11676] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1258.931906][T11676] bond0 (unregistering): Released all slaves [ 1259.542446][T15215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.542885][T15215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.543632][T15215] bridge_slave_0: entered allmulticast mode [ 1259.552046][T15215] bridge_slave_0: entered promiscuous mode [ 1259.802646][T15215] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.804064][T15215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.809223][T15215] bridge_slave_1: entered allmulticast mode [ 1259.912370][T15215] bridge_slave_1: entered promiscuous mode [ 1261.643240][T15215] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1261.718945][T14883] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1261.754972][T15215] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1261.943256][T14883] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.943310][T14883] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1261.974566][T14883] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1261.974599][T14883] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1261.974621][T14883] usb 3-1: Manufacturer: syz [ 1262.004800][T14883] usb 3-1: config 0 descriptor?? [ 1262.023230][T14883] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1262.033677][T15384] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2758'. [ 1262.230041][T11676] hsr_slave_0: left promiscuous mode [ 1262.268986][T11676] hsr_slave_1: left promiscuous mode [ 1262.269815][T11676] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.294819][T11676] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1263.689935][T11676] team0 (unregistering): Port device team_slave_1 removed [ 1264.009555][T11676] team0 (unregistering): Port device team_slave_0 removed [ 1264.141497][T14883] usb 3-1: USB disconnect, device number 98 [ 1264.598935][T14883] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1264.785800][T14883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1264.785837][T14883] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1264.785924][T14883] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1264.785971][T14883] usb 3-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00 [ 1264.785996][T14883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.796377][T14883] usb 3-1: config 0 descriptor?? [ 1265.267538][T14883] usbhid 3-1:0.0: can't add hid device: -71 [ 1265.267678][T14883] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1265.273418][T14883] usb 3-1: USB disconnect, device number 99 [ 1268.292917][T15215] team0: Port device team_slave_0 added [ 1268.612700][T15215] team0: Port device team_slave_1 added [ 1271.169681][T15215] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1271.169702][T15215] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.169735][T15215] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1271.667572][T15215] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1271.667688][T15215] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1271.667882][T15215] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.821975][T15447] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2774'. [ 1274.951330][T15215] hsr_slave_0: entered promiscuous mode [ 1274.966485][T15215] hsr_slave_1: entered promiscuous mode [ 1274.969416][T15215] debugfs: 'hsr0' already exists in 'hsr' [ 1274.969448][T15215] Cannot create hsr debugfs directory [ 1279.901566][T15145] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1279.947489][T15145] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1279.997717][T15145] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1280.745021][T15145] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1281.089765][T15173] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1281.178842][T15173] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1281.217653][T15173] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1281.292201][T15173] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1281.484370][T15215] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1281.547401][T15215] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1281.595727][T15215] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1281.635268][T15215] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1281.977928][T15145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1282.091502][T15145] 8021q: adding VLAN 0 to HW filter on device team0 [ 1282.819161][ T1023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.819365][ T1023] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1282.902383][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.902532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1282.932342][T15173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.175409][T15173] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.243335][T15215] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.288012][T13127] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.288243][T13127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.371143][T13127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.372119][T13127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.531259][T15215] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.720256][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.722691][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.798530][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.806120][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1284.887699][T15145] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.324753][T15215] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1291.682565][T15173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1293.610324][T15215] veth0_vlan: entered promiscuous mode [ 1293.640550][T15215] veth1_vlan: entered promiscuous mode [ 1293.693362][T15640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2799'. [ 1293.778428][T15215] veth0_macvtap: entered promiscuous mode [ 1293.955845][T10204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1293.986952][T10204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1293.997185][T10204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1294.004253][T10204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1294.005114][T10204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1294.474921][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1294.671292][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1294.706833][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1294.889771][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1294.894002][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1296.154117][T10204] Bluetooth: hci2: command tx timeout [ 1297.247409][ T5119] Bluetooth: hci3: command tx timeout [ 1297.369448][T15215] veth1_macvtap: entered promiscuous mode [ 1298.708798][ T5119] Bluetooth: hci2: command tx timeout [ 1300.187656][ T5119] Bluetooth: hci3: command tx timeout [ 1303.119651][ T5119] Bluetooth: hci2: command tx timeout [ 1303.119688][ T5119] Bluetooth: hci3: command tx timeout [ 1305.199143][ T5119] Bluetooth: hci2: command tx timeout [ 1305.229149][T10204] Bluetooth: hci3: command tx timeout [ 1305.820907][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1305.856358][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1305.867918][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1305.883891][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1305.887012][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1307.123775][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.123853][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1308.327646][ T5119] Bluetooth: hci5: command tx timeout [ 1310.389266][ T5119] Bluetooth: hci5: command tx timeout [ 1313.768972][ T5119] Bluetooth: hci5: command tx timeout [ 1314.898919][ T992] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 1314.958079][T15728] fuse: Unknown parameter 'grou00000000000000000000' [ 1315.049217][ T992] usb 7-1: Using ep0 maxpacket: 32 [ 1315.053108][ T992] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1315.053140][ T992] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1315.056618][ T992] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1315.056649][ T992] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1315.056669][ T992] usb 7-1: Product: syz [ 1315.056683][ T992] usb 7-1: Manufacturer: syz [ 1315.056697][ T992] usb 7-1: SerialNumber: syz [ 1315.317956][T15718] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1315.862765][ T5119] Bluetooth: hci5: command tx