last executing test programs: 7m20.255869004s ago: executing program 2 (id=124): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) unshare(0x22020600) getcwd(0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_128={{0x304}, "74b4b6f812818157", "fe0f232318769ac69f4d79a23999d0d2", "4110d24f", "9fee0dd3cddeb064"}, 0x28) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 7m17.452240649s ago: executing program 2 (id=128): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x581) io_uring_setup(0x3454, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 7m12.360761686s ago: executing program 3 (id=138): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7}}]}}, 0x0) close(0x3) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x0, 0x0, 0x83, 0xec}}]}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000c00)={0x34, &(0x7f0000000a40)={0x7030ed4a42cd9ab6, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000440)={0x20, 0x10, 0x5, "b2c3a7ccac"}, 0x0, 0x0, 0x0, 0x0}) 7m11.188546172s ago: executing program 0 (id=139): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x103442, 0x58) readahead(r3, 0x0, 0x7) socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000cee7654b4eedeaa0ae00a52fa20382aa0d0205680adb238e11000000000000"], 0x50) 7m8.585492195s ago: executing program 3 (id=142): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x8, 0x7fe2, 0x1, 0x4}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe1956000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x2, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x52, 0x2df8cb643540299b, 0x1}, 0x20) 7m6.679349764s ago: executing program 3 (id=144): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff2}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 7m6.603297834s ago: executing program 0 (id=146): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f000000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x11) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 7m6.540220925s ago: executing program 2 (id=147): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f0000002400)={0x20, 0xe, 0x2, "02cf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x40, 0x3, 0x2, "3bec"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 7m5.29826192s ago: executing program 0 (id=150): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x500) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_skbedit={0x68, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x4b, 0x5, 0x40, 0xe80000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x4c811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 7m4.960422997s ago: executing program 3 (id=151): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) read(r0, &(0x7f0000000300)=""/250, 0xfa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) socket$kcm(0xa, 0x2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1) 7m0.927127523s ago: executing program 2 (id=155): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(r0, 0x1) fsopen(0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'virt_wifi0\x00'}]}]}]}], {0x14, 0x10}}, 0xbc}}, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r5, &(0x7f0000000040)="e2", 0x12d8) 7m0.873335494s ago: executing program 0 (id=156): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x2, 0x7fffffff}]}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3b, 0x301, 0x70bd25, 0x25dfdbfa, {0x1}}, 0x14}}, 0x4000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x7}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @private2}, 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 6m57.093851591s ago: executing program 2 (id=158): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x581) io_uring_setup(0x3454, 0x0) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) 6m56.824537035s ago: executing program 3 (id=161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 6m53.461432896s ago: executing program 0 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) 6m52.216858839s ago: executing program 0 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x4024050, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7ad0, &(0x7f0000000040)={0x0, 0x2faa, 0x20, 0x1, 0x32e}, &(0x7f0000000100), &(0x7f0000000140)) r5 = io_uring_setup(0x669, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 6m52.127971262s ago: executing program 3 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x4024050, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7ad0, &(0x7f0000000040)={0x0, 0x2faa, 0x20, 0x1, 0x32e}, &(0x7f0000000100), &(0x7f0000000140)) r5 = io_uring_setup(0x669, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 6m50.984340045s ago: executing program 2 (id=170): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x500) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_skbedit={0x68, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x4b, 0x5, 0x40, 0xe80000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x4c811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) tkill(r5, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 6m35.574080713s ago: executing program 32 (id=168): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x4024050, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7ad0, &(0x7f0000000040)={0x0, 0x2faa, 0x20, 0x1, 0x32e}, &(0x7f0000000100), &(0x7f0000000140)) r5 = io_uring_setup(0x669, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 6m35.331875114s ago: executing program 33 (id=169): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x5, 0x4024050, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x7ad0, &(0x7f0000000040)={0x0, 0x2faa, 0x20, 0x1, 0x32e}, &(0x7f0000000100), &(0x7f0000000140)) r5 = io_uring_setup(0x669, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r8, 0xae80, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r9 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r9, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 6m34.879536193s ago: executing program 34 (id=170): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x500) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_skbedit={0x68, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x4b, 0x5, 0x40, 0xe80000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x4c811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) tkill(r5, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 11.625931607s ago: executing program 7 (id=718): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$btrfs_control(0xffffff9c, &(0x7f0000000240), 0x101202, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00'}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(r0, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f00000000c0)="66b9800000c00f326635010000000f300f06f3e1210f34baf80c66b82ad3278166efbafc0cec0f16d43e66f082453400d05f000f20e06635002000000f22e02e660f388209", 0x45}], 0x1, 0x4e, 0x0, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f00000003c0)={0x5d, 0x1, {0x1, 0x2, 0x7, 0x1, 0x16bb}, 0x7}) r5 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x3a, 0x2}}) write$char_usb(r5, &(0x7f0000000040)="e2", 0x2250) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0x6000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0', [{0x20, '/dev/btrfs-control\x00'}, {0x20, '{\'['}, {0x20, '[-/$(^/*-@'}, {0x20, '/dev/kvm\x00'}], 0xa, "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"}, 0x132) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000371e8e8403d0fa3684a77d2920301090212140d75e10e70e83b990800c0001416"], &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) 8.714805362s ago: executing program 1 (id=721): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000140)="d2ffb49ede31518d65a476b76e4a4e0b75db47c327ab5b7233ac3507e16db41df04709094056af33a6db1e301a74db81f27f6aa6a8ca9d22a565ff96d46e88fa99b284c26c46494072fc2e47da240c71"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x40086315}], 0x0, 0x0, 0x0}) 8.013175445s ago: executing program 7 (id=724): gettid() pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r1, 0x0, 0x0, 0x300, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) 7.791558358s ago: executing program 1 (id=725): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) 6.602191499s ago: executing program 1 (id=727): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000200)={0x1, 0x80, 0x2}) r1 = getpid() dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ftruncate(0xffffffffffffffff, 0x581) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) io_uring_setup(0x3454, 0x0) migrate_pages(0x0, 0x3, &(0x7f0000000040)=0x7f, &(0x7f0000000300)=0xa) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='locks_get_lock_context\x00'}, 0x10) 4.888499981s ago: executing program 7 (id=729): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r4}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0xc, 0x3, 0x0, 0x0, 0x10}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 3.785684784s ago: executing program 7 (id=730): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 2.614303883s ago: executing program 7 (id=731): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(0x0, 0x0, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r1, &(0x7f0000000100)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 2.474447959s ago: executing program 1 (id=732): sysinfo(&(0x7f0000000000)=""/196) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x9, 0x500) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newtaction={0xac, 0x30, 0x1, 0x0, 0x0, {}, [{0x98, 0x1, [@m_skbedit={0x68, 0x19, 0x0, 0x0, {{0xc}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x5, 0x7f}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0xfff}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x9, 0x4b, 0x5, 0x40, 0xe80000}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xfff2, 0xd}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x4000}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x804}, 0x4c811) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, 0x14, "3eccd8fd0000000000000010000000040100"}) 2.364282927s ago: executing program 7 (id=733): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r2, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000300)={@multicast1, @broadcast, 0x0}, &(0x7f0000000380)=0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r0, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0], 0x0, 0x64, &(0x7f0000000480)=[{}, {}], 0x10, 0x10, &(0x7f00000004c0), &(0x7f00000005c0), 0x8, 0xc8, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={r0, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x6, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000880), 0x0, 0x0, 0x9d, 0x8, 0x8, &(0x7f0000000900)}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000a80)={@empty, 0x0}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b80)={'ip6_vti0\x00', &(0x7f0000000b00)={'ip6_vti0\x00', 0x0, 0x2f, 0x60, 0x4, 0x5, 0x14, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x20, 0x8, 0x8, 0xab65}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000bc0)={0x148, r5, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = dup(r13) getsockname$packet(r14, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001540)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newtaction={0x98, 0x30, 0x301, 0x3, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x0, 0xffffffff}, 0x1, r15}}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000f00)=ANY=[@ANYBLOB="120100007ce7c810d804300a47ce0102030109022400010000000009040000020de67a0009050402000200000009058102ff"], 0x0) 1.215487372s ago: executing program 1 (id=734): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x24008011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x3f00, 0x5, 0x1400}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r4, 0x0}) io_uring_enter(r5, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 417.175635ms ago: executing program 4 (id=735): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfcbfe, {0x0, 0x0, 0x0, 0x0, {0xb}, {0xa, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40040c0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 300.474333ms ago: executing program 4 (id=736): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x14) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x884}, 0x20008000) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000080)=ANY=[], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)="ec76b3", 0x3}], 0x1}}], 0x2, 0x404c041) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 272.209877ms ago: executing program 4 (id=737): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYRESDEC], 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_lsm={0x1d, 0x25, &(0x7f0000000880)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x9, 0x2, 0xfffffff8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000006c0)}], 0x1}}], 0x1, 0x404c041) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 181.839369ms ago: executing program 4 (id=738): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000005e00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x1c4, 0x16, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xf3e}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5}]}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0x178, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0xcc, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'rose0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'batadv_slave_0\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'veth1_to_hsr\x00'}, {0x14, 0x1, 'team0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_virt_wifi\x00'}, {0x14, 0x1, 'netdevsim0\x00'}, {0x14, 0x1, 'dvmrp0\x00'}]}]}]}, @NFT_MSG_DELSETELEM={0x1118, 0xe, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1104, 0x3, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x160, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xb1, 0x1, "36f7fbc134a9863a54d582a893c27ab13a8c3ab10a3cec9a06124c51e1ee760791be631a95638677c95eb5c758c5b1b44afe7b6b705e4e1fbdeaa78f7daf6c5ce58c4585775f2c512fbf122fd570d8341ae435346a5f8a7be4ff1b822978c77fcc202aed5f029e3833d23525fe24e5186899e9c4cd8cb13c80102ac73a86809e99f550af5fef0b59b455d6a2b29999d1ea95af08e4581f95f88ad903ef0b415fa25dbc844dc2664d1346993b4b"}, @NFTA_DATA_VALUE={0x95, 0x1, "9ca8ec102e0de398b37a5f737eb76bdb842acfab849f37bf18bfe9a7b24c35fa6122189e986bc46873d47de99ff874434e1d32551caa81055b8e481a5eaee7a911a84b7c52d6a7408b2e265b661e1e22e8d0628e2ada691b6d2b9ad3d041c3f02c94724a5d8a1a18311de73c81446cd41949768a37ae6f467e6511ada270ef3c5245194767ba4c4c5160f6684324e7d62e"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x19, 0x6, 0x1, 0x0, "9d17398c4925918608bf4a60bb7daa50f2eef73c58"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x28c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x1d4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x64, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x95, 0x1, "e98e12a76809dd6fa5e709b2789f1530d2c6a7221d5b215fb4ddd50a0ddb7ab05d47e9aeec1dccddf3f3b67d0bc9b41ea6f7ad2435d99644d86ab610147bfa87a49ca3e6d9188feaa2a45656a6eccffed628c565d9f2521cd9262ff2c775c2abbd7a7ff378755ef491bc783320e3220374b4e0702b2aabcb7bde92a899866faa9dfd66f61a5d0518ebb8b8b48cd1ce6d63"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0x12, 0x1, "55088d9fdf94d1347a868b09e6f8"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x89, 0x1, "189f61c960a23268890f4b2c341fb9e0c69be7489646deef3a76c098538a9793a93d780e3340f9c7a33a35b685cf7973cf8ab64030caaf263efe4cbd637334d2db1d9d2aba78a75671ee358f3bdf938b7b8e2171316804dea2a9e3c501f01ca449261d73ff0092776db06985e004e48bef616898056a2bdca0b51b6ea7153aaf4c3a12468d"}]}, @NFTA_SET_ELEM_EXPR={0x50, 0x7, 0x0, 0x1, @synproxy={{0xd}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x9}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x7}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x6}, @NFTA_SYNPROXY_MSS={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x5}, @NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x7}]}}}, @NFTA_SET_ELEM_KEY={0x5c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x49, 0x1, "91494e8da07d216ceae6c5e2e2ed32a7797c6637b7d191962699ef6c601b9f65b7944ed582b0bf09f5754b92f03090b39dcda9de3d63cb73289aa293cf56e0c579946a9607"}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x29, 