last executing test programs: 14m6.750480745s ago: executing program 1 (id=485): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000340)='\x00', 0x1, 0x4c001, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000900)="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", 0x13e, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0x8, 0xc9100120, 0x0, 0x0) 14m6.42412691s ago: executing program 1 (id=488): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="710505010e030607037e050930ea56cc4e0b4b496d8c34e401eb"], 0x1a) 14m5.951457449s ago: executing program 1 (id=490): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x9, 0x15, 0x0, 0x0, 0xc242, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0xd0, 0x9, 0xff, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x1}, 0x50) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x804) r1 = openat$incfs(0xffffffffffffffff, &(0x7f0000000040)='.log\x00', 0x505001, 0x1a) sendmsg$nl_route(r1, 0x0, 0x4000864) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000080), 0x0) 14m4.577925517s ago: executing program 1 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "9ac420002e2eafb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 14m3.235984435s ago: executing program 1 (id=495): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000001480), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000014c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, 0x0, 0x4040000) 14m2.960198543s ago: executing program 1 (id=497): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000480)={0xc}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 13m47.398903338s ago: executing program 32 (id=497): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x2, 0x1, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xb, 0x5}, {0xe, 0xffff}, {0xa, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048084) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) r1 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/bus/input/devices\x00', 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000480)={0xc}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, 0x0) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, 0x0, 0x200, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}}, 0x40000) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000900020073797a3100000000050005000a000000050001000600000013000300686173683a6e65742c696661636500000c0007800800124005000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x800) 13m37.220188114s ago: executing program 2 (id=546): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x6, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) syz_open_dev$dri(0x0, 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) dup(r2) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 13m35.303871211s ago: executing program 2 (id=549): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) sendmsg$sock(r0, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000200)}, {&(0x7f0000001200)="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", 0x454}], 0x2}, 0x4008804) 13m35.03089027s ago: executing program 2 (id=550): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x880}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380), 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 13m33.460126796s ago: executing program 2 (id=551): ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa, 0x0, 0x6}}}}]}, 0x44}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x9}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x55}, 0x4000) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r5 = io_uring_setup(0x6b7, &(0x7f00000000c0)={0x0, 0xd6f1, 0x800, 0x2, 0x8b9}) io_uring_register$IORING_UNREGISTER_PBUF_RING(r5, 0x17, &(0x7f00000075c0)={0x0, 0x0, 0x0, 0x700}, 0x1) prlimit64(0x0, 