timeout [ 1316.452192][ T992] usb 7-1: USB disconnect, device number 42 [ 1316.754278][ T6014] bridge_slave_1: left allmulticast mode [ 1316.754310][ T6014] bridge_slave_1: left promiscuous mode [ 1316.754566][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.856989][ T6014] bridge_slave_0: left allmulticast mode [ 1316.857014][ T6014] bridge_slave_0: left promiscuous mode [ 1316.857192][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.678878][ T6777] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1320.310135][ T6777] usb 3-1: Using ep0 maxpacket: 32 [ 1320.316037][ T6777] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1320.316070][ T6777] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1320.345905][ T6777] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1320.345937][ T6777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1320.345958][ T6777] usb 3-1: Product: syz [ 1320.345974][ T6777] usb 3-1: Manufacturer: syz [ 1320.345989][ T6777] usb 3-1: SerialNumber: syz [ 1320.399505][T15766] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1321.103342][ T6777] usb 3-1: USB disconnect, device number 100 [ 1321.489754][T15240] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 1321.668926][T15240] usb 7-1: Using ep0 maxpacket: 16 [ 1321.671339][T15240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.671369][T15240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1321.671409][T15240] usb 7-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1321.671432][T15240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.676923][T15240] usb 7-1: config 0 descriptor?? [ 1321.973960][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1322.053444][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1322.137139][ T6014] bond0 (unregistering): Released all slaves [ 1322.324710][T15240] usb 7-1: language id specifier not provided by device, defaulting to English [ 1322.434518][T15643] chnl_net:caif_netlink_parms(): no params data found [ 1322.444927][T15653] chnl_net:caif_netlink_parms(): no params data found [ 1322.555511][T15240] letsketch 0003:6161:4D15.000C: Device info: ☲ [ 1322.576700][T15796] snd_dummy snd_dummy.0: control 5:65279:0:syz0:0 is already present [ 1322.754860][T15240] letsketch 0003:6161:4D15.000C: Device info: Ÿ [ 1322.802440][ T6014] hsr_slave_0: left promiscuous mode [ 1322.818925][ T6014] hsr_slave_1: left promiscuous mode [ 1322.820135][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1322.842389][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1322.955784][T15240] letsketch 0003:6161:4D15.000C: Device info: ఁ [ 1323.197568][T15240] usb 7-1: Max retries (5) exceeded reading string descriptor 1 [ 1323.197633][T15240] letsketch 0003:6161:4D15.000C: probe with driver letsketch failed with error -71 [ 1323.211966][T15240] usb 7-1: USB disconnect, device number 43 [ 1325.636190][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1326.110416][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.120199][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1326.221425][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.359474][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.424692][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.488869][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.553113][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.616978][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.672912][ C0] vkms_vblank_simulate: vblank timer overrun [ 1326.849230][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.091776][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.160616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.525431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.669590][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.893685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.106906][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.185831][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.397450][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.558218][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.661493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1328.727678][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.171100][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.351252][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.442875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.517129][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.613222][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.687107][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.836841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1329.961215][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.020271][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.108934][T15240] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1330.210902][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.335599][T15240] usb 3-1: Using ep0 maxpacket: 16 [ 1330.337867][T15240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.337901][T15240] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.337940][T15240] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1330.337957][T15240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.347354][T15240] usb 3-1: config 0 descriptor?? [ 1330.418577][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.498286][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.597686][ C0] vkms_vblank_simulate: vblank timer overrun [ 1330.671882][ C0] vkms_vblank_simulate: vblank timer overrun [ 1331.033146][T15240] usb 3-1: language id specifier not provided by device, defaulting to English [ 1331.090523][T15680] chnl_net:caif_netlink_parms(): no params data found [ 1331.234503][T15240] letsketch 0003:6161:4D15.000D: Device info: ☲ [ 1331.435724][T15240] letsketch 0003:6161:4D15.000D: Device info: Ÿ [ 1331.987672][T15240] letsketch 0003:6161:4D15.000D: Device info: ఁ [ 1332.317778][T15240] usb 3-1: Max retries (5) exceeded reading string descriptor 1 [ 1332.317873][T15240] letsketch 0003:6161:4D15.000D: probe with driver letsketch failed with error -71 [ 1332.369852][T15240] usb 3-1: USB disconnect, device number 101 [ 1332.447270][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.447414][T15643] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.447688][T15643] bridge_slave_0: entered allmulticast mode [ 1332.463940][T15643] bridge_slave_0: entered promiscuous mode [ 1332.468316][T15653] bridge0: port 1(bridge_slave_0) entered blocking state [ 1332.468497][T15653] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.469696][T15653] bridge_slave_0: entered allmulticast mode [ 1332.473244][T15653] bridge_slave_0: entered promiscuous mode [ 1332.632031][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.632130][T15643] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.632341][T15643] bridge_slave_1: entered allmulticast mode [ 1332.634366][T15643] bridge_slave_1: entered promiscuous mode [ 1332.635477][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1332.635569][T15653] bridge0: port 2(bridge_slave_1) entered disabled state [ 1332.635718][T15653] bridge_slave_1: entered allmulticast mode [ 1332.638187][T15653] bridge_slave_1: entered promiscuous mode [ 1332.719802][T15848] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2855'. [ 1334.323894][T15643] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.369909][T15653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1334.395821][T15643] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.468975][ T5875] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1334.492804][T15653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1334.943530][ T5875] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1334.943770][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.187885][ T5875] usb 3-1: config 0 descriptor?? [ 1335.197597][ T5875] cp210x 3-1:0.0: cp210x converter detected [ 1335.605386][ T5875] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1335.619215][T15859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1335.621505][T15859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1335.627756][ T5875] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -121 [ 1335.627814][ T5875] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1335.668049][ T5875] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1335.828262][ T5875] usb 3-1: USB disconnect, device number 102 [ 1335.923524][T15680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.926158][T15680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.979366][ T5875] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1336.012441][T15680] bridge_slave_0: entered allmulticast mode [ 1336.061019][ T5875] cp210x 3-1:0.0: device disconnected [ 1336.162730][T15680] bridge_slave_0: entered promiscuous mode [ 1336.642810][T15680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1336.643047][T15680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1336.643311][T15680] bridge_slave_1: entered allmulticast mode [ 1336.672985][T15680] bridge_slave_1: entered promiscuous mode [ 1336.678645][T15643] team0: Port device team_slave_0 added [ 1336.705780][T15653] team0: Port device team_slave_0 added [ 1336.803798][T15643] team0: Port device team_slave_1 added [ 1336.808114][T15653] team0: Port device team_slave_1 added [ 1338.632613][ T9] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 1338.710272][T15680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1338.788943][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 1338.792651][ T9] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 1338.792675][ T9] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1338.795562][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1338.795584][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.795598][ T9] usb 7-1: Product: syz [ 1338.795609][ T9] usb 7-1: Manufacturer: syz [ 1338.795619][ T9] usb 7-1: SerialNumber: syz [ 1338.845103][T15880] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1339.056229][T15680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.058528][T15643] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.058545][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.058575][T15643] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.216349][T15653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1339.216369][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.216399][T15653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1339.218496][T15643] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.218514][T15643] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.218545][T15643] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.268795][T15240] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1339.462223][T15240] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1339.462275][T15240] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1339.462292][T15240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.467035][T15653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1339.467055][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1339.467083][T15653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1339.531471][T15240] usb 3-1: config 0 descriptor?? [ 1339.565400][T15240] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1339.699580][ T9] usb 7-1: USB disconnect, device number 44 [ 1339.724811][T15680] team0: Port device team_slave_0 added [ 1340.325595][T15680] team0: Port device team_slave_1 added [ 1341.362633][ T6777] usb 3-1: USB disconnect, device number 103 [ 1342.142025][T15680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1342.142040][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1342.142060][T15680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.333038][T15643] hsr_slave_0: entered promiscuous mode [ 1343.352308][T15643] hsr_slave_1: entered promiscuous mode [ 1343.356996][T15680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.357016][T15680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1343.357046][T15680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.440577][T15653] hsr_slave_0: entered promiscuous mode [ 1343.442233][T15653] hsr_slave_1: entered promiscuous mode [ 1343.443299][T15653] debugfs: 'hsr0' already exists in 'hsr' [ 1343.443326][T15653] Cannot create hsr debugfs directory [ 1344.859943][T15924] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2877'. [ 1346.499307][T15926] syz.6.2878 (15926): drop_caches: 2 [ 1348.808914][ T5875] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 1348.964432][ T5875] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1348.964464][ T5875] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.964493][ T5875] usb 7-1: config 220 has no interface number 2 [ 1348.964590][ T5875] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1348.964618][ T5875] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1348.964638][ T5875] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1348.964658][ T5875] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1348.968551][ T5875] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1348.968583][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.968604][ T5875] usb 7-1: Product: syz [ 1348.968619][ T5875] usb 7-1: Manufacturer: syz [ 1348.968634][ T5875] usb 7-1: SerialNumber: syz [ 1349.421944][ T5875] usb 7-1: selecting invalid altsetting 0 [ 1349.464656][ T5875] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1349.464693][ T5875] uvcvideo 7-1:220.0: No valid video chain found. [ 1349.486803][ T5875] usb 7-1: selecting invalid altsetting 0 [ 1349.486844][ T5875] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1349.508271][ T5875] usb 7-1: USB disconnect, device number 45 [ 1350.123457][T15680] hsr_slave_0: entered promiscuous mode [ 1350.126438][T15680] hsr_slave_1: entered promiscuous mode [ 1350.141644][T15680] debugfs: 'hsr0' already exists in 'hsr' [ 1350.141675][T15680] Cannot create hsr debugfs directory [ 1354.302291][T10204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1354.334514][T10204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1354.351226][T10204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1354.360854][T10204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1354.367034][T10204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1355.108391][T10204] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1355.125943][T10204] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1355.138270][T10204] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1355.231172][T10204] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1355.232239][T10204] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1356.476991][T10204] Bluetooth: hci1: command tx timeout [ 1356.478829][ T5875] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 1356.660342][ T5875] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1356.660432][ T5875] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1356.660455][ T5875] usb 7-1: config 220 has no interface number 2 [ 1356.660648][ T5875] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1356.660680][ T5875] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1356.660756][ T5875] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1356.660777][ T5875] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1356.736516][ T5875] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1356.736549][ T5875] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1356.736625][ T5875] usb 7-1: Product: syz [ 1356.736641][ T5875] usb 7-1: Manufacturer: syz [ 1356.736657][ T5875] usb 7-1: SerialNumber: syz [ 1357.258902][T10204] Bluetooth: hci2: command tx timeout [ 1357.694566][ T5875] usb 7-1: selecting invalid altsetting 0 [ 1357.695140][ T5875] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1357.695171][ T5875] uvcvideo 7-1:220.0: No valid video chain found. [ 1357.711366][ T5875] usb 7-1: selecting invalid altsetting 0 [ 1357.711405][ T5875] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 1357.729756][ T5875] usb 7-1: USB disconnect, device number 46 [ 1357.831256][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2896'. [ 1359.143760][T10204] Bluetooth: hci1: command tx timeout [ 1359.349001][T10204] Bluetooth: hci2: command tx timeout [ 1360.004841][T16006] binder: 16005:16006 ioctl 4018620d 0 returned -22 [ 1360.262686][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1360.294525][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1360.297103][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1360.301317][ T5119] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1360.319138][ T5119] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1361.017288][ T9] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1361.189042][T10204] Bluetooth: hci1: command tx timeout [ 1361.212264][ T9] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1361.212347][ T9] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1361.212371][ T9] usb 3-1: config 220 has no interface number 2 [ 1361.244829][ T9] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1361.245174][ T9] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1361.245197][ T9] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1361.245269][ T9] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1361.460737][T10204] Bluetooth: hci2: command tx timeout [ 1361.551850][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1361.551888][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1361.551913][ T9] usb 3-1: Product: syz [ 1361.551930][ T9] usb 3-1: Manufacturer: syz [ 1361.551947][ T9] usb 3-1: SerialNumber: syz [ 1361.828126][ T9] usb 3-1: selecting invalid altsetting 0 [ 1361.877139][ T9] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1361.877178][ T9] uvcvideo 3-1:220.0: No valid video chain found. [ 1361.889569][ T9] usb 3-1: selecting invalid altsetting 0 [ 1361.889611][ T9] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1361.937758][ T9] usb 3-1: USB disconnect, device number 104 [ 1362.378864][T10204] Bluetooth: hci3: command tx timeout [ 1363.408724][T10204] Bluetooth: hci1: command tx timeout [ 1363.499526][T10204] Bluetooth: hci2: command tx timeout [ 1364.568712][T10204] Bluetooth: hci3: command tx timeout [ 1366.623871][T10204] Bluetooth: hci3: command tx timeout [ 1368.046863][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1368.046941][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1369.044875][T10204] Bluetooth: hci3: command tx timeout [ 1371.526027][T15970] chnl_net:caif_netlink_parms(): no params data found [ 1371.566275][ T6014] bridge_slave_1: left allmulticast mode [ 1371.566412][ T6014] bridge_slave_1: left promiscuous mode [ 1371.566672][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.631350][ T6014] bridge_slave_0: left allmulticast mode [ 1371.631385][ T6014] bridge_slave_0: left promiscuous mode [ 1371.631758][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1371.710369][ T6014] bridge_slave_1: left allmulticast mode [ 1371.710404][ T6014] bridge_slave_1: left promiscuous mode [ 1371.713524][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1371.790636][ T6014] bridge_slave_0: left allmulticast mode [ 1371.790669][ T6014] bridge_slave_0: left promiscuous mode [ 1371.790935][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1372.759926][T15240] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1373.239025][T15240] usb 3-1: Using ep0 maxpacket: 32 [ 1373.241668][T15240] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1373.241698][T15240] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1373.241719][T15240] usb 3-1: config 0 has no interface number 0 [ 1373.241768][T15240] usb 3-1: config 0 interface 51 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1373.244384][T15240] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1373.244408][T15240] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1373.244422][T15240] usb 3-1: Product: syz [ 1373.244432][T15240] usb 3-1: Manufacturer: syz [ 1373.244442][T15240] usb 3-1: SerialNumber: syz [ 1373.299049][T15240] usb 3-1: config 0 descriptor?? [ 1373.303909][T15240] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1373.997546][T15240] usb 3-1: qt2_setup_urbs - submit read urb failed -8 [ 1373.997897][T15240] quatech2 3-1:0.51: probe with driver quatech2 failed with error -8 [ 1374.202655][ T6777] usb 3-1: USB disconnect, device number 105 [ 1377.890200][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1377.969733][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.012516][ T6014] bond0 (unregistering): Released all slaves [ 1379.087370][T16119] fuse: Bad value for 'user_id' [ 1379.087386][T16119] fuse: Bad value for 'user_id' [ 1379.395002][T16124] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2929'. [ 1380.349569][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1380.409843][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1380.432112][ T6014] bond0 (unregistering): Released all slaves [ 1380.479612][T16009] chnl_net:caif_netlink_parms(): no params data found [ 1380.486268][T15974] chnl_net:caif_netlink_parms(): no params data found [ 1380.514561][T16093] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 1380.646922][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2920'. [ 1384.869078][ T9] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1385.018921][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 1385.030197][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1385.030235][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1385.030275][ T9] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1385.030299][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1385.077697][ T9] usb 3-1: config 0 descriptor?? [ 1385.438972][ T6014] hsr_slave_0: left promiscuous mode [ 1385.478861][ T6014] hsr_slave_1: left promiscuous mode [ 1385.485128][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.511779][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.698886][ T6014] hsr_slave_0: left promiscuous mode [ 1385.704580][ T9] usb 3-1: language id specifier not provided by device, defaulting to English [ 1385.749467][ T6014] hsr_slave_1: left promiscuous mode [ 1385.759109][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1385.793614][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1385.912771][ T9] letsketch 0003:6161:4D15.000E: Device info: Ÿ [ 1386.127184][ T9] letsketch 0003:6161:4D15.000E: Device info: В [ 1386.564000][ T9] letsketch 0003:6161:4D15.000E: Device info: ఁ [ 1386.581605][ T6014] veth1_macvtap: left promiscuous mode [ 1386.581711][ T6014] veth0_macvtap: left promiscuous mode [ 1386.581969][ T6014] veth1_vlan: left promiscuous mode [ 1386.582142][ T6014] veth0_vlan: left promiscuous mode [ 1386.883751][ T9] usb 3-1: Max retries (5) exceeded reading string descriptor 1 [ 1386.883836][ T9] letsketch 0003:6161:4D15.000E: probe with driver letsketch failed with error -71 [ 1386.914559][ T9] usb 3-1: USB disconnect, device number 106 [ 1387.605950][T16170] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2938'. [ 1388.789777][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1389.049664][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1392.619541][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1392.920438][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1395.553857][T16163] sch_tbf: burst 1885 is lower than device lo mtu (65550) ! [ 1397.327867][T15970] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.328428][T15970] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.329622][T15970] bridge_slave_0: entered allmulticast mode [ 1397.393621][T15970] bridge_slave_0: entered promiscuous mode [ 1397.549417][T16009] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.551949][T16009] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.553652][T16009] bridge_slave_0: entered allmulticast mode [ 1397.673884][T16009] bridge_slave_0: entered promiscuous mode [ 1397.826088][T15974] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.826546][T15974] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.827587][T15974] bridge_slave_0: entered allmulticast mode [ 1397.888483][T15974] bridge_slave_0: entered promiscuous mode [ 1397.975500][T15970] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.980376][T15970] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.987409][T15970] bridge_slave_1: entered allmulticast mode [ 1398.108821][T15970] bridge_slave_1: entered promiscuous mode [ 1398.110821][T16009] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.110975][T16009] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.111178][T16009] bridge_slave_1: entered allmulticast mode [ 1398.114256][T16009] bridge_slave_1: entered promiscuous mode [ 1398.120286][T15974] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.120444][T15974] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.120701][T15974] bridge_slave_1: entered allmulticast mode [ 1398.148827][T15974] bridge_slave_1: entered promiscuous mode [ 1400.525860][T16195] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2945'. [ 1400.550453][T16009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.572584][T15970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.598810][T16009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.602939][T15974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1400.612725][T15970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1400.982378][T16202] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2947'. [ 1401.006308][T15974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1402.997603][T16009] team0: Port device team_slave_0 added [ 1404.144066][T16009] team0: Port device team_slave_1 added [ 1404.146967][T15970] team0: Port device team_slave_0 added [ 1404.151039][T15974] team0: Port device team_slave_0 added [ 1404.177391][T15970] team0: Port device team_slave_1 added [ 1404.186293][T15974] team0: Port device team_slave_1 added [ 1405.153001][T16237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2957'. [ 1405.211213][T16009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.211228][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.211249][T16009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.214085][T15974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.214103][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.214141][T15974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.217080][T15970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1405.217098][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.217137][T15970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1405.472316][T16009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.472330][T16009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.472352][T16009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.473547][T15974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.473561][T15974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.473586][T15974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1405.705249][T15970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1405.705264][T15970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1405.705285][T15970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1407.626882][T16009] hsr_slave_0: entered promiscuous mode [ 1407.628056][T16009] hsr_slave_1: entered promiscuous mode [ 1407.642649][T16009] debugfs: 'hsr0' already exists in 'hsr' [ 1407.642671][T16009] Cannot create hsr debugfs directory [ 1407.718857][T15974] hsr_slave_0: entered promiscuous mode [ 1407.720559][T15974] hsr_slave_1: entered promiscuous mode [ 1407.723203][T15974] debugfs: 'hsr0' already exists in 'hsr' [ 1407.723232][T15974] Cannot create hsr debugfs directory [ 1409.588850][ T5896] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1409.625074][T15970] hsr_slave_0: entered promiscuous mode [ 1409.628190][T15970] hsr_slave_1: entered promiscuous mode [ 1409.630139][T15970] debugfs: 'hsr0' already exists in 'hsr' [ 1409.630171][T15970] Cannot create hsr debugfs directory [ 1409.741553][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1409.741591][ T5896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1409.741608][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1409.751716][ T5896] usb 3-1: config 0 descriptor?? [ 1409.804299][ T5896] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1410.094717][ T6777] usb 3-1: USB disconnect, device number 107 [ 1411.122778][ T6014] bridge_slave_1: left allmulticast mode [ 1411.122812][ T6014] bridge_slave_1: left promiscuous mode [ 1411.123002][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.180442][ T6014] bridge_slave_0: left allmulticast mode [ 1411.180467][ T6014] bridge_slave_0: left promiscuous mode [ 1411.180726][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.242515][ T6014] bridge_slave_1: left allmulticast mode [ 1411.242541][ T6014] bridge_slave_1: left promiscuous mode [ 1411.242719][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.300572][ T6014] bridge_slave_0: left allmulticast mode [ 1411.300605][ T6014] bridge_slave_0: left promiscuous mode [ 1411.300841][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.372152][ T6014] bridge_slave_1: left allmulticast mode [ 1411.372183][ T6014] bridge_slave_1: left promiscuous mode [ 1411.372405][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1411.430658][ T6014] bridge_slave_0: left allmulticast mode [ 1411.430691][ T6014] bridge_slave_0: left promiscuous mode [ 1411.431038][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1411.765785][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.060866][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.125357][ T6014] bond0 (unregistering): Released all slaves [ 1412.399571][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1412.499750][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1412.566955][ T6014] bond0 (unregistering): Released all slaves [ 1414.031610][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.150049][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.211416][ T6014] bond0 (unregistering): Released all slaves [ 1415.323670][ T6014] hsr_slave_0: left promiscuous mode [ 1415.374206][ T6014] hsr_slave_1: left promiscuous mode [ 1415.375309][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1415.449035][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.450946][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1415.454451][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1415.458293][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1415.490675][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1415.491544][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1415.910815][ T6014] hsr_slave_0: left promiscuous mode [ 1416.716743][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1416.734456][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1416.736405][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1416.737792][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1416.740156][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1416.808738][ T9] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1416.822018][ T6014] hsr_slave_1: left promiscuous mode [ 1416.823259][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.869846][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.978820][ T6014] hsr_slave_0: left promiscuous mode [ 1416.984944][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1416.984997][ T9] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1416.985021][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1417.031661][ T6014] hsr_slave_1: left promiscuous mode [ 1417.032566][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1417.034841][ T9] usb 7-1: config 0 descriptor?? [ 1417.042440][ T9] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1417.071548][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1417.373201][ T992] usb 7-1: USB disconnect, device number 47 [ 1417.589187][ T5119] Bluetooth: hci2: command tx timeout [ 1417.840600][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1417.996597][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1418.868883][ T5119] Bluetooth: hci5: command tx timeout [ 1419.590887][T10204] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1419.644417][T10204] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1419.650911][T10204] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1419.652437][T10204] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1419.665103][T10204] Bluetooth: hci2: command tx timeout [ 1419.665948][T10204] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1419.729526][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1419.899881][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1420.941666][ T5119] Bluetooth: hci5: command tx timeout [ 1421.069803][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1421.233067][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1421.739090][ T5119] Bluetooth: hci1: command tx timeout [ 1421.739736][ T5119] Bluetooth: hci2: command tx timeout [ 1423.113773][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.114939][T16303] Bluetooth: hci5: command tx timeout [ 1423.383525][ C1] vkms_vblank_simulate: vblank timer overrun [ 1423.819631][T16303] Bluetooth: hci2: command tx timeout [ 1423.819765][T16303] Bluetooth: hci1: command tx timeout [ 1424.222334][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.187492][ C1] vkms_vblank_simulate: vblank timer overrun [ 1425.196482][T16303] Bluetooth: hci5: command tx timeout [ 1425.818752][ T992] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1425.898856][T16303] Bluetooth: hci1: command tx timeout [ 1425.979196][ T992] usb 3-1: Using ep0 maxpacket: 16 [ 1425.982969][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1425.983004][ T992] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1425.983047][ T992] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 1425.983071][ T992] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.023493][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.050226][ T992] usb 3-1: config 0 descriptor?? [ 1426.655308][ T992] usbhid 3-1:0.0: can't add hid device: -32 [ 1426.655431][ T992] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 