0x1, "7f87689ddbbe71ee2564020237ca850f234f82742ac25208de19008b1e4e460ff3b8a9f836"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}]}, {0x4}, {0x2d4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xec, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x2d, 0x1, "906bf1197008226cba73dfc616e412842626a2300eedcbfd19d23d9b2434ddc9e34026843c914ab0ea"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_DATA={0xc8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x45, 0x1, "a7d2b23cb80b427a62d2f63b7a96921557538b9dc65efe7a2d7bff095b59e00d9602eea325eac593f167abb90e6439431b629e9ae6dc4c261c7d5c450816b039f1"}]}, @NFTA_SET_ELEM_USERDATA={0x4d, 0x6, 0x1, 0x0, "c70b3386e13cac6038b31f574088a45447ddf74fc044c4dd44abc29367a7312c77e6021ba056af67e9ddf5124b4618c346056ca2f13f57211e5d8eb53f2a213ea85b71d1485dd5c650"}, @NFTA_SET_ELEM_USERDATA={0xb1, 0x6, 0x1, 0x0, "2d4fa245621f3e011f24c504620e58c7f0a08a25171abb512a13d11024d3ad42a05a48ba6ccee48ef5a3b4744a2994887da9490d4994110b9d45bcd7cb72e03adfef67332ed6535f058ac071f483fc29bb1d0d7a1d60f44db41a29d878e53dcb884564df249dd5a64d563e9f015050ae641fb4a1f3331de6098d31207c2f711b557c151993a494ad4cc66f7bb78d05877259300db536ccc72d6421cd6524ce3f98cbcbae90e764472364eebc96"}]}, {0x838, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xa4}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY_END={0x810, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x61, 0x1, "6a5cc0416d6739c762ebb865f8320b4858c78b2e489c54764475710c09fe39f702a087423590d4e1b1aa53ac050114136f2a14fff3e7ec6366b5184f1c85011b3440317561ba7360a2022443043f60d8f827f20cd3a80c8c647e115d06"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VALUE={0x785, 0x1, "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"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x1304}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 141.270304ms ago: executing program 1 (id=739): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 84.505957ms ago: executing program 4 (id=740): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x4e21, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{0xc, 0x1}, &(0x7f0000000580)=0x2, 0x0, 0xc03c, 0x2, 0x2, 0x8, 0x7b, 0x5}}], 0x58}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x7, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/43) 0s ago: executing program 4 (id=741): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000380)={{0x5, 0x4, 0x1000, 0x1000, 'syz0\x00', 0x1}, 0x5, 0x1, 0x9, 0x0, 0x0, 0x8, 'syz1\x00', &(0x7f0000000600)}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26}) r3 = gettid() close(r1) r4 = socket$nl_route(0x10, 0x3, 0x0) dup(r4) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x3, r7, 0x1, 0xffff, 0xa, 0x1ff, 0x1}) kernel console output (not intermixed with test programs): istering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.368878][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 293.371564][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 293.373523][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 293.375143][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 293.406118][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 293.841563][ T5874] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 293.841622][ T5874] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 293.877715][ T5874] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 293.939684][ T5874] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 294.450485][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.470570][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.494150][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.508244][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.519035][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 294.610463][ T993] usb 2-1: USB disconnect, device number 9 [ 294.809596][ T5811] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 294.813052][ T5811] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 294.827626][ T5811] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 294.864829][ T5811] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 294.875513][ T5811] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 295.070907][ T5874] usb 5-1: USB disconnect, device number 9 [ 295.608150][ T5811] Bluetooth: hci4: command tx timeout [ 296.619714][ T5811] Bluetooth: hci5: command tx timeout [ 297.683323][ T5811] Bluetooth: hci6: command tx timeout [ 297.686384][ T5811] Bluetooth: hci4: command tx timeout [ 300.491029][ T5806] Bluetooth: hci4: command tx timeout [ 300.491064][ T5806] Bluetooth: hci6: command tx timeout [ 300.491222][ T5811] Bluetooth: hci5: command tx timeout [ 300.915833][ T5874] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 300.939426][ T1348] bridge_slave_1: left allmulticast mode [ 300.939448][ T1348] bridge_slave_1: left promiscuous mode [ 300.939635][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.079149][ T6958] overlayfs: overlapping lowerdir path [ 301.848735][ T5874] usb 5-1: config index 0 descriptor too short (expected 215, got 45) [ 301.852695][ T5874] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 301.852726][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.852748][ T5874] usb 5-1: Product: syz [ 301.852764][ T5874] usb 5-1: Manufacturer: syz [ 301.852780][ T5874] usb 5-1: SerialNumber: syz [ 301.931810][ T1348] bridge_slave_0: left allmulticast mode [ 301.931841][ T1348] bridge_slave_0: left promiscuous mode [ 301.936260][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.033278][ T1348] bridge_slave_1: left allmulticast mode [ 302.033303][ T1348] bridge_slave_1: left promiscuous mode [ 302.033543][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.102160][ T1348] bridge_slave_0: left allmulticast mode [ 302.102435][ T1348] bridge_slave_0: left promiscuous mode [ 302.103179][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.153823][ T5874] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 302.153883][ T5874] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 302.153905][ T5874] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 302.207907][ T5874] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 302.230826][ T5874] usb 5-1: USB disconnect, device number 10 [ 302.261645][ T6792] udevd[6792]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 302.650179][ T5811] Bluetooth: hci6: command tx timeout [ 302.650214][ T5811] Bluetooth: hci4: command tx timeout [ 302.650321][ T61] Bluetooth: hci5: command tx timeout [ 302.708196][ T5874] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 303.721016][ T5874] usb 5-1: device descriptor read/all, error -71 [ 304.224310][ T993] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 304.798834][ T61] Bluetooth: hci5: command tx timeout [ 304.800500][ T5806] Bluetooth: hci6: command tx timeout [ 304.958585][ T993] usb 2-1: config index 0 descriptor too short (expected 215, got 45) [ 304.962326][ T993] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 304.962356][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.962378][ T993] usb 2-1: Product: syz [ 304.962393][ T993] usb 2-1: Manufacturer: syz [ 304.962408][ T993] usb 2-1: SerialNumber: syz [ 305.228412][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 305.228471][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 305.228493][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 305.277784][ T993] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 305.303131][ T993] usb 2-1: USB disconnect, device number 10 [ 305.485823][ T5874] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 305.655980][ T5874] usb 5-1: Using ep0 maxpacket: 16 [ 305.656189][ T993] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 305.663592][ T5874] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.663628][ T5874] usb 5-1: config 0 interface 0 has no altsetting 0 [ 305.663660][ T5874] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 305.663677][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.717298][ T5874] usb 5-1: config 0 descriptor?? [ 305.873236][ T993] usb 2-1: config index 0 descriptor too short (expected 215, got 45) [ 305.884374][ T993] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 305.884396][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.884411][ T993] usb 2-1: Product: syz [ 305.884421][ T993] usb 2-1: Manufacturer: syz [ 305.884431][ T993] usb 2-1: SerialNumber: syz [ 306.175475][ T5874] nzxt-smart2 0003:1E71:2009.0005: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 306.369891][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 306.371563][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 306.574988][ T5874] usb 5-1: USB disconnect, device number 12 [ 306.796571][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.856582][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.906132][ T1348] bond0 (unregistering): Released all slaves [ 308.483008][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 308.483508][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 308.484012][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 308.484064][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 308.484876][ T993] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 308.557804][ T993] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 308.579294][ T993] usb 2-1: USB disconnect, device number 11 [ 309.346487][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.416010][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.446942][ T1348] bond0 (unregistering): Released all slaves [ 313.544350][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 313.545232][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.1.279'. [ 314.363982][ T6901] chnl_net:caif_netlink_parms(): no params data found [ 316.055911][ T993] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 316.225725][ T993] usb 2-1: Using ep0 maxpacket: 32 [ 316.228165][ T993] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 316.228191][ T993] usb 2-1: config 0 has no interface number 0 [ 316.228242][ T993] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 316.231423][ T993] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 316.231451][ T993] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.231471][ T993] usb 2-1: Product: syz [ 316.231486][ T993] usb 2-1: Manufacturer: syz [ 316.231501][ T993] usb 2-1: SerialNumber: syz [ 316.345964][ T993] usb 2-1: config 0 descriptor?? [ 316.350635][ T7032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.581325][ T7032] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 316.992268][ T993] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 316.992512][ T993] asix 2-1:0.188: probe with driver asix failed with error -61 [ 317.677488][ T6914] chnl_net:caif_netlink_parms(): no params data found [ 317.713977][ T6901] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.714179][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.714557][ T6901] bridge_slave_0: entered allmulticast mode [ 317.727857][ T6901] bridge_slave_0: entered promiscuous mode [ 317.753030][ T6901] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.753133][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.753299][ T6901] bridge_slave_1: entered allmulticast mode [ 317.755545][ T6901] bridge_slave_1: entered promiscuous mode [ 317.787555][ T6910] chnl_net:caif_netlink_parms(): no params data found [ 318.064374][ T6901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.275819][ T1348] hsr_slave_0: left promiscuous mode [ 318.316459][ T1348] hsr_slave_1: left promiscuous mode [ 318.317299][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.317325][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.357888][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.357917][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.525941][ T1348] hsr_slave_0: left promiscuous mode [ 318.545778][ T1348] hsr_slave_1: left promiscuous mode [ 318.546871][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.546897][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.596767][ T1348] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.596797][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.708027][ T1348] veth1_macvtap: left promiscuous mode [ 318.708141][ T1348] veth0_macvtap: left promiscuous mode [ 318.708342][ T1348] veth1_vlan: left promiscuous mode [ 318.708464][ T1348] veth0_vlan: left promiscuous mode [ 318.836147][ T1348] veth1_macvtap: left promiscuous mode [ 318.836259][ T1348] veth0_macvtap: left promiscuous mode [ 318.836610][ T1348] veth1_vlan: left promiscuous mode [ 318.836807][ T1348] veth0_vlan: left promiscuous mode [ 318.881375][ T5874] usb 2-1: USB disconnect, device number 12 [ 319.997589][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.034031][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.567155][ C1] vkms_vblank_simulate: vblank timer overrun [ 320.647992][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.011562][ T7059] overlayfs: overlapping lowerdir path [ 321.014787][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.128504][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.712128][ C1] vkms_vblank_simulate: vblank timer overrun [ 321.857772][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.155843][ T5875] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 322.355766][ T5875] usb 5-1: Using ep0 maxpacket: 32 [ 322.384793][ T5875] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 322.384848][ T5875] usb 5-1: config 0 has no interface number 0 [ 322.384890][ T5875] usb 5-1: config 0 interface 184 has no altsetting 0 [ 322.410770][ T5875] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 322.410802][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.410817][ T5875] usb 5-1: Product: syz [ 322.410827][ T5875] usb 5-1: Manufacturer: syz [ 322.410837][ T5875] usb 5-1: SerialNumber: syz [ 322.464398][ T5875] usb 5-1: config 0 descriptor?? [ 322.472848][ T5875] smsc75xx v1.0.0 [ 322.866370][ C1] vkms_vblank_simulate: vblank timer overrun [ 322.985539][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.986566][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.076466][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 323.099325][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 323.099364][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 323.246567][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 323.400205][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.565927][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.748880][ C1] vkms_vblank_simulate: vblank timer overrun [ 323.750291][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 323.750336][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 323.750358][ T5875] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 323.750610][ T5875] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 324.047750][ C1] vkms_vblank_simulate: vblank timer overrun [ 325.003958][ T5875] usb 5-1: USB disconnect, device number 13 [ 327.069671][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 327.267217][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 329.373690][ T6901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.383188][ T6901] team0: Port device team_slave_0 added [ 331.385917][ T6914] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.386073][ T6914] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.386328][ T6914] bridge_slave_0: entered allmulticast mode [ 331.389604][ T6914] bridge_slave_0: entered promiscuous mode [ 331.437653][ T7091] fuse: Bad value for 'fd' [ 331.542875][ T6901] team0: Port device team_slave_1 added [ 331.543526][ T6914] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.543649][ T6914] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.543795][ T6914] bridge_slave_1: entered allmulticast mode [ 331.578734][ T6914] bridge_slave_1: entered promiscuous mode [ 331.925754][ T5874] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 331.987579][ T6910] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.987698][ T6910] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.987845][ T6910] bridge_slave_0: entered allmulticast mode [ 331.992639][ T6910] bridge_slave_0: entered promiscuous mode [ 332.075722][ T5874] usb 5-1: Using ep0 maxpacket: 32 [ 332.079034][ T5874] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 332.079062][ T5874] usb 5-1: config 0 has no interface number 0 [ 332.079114][ T5874] usb 5-1: config 0 interface 184 has no altsetting 0 [ 