0x6, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_pidfd_open(r6, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) 13m26.426364654s ago: executing program 2 (id=559): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc, 0x0, 0xffffffffffffffff, 0x800000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000380), 0xce4, r1}, 0x38) 13m14.656855201s ago: executing program 2 (id=574): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x5, 0x2772) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x4, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x7ff, 0x7, 0x6, 0xa5e2}, 0x10) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) 12m59.510361129s ago: executing program 33 (id=574): r0 = socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x5, 0x2772) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002", 0x29}], 0x1}, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x1e, 0x4, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r7}, &(0x7f0000000600), &(0x7f0000000640)=r5}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0x7, &(0x7f00000000c0)={0x7ff, 0x7, 0x6, 0xa5e2}, 0x10) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000080)=0x81, 0x43) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x44}}, 0x0) 10m14.829717896s ago: executing program 3 (id=853): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea199800", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="0005010000004f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10m10.865533924s ago: executing program 3 (id=859): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x3c, r1, 0x615, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}, 0x5}, 0x0) 10m10.579616228s ago: executing program 3 (id=861): socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x10}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setresuid(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x1, 0x2}}, './file0\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xd, 0x2b, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x3, 0x0, 0x1, 0x0, 0x0, 0x18, 0xfffffffffffffffc}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x25, r1}, 0x94) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="9e0f01c466b90704000066b86e45000066ba000000000f300f2333640fc75b17670fd3e02e0ffee4d8860600f30f1eed67660f3a613e8f", 0x37}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x4003, 0x0) mq_open(&(0x7f0000000040)='\\+-]$*\\\x00', 0x40, 0x7, &(0x7f0000000080)={0x7, 0x7, 0x4, 0x4}) 10m8.201298851s ago: executing program 3 (id=864): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r1, 0x541c, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usbip_server_init(0x3) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x20000, 0x0) fcntl$notify(r3, 0x402, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kvm_test_age_hva\x00', r3, 0x0, 0x5}, 0x18) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x2001}, 0x10) bind$tipc(r2, 0x0, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x0, 0x2, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9b) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c000b8018"], 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 10m6.70063122s ago: executing program 3 (id=866): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x34, 0x10, 0x40d, 0x4, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f00000001c0)='\x05\x00\x00\x00\x04\xb0\xfe\x98\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\xc77\x8b') r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x1f, &(0x7f0000000040)=0x1, 