1426.765056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.054425][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.455575][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.543598][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.602073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.744861][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.807158][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.856053][ C1] vkms_vblank_simulate: vblank timer overrun [ 1427.978883][T16303] Bluetooth: hci1: command tx timeout [ 1428.324508][T16009] netdevsim netdevsim9: probe with driver netdevsim failed with error -12 [ 1428.514817][ T992] usb 3-1: USB disconnect, device number 108 [ 1429.897061][T16290] chnl_net:caif_netlink_parms(): no params data found [ 1430.356633][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1430.356812][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1431.459799][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.730389][ C1] vkms_vblank_simulate: vblank timer overrun [ 1431.934813][T16364] hpfs: hpfs_map_sector(): read error [ 1432.325681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1432.377513][ C1] vkms_vblank_simulate: vblank timer overrun [ 1433.248070][T16370] misc userio: No port type given on /dev/userio [ 1433.251637][T16370] misc userio: The device must be registered before sending interrupts [ 1433.269489][T16277] chnl_net:caif_netlink_parms(): no params data found [ 1433.324126][ C1] vkms_vblank_simulate: vblank timer overrun [ 1433.353728][T16301] chnl_net:caif_netlink_parms(): no params data found [ 1434.098434][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.300981][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.608842][ C1] vkms_vblank_simulate: vblank timer overrun [ 1434.942145][ C1] vkms_vblank_simulate: vblank timer overrun [ 1435.187942][T16290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.188040][T16290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1435.188207][T16290] bridge_slave_0: entered allmulticast mode [ 1435.192352][T16290] bridge_slave_0: entered promiscuous mode [ 1435.209642][T16290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.209864][T16290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1435.210182][T16290] bridge_slave_1: entered allmulticast mode [ 1435.279013][T16290] bridge_slave_1: entered promiscuous mode [ 1435.870821][T16290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1436.777671][T16290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1436.965016][T16277] bridge0: port 1(bridge_slave_0) entered blocking state [ 1436.965166][T16277] bridge0: port 1(bridge_slave_0) entered disabled state [ 1436.965568][T16277] bridge_slave_0: entered allmulticast mode [ 1436.969843][T16277] bridge_slave_0: entered promiscuous mode [ 1437.243781][T16301] bridge0: port 1(bridge_slave_0) entered blocking state [ 1437.243920][T16301] bridge0: port 1(bridge_slave_0) entered disabled state [ 1437.244186][T16301] bridge_slave_0: entered allmulticast mode [ 1437.247362][T16301] bridge_slave_0: entered promiscuous mode [ 1437.277682][T16277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.277822][T16277] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.278089][T16277] bridge_slave_1: entered allmulticast mode [ 1437.300836][T16277] bridge_slave_1: entered promiscuous mode [ 1437.460101][T16301] bridge0: port 2(bridge_slave_1) entered blocking state [ 1437.468942][T16301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1437.469286][T16301] bridge_slave_1: entered allmulticast mode [ 1437.488349][T16301] bridge_slave_1: entered promiscuous mode [ 1437.720835][T16290] team0: Port device team_slave_0 added [ 1438.180951][ C1] vkms_vblank_simulate: vblank timer overrun [ 1439.418742][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.365671][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.429217][ C1] vkms_vblank_simulate: vblank timer overrun [ 1440.499905][T16290] team0: Port device team_slave_1 added [ 1440.674476][T16277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.777400][T16301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1440.782335][T16277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1440.942704][T16301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1441.061050][T16290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1441.061069][T16290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.061097][T16290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1441.259204][ T9] usb 7-1: new full-speed USB device number 48 using dummy_hcd [ 1441.320994][T16290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1441.321012][T16290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1441.321042][T16290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1441.411617][ T9] usb 7-1: config 0 has an invalid interface number: 151 but max is 1 [ 1441.411649][ T9] usb 7-1: config 0 has no interface number 1 [ 1441.411717][ T9] usb 7-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1441.411735][ T9] usb 7-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 1441.411754][ T9] usb 7-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 64 [ 1441.411774][ T9] usb 7-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1441.411803][ T9] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 1441.411821][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1441.414769][ T9] usb 7-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 1441.414803][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1441.414827][ T9] usb 7-1: Product: syz [ 1441.414844][ T9] usb 7-1: Manufacturer: syz [ 1441.414856][ T9] usb 7-1: SerialNumber: syz [ 1441.421853][ T9] usb 7-1: config 0 descriptor?? [ 1441.440261][T16436] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1441.478404][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1441.493972][ T9] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1441.612386][ T9] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 1441.707481][T16277] team0: Port device team_slave_0 added [ 1441.826669][T16301] team0: Port device team_slave_0 added [ 1441.945282][T16277] team0: Port device team_slave_1 added [ 1441.956634][T16301] team0: Port device team_slave_1 added [ 1442.150190][ T6014] bridge_slave_1: left allmulticast mode [ 1442.150221][ T6014] bridge_slave_1: left promiscuous mode [ 1442.150490][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.232027][ T6014] bridge_slave_0: left allmulticast mode [ 1442.232059][ T6014] bridge_slave_0: left promiscuous mode [ 1442.236644][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.328082][ T6014] bridge_slave_1: left allmulticast mode [ 1442.328114][ T6014] bridge_slave_1: left promiscuous mode [ 1442.328380][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.412389][ T6014] bridge_slave_0: left allmulticast mode [ 1442.412423][ T6014] bridge_slave_0: left promiscuous mode [ 1442.412679][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.474961][ T6014] bridge_slave_1: left allmulticast mode [ 1442.474994][ T6014] bridge_slave_1: left promiscuous mode [ 1442.475246][ T6014] bridge0: port 2(bridge_slave_1) entered disabled state [ 1442.530830][ T6014] bridge_slave_0: left allmulticast mode [ 1442.530862][ T6014] bridge_slave_0: left promiscuous mode [ 1442.531231][ T6014] bridge0: port 1(bridge_slave_0) entered disabled state [ 1442.727941][ T6777] usb 7-1: USB disconnect, device number 48 [ 1443.990635][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.109596][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.192677][ T6014] bond0 (unregistering): Released all slaves [ 1444.302517][T16471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3007'. [ 1444.739659][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1444.819832][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1444.893041][ T6014] bond0 (unregistering): Released all slaves [ 1445.119752][ T6014] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1445.199890][ T6014] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1445.261127][ T6014] bond0 (unregistering): Released all slaves [ 1445.679803][T16277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.679822][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.679853][T16277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.941805][T16301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1445.941830][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.941870][T16301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1445.964213][T16277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1445.964237][T16277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1445.964274][T16277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1445.992806][T16290] hsr_slave_0: entered