332.082963][ T5874] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 332.082993][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.083013][ T5874] usb 5-1: Product: syz [ 332.083027][ T5874] usb 5-1: Manufacturer: syz [ 332.083042][ T5874] usb 5-1: SerialNumber: syz [ 332.088390][ T5874] usb 5-1: config 0 descriptor?? [ 332.186060][ T5874] smsc75xx v1.0.0 [ 332.499107][ T6910] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.499431][ T6910] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.499781][ T6910] bridge_slave_1: entered allmulticast mode [ 332.514761][ T6910] bridge_slave_1: entered promiscuous mode [ 332.531283][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 332.531302][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.531335][ T6901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.549911][ T6914] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.558393][ T6901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.558412][ T6901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 332.558444][ T6901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.601730][ T6914] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 332.722964][ T5874] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 332.722997][ T5874] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 333.559586][ T5874] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 333.559618][ T5874] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 333.559639][ T5874] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 333.559948][ T5874] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -61 [ 333.865076][ T6910] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 333.899027][ T6914] team0: Port device team_slave_0 added [ 334.092643][ T6910] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.098719][ T6914] team0: Port device team_slave_1 added [ 335.667905][ T5910] usb 5-1: USB disconnect, device number 14 [ 335.736091][ T6901] hsr_slave_0: entered promiscuous mode [ 335.737728][ T6901] hsr_slave_1: entered promiscuous mode [ 337.090533][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.098797][ T6910] team0: Port device team_slave_0 added [ 337.109902][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.109919][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.109948][ T6914] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.151340][ T6910] team0: Port device team_slave_1 added [ 337.158350][ T6914] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.158372][ T6914] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 337.158404][ T6914] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.312408][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.649024][ C1] vkms_vblank_simulate: vblank timer overrun [ 337.803608][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.296315][ C1] vkms_vblank_simulate: vblank timer overrun [ 338.858428][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.021218][ C1] vkms_vblank_simulate: vblank timer overrun [ 339.160405][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.303'. [ 339.160440][ T7139] netlink: 20 bytes leftover after parsing attributes in process `syz.1.303'. [ 339.161939][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.161950][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.161968][ T6910] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.337558][ T6910] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.337577][ T6910] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.337606][ T6910] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.519455][ T1439] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.614311][ T6914] hsr_slave_0: entered promiscuous mode [ 339.625761][ T6914] hsr_slave_1: entered promiscuous mode [ 339.629179][ T6914] debugfs: 'hsr0' already exists in 'hsr' [ 339.629204][ T6914] Cannot create hsr debugfs directory [ 339.629433][ T1439] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.654181][ T1439] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.664172][ T1439] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 340.071603][ T6910] hsr_slave_0: entered promiscuous mode [ 340.073579][ T6910] hsr_slave_1: entered promiscuous mode [ 340.074917][ T6910] debugfs: 'hsr0' already exists in 'hsr' [ 340.074943][ T6910] Cannot create hsr debugfs directory [ 340.786402][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.061714][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.816004][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.894014][ C1] vkms_vblank_simulate: vblank timer overrun [ 345.218777][ T7184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.313'. [ 345.515145][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.643990][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 345.658322][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.592086][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.667398][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 346.676051][ T5873] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 346.825768][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 346.830847][ T5873] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.830883][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.830919][ T5873] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 346.830942][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.876656][ T5873] usb 2-1: config 0 descriptor?? [ 347.360413][ T5873] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 347.480518][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.686339][ C1] vkms_vblank_simulate: vblank timer overrun [ 347.774517][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.568487][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.808955][ T993] usb 2-1: USB disconnect, device number 13 [ 348.888008][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.240272][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.394018][ C1] vkms_vblank_simulate: vblank timer overrun [ 349.982875][ C1] vkms_vblank_simulate: vblank timer overrun [ 352.871234][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.607923][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.628001][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.645330][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.654804][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.655531][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.715847][ T5874] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 353.757102][ T7281] fuse: Bad value for 'fd' [ 353.845765][ T5874] usb 2-1: device descriptor read/64, error -71 [ 354.031636][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.035263][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.050889][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.054880][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.068228][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 354.099687][ T5874] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 354.135438][ T7284] ipip0: entered promiscuous mode [ 354.135543][ T7284] ipip0: entered allmulticast mode [ 354.225774][ T5874] usb 2-1: device descriptor read/64, error -71 [ 354.349697][ T5874] usb usb2-port1: attempt power cycle [ 354.705888][ T5874] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 354.736635][ T5874] usb 2-1: device descriptor read/8, error -71 [ 354.737606][ T1348] bridge_slave_1: left allmulticast mode [ 354.737627][ T1348] bridge_slave_1: left promiscuous mode [ 354.737823][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.882164][ T1348] bridge_slave_0: left allmulticast mode [ 354.882195][ T1348] bridge_slave_0: left promiscuous mode [ 354.884648][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.986175][ T5874] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 355.006557][ T5874] usb 2-1: device descriptor read/8, error -71 [ 355.040236][ T1348] bridge_slave_1: left allmulticast mode [ 355.040267][ T1348] bridge_slave_1: left promiscuous mode [ 355.040528][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.126485][ T5874] usb usb2-port1: unable to enumerate USB device [ 355.147400][ T1348] bridge_slave_0: left allmulticast mode [ 355.147432][ T1348] bridge_slave_0: left promiscuous mode [ 355.148056][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.266881][ T5806] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 355.270254][ T5806] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 355.272644][ T5806] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 355.327559][ T1348] bridge_slave_1: left allmulticast mode [ 355.327591][ T1348] bridge_slave_1: left promiscuous mode [ 355.327836][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.328873][ T5806] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 355.330033][ T5806] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 355.436856][ T1348] bridge_slave_0: left allmulticast mode [ 355.436881][ T1348] bridge_slave_0: left promiscuous mode [ 355.437066][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.855941][ T61] Bluetooth: hci0: command tx timeout [ 355.940795][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.395785][ T61] Bluetooth: hci1: command tx timeout [ 356.652446][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.676611][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.796563][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.858754][ T1348] bond0 (unregistering): Released all slaves [ 357.725396][ T61] Bluetooth: hci6: command tx timeout [ 357.786588][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.906654][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.935796][ T61] Bluetooth: hci0: command tx timeout [ 357.956179][ T1348] bond0 (unregistering): Released all slaves [ 357.985276][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.255670][ C1] vkms_vblank_simulate: vblank timer overrun [ 358.390016][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.425982][ T61] Bluetooth: hci1: command tx timeout [ 358.443136][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.483028][ T1348] bond0 (unregistering): Released all slaves [ 359.448371][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.174807][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.185526][ T61] Bluetooth: hci6: command tx timeout [ 360.192182][ T61] Bluetooth: hci0: command tx timeout [ 360.308021][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.410937][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.503089][ T61] Bluetooth: hci1: command tx timeout [ 360.965836][ T5910] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 360.967452][ T1348] hsr_slave_0: left promiscuous mode [ 361.023257][ T1348] hsr_slave_1: left promiscuous mode [ 361.024296][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.053147][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.126025][ T5987] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 361.138468][ T5910] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 361.138527][ T5910] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 361.138555][ T5910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.145486][ T5910] usb 5-1: config 0 descriptor?? [ 361.160241][ T5910] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 361.255884][ T1348] hsr_slave_0: left promiscuous mode [ 361.265901][ T5987] usb 2-1: device descriptor read/64, error -71 [ 361.305854][ T1348] hsr_slave_1: left promiscuous mode [ 361.306934][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.356793][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.505823][ T5987] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 361.516328][ T1348] hsr_slave_0: left promiscuous mode [ 361.555900][ T1348] hsr_slave_1: left promiscuous mode [ 361.556687][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 361.586587][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 361.645854][ T5987] usb 2-1: device descriptor read/64, error -71 [ 361.756283][ T5987] usb usb2-port1: attempt power cycle [ 362.112780][ T5987] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 362.129481][ T5987] usb 2-1: device descriptor read/8, error -71 [ 362.226695][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 362.263882][ T61] Bluetooth: hci6: command tx timeout [ 362.264021][ T61] Bluetooth: hci0: command tx timeout [ 362.346653][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 362.380258][ T5987] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 362.396450][ T5987] usb 2-1: device descriptor read/8, error -71 [ 362.516296][ T5987] usb usb2-port1: unable to enumerate USB device [ 362.581297][ T5806] Bluetooth: hci1: command tx timeout [ 363.276584][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 363.377831][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 363.672460][ T5987] usb 5-1: USB disconnect, device number 15 [ 364.335719][ T5806] Bluetooth: hci6: command tx timeout [ 364.779438][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 364.936585][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 365.145408][ C1] vkms_vblank_simulate: vblank timer overrun [ 367.095962][ T7298] chnl_net:caif_netlink_parms(): no params data found [ 367.102182][ T7282] chnl_net:caif_netlink_parms(): no params data found [ 368.461032][ T7287] chnl_net:caif_netlink_parms(): no params data found [ 369.953424][ T7298] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.953637][ T7298] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.953820][ T7298] bridge_slave_0: entered allmulticast mode [ 369.957512][ T7298] bridge_slave_0: entered promiscuous mode [ 370.049834][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.148583][ C1] vkms_vblank_simulate: vblank timer overrun [ 371.064574][ T7282] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.064711][ T7282] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.064970][ T7282] bridge_slave_0: entered allmulticast mode [ 371.096963][ T7282] bridge_slave_0: entered promiscuous mode [ 371.104087][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.104239][ T7298] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.104427][ T7298] bridge_slave_1: entered allmulticast mode [ 371.125824][ T7298] bridge_slave_1: entered promiscuous mode [ 371.355997][ T7282] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.356138][ T7282] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.356381][ T7282] bridge_slave_1: entered allmulticast mode [ 371.375864][ T7282] bridge_slave_1: entered promiscuous mode [ 372.539111][ T7298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.786821][ T7298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.010047][ T7282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 373.010352][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.010487][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.010683][ T7287] bridge_slave_0: entered allmulticast mode [ 373.013033][ T7287] bridge_slave_0: entered promiscuous mode [ 373.172661][ T7282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 373.175529][ T7287] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.177942][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.178246][ T7287] bridge_slave_1: entered allmulticast mode [ 373.220294][ T7287] bridge_slave_1: entered promiscuous mode [ 373.683625][ T7298] team0: Port device team_slave_0 added [ 373.978737][ T7298] team0: Port device team_slave_1 added [ 374.059678][ T7282] team0: Port device team_slave_0 added [ 374.065737][ T5987] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 374.074709][ T7287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.195861][ T5987] usb 5-1: device descriptor read/64, error -71 [ 374.218155][ T7282] team0: Port device team_slave_1 added [ 374.221472][ T7287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.435880][ T5987] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 374.565922][ T5987] usb 5-1: device descriptor read/64, error -71 [ 374.569797][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.569824][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.569852][ T7298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.676053][ T5987] usb usb5-port1: attempt power cycle [ 374.973607][ T7298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.973620][ T7298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.973638][ T7298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.975161][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.975175][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.975203][ T7282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.982141][ T7287] team0: Port device team_slave_0 added [ 375.012213][ T7282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.012233][ T7282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.012266][ T7282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.052427][ T7287] team0: Port device team_slave_1 added [ 375.109315][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 375.109494][ T7436] netlink: 28 bytes leftover after parsing attributes in process `syz.1.354'. [ 375.218119][ T5987] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 375.783543][ T5987] usb 5-1: device descriptor read/8, error -71 [ 376.016003][ T5987] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 376.037001][ T5987] usb 5-1: device descriptor read/8, error -71 [ 376.147889][ T5987] usb usb5-port1: unable to enumerate USB device [ 376.424090][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.424108][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.424137][ T7287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.617962][ T7287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.617991][ T7287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 376.618013][ T7287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.671810][ T7298] hsr_slave_0: entered promiscuous mode [ 376.673001][ T7298] hsr_slave_1: entered promiscuous mode [ 376.673704][ T7298] debugfs: 'hsr0' already exists in 'hsr' [ 376.673727][ T7298] Cannot create hsr debugfs directory [ 376.745832][ T5987] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 376.774514][ T7282] hsr_slave_0: entered promiscuous mode [ 376.776342][ T7282] hsr_slave_1: entered promiscuous mode [ 376.777490][ T7282] debugfs: 'hsr0' already exists in 'hsr' [ 376.777518][ T7282] Cannot create hsr debugfs directory [ 376.911807][ T5987] usb 2-1: Using ep0 maxpacket: 16 [ 376.920035][ T5987] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.920076][ T5987] usb 2-1: config 0 interface 0 has no altsetting 0 [ 376.920116][ T5987] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 376.920143][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.967045][ T5987] usb 2-1: config 0 descriptor?? [ 377.336043][ T5873] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 377.432207][ T5987] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 377.509544][ T5873] usb 5-1: Using ep0 maxpacket: 16 [ 377.537201][ T5873] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.538442][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 377.538482][ T5873] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 377.538506][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.610047][ T5873] usb 5-1: config 0 descriptor?? [ 377.643401][ T5987] usb 2-1: USB disconnect, device number 22 [ 377.906004][ T7287] hsr_slave_0: entered promiscuous mode [ 377.907412][ T7287] hsr_slave_1: entered promiscuous mode [ 377.908442][ T7287] debugfs: 'hsr0' already exists in 'hsr' [ 377.908468][ T7287] Cannot create hsr debugfs directory [ 378.061243][ T5873] nzxt-smart2 0003:1E71:2009.0008: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.4-1/input0 [ 378.581298][ T5908] usb 5-1: USB disconnect, device number 20 [ 381.227070][ T5908] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 381.385920][ T5908] usb 5-1: Using ep0 maxpacket: 8 [ 381.391590][ T5908] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 381.391620][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.391639][ T5908] usb 5-1: Product: syz [ 381.391653][ T5908] usb 5-1: Manufacturer: syz [ 381.391667][ T5908] usb 5-1: SerialNumber: syz [ 381.443585][ T5908] usb 5-1: config 0 descriptor?? [ 381.708292][ T5908] usb 5-1: USB disconnect, device number 21 [ 382.795852][ T5874] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 382.925714][ T5874] usb 5-1: device descriptor read/64, error -71 [ 382.939239][ T7298] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 382.975011][ T1348] bridge_slave_1: left allmulticast mode [ 382.975052][ T1348] bridge_slave_1: left promiscuous mode [ 382.975320][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.068954][ T1348] bridge_slave_0: left allmulticast mode [ 383.068985][ T1348] bridge_slave_0: left promiscuous mode [ 383.069263][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.095783][ T5888] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 383.160550][ T1348] bridge_slave_1: left allmulticast mode [ 383.160581][ T1348] bridge_slave_1: left promiscuous mode [ 383.160843][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.165922][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 383.263245][ T1348] bridge_slave_0: left allmulticast mode [ 383.263275][ T1348] bridge_slave_0: left promiscuous mode [ 383.263531][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.275787][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 383.285743][ T5888] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.285776][ T5888] usb 2-1: config 0 interface 0 has no altsetting 0 [ 383.285821][ T5888] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 383.285846][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.291506][ T5888] usb 2-1: config 0 descriptor?? [ 383.382716][ T1348] bridge_slave_1: left allmulticast mode [ 383.382747][ T1348] bridge_slave_1: left promiscuous mode [ 383.383056][ T1348] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.404388][ T5874] usb 5-1: device descriptor read/64, error -71 [ 383.486725][ T1348] bridge_slave_0: left allmulticast mode [ 383.486757][ T1348] bridge_slave_0: left promiscuous mode [ 383.488442][ T1348] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.510077][ T5874] usb usb5-port1: attempt power cycle [ 383.749200][ T5888] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 383.865751][ T5874] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 383.886475][ T5874] usb 5-1: device descriptor read/8, error -71 [ 383.887970][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.018640][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.084659][ T1348] bond0 (unregistering): Released all slaves [ 384.125803][ T5874] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 384.148522][ T5874] usb 5-1: device descriptor read/8, error -71 [ 384.187491][ T5873] usb 2-1: USB disconnect, device number 23 [ 384.256759][ T5874] usb usb5-port1: unable to enumerate USB device [ 384.366546][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 384.423216][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.423290][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.487894][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 384.549707][ T1348] bond0 (unregistering): Released all slaves [ 384.976528][ T1348] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.088143][ T1348] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.131750][ T1348] bond0 (unregistering): Released all slaves [ 385.171029][ T7298] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 385.505744][ T7298] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 385.620979][ T7298] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 385.744298][ T7511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'. [ 386.179467][ T1348] hsr_slave_0: left promiscuous mode [ 386.215991][ T1348] hsr_slave_1: left promiscuous mode [ 386.217145][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.241719][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.416729][ T1348] hsr_slave_0: left promiscuous mode [ 386.455905][ T1348] hsr_slave_1: left promiscuous mode [ 386.456675][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.479030][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.575892][ T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 386.635816][ T1348] hsr_slave_0: left promiscuous mode [ 386.675806][ T1348] hsr_slave_1: left promiscuous mode [ 386.676846][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.699088][ T1348] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.729302][ T10] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 386.729337][ T10] usb 2-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 386.729357][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 386.732009][ T10] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 386.732040][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.732055][ T10] usb 2-1: Product: syz [ 386.732065][ T10] usb 2-1: Manufacturer: syz [ 386.732075][ T10] usb 2-1: SerialNumber: syz [ 386.743605][ T7520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 386.743754][ T7520] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 387.075449][ T10] rtl8150 2-1:1.0: couldn't reset the device [ 387.076361][ T10] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 387.095248][ T10] usb 2-1: USB disconnect, device number 24 [ 387.516413][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 387.657908][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 388.826503][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 388.946477][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 389.896534][ T1348] team0 (unregistering): Port device team_slave_1 removed [ 389.988500][ T1348] team0 (unregistering): Port device team_slave_0 removed [ 390.507292][ T7518] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 390.507327][ T7518] netlink: 'syz.4.369': attribute type 1 has an invalid length. [ 390.845710][ T7535] netlink: 'syz.1.374': attribute type 16 has an invalid length. [ 390.845781][ T7535] netlink: 'syz.1.374': attribute type 17 has an invalid length. [ 391.759600][ T7535] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 392.775257][ T7298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.861955][ T7298] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.919779][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.924193][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.972700][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.972930][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.963425][ T7557] netlink: 'syz.1.378': attribute type 16 has an invalid length. [ 394.963449][ T7557] netlink: 'syz.1.378': attribute type 17 has an invalid length. [ 395.941143][ T7557] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.154486][ T7282] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 396.253953][ T7282] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 396.324450][ T7282] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 397.191660][ T7282] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 397.746269][ T7298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.775925][ T7287] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 397.834217][ T7287] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 399.003472][ T7287] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 399.123929][ T7287] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 399.316534][ T7606] netlink: 'syz.4.387': attribute type 16 has an invalid length. [ 399.316558][ T7606] netlink: 'syz.4.387': attribute type 17 has an invalid length. [ 399.626257][ T7606] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 400.492793][ T7282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 400.587166][ T5873] usb 5-1: new low-speed USB device number 26 using dummy_hcd [ 400.748837][ T5873] usb 5-1: config 16 has an invalid interface number: 3 but max is 0 [ 400.748867][ T5873] usb 5-1: config 16 has no interface number 0 [ 400.782184][ T5873] usb 5-1: string descriptor 0 read error: -22 [ 400.782346][ T5873] usb 5-1: New USB device found, idVendor=0586, idProduct=3425, bcdDevice=f8.1c [ 400.782370][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.810804][ T7282] 8021q: adding VLAN 0 to HW filter on device team0 [ 400.860856][ T7298] veth0_vlan: entered promiscuous mode [ 400.997902][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.000941][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.019357][ T7287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.079770][ T7298] veth1_vlan: entered promiscuous mode [ 401.093660][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.094324][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.155057][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.156928][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.301756][ T5910] usb 5-1: USB disconnect, device number 26 [ 401.313925][ T7287] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.388277][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.389367][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.431323][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.431482][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.557712][ T7298] veth0_macvtap: entered promiscuous mode [ 404.747326][ T7298] veth1_macvtap: entered promiscuous mode [ 404.930499][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.023078][ T7298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.371102][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.373240][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.373701][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.374192][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.403345][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.403368][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.411561][ T7282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.684493][ T7287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.737117][ T6559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 406.737140][ T6559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.919186][ T7700] netlink: 'syz.7.177': attribute type 16 has an invalid length. [ 407.919263][ T7700] netlink: 'syz.7.177': attribute type 17 has an invalid length. [ 408.944830][ T7700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 409.810723][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 409.814643][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 409.833434][ T7711] ceph: No mds server is up or the cluster is laggy [ 409.835274][ T5874] libceph: connect (1)[c::]:6789 error -101 [ 409.835422][ T5874] libceph: mon0 (1)[c::]:6789 connect error [ 410.150146][ T7287] veth0_vlan: entered promiscuous mode [ 410.296391][ T7287] veth1_vlan: entered promiscuous mode [ 410.451119][ T7282] veth0_vlan: entered promiscuous mode [ 410.579621][ T7282] veth1_vlan: entered promiscuous mode [ 410.651487][ T7287] veth0_macvtap: entered promiscuous mode [ 410.727201][ T7287] veth1_macvtap: entered promiscuous mode [ 410.867447][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.893048][ T7287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.908599][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.913502][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.913547][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.913574][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.148815][ T7282] veth0_macvtap: entered promiscuous mode [ 411.271598][ T7282] veth1_macvtap: entered promiscuous mode [ 411.673503][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.787695][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.787718][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.140335][ T7282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.236197][ T7737] ======================================================= [ 412.236197][ T7737] WARNING: The mand mount option has been deprecated and [ 412.236197][ T7737] and is ignored by this kernel. Remove the mand [ 412.236197][ T7737] option from the mount to silence this warning. [ 412.236197][ T7737] ======================================================= [ 412.348482][ T7737] hpfs: hpfs_map_sector(): read error [ 413.267643][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.472321][ T6559] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.502152][ T6559] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.521571][ T6559] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.182673][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 415.202494][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 415.204514][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 