0x4) sendmsg$sock(r4, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000200)}, {&(0x7f0000001200)="f55d42593d0684c8aa70712dcfc9c1065096404b96a3a7f93a4614407f4112937b99add88419c7aed853f4288cdffa731e07af240f24e6a396e9499518d50a53613b2efd83d251c791ed1c7d6b1b225c46e12a06f80cba57a435ff4bee841085028ce0a869a57acdd17bafe6e8fd7234b9f31d9f2c3de189679f29d320d21c0ccd88a1331ed9943582a1ed9a2b461ff780b37de13f6fc36976b67b4c3a823d93df0679689cb8578b89f557578c1717fbb07d9c238b2b73a0b6c7d726c8c02e68be42c7262f17cb14a59885fbb73ff37f03b7eb56a683346ac5aa1ac344c98f392596593cc3711f2f1592922022eb91880f5f1bcd1ffc832a1e99f5737a13e71cbbb6019ee730698e9866560c3600981e1d48411aee1dc9524f42a0e35607ccb3e68a8e7b2c08e81db32038cc9873e30432152f1e8b125f3a2f7b38c3161554816c0ba7322e80190f8f95ce690d2c8671b3ce53f384ce5c4bdd96738e18c26b55c19f41eb7881f3076b1eef59d57704d249873c2ef058bf82d18f517c61066ef4f20546b0323afc85911180152748bec5b657bfb3ddc78f34c552659d262d9eb37f4ecd75495074e1377a4dcaf0b07b461f0757629a202a3ed4c33be39a92d2cf92fdcbb5dde6cf7019018a86a81a4c016c834e93cbb374a8452ad60db54f5ce593438f895e79ac4fe4c1fa1b08516d605436a13b6fc802d525752bcff60715f345e12dd48032e6519e79459ce869e45103c4d1df1b845e1bdf23ee73b53b5bd3bb6872b1913948c8095637ea01d6a667f5fd1a2b2c73a16e9f21c8e7add1275cd60973337b5941d1c2b58048aea1554d2cd18dd9c37b22d0c6bb6e9b8d68217bcef62890f9089606bc4ec44257dac9bcec02ead78f207a2d4d7f5e6f9be80b7f6bf65fc147b80697d6c5b8dd5c5b7a8cfba22a56d518dd936fdaa799eb329c1f00e45542862e8e2122e1cfd0b84889e594aa54c68103a8181737c53c4e00367dd300b0c00715eefcb983aa24e00dc68bc3b09cf8f2be6f360f42d4aa58c426198a0eb76d6d60e8f74933c50153d546dc991024cef921e32206600d359e45e44c67ce9f3ef3c7538ccb7dcdb8e60e02c570e104b9fff4d29d18759f0e5c16d2a293cbea01f6e69804b3651ea6b2a8ba5f8ba6be1835c6a30e7224197bb4910fcbfd4e3add9d4ba2b7003241ead23e5937bbf2d7932ffe835f6ab729fa5b95be10042e6f740a2c09bb371cc8a49c26863fc3101116adc25ae6495d321a49248db0467b7e16df783d2e4e854bf7e37eed3d959a14ebd3a7f235130e89cff3b1dde698a2d558d6ef286d293d44b5c571a350ee53d7d911e37a6bb7956fe893249e4b84d596cd47750b133706919bb353d27f05102ea019c698c08c0aff0c2b4e01b9910a61ce33ef4401489058fcf3178adc7149c29434fd94ad49afd0eb2ef288c62a67866d1f6d031b9d532bfde6198c0454be303a5f1e0527500760684bb8dd95c33c97e19fce64eb9fa2fc4728a9183e26e25fb6b46b8fde2e8973d4f50e8e4da21a301c92e11688cf6d3f22cd21f164029e89aa", 0x454}], 0x2}, 0x4008804) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) write$vga_arbiter(0xffffffffffffffff, 0x0, 0xff35) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x28502, 0x0) 10m1.070887777s ago: executing program 3 (id=868): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001fc0)={0x41c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x37d, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x12}, {0xc}, {0xc, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x41c}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9m45.790559613s ago: executing program 34 (id=868): sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000001fc0)={0x41c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5f}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xffffffff}, @NL80211_ATTR_FRAME={0x37d, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x2}, @device_a, @broadcast, @from_mac, {0x9}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x1012, 0x7, @device_a, {0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{0x12}, {0xc}, {0xc, 0x1}]}, @val={0x2d, 0x1a, {0x300, 0x0, 0x0, 0x0, {0x10001, 0x3, 0x0, 0x259, 0x0, 0x0, 0x1, 0x2, 0x1}, 0x8, 0x800, 0x3}}, [{0xdd, 0x13, "c0178b979ea0907e64f86dc8c879099b75bee1"}, {0xdd, 0x9a, "88d9b8d5c21239e0b21953bdfe843cd036b2d09fe760cde293125a05811e5b983addd14710acc51caeb0966ed41097077157afaf9385d1fe3303b163b88cafe118d234b5ff37c231ced120ba0f36522819481494b0f3cccd1a7c0f5e9292c5b98f08405436b43d1943b75befd8cf732371b66eaf5e2a8de5445ba39c8eb372bd7866e58eefb8d4713523cedb1d4b873b43e603f3fa21c30edb99"}, {0xdd, 0x94, "e40d9b7894cdaf3963247290e8bc27036e97a326d1167f1edca6c27def93331b627994b9cc997bdbbaab5eb4a0d8dd5d0f465717b4949e8e5ae7abb2322969cd470445bd60b3c6f1777295fff0f928c58f0b2f4ad7a02597cc2fc309ca27787e1300158ff2cf258c7b685400a6508c28762f3d783bcf1a8c50a1ddc108c56b7edcf8b6d20938bb8fd59c22f0557470c10b543ac3"}, {0xdd, 