promiscuous mode [ 1445.997085][T16290] hsr_slave_1: entered promiscuous mode [ 1446.004193][T16301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1446.004214][T16301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1446.004247][T16301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1447.038806][ T6014] hsr_slave_0: left promiscuous mode [ 1447.078909][ T6014] hsr_slave_1: left promiscuous mode [ 1447.081324][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.102259][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.258919][ T6014] hsr_slave_0: left promiscuous mode [ 1447.278966][ T6014] hsr_slave_1: left promiscuous mode [ 1447.280064][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.413667][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1447.548926][ T6014] hsr_slave_0: left promiscuous mode [ 1447.587821][ T6014] hsr_slave_1: left promiscuous mode [ 1447.589484][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1447.639966][ T6014] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1449.261131][T16498] input: syz1 as /devices/virtual/input/input46 [ 1449.799608][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1449.970810][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1451.301669][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1451.490904][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1452.832317][ T6014] team0 (unregistering): Port device team_slave_1 removed [ 1452.992040][ T6014] team0 (unregistering): Port device team_slave_0 removed [ 1453.727598][T16301] hsr_slave_0: entered promiscuous mode [ 1453.729363][T16301] hsr_slave_1: entered promiscuous mode [ 1453.730632][T16301] debugfs: 'hsr0' already exists in 'hsr' [ 1453.730663][T16301] Cannot create hsr debugfs directory [ 1453.748249][T16277] hsr_slave_0: entered promiscuous mode [ 1453.751084][T16277] hsr_slave_1: entered promiscuous mode [ 1453.752266][T16277] debugfs: 'hsr0' already exists in 'hsr' [ 1453.752298][T16277] Cannot create hsr debugfs directory [ 1456.048955][ T6777] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1456.203121][ T6777] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1456.203152][ T6777] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1456.203172][ T6777] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1456.203224][ T6777] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1456.203244][ T6777] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1456.205216][ T6777] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1456.205244][ T6777] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1456.205259][ T6777] usb 7-1: Product: syz [ 1456.205269][ T6777] usb 7-1: Manufacturer: syz [ 1456.296173][ T6777] cdc_wdm 7-1:1.0: skipping garbage [ 1456.296195][ T6777] cdc_wdm 7-1:1.0: skipping garbage [ 1456.309779][ T6777] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1456.309811][ T6777] cdc_wdm 7-1:1.0: Unknown control protocol [ 1456.582448][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1456.582595][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1456.582869][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1456.582890][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1456.583128][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1456.583150][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1456.583399][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1456.583418][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1456.588150][ C1] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 1456.588175][ T6777] usb 7-1: USB disconnect, device number 49 [ 1456.588178][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 1456.588199][ C1] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1459.788786][ T6777] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1459.981814][ T6777] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1459.981868][ T6777] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1459.981892][ T6777] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.989530][ T6777] usb 7-1: config 0 descriptor?? [ 1460.000064][ T6777] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1460.226702][ T6777] usb 7-1: USB disconnect, device number 50 [ 1461.849993][T16290] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1461.933447][T16290] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1461.973700][T16290] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1462.027967][T16290] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1462.273612][ T37] kauditd_printk_skb: 1 callbacks suppressed [ 1462.273634][ T37] audit: type=1326 audit(1763630037.440:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16578 comm="syz.2.3033" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865025f749 code=0x0 [ 1462.964577][T16301] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1463.027075][T16301] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1463.148881][T16301] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1463.316201][T16301] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1463.770095][T16277] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1463.833400][T16277] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1463.922659][T16277] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1463.999192][T16277] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1464.871736][T16290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.006045][T16290] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.076413][ T1523] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.077424][ T1523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.142065][ T6013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.142246][ T6013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.203148][T16301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.402762][T16301] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.443960][ T6013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.458062][ T6013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.554077][ T1523] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.554311][ T1523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1465.634081][T16277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1465.842176][T16277] 8021q: adding VLAN 0 to HW filter on device team0 [ 1465.907043][ T2208] bridge0: port 1(bridge_slave_0) entered blocking state [ 1465.920659][ T2208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1465.945931][ T2208] bridge0: port 2(bridge_slave_1) entered blocking state [ 1465.962952][ T2208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1466.302132][T16290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1466.442015][T16659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3041'. [ 1467.166911][T16301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1467.874557][T16277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1468.103928][T16290] veth0_vlan: entered promiscuous mode [ 1468.219832][T16290] veth1_vlan: entered promiscuous mode [ 1468.659805][T16301] veth0_vlan: entered promiscuous mode [ 1468.707744][T16290] veth0_macvtap: entered promiscuous mode [ 1468.752756][T16301] veth1_vlan: entered promiscuous mode [ 1468.758403][T16290] veth1_macvtap: entered promiscuous mode [ 1468.941922][T16290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.032787][T16290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.146303][ T6014] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.160743][ T6014] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.164591][ T6014] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.164976][ T6014] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1469.269554][T16301] veth0_macvtap: entered promiscuous mode [ 1469.345662][T16301] veth1_macvtap: entered promiscuous mode [ 1469.723282][T16301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1469.833672][T16301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1469.847164][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1469.847195][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.093068][T11676] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.098830][T11676] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.135954][ T6014] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.137353][ T2208] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1470.137381][ T2208] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1470.169643][ T6014] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1470.261590][T16277] veth0_vlan: entered promiscuous mode [ 1470.848893][T16753] program