415.208525][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 415.215084][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 417.326435][ T5888] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 417.878902][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 417.892545][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 417.894036][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 417.900695][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 417.967641][ T5888] usb 8-1: unable to get BOS descriptor or descriptor too short [ 418.003996][ T5888] usb 8-1: config index 0 descriptor too short (expected 5138, got 18) [ 418.004028][ T5888] usb 8-1: config 117 has an invalid descriptor of length 232, skipping remainder of the config [ 418.004050][ T5888] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 13 [ 418.009904][ T5888] usb 8-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a [ 418.009934][ T5888] usb 8-1: New USB device strings: Mfr=210, Product=146, SerialNumber=3 [ 418.009956][ T5888] usb 8-1: Product: syz [ 418.009972][ T5888] usb 8-1: Manufacturer: syz [ 418.009988][ T5888] usb 8-1: SerialNumber: syz [ 418.113742][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 418.378653][ T7797] netlink: 'syz.4.412': attribute type 16 has an invalid length. [ 418.378682][ T7797] netlink: 'syz.4.412': attribute type 17 has an invalid length. [ 419.122766][ T5888] usb 8-1: USB disconnect, device number 2 [ 419.226330][ T5806] Bluetooth: hci4: command tx timeout [ 419.265784][ T7797] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.395624][ T61] Bluetooth: hci4: command tx timeout [ 421.395692][ T61] Bluetooth: hci5: command tx timeout [ 424.064465][ T5806] Bluetooth: hci5: command tx timeout [ 424.064492][ T5806] Bluetooth: hci4: command tx timeout [ 426.096017][ T61] Bluetooth: hci4: command tx timeout [ 426.096050][ T61] Bluetooth: hci5: command tx timeout [ 426.585702][ T44] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 426.735711][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 426.739260][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.739286][ T44] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 426.739335][ T44] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 426.739359][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.754408][ T43] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.810208][ T44] usb 5-1: config 0 descriptor?? [ 426.886740][ T7766] chnl_net:caif_netlink_parms(): no params data found [ 428.176183][ T5806] Bluetooth: hci5: command tx timeout [ 428.292346][ T43] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.525669][ T5782] usb 5-1: USB disconnect, device number 27 [ 429.975787][ T5873] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 430.442349][ T10] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 430.462632][ T43] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.481255][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 430.481293][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.483168][ T5873] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 430.483189][ T5873] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 430.483203][ T5873] usb 2-1: Manufacturer: syz [ 430.650232][ T5873] usb 2-1: config 0 descriptor?? [ 430.720131][ T7912] No control pipe specified [ 430.751125][ T10] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 430.751156][ T10] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 430.751176][ T10] usb 5-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 430.751260][ T10] usb 5-1: config 220 has no interface number 2 [ 430.751337][ T10] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 430.751426][ T10] usb 5-1: config 220 interface 0 has no altsetting 0 [ 430.751447][ T10] usb 5-1: config 220 interface 76 has no altsetting 0 [ 430.751467][ T10] usb 5-1: config 220 interface 1 has no altsetting 0 [ 430.824213][ T10] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 430.824303][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.824320][ T10] usb 5-1: Product: syz [ 430.824331][ T10] usb 5-1: Manufacturer: syz [ 430.824343][ T10] usb 5-1: SerialNumber: syz [ 430.963507][ T43] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.079974][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 431.082328][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 431.123350][ T5873] usb 2-1: USB disconnect, device number 25 [ 431.170467][ T10] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 431.170513][ T10] uvcvideo 5-1:220.0: No valid video chain found. [ 431.170643][ T10] usb 5-1: selecting invalid altsetting 0 [ 431.283053][ T10] usb 5-1: selecting invalid altsetting 0 [ 431.283095][ T10] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 431.313670][ T10] usb 5-1: USB disconnect, device number 28 [ 431.627457][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.627596][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.627827][ T7766] bridge_slave_0: entered allmulticast mode [ 431.630532][ T7766] bridge_slave_0: entered promiscuous mode [ 431.633246][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.633355][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.633511][ T7766] bridge_slave_1: entered allmulticast mode [ 431.642844][ T7766] bridge_slave_1: entered promiscuous mode [ 431.780439][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.7.440'. [ 431.780583][ T7924] netlink: 28 bytes leftover after parsing attributes in process `syz.7.440'. [ 433.136439][ T7933] fuse: Bad value for 'fd' [ 435.149867][ T7940] netlink: 32 bytes leftover after parsing attributes in process `syz.1.445'. [ 435.842373][ T7766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 435.988909][ T7766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.996474][ T7952] veth3: entered promiscuous mode [ 439.482181][ T7766] team0: Port device team_slave_0 added [ 439.587467][ T7766] team0: Port device team_slave_1 added [ 439.605664][ T5873] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 439.760334][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 439.760372][ T5873] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.761889][ T5873] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 439.761918][ T5873] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 439.761941][ T5873] usb 2-1: Manufacturer: syz [ 439.777449][ T5873] usb 2-1: config 0 descriptor?? [ 440.326919][ T7989] fuse: Invalid rootmode [ 441.202826][ T5873] usbhid 2-1:0.0: can't add hid device: -71 [ 441.202945][ T5873] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 441.230825][ T5873] usb 2-1: USB disconnect, device number 26 [ 441.319690][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.319709][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.319741][ T7766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.327288][ T7789] chnl_net:caif_netlink_parms(): no params data found [ 441.349549][ T43] bridge_slave_1: left allmulticast mode [ 441.349586][ T43] bridge_slave_1: left promiscuous mode [ 441.349914][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.515181][ T7999] fuse: Bad value for 'fd' [ 442.499645][ T43] bridge_slave_0: left allmulticast mode [ 442.499686][ T43] bridge_slave_0: left promiscuous mode [ 442.499962][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.831442][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 445.864065][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.864172][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.886489][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 445.908531][ T43] bond0 (unregistering): Released all slaves [ 445.959933][ T7766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.959947][ T7766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 445.959968][ T7766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.637730][ T8047] fuse: Invalid rootmode [ 447.073586][ T8049] fuse: Bad value for 'fd' [ 452.217848][ T7766] hsr_slave_0: entered promiscuous mode [ 452.224870][ T7766] hsr_slave_1: entered promiscuous mode [ 454.540095][ T43] hsr_slave_0: left promiscuous mode [ 454.570170][ T43] hsr_slave_1: left promiscuous mode [ 454.571339][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.571363][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.764694][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.764725][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.836834][ T43] veth1_macvtap: left promiscuous mode [ 454.836912][ T43] veth0_macvtap: left promiscuous mode [ 454.837087][ T43] veth1_vlan: left promiscuous mode [ 454.837231][ T43] veth0_vlan: left promiscuous mode [ 455.315716][ T44] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 455.475946][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 455.481849][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.481888][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.481919][ T44] usb 5-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 455.481937][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.545190][ T44] usb 5-1: config 0 descriptor?? [ 455.658421][ T44] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 456.891143][ T8120] fuse: Bad value for 'fd' [ 457.946399][ T43] team0 (unregistering): Port device team_slave_1 removed [ 458.064529][ T5874] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 458.077851][ T44] usb 5-1: USB disconnect, device number 29 [ 458.178330][ T43] team0 (unregistering): Port device team_slave_0 removed [ 458.225723][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 458.228553][ T5874] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.228586][ T5874] usb 2-1: config 0 interface 0 has no altsetting 0 [ 458.228619][ T5874] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 458.228636][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.272380][ T5874] usb 2-1: config 0 descriptor?? [ 458.791256][ T5874] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.1-1/input0 [ 459.290748][ T5874] usb 2-1: USB disconnect, device number 27 [ 459.805173][ T8133] netlink: 'syz.4.481': attribute type 16 has an invalid length. [ 459.805200][ T8133] netlink: 'syz.4.481': attribute type 17 has an invalid length. [ 460.805937][ T8133] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 463.204306][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.204463][ T7789] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.204660][ T7789] bridge_slave_0: entered allmulticast mode [ 463.218768][ T7789] bridge_slave_0: entered promiscuous mode [ 463.272172][ T7789] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.272315][ T7789] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.272544][ T7789] bridge_slave_1: entered allmulticast mode [ 463.289183][ T7789] bridge_slave_1: entered promiscuous mode [ 464.445438][ T7789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.497321][ T7789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.265463][ T7789] team0: Port device team_slave_0 added [ 465.299628][ T7789] team0: Port device team_slave_1 added [ 465.791236][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.791254][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.791286][ T7789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.817623][ T7789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.817647][ T7789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.817683][ T7789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.460803][ T7766] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.296389][ T7766] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.862957][ T7789] hsr_slave_0: entered promiscuous mode [ 468.873375][ T7789] hsr_slave_1: entered promiscuous mode [ 468.882320][ T7789] debugfs: 'hsr0' already exists in 'hsr' [ 468.882350][ T7789] Cannot create hsr debugfs directory [ 469.170706][ T7766] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.617395][ T7766] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.290616][ T43] bridge_slave_1: left allmulticast mode [ 472.290649][ T43] bridge_slave_1: left promiscuous mode [ 472.290918][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.387236][ T43] bridge_slave_0: left allmulticast mode [ 472.387260][ T43] bridge_slave_0: left promiscuous mode [ 472.387477][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.645770][ T5976] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 472.806869][ T5976] usb 2-1: Using ep0 maxpacket: 16 [ 472.945182][ T5976] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 472.945270][ T5976] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.945298][ T5976] usb 2-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.945322][ T5976] usb 2-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 472.945349][ T5976] usb 2-1: config 7 interface 0 has no altsetting 0 [ 472.945385][ T5976] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 472.945409][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.514459][ T5976] input: HID 0458:5010 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:7.0/0003:0458:5010.000B/input/input6 [ 473.686397][ T5976] kye 0003:0458:5010.000B: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0 [ 473.923606][ T7729] usb 2-1: USB disconnect, device number 28 [ 474.195622][ T5976] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 474.365969][ T5976] usb 8-1: Using ep0 maxpacket: 32 [ 474.382576][ T5976] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 474.382605][ T5976] usb 8-1: config 0 has no interface number 0 [ 474.394771][ T5976] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 474.394807][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.394832][ T5976] usb 8-1: Product: syz [ 474.394849][ T5976] usb 8-1: Manufacturer: syz [ 474.394867][ T5976] usb 8-1: SerialNumber: syz [ 474.402514][ T5976] usb 8-1: config 0 descriptor?? [ 474.456381][ T5976] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 474.456421][ T5976] usb 8-1: selecting invalid altsetting 1 [ 474.456439][ T5976] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 474.515289][ T5976] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.524667][ T5976] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 474.524779][ T5976] usb 8-1: media controller created [ 474.574508][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 474.608146][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 474.630875][ T5976] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.644507][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 474.662418][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 474.663377][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 474.707067][ T8264] netlink: 2 bytes leftover after parsing attributes in process `syz.7.503'. [ 475.069328][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 475.073208][ T5806] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 475.078434][ T5806] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 475.120470][ T5806] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 475.121964][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 475.696028][ T8271] hpfs: hpfs_map_sector(): read error [ 475.987245][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 476.046756][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 476.098499][ T43] bond0 (unregistering): Released all slaves [ 476.105789][ T5976] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 476.105873][ T5976] zl10353_read_register: readreg error (reg=127, ret==-110) [ 476.410476][ T5976] usb 8-1: USB disconnect, device number 3 [ 476.735830][ T61] Bluetooth: hci0: command tx timeout [ 477.675623][ T61] Bluetooth: hci1: command tx timeout [ 477.692874][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 477.692910][ T8282] netlink: 28 bytes leftover after parsing attributes in process `syz.4.508'. [ 478.587958][ T8293] netlink: 'syz.1.511': attribute type 16 has an invalid length. [ 478.587985][ T8293] netlink: 'syz.1.511': attribute type 17 has an invalid length. [ 478.659417][ T61] Bluetooth: hci6: command 0x0406 tx timeout [ 478.823519][ T61] Bluetooth: hci0: command tx timeout [ 478.857477][ T8293] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 479.696462][ T5806] Bluetooth: hci1: command tx timeout [ 480.305793][ T43] hsr_slave_0: left promiscuous mode [ 480.376120][ T43] hsr_slave_1: left promiscuous mode [ 