0xd5, "2c3a0de19d84258be5670c8b009a46515ee3b108a03f155dd97b1790ff57c2f1803b26cc9e776ad948f39111b449a685f6808c988471f98cb87ebf5c177eabc67a48c63b39de322fbb397e9191661ddc4b90c164f6535f86ecf858a1d4e09dd1585b87428463251a153629f9b8834b0f881fc6a34af1feccc60fa3ee6266645588f238e684c9c86f41562c962862a24d31ee7b8e234bd127467668fab21465d359ad01bc0b7abc878ef37e1b68afbb05f53d0a7a3084305c6d7faabdd16c41cc98262d71cdc121c8fae5491a669cffba6dab60dfb7"}, {0xdd, 0x6a, "f48e7192a754ab5f2dcdd09e083dbf93438466070cec5f40d1fbff00074eee0ac62178866a45c6b02174638bdbc4c7aa9390e672864aec7b4c2f2e0703619300256db29560a5736fd0196f32315a643cd23b0ef29943c1b6e512251ec8f5f97714b9cd3fabe4633465c9"}, {0xdd, 0x9e, "c7eb2efa02debe2c942e23933974f567a22ea8e4212a8738de284f2c37d6959159eb7691a0bb8e01593b5798fc53a843a2781805fe02bb45bba707f1ccd30fbda62a097693785d8ef747ef40d7cfff8177948def618aa0c026672ffc91e4805cd289f724e46a63d4e7b7b1bb9a86c505a9cc3398fd1363c5e7b876d32cbf3300f4b0cb417b1a23519e1c7a2fbc98bd5989e92537928970ec7c1c1e96146e"}]}}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xef}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xbb0}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1000}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7e2}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x28e}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2e0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x41c}, 0x1, 0x0, 0x0, 0x24011}, 0x404c000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000004000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0adff010000000000000dd6e4edef3d93452a09004b43370e9703890723f97e46bb", 0xd3}], 0x1}, 0x20004804) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 6.435891925s ago: executing program 0 (id=1496): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000000004043554d00000000000001090224000100005000090400fefd0300010009210480e501220800090581"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, 0x0, 0x0) r2 = dup(0xffffffffffffffff) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000000)={0x3a, @broadcast, 0x4e23, 0x1, 'dh\x00', 0x3b, 0x619, 0xf}, 0x2c) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x12, r3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x404}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) getpid() epoll_create1(0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000a40)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x5}, 0x40000100) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 4.399275001s ago: executing program 4 (id=1500): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xa, 0x0, 0x700, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x3, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}, 0x1, 0x7}, 0x10) 4.160137948s ago: executing program 4 (id=1501): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600"], 0x0, 0x4000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0xc22cddfde31e1cc9) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100000000000000) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c00000002060500"/17], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x101, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) creat(&(0x7f00000002c0)='./file0\x00', 0xfe) 3.956391152s ago: executing program 4 (id=1502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0xfffffffffffffeef, &(0x7f0000000000)={&(0x7f0000004400)=@getchain={0x24, 0x66, 0xfff1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xe, 0xf}, {0xfff2, 0xfff1}, {0xffff, 0x1ffef}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x800) 3.465921468s ago: executing program 4 (id=1503): socket$inet6_mptcp(0xa, 0x1, 0x106) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{0x0}], 0x1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0xe68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x4, 0x3, 0x7, 