syz.7.2227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.856270][T16753] program syz.7.2227 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1470.856584][T16753] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1471.504002][T16277] veth1_vlan: entered promiscuous mode [ 1471.626967][T16750] syz.2.3053 (16750): drop_caches: 2 [ 1471.750471][ T6013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.750494][ T6013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1471.990275][ T3587] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1471.990295][ T3587] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1472.051459][T16277] veth0_macvtap: entered promiscuous mode [ 1472.191901][T16277] veth1_macvtap: entered promiscuous mode [ 1472.438815][T16277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1472.507508][T16277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1472.541529][ T6014] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.543553][ T6014] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.571258][ T6014] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1472.599125][ T6014] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1473.796792][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.108887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1474.577568][ T6014] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1474.577591][ T6014] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1474.700765][T16795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1474.860901][T16277] ------------[ cut here ]------------ [ 1474.860925][T16277] WARNING: CPU: 1 PID: 16277 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 1474.860973][T16277] Modules linked in: [ 1474.861007][T16277] CPU: 1 UID: 0 PID: 16277 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1474.861033][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.861050][T16277] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1474.861080][T16277] Code: c7 c7 50 45 c5 8e 48 c7 c6 b7 27 da 8c 48 c7 c2 96 fd d8 8c 4c 89 f9 e8 32 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 1474.861099][T16277] RSP: 0018:ffffc90005567ac0 EFLAGS: 00010287 [ 1474.861117][T16277] RAX: d9f0ef8266b74600 RBX: ffff88803d8f8100 RCX: 0000000000000000 [ 1474.861133][T16277] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1474.861148][T16277] RBP: ffffc90005567c28 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 1474.861163][T16277] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100567c5bd [ 1474.861179][T16277] R13: 0000000000000009 R14: ffff88803d8f8108 R15: ffff88802dd28000 [ 1474.861194][T16277] FS: 0000555573f11500(0000) GS:ffff888126ef7000(0000) knlGS:0000000000000000 [ 1474.861213][T16277] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1474.861228][T16277] CR2: 00007ffedb52fa58 CR3: 000000004ac3a000 CR4: 00000000003526f0 [ 1474.861247][T16277] Call Trace: [ 1474.861260][T16277] [ 1474.861273][T16277] do_exit+0x105/0x2300 [ 1474.861307][T16277] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1474.861449][T16277] ? __lock_acquire+0xab9/0xd20 [ 1474.861485][T16277] ? __pfx_do_exit+0x10/0x10 [ 1474.861514][T16277] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1474.861539][T16277] ? rt_spin_lock+0x1c1/0x3e0 [ 1474.861570][T16277] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1474.861605][T16277] do_group_exit+0x21c/0x2d0 [ 1474.861634][T16277] ? rt_spin_unlock+0x161/0x200 [ 1474.861663][T16277] get_signal+0x125d/0x1310 [ 1474.861712][T16277] arch_do_signal_or_restart+0xa0/0x790 [ 1474.861736][T16277] ? fput_close_sync+0x119/0x200 [ 1474.861761][T16277] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1474.861805][T16277] ? exit_to_user_mode_loop+0x40/0x130 [ 1474.861838][T16277] exit_to_user_mode_loop+0x72/0x130 [ 1474.861867][T16277] do_syscall_64+0x2bd/0xfa0 [ 1474.861927][T16277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.861950][T16277] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1474.861973][T16277] ? clear_bhb_loop+0x60/0xb0 [ 1474.862001][T16277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.862023][T16277] RIP: 0033:0x7fe58f9515dc [ 1474.862050][T16277] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1474.862069][T16277] RSP: 002b:00007ffc1bc1d220 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1474.862093][T16277] RAX: 0000000000000024 RBX: 00007fe5906d4620 RCX: 00007fe58f9515dc [ 1474.862109][T16277] RDX: 0000000000000024 RSI: 00007fe5906d4670 RDI: 0000000000000003 [ 1474.862123][T16277] RBP: 0000000000000000 R08: 00007ffc1bc1d274 R09: 000000000000000c [ 1474.862137][T16277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1474.862151][T16277] R13: 0000000000000000 R14: 00007fe5906d4670 R15: 0000000000000000 [ 1474.862186][T16277] [ 1474.862202][T16277] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1474.862218][T16277] CPU: 1 UID: 0 PID: 16277 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1474.862242][T16277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1474.862255][T16277] Call Trace: [ 1474.862264][T16277] [ 1474.862272][T16277] dump_stack_lvl+0x99/0x250 [ 1474.862308][T16277] ? __asan_memcpy+0x40/0x70 [ 1474.862333][T16277] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1474.862368][T16277] ? __pfx__printk+0x10/0x10 [ 1474.862410][T16277] vpanic+0x237/0x6d0 [ 1474.862431][T16277] ? __pfx_vpanic+0x10/0x10 [ 1474.862465][T16277] panic+0xb9/0xc0 [ 1474.862485][T16277] ? __pfx_panic+0x10/0x10 [ 1474.862524][T16277] __warn+0x31b/0x4b0 [ 1474.862544][T16277] ? kcov_task_exit+0x13c/0x150 [ 1474.862576][T16277] ? kcov_task_exit+0x13c/0x150 [ 1474.862605][T16277] report_bug+0x2be/0x4f0 [ 1474.862686][T16277] ? kcov_task_exit+0x13c/0x150 [ 1474.862716][T16277] ? kcov_task_exit+0x13c/0x150 [ 1474.862745][T16277] ? kcov_task_exit+0x13e/0x150 [ 1474.862782][T16277] handle_bug+0x84/0x160 [ 1474.862833][T16277] exc_invalid_op+0x1a/0x50 [ 1474.862855][T16277] asm_exc_invalid_op+0x1a/0x20 [ 1474.862889][T16277] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 1474.862918][T16277] Code: c7 c7 50 45 c5 8e 48 c7 c6 b7 27 da 8c 48 c7 c2 96 fd d8 8c 4c 89 f9 e8 32 4b f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 d4 2e 04 09 0f 1f 40 00 90 90 [ 1474.862937][T16277] RSP: 0018:ffffc90005567ac0 EFLAGS: 00010287 [ 1474.862955][T16277] RAX: d9f0ef8266b74600 RBX: ffff88803d8f8100 RCX: 0000000000000000 [ 1474.862972][T16277] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 1474.862987][T16277] RBP: ffffc90005567c28 R08: 0000000000000000 R09: ffffffff8ac2db41 [ 1474.863003][T16277] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff1100567c5bd [ 1474.863019][T16277] R13: 0000000000000009 R14: ffff88803d8f8108 R15: ffff88802dd28000 [ 1474.863043][T16277] ? rt_spin_lock+0x1c1/0x3e0 [ 1474.863081][T16277] do_exit+0x105/0x2300 [ 1474.863114][T16277] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1474.863150][T16277] ? __lock_acquire+0xab9/0xd20 [ 1474.863186][T16277] ? __pfx_do_exit+0x10/0x10 [ 1474.863217][T16277] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1474.863243][T16277] ? rt_spin_lock+0x1c1/0x3e0 [ 1474.863274][T16277] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1474.863309][T16277] do_group_exit+0x21c/0x2d0 [ 1474.863329][T16277] ? rt_spin_unlock+0x161/0x200 [ 1474.863359][T16277] get_signal+0x125d/0x1310 [ 1474.863410][T16277] arch_do_signal_or_restart+0xa0/0x790 [ 1474.863432][T16277] ? fput_close_sync+0x119/0x200 [ 1474.863458][T16277] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1474.863501][T16277] ? exit_to_user_mode_loop+0x40/0x130 [ 1474.863535][T16277] exit_to_user_mode_loop+0x72/0x130 [ 1474.863566][T16277] do_syscall_64+0x2bd/0xfa0 [ 1474.863600][T16277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.863629][T16277] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1474.863652][T16277] ? clear_bhb_loop+0x60/0xb0 [ 1474.863680][T16277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1474.863702][T16277] RIP: 0033:0x7fe58f9515dc [ 1474.863720][T16277] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1474.863740][T16277] RSP: 002b:00007ffc1bc1d220 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1474.863761][T16277] RAX: 0000000000000024 RBX: 00007fe5906d4620 RCX: 00007fe58f9515dc [ 1474.863777][T16277] RDX: 0000000000000024 RSI: 00007fe5906d4670 RDI: 0000000000000003 [ 1474.863792][T16277] RBP: 0000000000000000 R08: 00007ffc1bc1d274 R09: 000000000000000c [ 1474.863806][T16277] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1474.863819][T16277] R13: 0000000000000000 R14: 00007fe5906d4670 R15: 0000000000000000 [ 1474.863854][T16277] [ 1474.864128][T16277] Kernel Offset: disabled