480.378534][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.378562][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.462158][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.462191][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.660457][ T43] veth1_macvtap: left promiscuous mode [ 480.660573][ T43] veth0_macvtap: left promiscuous mode [ 480.660847][ T43] veth1_vlan: left promiscuous mode [ 480.661045][ T43] veth0_vlan: left promiscuous mode [ 480.927116][ T8321] netlink: 'syz.1.513': attribute type 16 has an invalid length. [ 480.927141][ T8321] netlink: 'syz.1.513': attribute type 17 has an invalid length. [ 481.583248][ T5806] Bluetooth: hci0: command tx timeout [ 482.185792][ T5806] Bluetooth: hci1: command tx timeout [ 483.615638][ T5806] Bluetooth: hci0: command tx timeout [ 484.156830][ C1] vkms_vblank_simulate: vblank timer overrun [ 484.268167][ T5806] Bluetooth: hci1: command tx timeout [ 484.389052][ T8340] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 485.031262][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.104317][ C1] vkms_vblank_simulate: vblank timer overrun [ 486.696293][ T43] team0 (unregistering): Port device team_slave_1 removed [ 486.906723][ T43] team0 (unregistering): Port device team_slave_0 removed [ 489.226261][ T8321] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 491.187183][ T8268] chnl_net:caif_netlink_parms(): no params data found [ 492.025836][ T8260] chnl_net:caif_netlink_parms(): no params data found [ 492.118705][ T8400] No control pipe specified [ 493.977644][ T8268] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.977774][ T8268] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.977930][ T8268] bridge_slave_0: entered allmulticast mode [ 493.988708][ T8268] bridge_slave_0: entered promiscuous mode [ 494.095993][ T8268] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.096153][ T8268] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.096417][ T8268] bridge_slave_1: entered allmulticast mode [ 494.106175][ T8268] bridge_slave_1: entered promiscuous mode [ 495.642830][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.125129][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.265385][ C1] vkms_vblank_simulate: vblank timer overrun [ 496.581865][ T8268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.723150][ T8268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.723338][ T8260] bridge0: port 1(bridge_slave_0) entered blocking state [ 496.723507][ T8260] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.723647][ T8260] bridge_slave_0: entered allmulticast mode [ 496.731326][ T8260] bridge_slave_0: entered promiscuous mode [ 496.850646][ T8260] bridge0: port 2(bridge_slave_1) entered blocking state [ 496.850787][ T8260] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.851210][ T8260] bridge_slave_1: entered allmulticast mode [ 496.886425][ T8260] bridge_slave_1: entered promiscuous mode [ 497.045671][ T5888] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 497.199405][ T5888] usb 5-1: unable to get BOS descriptor or descriptor too short [ 497.201380][ T5888] usb 5-1: config index 0 descriptor too short (expected 5138, got 18) [ 497.201407][ T5888] usb 5-1: config 117 has an invalid descriptor of length 232, skipping remainder of the config [ 497.201429][ T5888] usb 5-1: config 117 has 0 interfaces, different from the descriptor's value: 13 [ 497.205200][ T5888] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a [ 497.205229][ T5888] usb 5-1: New USB device strings: Mfr=210, Product=146, SerialNumber=3 [ 497.205252][ T5888] usb 5-1: Product: syz [ 497.205267][ T5888] usb 5-1: Manufacturer: syz [ 497.205283][ T5888] usb 5-1: SerialNumber: syz [ 497.447192][ T8268] team0: Port device team_slave_0 added [ 497.568534][ T5888] usb 5-1: USB disconnect, device number 30 [ 497.663995][ T8268] team0: Port device team_slave_1 added [ 497.775115][ T8260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.925067][ T8260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.294976][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.294995][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.295028][ T8268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.466015][ T8268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.466035][ T8268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.466067][ T8268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.469850][ T8260] team0: Port device team_slave_0 added [ 498.720818][ T8260] team0: Port device team_slave_1 added [ 499.030470][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.189008][ C1] vkms_vblank_simulate: vblank timer overrun [ 499.429830][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.063983][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.215242][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.658029][ C1] vkms_vblank_simulate: vblank timer overrun [ 500.953347][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.382446][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.536254][ C1] vkms_vblank_simulate: vblank timer overrun [ 501.921734][ T8468] hpfs: hpfs_map_sector(): read error [ 502.767265][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.818144][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 502.818163][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 502.818203][ T8260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.827824][ C1] vkms_vblank_simulate: vblank timer overrun [ 502.976764][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.519054][ C1] vkms_vblank_simulate: vblank timer overrun [ 503.584354][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.046173][ T8260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.046193][ T8260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 504.046225][ T8260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.127529][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.358763][ T8268] hsr_slave_0: entered promiscuous mode [ 504.360259][ T8268] hsr_slave_1: entered promiscuous mode [ 504.361251][ T8268] debugfs: 'hsr0' already exists in 'hsr' [ 504.361277][ T8268] Cannot create hsr debugfs directory [ 504.684293][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.480569][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.631687][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.780155][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.207843][ T8511] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 506.209640][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.232754][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.623241][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.623332][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.108251][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.345325][ C1] vkms_vblank_simulate: vblank timer overrun [ 509.675018][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.017221][ T8260] hsr_slave_0: entered promiscuous mode [ 510.018787][ T8260] hsr_slave_1: entered promiscuous mode [ 510.019984][ T8260] debugfs: 'hsr0' already exists in 'hsr' [ 510.020011][ T8260] Cannot create hsr debugfs directory [ 510.280129][ T8546] fuse: Bad value for 'fd' [ 510.342768][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.523173][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.079487][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.330664][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.615808][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.914564][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.807943][ C1] vkms_vblank_simulate: vblank timer overrun [ 512.947340][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 512.947376][ T8553] netlink: 28 bytes leftover after parsing attributes in process `syz.1.563'. [ 513.805556][ C1] vkms_vblank_simulate: vblank timer overrun [ 515.512771][ T43] bridge_slave_1: left allmulticast mode [ 515.512802][ T43] bridge_slave_1: left promiscuous mode [ 515.513086][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.577673][ T43] bridge_slave_0: left allmulticast mode [ 515.577708][ T43] bridge_slave_0: left promiscuous mode [ 515.589177][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.657724][ T43] bridge_slave_1: left allmulticast mode [ 515.657758][ T43] bridge_slave_1: left promiscuous mode [ 515.658758][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.718579][ T43] bridge_slave_0: left allmulticast mode [ 515.718611][ T43] bridge_slave_0: left promiscuous mode [ 515.718903][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.188193][ T8585] fuse: Bad value for 'fd' [ 517.710454][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 517.768232][ T5888] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 517.816686][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 517.925800][ T5888] usb 8-1: Using ep0 maxpacket: 16 [ 517.975010][ T5888] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 517.992626][ T5888] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 517.992674][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.992697][ T5888] usb 8-1: Product: syz [ 517.992714][ T5888] usb 8-1: Manufacturer: syz [ 517.992730][ T5888] usb 8-1: SerialNumber: syz [ 518.044946][ T5888] usb 8-1: config 0 descriptor?? [ 518.046626][ T8591] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 518.073263][ T43] bond0 (unregistering): Released all slaves [ 518.552191][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.629165][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.709228][ T43] bond0 (unregistering): Released all slaves [ 519.815936][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 519.820256][ T5888] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 519.820830][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 520.065749][ T5888] usb 8-1: USB disconnect, device number 4 [ 520.068136][ T5888] mcba_usb 8-1:0.0 can0: device disconnected [ 521.412511][ T8623] fuse: Bad value for 'fd' [ 524.056079][ T8633] netlink: 'syz.7.584': attribute type 16 has an invalid length. [ 524.056105][ T8633] netlink: 'syz.7.584': attribute type 17 has an invalid length. [ 524.501121][ T43] hsr_slave_0: left promiscuous mode [ 524.518618][ T43] hsr_slave_1: left promiscuous mode [ 524.519652][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.539423][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.601283][ T43] hsr_slave_0: left promiscuous mode [ 524.616195][ T43] hsr_slave_1: left promiscuous mode [ 524.616954][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.640000][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.543022][ T43] team0 (unregistering): Port device team_slave_1 removed [ 527.486338][ T43] team0 (unregistering): Port device team_slave_0 removed [ 527.514665][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.744837][ C1] vkms_vblank_simulate: vblank timer overrun [ 527.843448][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.035893][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.526494][ T43] team0 (unregistering): Port device team_slave_1 removed [ 528.647907][ T43] team0 (unregistering): Port device team_slave_0 removed [ 528.677908][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.885950][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.986954][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.165068][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.314867][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.340917][ T8633] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 530.076043][ T8658] hpfs: hpfs_map_sector(): read error [ 531.017320][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.515797][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.781778][ C1] vkms_vblank_simulate: vblank timer overrun [ 531.906707][ T7691] libceph: connect (1)[c::]:6789 error -101 [ 531.906915][ T7691] libceph: mon0 (1)[c::]:6789 connect error [ 531.951365][ T8667] ceph: No mds server is up or the cluster is laggy [ 537.444257][ T61] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 537.475878][ T61] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 537.478865][ T61] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 537.487874][ T61] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 537.489031][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 537.797974][ T5806] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 537.803059][ T5806] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 537.804258][ T5806] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 537.867512][ T5806] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 537.868386][ T5806] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 537.952291][ T8723] netlink: 'syz.4.597': attribute type 16 has an invalid length. [ 537.952315][ T8723] netlink: 'syz.4.597': attribute type 17 has an invalid length. [ 538.368517][ T8723] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 539.546592][ T61] Bluetooth: hci4: command tx timeout [ 540.524797][ T61] Bluetooth: hci5: command tx timeout [ 540.667673][ T8748] process 'syz.4.603' launched './file0' with NULL argv: empty string added [ 541.981466][ T61] Bluetooth: hci4: command tx timeout [ 544.748481][ T8768] netlink: 'syz.1.607': attribute type 16 has an invalid length. [ 544.748506][ T8768] netlink: 'syz.1.607': attribute type 17 has an invalid length. [ 544.755873][ T61] Bluetooth: hci5: command tx timeout [ 544.755906][ T61] Bluetooth: hci4: command tx timeout [ 545.105584][ T5873] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 545.107183][ T8768] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 545.316939][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 545.319563][ T5873] usb 8-1: device descriptor read/all, error -71 [ 547.176671][ T5806] Bluetooth: hci4: command tx timeout [ 547.176705][ T5806] Bluetooth: hci5: command tx timeout [ 547.346061][ T8803] autofs: Unknown parameter 'fd0x0000000000000000' [ 547.484869][ T5873] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 547.520390][ T8808] netlink: 16 bytes leftover after parsing attributes in process `syz.4.614'. [ 547.624297][ T5977] bridge_slave_1: left allmulticast mode [ 547.624329][ T5977] bridge_slave_1: left promiscuous mode [ 547.624622][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.675625][ T5873] usb 8-1: Using ep0 maxpacket: 32 [ 547.693216][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.693252][ T5873] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.693292][ T5873] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 547.693317][ T5873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.726598][ T8813] binder: 8812:8813 ioctl c0306201 200000000540 returned -22 [ 547.751313][ T5873] usb 8-1: config 0 descriptor?? [ 547.763683][ T5977] bridge_slave_0: left allmulticast mode [ 547.763714][ T5977] bridge_slave_0: left promiscuous mode [ 547.763992][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.789633][ T8814] binder: 8812:8814 ioctl c0306201 200000000640 returned -22 [ 548.257846][ T5873] savu 0003:1E7D:2D5A.