0x6, 0x1}, 0x3, 0x1}, [{0xab8, 0x3, 0x3, 0x1ff, 0x2, 0x4}, {0x3, 0xff, 0x2, 0x401, 0x8, 0xe9d}, {0x3, 0x5, 0x6, 0xe5, 0xffffff0d, 0x6}, {0x0, 0x7, 0x10000, 0x9, 0x3, 0x1c000}, {0x9, 0x86, 0x3000000, 0x4, 0xd, 0xff}, {0x62b1, 0x1, 0x7f, 0xc, 0x101, 0xfffffffb}, {0x1, 0x6, 0xfffffffb, 0x4, 0x2, 0x2}, {0x0, 0x2, 0xd, 0x6, 0x2, 0x3}, {0x9, 0xfffffff8, 0x3, 0x4233, 0x3, 0x8}, {0x7, 0x7fff, 0x0, 0x80000001, 0x387, 0x7}, {0x0, 0x8, 0x7, 0x8, 0x4, 0xfffffff7}, {0x5, 0x4, 0x9, 0x9, 0xffd, 0xffff}, {0x7, 0xd8, 0x6, 0x0, 0x4, 0xacd1}, {0x7, 0x0, 0x2, 0x1, 0x200, 0x2c378a9f}, {0xffff, 0x7, 0x4, 0x6, 0xc0000000, 0x1}, {0x7fffffff, 0xad, 0x0, 0x4, 0x2}, {0x6, 0xfe, 0x8, 0x9, 0x9, 0x401}, {0x3, 0x4, 0x8, 0x40, 0x8}, {0x8, 0x8f, 0x8001, 0xc2e, 0xf52f, 0xffff3b50}, {0xffffff00, 0xffffffff, 0x8, 0x9, 0xff, 0xb1}, {0x8, 0x18000000, 0x2a, 0xc6f, 0x7, 0x6}, {0x0, 0x7, 0x7b, 0x4, 0x9, 0x8d}, {0x200, 0x1, 0x7, 0x1, 0x6, 0xfffffffa}, {0x0, 0x44, 0x6, 0x0, 0x9, 0x2}, {0xfffffff8, 0x8, 0x4, 0x3, 0x5, 0x7d}, {0x3ff, 0xffff091e, 0x8925, 0x33e8, 0x3, 0x4}, {0x7, 0xd1, 0x8, 0x1, 0xe, 0xcc}, {0x200, 0x1, 0x84e, 0x4, 0x3e6, 0x9}, {0x6, 0xeb09, 0x2a082b7e, 0x1, 0x9, 0x7}, {0x10000, 0xb8, 0x3, 0x9, 0x9, 0xe9d}, {0x3, 0x3, 0x6, 0x0, 0x3, 0x8333}, {0x8000, 0x2539, 0x5, 0x6, 0x4, 0x3}, {0x5, 0x2, 0x2, 0x1, 0x4, 0x2}, {0x5, 0x4, 0xffffffd0, 0x4, 0x12000000, 0x4}, {0x1812, 0x8, 0x9c, 0x2, 0xf, 0x101}, {0xffffff71, 0x9c7e, 0x0, 0x7, 0xa17a, 0xde}, {0x9, 0x3, 0xa3b, 0x7fff, 0x5, 0xffffff08}, {0x0, 0x7, 0x0, 0x7, 0x3ff}, {0xb47, 0x7, 0x9, 0x86f7, 0x9, 0x4}, {0x3, 0x7, 0x2, 0xe3, 0x7, 0x4}, {0xffffffff, 0x6, 0x1, 0x35d, 0x29200000, 0x6}, {0x0, 0xf11, 0x5, 0x6, 0x4, 0x3}, {0x4, 0x100, 0x0, 0x79f, 0xfffff1c8, 0x70}, {0x0, 0x400, 0x7, 0x9, 0x4, 0x10000}, {0x5, 0x1, 0x5, 0x9, 0x8000, 0xad934800}, {0x4b, 0xf2, 0x7, 0xe563, 0x4, 0x7}, {0x5, 0x6, 0x7fff, 0x9, 0x365, 0x2}, {0x5, 0x5, 0x2, 0x3, 0x43, 0x1}, {0x2, 0x6, 0x80, 0x3, 0x7fff, 0x7}, {0x3, 0xd734, 0xfffffff7, 0x9, 0x40, 0xf}, {0x5, 0x800, 0xb03c, 0xf, 0x8, 0x8}, {0x6, 0x2, 0x1, 0x8, 0x6, 0xa4}, {0x1, 0x4, 0x6, 0x4, 0x8001, 0x1}, {0x6, 0x40, 0xe4, 0x5e, 0x6, 0x754}, {0x9, 0x5, 0x8, 0x4, 0x0, 0xfffffffb}, {0xdb3, 0x9, 0x2, 0x5, 0xa8, 0xff}, {0x9, 0xffffffff, 0xd7, 0x2, 0xfd5, 0xfbd}, {0x200, 0x8, 0x10000, 0x24, 0x101, 0x3}, {0x2000000, 0x7e99, 0x0, 0x7ff, 0x0, 0x6}, {0x100, 0x0, 0xa0, 0x8, 0x0, 0x7}, {0x3, 0x2, 0x5, 0x7, 0x10, 0x9}, {0x7, 0x9, 0x265d, 0x7, 0x3, 0x4}, {0x6, 0x1000, 0x6, 0x1, 0x5, 0x6}, {0x80, 0x7, 0x4, 0x9, 0xc2, 0x2}, {0x9, 0x1, 0x4, 0x80000000, 0xfffff238, 0xffff7c49}, {0xc, 0x10001, 0x6, 0x2, 0xfffff5a6, 0x8}, {0x8001, 0x81, 0x7, 0x6, 0x4, 0x4}, {0x2, 0x2, 0x39a3, 0x7, 0x5, 0x9}, {0xfffffff9, 0x5, 0x0, 0x1a, 0x200, 0x4}, {0x1, 0x9, 0xb0, 0x7, 0x400, 0x2}, {0x4, 0x7, 0x40, 0x905, 0x5, 0x4}, {0x61, 0x0, 0x4, 0x9, 0x2, 0x6}, {0xd0, 0x1, 0x2, 0x4, 0x9, 0x3}, {0x6, 0x80000000, 0xfff, 0x0, 0x43cd, 0x138a2e31}, {0x26, 0x3, 0x5, 0xd01, 0x9, 0xe7}, {0x7, 0x2, 0xed0e, 0x6, 0x2000, 0x800}, {0x400, 0xff, 0x1a6d, 0x64, 0x2, 0x7}, {0x239, 0x71, 0x5, 0x8, 0x9, 0x3}, {0x101, 0xfffffff8, 0xf4, 0x5, 0xe, 0x1000}, {0xfffffff8, 0x1000, 0x0, 0xff, 0x2, 0xfffffffa}, {0x80000000, 0x10000, 0x1, 0xe51e, 0x8, 0xfffffffd}, {0x0, 0x1, 0x1, 0x29, 0x5, 0x200}, {0x3, 0x400, 0x0, 0xe, 0x9, 0x7f}, {0x3, 0x0, 0x0, 0x9, 0x9, 0x4}, {0x10, 0x0, 0x7, 0x2, 0x8, 0x4}, {0x3, 0x40, 0x7fff, 0x46, 0x5, 0x7ea}, {0x5, 0x86d6, 0x3, 0xf, 0x401, 0x3ff}, {0x7, 0x0, 0x8, 0x1000, 0x3, 0x9}, {0x8, 0x9, 0x155a, 0x4, 0x3, 0x5}, {0x2, 0x7, 0x9, 0xffffffff, 0x6bd, 0x800}, {0x3d13, 0x5, 0x118, 0xfff, 0xff, 0x1}, {0x28, 0x4, 0x0, 0x7, 0x7, 0xad}, {0x8, 0x0, 0x5, 0x0, 0x8, 0x800}, {0x1, 0x400, 0x7, 0x4, 0x1, 0x8}, {0xfffffd18, 0x9, 0x401, 0x4, 0x4, 0x14}, {0x800, 0xa8f, 0x2, 0xfff, 0x2, 0x3}, {0x3, 0xff, 0x2, 0x7, 0xfffffffa, 0x9}, {0x401, 0x0, 0x5, 0x4, 0x7ff, 0x1}, {0x4, 0xffff8001, 0x3, 0x9, 0x3, 0xb}, {0x1, 0x1, 0x3bbb, 0x0, 0x9, 0x83}, {0x8, 0x2, 0x6, 0x8001, 0x40, 0x5}, {0x5, 0x7, 0x1000, 0x8, 0x3, 0x7}, {0x40000000, 0x1, 0x2, 0x4, 0x7, 0x4}, {0x7fffffff, 0x3, 0x7f, 0x3, 0x0, 0xe}, {0x3, 0x515, 0x1, 0x23b2, 0x2, 0x9}, {0x17, 0xfffffffb, 0x10000, 0x1ff, 0x10, 0x8000}, {0x8e, 0x8, 0xcc, 0x0, 0x7, 0x4}, {0x2, 0x6, 0xbbe, 0x9, 0xffff7fff, 0x8000}, {0x9, 0xfffffff0, 0x0, 0x7f, 0x3444bb35}, {0x9, 0x1ff, 0x3, 0x4544, 0x1, 0x1}, {0x385, 0x5, 0x9, 0xefffffff, 0x1000, 0x6}, {0xccef, 0x6, 0x8, 0x101, 0x4}, {0x180000, 0x8ae1, 0x7, 0x6, 0xff, 0xfff}, {0x400, 0x1, 0x400, 0xc, 0x1, 0x8}, {0x30, 0x6, 0xfffffffa, 0x400, 0x401, 0xbd65}, {0x1, 0x40, 0xd031, 0x4, 0x6, 0x1000}, {0x8b, 0x10000, 0x0, 0x2, 0x8, 0x9}, {0x5, 0xfffffff9, 0xd, 0x10, 0x37e8, 0x4}, {0xffff5bb1, 0x36ec, 0x7d, 0x8, 0x2, 0x7fff}, {0x7, 0x1, 0x5, 0x4, 0x3, 0xf6535ff5}, {0x80, 0x2, 0x7, 0x6, 0x5, 0x81}, {0x2, 0x3, 0x8, 0x4, 0x1, 0x1000}, {0x10000, 0x3ff, 0x4, 0x101, 0xfff, 0xc5}, {0x10001, 0x7, 0x10000, 0x8, 0x8d4, 0x2618}, {0x6, 0x2, 0x0, 0x7f, 0x8, 0x1}, {0xd3a1, 0x9, 0x7, 0x80000000, 0x8, 0x80000000}, {0x9, 0x200, 0xdfca, 0x5, 0x94d, 0xa}, {0x35f, 0xaa, 0x9, 0x40, 0x66c, 0x9}], [{0x1}, {0x4}, {0x3}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x3, 0x1}, {0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {}, {0x5}, {0x3}, {0x2}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {}, {0x1}, {0x6}, {0x0, 0x1}, {0x3}, {0x78c0603c8fa1a1b4, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x3}, {0x3}, {0x0, 0x1}, {0x2}, {0x5}, {0x7a479a5d4662f5b3}, {0x4}, {0x0, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x3}, {0x3, 0x1}, {0x5}, {}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x2}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x4}, {0x2, 0x1}, {0x5}, {0x5, 0x1}, {0x1}, {0x1}, {0x6}, {0x1}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0xe68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 3.026818076s ago: executing program 0 (id=1504): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYRES32], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x800000}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_RESIZE(r2, 0x5609, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setitimer(0x1, 0x0, 0x0) 2.788210902s ago: executing program 4 (id=1505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.60692204s ago: executing program 0 (id=1506): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) 1.532493003s ago: executing program 0 (id=1507): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x40d, 0x4, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5019}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmsg$sock(r3, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000000200)}, {&(0x7f0000001200)}], 0x2}, 0x4008804) 311.521405ms ago: executing program 4 (id=1508): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x54, r1, 0x1, 0x70bd2e, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xffd}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x4}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x6}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x144}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x2}, 0x50) socket(0x22, 0x2, 0x24) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124d960", 0x14}], 0x1}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYRES16, @ANYBLOB], 0x14}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x4010, 0xffffffffffffffff, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}}, 0x0) 175.659159ms ago: executing program 0 (id=1509): syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) timer_create(0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) add_key$user(&(0x7f00000001c0), 0x0, &(0x7f0000000100)="d8", 0x1, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f00000000c0)='asymmetric\x00', 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) close(0x3) 