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 548.319241][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.439798][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.525819][ T5977] bond0 (unregistering): Released all slaves [ 549.801787][ T8844] netlink: 'syz.1.618': attribute type 16 has an invalid length. [ 549.801812][ T8844] netlink: 'syz.1.618': attribute type 17 has an invalid length. [ 549.805217][ T61] Bluetooth: hci5: command tx timeout [ 549.998605][ T5888] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 550.045924][ T8844] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 550.726748][ T8848] ubi31: attaching mtd0 [ 550.757755][ T8718] chnl_net:caif_netlink_parms(): no params data found [ 550.867969][ T8848] ubi31: scanning is finished [ 550.867997][ T8848] ubi31: empty MTD device detected [ 551.167117][ T5977] hsr_slave_0: left promiscuous mode [ 551.191670][ T5977] hsr_slave_1: left promiscuous mode [ 551.289242][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.367018][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.490056][ T8848] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 551.490391][ T8848] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 551.490556][ T8848] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 551.491408][ T8848] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 551.491466][ T8848] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 551.491568][ T8848] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 551.492331][ T8848] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1929501880 [ 551.492382][ T8848] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 551.562383][ T8855] ubi31: background thread "ubi_bgt31d" started, PID 8855 [ 553.335426][ T8862] autofs: Unknown parameter 'fd0x0000000000000000' [ 554.896149][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 555.027204][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 555.188190][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.205746][ T5888] usb 8-1: device descriptor read/64, error -110 [ 555.297680][ C1] vkms_vblank_simulate: vblank timer overrun [ 555.515644][ T5888] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 555.645641][ T5888] usb 8-1: device descriptor read/64, error -32 [ 555.754671][ T8716] chnl_net:caif_netlink_parms(): no params data found [ 555.939785][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.145681][ T5888] usb 8-1: reset high-speed USB device number 6 using dummy_hcd [ 556.178393][ T5888] usb 8-1: device descriptor read/8, error -32 [ 556.728804][ C1] vkms_vblank_simulate: vblank timer overrun [ 556.941582][ T8886] overlayfs: overlapping lowerdir path [ 556.944398][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.052955][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.606314][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.759672][ C1] vkms_vblank_simulate: vblank timer overrun [ 557.809169][ T5874] usb 8-1: USB disconnect, device number 6 [ 557.890199][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.135705][ T5888] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 558.145784][ T5874] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 558.255313][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.335799][ T5888] usb 5-1: Using ep0 maxpacket: 8 [ 558.340480][ T5888] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 558.340602][ T5888] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 558.340629][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 558.340655][ T5888] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 558.340682][ T5888] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.340787][ T5888] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 558.340813][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.342557][ T5874] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 558.342618][ T5874] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 558.456506][ T5874] usb 8-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 558.456538][ T5874] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 558.456559][ T5874] usb 8-1: Manufacturer: syz [ 558.546057][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.621263][ T5874] usb 8-1: config 0 descriptor?? [ 559.047523][ T5874] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 559.227231][ T5888] usb 5-1: usb_control_msg returned -32 [ 559.227284][ T5888] usbtmc 5-1:16.0: can't read capabilities [ 559.280256][ T5888] usb 5-1: USB disconnect, device number 31 [ 559.760856][ C1] vkms_vblank_simulate: vblank timer overrun [ 560.705707][ T993] usb 8-1: USB disconnect, device number 7 [ 561.868420][ T8914] ceph: No mds server is up or the cluster is laggy [ 562.186866][ T8718] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.187010][ T8718] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.187263][ T8718] bridge_slave_0: entered allmulticast mode [ 562.195678][ T8718] bridge_slave_0: entered promiscuous mode [ 562.280575][ T8920] misc userio: Invalid payload size [ 562.549768][ T8908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 562.549792][ T8908] netlink: 24 bytes leftover after parsing attributes in process `syz.1.632'. [ 562.600298][ T8718] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.600442][ T8718] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.600697][ T8718] bridge_slave_1: entered allmulticast mode [ 562.603642][ T8718] bridge_slave_1: entered promiscuous mode [ 562.605381][ T8716] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.610000][ T8716] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.610249][ T8716] bridge_slave_0: entered allmulticast mode [ 562.613870][ T8716] bridge_slave_0: entered promiscuous mode [ 562.655691][ T5888] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 562.808256][ T5888] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 562.808288][ T5888] usb 8-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 562.808309][ T5888] usb 8-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 562.808330][ T5888] usb 8-1: config 220 has no interface number 2 [ 562.808416][ T5888] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 562.808447][ T5888] usb 8-1: config 220 interface 0 has no altsetting 0 [ 562.808466][ T5888] usb 8-1: config 220 interface 76 has no altsetting 0 [ 562.808486][ T5888] usb 8-1: config 220 interface 1 has no altsetting 0 [ 563.039396][ T8927] hpfs: hpfs_map_sector(): read error [ 563.278548][ T5888] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 563.278639][ T5888] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.278690][ T5888] usb 8-1: Product: syz [ 563.278732][ T5888] usb 8-1: Manufacturer: syz [ 563.278871][ T5888] usb 8-1: SerialNumber: syz [ 563.869860][ T8716] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.870070][ T8716] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.892989][ T8716] bridge_slave_1: entered allmulticast mode [ 563.914581][ T8716] bridge_slave_1: entered promiscuous mode [ 564.105321][ T5888] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 564.105359][ T5888] uvcvideo 8-1:220.0: No valid video chain found. [ 564.105433][ T5888] usb 8-1: selecting invalid altsetting 0 [ 564.162973][ T5888] usb 8-1: selecting invalid altsetting 0 [ 564.163014][ T5888] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 564.204313][ T5888] usb 8-1: USB disconnect, device number 8 [ 564.646855][ T8935] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 564.938789][ T8932] vlan2: entered promiscuous mode [ 564.938813][ T8932] macvtap0: entered promiscuous mode [ 564.989291][ T8718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.993176][ T8716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.067627][ T8716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.079682][ T8718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.133944][ T61] Bluetooth: hci6: unexpected event for opcode 0x1003 [ 567.165312][ T8716] team0: Port device team_slave_0 added [ 567.179621][ T8718] team0: Port device team_slave_0 added [ 567.547824][ T7729] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 567.572143][ T8716] team0: Port device team_slave_1 added [ 567.575068][ T8718] team0: Port device team_slave_1 added [ 568.236178][ T8961] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 568.529395][ T7729] usb 2-1: Using ep0 maxpacket: 8 [ 568.531760][ T7729] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 568.531818][ T7729] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 568.531842][ T7729] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 568.531868][ T7729] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 568.531892][ T7729] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 568.531936][ T7729] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 568.531960][ T7729] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.747874][ T7729] usb 2-1: usb_control_msg returned -32 [ 568.747925][ T7729] usbtmc 2-1:16.0: can't read capabilities [ 568.776120][ T7729] usb 2-1: USB disconnect, device number 29 [ 568.972602][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.972678][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.139586][ T61] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 569.139707][ T61] Bluetooth: hci6: Injecting HCI hardware error event [ 569.141313][ T61] Bluetooth: hci6: hardware error 0x00 [ 571.612456][ T8985] capability: warning: `syz.7.651' uses deprecated v2 capabilities in a way that may be insecure [ 572.865939][ T61] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 573.439521][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.439586][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.439657][ T8716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.644479][ T8718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 573.644498][ T8718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.644529][ T8718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.739912][ T8716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.739931][ T8716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.739962][ T8716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.751909][ T8718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.751927][ T8718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.751957][ T8718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.825388][ C1] vkms_vblank_simulate: vblank timer overrun [ 577.797178][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.026435][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.165719][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.414835][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.013652][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.325744][ T5859] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 580.386166][ C1] vkms_vblank_simulate: vblank timer overrun [ 580.740792][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.395591][ T5859] usb 2-1: Using ep0 maxpacket: 32 [ 581.399022][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.399058][ T5859] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.399097][ T5859] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 581.399119][ T5859] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.402705][ C1] vkms_vblank_simulate: vblank timer overrun [ 581.426596][ T5859] usb 2-1: config 0 descriptor?? [ 581.530961][ T8718] hsr_slave_0: entered promiscuous mode [ 581.533418][ T8718] hsr_slave_1: entered promiscuous mode [ 581.561088][ T8716] hsr_slave_0: entered promiscuous mode [ 581.566952][ T8716] hsr_slave_1: entered promiscuous mode [ 581.568833][ T8716] debugfs: 'hsr0' already exists in 'hsr' [ 581.568860][ T8716] Cannot create hsr debugfs directory [ 581.669346][ C1] vkms_vblank_simulate: vblank timer overrun [ 582.018150][ T5859] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 582.361838][ T5859] usb 2-1: USB disconnect, device number 30 [ 583.285667][ T44] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 583.441778][ T44] usb 2-1: config index 0 descriptor too short (expected 215, got 45) [ 583.449441][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 583.449477][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.449502][ T44] usb 2-1: Product: syz [ 583.449518][ T44] usb 2-1: Manufacturer: syz [ 583.449536][ T44] usb 2-1: SerialNumber: syz [ 583.684210][ T5977] bridge_slave_1: left allmulticast mode [ 583.684243][ T5977] bridge_slave_1: left promiscuous mode [ 583.685093][ T5977] bridge0: port 2(bridge_slave_1) entered disabled state [ 583.701779][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 583.701850][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 583.701886][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 583.765163][ T44] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 583.804939][ T44] usb 2-1: USB disconnect, device number 31 [ 583.832278][ T5977] bridge_slave_0: left allmulticast mode [ 583.832310][ T5977] bridge_slave_0: left promiscuous mode [ 583.832694][ T5977] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.105561][ T5859] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 584.145842][ T44] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 584.206643][ T5977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.285611][ T5859] usb 5-1: Using ep0 maxpacket: 32 [ 584.288893][ T5859] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 584.288919][ T5859] usb 5-1: config 0 has no interface number 0 [ 584.288992][ T5859] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 584.289121][ T5977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.291370][ T5859] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 584.291396][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.291415][ T5859] usb 5-1: Product: syz [ 584.291425][ T5859] usb 5-1: Manufacturer: syz [ 584.291435][ T5859] usb 5-1: SerialNumber: syz [ 584.304784][ T44] usb 2-1: config index 0 descriptor too short (expected 215, got 45) [ 584.310956][ T44] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 584.310991][ T44] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.311017][ T44] usb 2-1: Product: syz [ 584.311033][ T44] usb 2-1: Manufacturer: syz [ 584.311050][ T44] usb 2-1: SerialNumber: syz [ 584.429582][ T5859] usb 5-1: config 0 descriptor?? [ 584.437407][ T9058] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 584.440204][ T5977] bond0 (unregistering): Released all slaves [ 584.718835][ T9058] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 584.735445][ C1] vkms_vblank_simulate: vblank timer overrun [ 584.895844][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 584.895910][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 584.939281][ T5859] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 584.939854][ T5859] asix 5-1:0.188: probe with driver asix failed with error -32 [ 584.970456][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.049324][ C1] vkms_vblank_simulate: vblank timer overrun [ 585.848152][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.052995][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 586.053057][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 586.053875][ T44] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 586.099556][ T5977] hsr_slave_0: left promiscuous mode [ 586.150203][ T44] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 586.171847][ T5977] hsr_slave_1: left promiscuous mode [ 586.172894][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.196154][ T44] usb 2-1: USB disconnect, device number 32 [ 586.368128][ C1] vkms_vblank_simulate: vblank timer overrun [ 586.887184][ T5977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.124069][ T44] usb 5-1: USB disconnect, device number 32 [ 587.605730][ T5873] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 587.799309][ T5873] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 587.799341][ T5873] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 587.799362][ T5873] usb 2-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 587.799383][ T5873] usb 2-1: config 220 has no interface number 2 [ 587.799462][ T5873] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 587.799491][ T5873] usb 2-1: config 220 interface 0 has no altsetting 0 [ 587.799518][ T5873] usb 2-1: config 220 interface 76 has no altsetting 0 [ 587.799538][ T5873] usb 2-1: config 220 interface 1 has no altsetting 0 [ 587.802808][ T5873] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 587.802837][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.802857][ T5873] usb 2-1: Product: syz [ 587.802872][ T5873] usb 2-1: Manufacturer: syz [ 587.802887][ T5873] usb 2-1: SerialNumber: syz [ 589.065660][ T5888] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 589.155667][ T5873] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 589.155703][ T5873] uvcvideo 2-1:220.0: No valid video chain found. [ 589.155765][ T5873] usb 2-1: selecting invalid altsetting 0 [ 589.225647][ T5888] usb 8-1: Using ep0 maxpacket: 16 [ 589.226743][ T5873] usb 2-1: selecting invalid altsetting 0 [ 589.226781][ T5873] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 589.227867][ T5888] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 589.227930][ T5888] usb 8-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 589.227959][ T5888] usb 8-1: config 0 interface 0 has no altsetting 0 [ 589.227994][ T5888] usb 8-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 589.228017][ T5888] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.273272][ T5873] usb 2-1: USB disconnect, device number 33 [ 589.326832][ T5888] usb 8-1: config 0 descriptor?? [ 589.355441][ T5888] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 590.298750][ T5977] team0 (unregistering): Port device team_slave_1 removed [ 590.469323][ T5977] team0 (unregistering): Port device team_slave_0 removed [ 591.916545][ T5859] usb 8-1: USB disconnect, device number 9 [ 593.315713][ T5859] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 593.505771][ T5859] usb 8-1: Using ep0 maxpacket: 32 [ 593.507871][ T5859] usb 8-1: config 0 has an invalid interface number: 188 but max is 0 [ 593.507890][ T5859] usb 8-1: config 0 has no interface number 0 [ 593.507925][ T5859] usb 8-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 593.510839][ T5859] usb 8-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 593.510869][ T5859] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.510891][ T5859] usb 8-1: Product: syz [ 593.510906][ T5859] usb 8-1: Manufacturer: syz [ 593.510921][ T5859] usb 8-1: SerialNumber: syz [ 593.601775][ T5859] usb 8-1: config 0 descriptor?? [ 593.602709][ T9121] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 593.930132][ T9121] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 594.149957][ T5859] asix 8-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 594.150243][ T5859] asix 8-1:0.188: probe with driver asix failed with error -32 [ 594.358649][ T9128] binder: 9127:9128 ioctl c0306201 200000000540 returned -22 [ 594.469629][ T9130] binder: 9127:9130 ioctl c0306201 200000000640 returned -22 [ 594.603702][ T8716] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 594.976549][ T8716] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 595.264086][ T5888] usb 8-1: USB disconnect, device number 10 [ 595.698003][ T61] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 596.725205][ T9153] syz.7.686 (9153) used greatest stack depth: 18392 bytes left [ 597.190718][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 597.195239][ T5806] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 597.198538][ T5806] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 597.199910][ T5806] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 597.201230][ T5806] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 598.105296][ T9169] hpfs: hpfs_map_sector(): read error [ 599.298488][ T5806] Bluetooth: hci0: command tx timeout [ 599.827157][ T5806] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 599.827455][ T5806] Bluetooth: hci3: Injecting HCI hardware error event [ 599.828303][ T5806] Bluetooth: hci3: hardware error 0x00 [ 599.967232][ T9176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 600.666856][ T9179] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 600.689037][ T9179] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 600.690276][ T9179] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 600.692396][ T9179] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 600.717207][ T9179] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 601.332749][ T9190] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 601.417241][ T9179] Bluetooth: hci0: command tx timeout [ 602.818012][ T9179] Bluetooth: hci1: command tx timeout [ 602.907639][ T5806] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 603.456272][ T5806] Bluetooth: hci0: command tx timeout [ 603.579525][ T9202] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 604.219046][ T9215] overlayfs: overlapping lowerdir path [ 604.895665][ T5806] Bluetooth: hci1: command tx timeout [ 605.535682][ T5806] Bluetooth: hci0: command tx timeout [ 607.000019][ T5806] Bluetooth: hci1: command tx timeout [ 607.913416][ T37] audit: type=1326 audit(1764053269.430:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f3af749 code=0x7ffc0000 [ 607.913486][ T37] audit: type=1326 audit(1764053269.430:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f3af749 code=0x7ffc0000 [ 607.913534][ T37] audit: type=1326 audit(1764053269.450:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f049f3af749 code=0x7ffc0000 [ 607.913582][ T37] audit: type=1326 audit(1764053269.450:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f3af749 code=0x7ffc0000 [ 607.913629][ T37] audit: type=1326 audit(1764053269.460:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f049f3af749 code=0x7ffc0000 [ 607.913676][ T37] audit: type=1326 audit(1764053269.470:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f049f3adf90 code=0x7ffc0000 [ 607.913724][ T37] audit: type=1326 audit(1764053269.480:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f049f3b0f77 code=0x7ffc0000 [ 607.913771][ T37] audit: type=1326 audit(1764053269.480:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f049f3af749 code=0x7ffc0000 [ 607.913819][ T37] audit: type=1326 audit(1764053269.480:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f049f3b0f77 code=0x7ffc0000 [ 607.913866][ T37] audit: type=1326 audit(1764053269.490:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9228 comm="syz.4.697" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f049f3ae3aa code=0x7ffc0000 [ 609.056387][ T5806] Bluetooth: hci1: command tx timeout [ 609.487934][ T9262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 613.069182][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.4.709'. [ 613.212805][ T9156] chnl_net:caif_netlink_parms(): no params data found [ 614.871974][ T9315] binder: 9314:9315 ioctl c0306201 200000000540 returned -22 [ 614.927121][ T9316] binder: 9314:9316 ioctl c0306201 200000000640 returned -22 [ 614.957709][ T9175] chnl_net:caif_netlink_parms(): no params data found [ 615.909886][ T9330] hpfs: hpfs_map_sector(): read error [ 616.992737][ T5940] bridge_slave_1: left allmulticast mode [ 616.992767][ T5940] bridge_slave_1: left promiscuous mode [ 616.993041][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.081237][ T5940] bridge_slave_0: left allmulticast mode [ 617.081261][ T5940] bridge_slave_0: left promiscuous mode [ 617.081448][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.095738][ T5873] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 617.279325][ T9341] netlink: 'syz.1.720': attribute type 16 has an invalid length. [ 617.279404][ T9341] netlink: 'syz.1.720': attribute type 17 has an invalid length. [ 618.237643][ T5873] usb 8-1: unable to get BOS descriptor or descriptor too short [ 618.240089][ T5873] usb 8-1: config index 0 descriptor too short (expected 5138, got 18) [ 618.240117][ T5873] usb 8-1: config 117 has an invalid descriptor of length 232, skipping remainder of the config [ 618.240138][ T5873] usb 8-1: config 117 has 0 interfaces, different from the descriptor's value: 13 [ 618.242484][ T5873] usb 8-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=77.4a [ 618.242514][ T5873] usb 8-1: New USB device strings: Mfr=210, Product=146, SerialNumber=3 [ 618.242536][ T5873] usb 8-1: Product: syz [ 618.242547][ T5873] usb 8-1: Manufacturer: syz [ 618.242557][ T5873] usb 8-1: SerialNumber: syz [ 618.457653][ T5940] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.526484][ T5940] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.549772][ T5873] usb 8-1: USB disconnect, device number 11 [ 618.588640][ T5940] bond0 (unregistering): Released all slaves [ 618.673909][ T9341] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 618.676375][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.676500][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.676731][ T9156] bridge_slave_0: entered allmulticast mode [ 618.706801][ T9156] bridge_slave_0: entered promiscuous mode [ 618.803215][ T9344] binder: 9343:9344 ioctl 4018620d 0 returned -22 [ 618.805090][ T9344] binder: 9343:9344 ioctl c0306201 200000000540 returned -22 [ 618.820126][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.820291][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.820558][ T9156] bridge_slave_1: entered allmulticast mode [ 618.823504][ T9156] bridge_slave_1: entered promiscuous mode [ 618.875778][ T9345] binder: 9343:9345 ioctl c0306201 200000000640 returned -22 [ 619.595697][ T5940] hsr_slave_0: left promiscuous mode [ 619.616297][ T5940] hsr_slave_1: left promiscuous mode [ 619.617137][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.677117][ T5940] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 620.102714][ T9357] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 625.089042][ T5940] team0 (unregistering): Port device team_slave_1 removed [ 625.299125][ T5940] team0 (unregistering): Port device team_slave_0 removed [ 625.575696][ T44] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 625.765733][ T44] usb 8-1: Using ep0 maxpacket: 16 [ 625.769210][ T44] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 625.774595][ T44] usb 8-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 625.774626][ T44] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.774649][ T44] usb 8-1: Product: syz [ 625.774665][ T44] usb 8-1: Manufacturer: syz [ 625.774681][ T44] usb 8-1: SerialNumber: syz [ 625.840438][ T44] usb 8-1: config 0 descriptor?? [ 625.863435][ T9386] ceph: No mds server is up or the cluster is laggy [ 625.873206][ T9382] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 626.866663][ T9175] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.866861][ T9175] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.867067][ T9175] bridge_slave_0: entered allmulticast mode [ 626.869278][ T9175] bridge_slave_0: entered promiscuous mode [ 626.875206][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.972633][ T9175] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.972800][ T9175] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.973018][ T9175] bridge_slave_1: entered allmulticast mode [ 626.981149][ T9175] bridge_slave_1: entered promiscuous mode [ 626.995000][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 627.012041][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 627.012210][ T44] mcba_usb 8-1:0.0: Microchip CAN BUS Analyzer connected [ 627.014154][ C1] mcba_usb 8-1:0.0 can0: Tx URB aborted (-71) [ 627.081285][ T44] usb 8-1: USB disconnect, device number 12 [ 627.084918][ T44] mcba_usb 8-1:0.0 can0: device disconnected [ 627.484342][ T9380] ------------[ cut here ]------------ [ 627.484366][ T9380] WARNING: CPU: 1 PID: 9380 at kernel/kcov.c:477 kcov_task_exit+0x13c/0x150 [ 627.484425][ T9380] Modules linked in: [ 627.484471][ T9380] CPU: 1 UID: 0 PID: 9380 Comm: syz.7.733 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 627.484496][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.484514][ T9380] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 627.484546][ T9380] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 627.484565][ T9380] RSP: 0018:ffffc90004a87d00 EFLAGS: 00010206 [ 627.484584][ T9380] RAX: 48c0385457d31800 RBX: ffff888027abe000 RCX: 0000000000000000 [ 627.484601][ T9380] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 627.484616][ T9380] RBP: ffffc90004a87e68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 627.484640][ T9380] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff110047f65bd [ 627.484658][ T9380] R13: 0000000000000000 R14: ffff888027abe008 R15: ffff888024b3bc00 [ 627.484675][ T9380] FS: 000055555b2df500(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 627.484694][ T9380] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 627.484708][ T9380] CR2: 00007fe794894f98 CR3: 000000005d836000 CR4: 00000000003526f0 [ 627.484728][ T9380] Call Trace: [ 627.484741][ T9380] [ 627.484753][ T9380] do_exit+0x105/0x2300 [ 627.484798][ T9380] ? rt_mutex_slowunlock+0x493/0x8a0 [ 627.484831][ T9380] ? __pfx_do_exit+0x10/0x10 [ 627.484866][ T9380] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 627.484897][ T9380] ? __rcu_read_unlock+0x84/0xe0 [ 627.484927][ T9380] ? rt_spin_unlock+0x161/0x200 [ 627.484956][ T9380] do_group_exit+0x21c/0x2d0 [ 627.484984][ T9380] __x64_sys_exit_group+0x3f/0x40 [ 627.485003][ T9380] x64_sys_call+0x21f7/0x2200 [ 627.485034][ T9380] do_syscall_64+0xfa/0xfa0 [ 627.485069][ T9380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.485091][ T9380] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 627.485115][ T9380] ? clear_bhb_loop+0x60/0xb0 [ 627.485142][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.485164][ T9380] RIP: 0033:0x7f49110af749 [ 627.485189][ T9380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.485208][ T9380] RSP: 002b:00007fffafb1a358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 627.485230][ T9380] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49110af749 [ 627.485246][ T9380] RDX: 00007f4910319000 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.485259][ T9380] RBP: 00007fffafb1a3bc R08: 0000000000019a20 R09: 00000000000927c0 [ 627.485274][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000006a [ 627.485288][ T9380] R13: 00000000000927c0 R14: 00000000000986de R15: 00007fffafb1a410 [ 627.485324][ T9380] [ 627.485339][ T9380] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 627.485355][ T9380] CPU: 1 UID: 0 PID: 9380 Comm: syz.7.733 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 627.485379][ T9380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 627.485392][ T9380] Call Trace: [ 627.485401][ T9380] [ 627.485410][ T9380] dump_stack_lvl+0x99/0x250 [ 627.485449][ T9380] ? __asan_memcpy+0x40/0x70 [ 627.485473][ T9380] ? __pfx_dump_stack_lvl+0x10/0x10 [ 627.485508][ T9380] ? __pfx__printk+0x10/0x10 [ 627.485551][ T9380] vpanic+0x237/0x6d0 [ 627.485574][ T9380] ? __pfx_vpanic+0x10/0x10 [ 627.485607][ T9380] panic+0xb9/0xc0 [ 627.485635][ T9380] ? __pfx_panic+0x10/0x10 [ 627.485675][ T9380] __warn+0x31b/0x4b0 [ 627.485695][ T9380] ? kcov_task_exit+0x13c/0x150 [ 627.485728][ T9380] ? kcov_task_exit+0x13c/0x150 [ 627.485759][ T9380] report_bug+0x2be/0x4f0 [ 627.485791][ T9380] ? kcov_task_exit+0x13c/0x150 [ 627.485823][ T9380] ? kcov_task_exit+0x13c/0x150 [ 627.485852][ T9380] ? kcov_task_exit+0x13e/0x150 [ 627.485882][ T9380] handle_bug+0x84/0x160 [ 627.485905][ T9380] exc_invalid_op+0x1a/0x50 [ 627.485927][ T9380] asm_exc_invalid_op+0x1a/0x20 [ 627.485948][ T9380] RIP: 0010:kcov_task_exit+0x13c/0x150 [ 627.485978][ T9380] Code: c7 c7 10 46 c5 8e 48 c7 c6 c6 2b da 8c 48 c7 c2 8c 01 d9 8c 4c 89 f9 e8 42 5d f1 02 4c 39 bb 98 00 00 00 0f 84 ff fe ff ff 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 e4 3e 04 09 0f 1f 40 00 90 90 [ 627.485997][ T9380] RSP: 0018:ffffc90004a87d00 EFLAGS: 00010206 [ 627.486015][ T9380] RAX: 48c0385457d31800 RBX: ffff888027abe000 RCX: 0000000000000000 [ 627.486031][ T9380] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: 00000000ffffffff [ 627.486047][ T9380] RBP: ffffc90004a87e68 R08: 0000000000000000 R09: ffffffff8ac2eb41 [ 627.486062][ T9380] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: 1ffff110047f65bd [ 627.486079][ T9380] R13: 0000000000000000 R14: ffff888027abe008 R15: ffff888024b3bc00 [ 627.486102][ T9380] ? rt_spin_lock+0x1c1/0x3e0 [ 627.486140][ T9380] do_exit+0x105/0x2300 [ 627.486222][ T9380] ? rt_mutex_slowunlock+0x493/0x8a0 [ 627.486253][ T9380] ? __pfx_do_exit+0x10/0x10 [ 627.486288][ T9380] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 627.486319][ T9380] ? __rcu_read_unlock+0x84/0xe0 [ 627.486349][ T9380] ? rt_spin_unlock+0x161/0x200 [ 627.486379][ T9380] do_group_exit+0x21c/0x2d0 [ 627.486407][ T9380] __x64_sys_exit_group+0x3f/0x40 [ 627.486428][ T9380] x64_sys_call+0x21f7/0x2200 [ 627.486451][ T9380] do_syscall_64+0xfa/0xfa0 [ 627.486489][ T9380] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.486511][ T9380] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 627.486534][ T9380] ? clear_bhb_loop+0x60/0xb0 [ 627.486562][ T9380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.486584][ T9380] RIP: 0033:0x7f49110af749 [ 627.486603][ T9380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.486622][ T9380] RSP: 002b:00007fffafb1a358 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 627.486651][ T9380] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f49110af749 [ 627.486667][ T9380] RDX: 00007f4910319000 RSI: 0000000000000000 RDI: 0000000000000000 [ 627.486681][ T9380] RBP: 00007fffafb1a3bc R08: 0000000000019a20 R09: 00000000000927c0 [ 627.486697][ T9380] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000006a [ 627.486712][ T9380] R13: 00000000000927c0 R14: 00000000000986de R15: 00007fffafb1a410 [ 627.486747][ T9380] [ 627.487096][ T9380] Kernel Offset: disabled