0s ago: executing program 0 (id=1510): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYRES8], 0x60}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r2, 0x0, 0xd}, 0x18) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mknod$loop(0x0, 0xfff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$isdn(0x22, 0x3, 0x4) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'c6xdigio\x00', [0x4f27, 0x5, 0x10feaeee, 0x3fd, 0x2, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x400, 0x1802, 0x1600, 0x1, 0x0, 0x5, 0xe1cb, 0x6, 0x4, 0x3, 0x3, 0x80000089, 0xfffffffd, 0x0, 0x6, 0xfffffffc, 0x3, 0x1003c, 0xc, 0x4, 0x8000000, 0x40005]}) kernel console output (not intermixed with test programs): 8852][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 741.249645][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 741.270366][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 741.276428][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 741.279724][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 741.284838][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 741.904950][T10486] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç' [ 741.904970][T10486] CPU: 1 UID: 0 PID: 10486 Comm: syz.0.1133 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 741.904989][T10486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 741.904997][T10486] Call Trace: [ 741.905002][T10486] [ 741.905008][T10486] dump_stack_lvl+0x189/0x250 [ 741.905032][T10486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 741.905049][T10486] ? __pfx__printk+0x10/0x10 [ 741.905063][T10486] ? kernfs_path_from_node+0x2c/0x280 [ 741.905079][T10486] ? kernfs_path_from_node+0x2c/0x280 [ 741.905090][T10486] ? kernfs_path_from_node+0x243/0x280 [ 741.905100][T10486] ? kernfs_path_from_node+0x2c/0x280 [ 741.905115][T10486] sysfs_warn_dup+0x8e/0xa0 [ 741.905132][T10486] sysfs_do_create_link_sd+0xc0/0x110 [ 741.905145][T10486] device_add_class_symlinks+0x1d2/0x240 [ 741.905164][T10486] device_add+0x475/0xb50 [ 741.905183][T10486] wiphy_register+0x1ba6/0x28d0 [ 741.905208][T10486] ? __pfx_wiphy_register+0x10/0x10 [ 741.905221][T10486] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 741.905244][T10486] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 741.905263][T10486] ieee80211_register_hw+0x3425/0x4080 [ 741.905290][T10486] ? ieee80211_register_hw+0x14a1/0x4080 [ 741.905313][T10486] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 741.905332][T10486] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 741.905353][T10486] ? __hrtimer_setup+0x18a/0x200 [ 741.905368][T10486] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 741.905384][T10486] mac80211_hwsim_new_radio+0x2c76/0x4e30 [ 741.905407][T10486] ? mac80211_hwsim_new_radio+0x10b/0x4e30 [ 741.905429][T10486] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 741.905442][T10486] ? trace_kmalloc+0x1f/0xd0 [ 741.905455][T10486] ? kstrndup+0xbf/0x160 [ 741.905476][T10486] hwsim_new_radio_nl+0xea4/0x1b10 [ 741.905491][T10486] ? __pfx___nla_validate_parse+0x10/0x10 [ 741.905516][T10486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 741.905532][T10486] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 741.905554][T10486] ? __nla_parse+0x40/0x60 [ 741.905572][T10486] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 741.905594][T10486] genl_family_rcv_msg_doit+0x215/0x300 [ 741.905615][T10486] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 741.905641][T10486] ? bpf_lsm_capable+0x9/0x20 [ 741.905654][T10486] ? security_capable+0x7e/0x2e0 [ 741.905674][T10486] genl_rcv_msg+0x60e/0x790 [ 741.905701][T10486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.905717][T10486] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 741.905732][T10486] ? __lock_acquire+0xab9/0xd20 [ 741.905753][T10486] netlink_rcv_skb+0x205/0x470 [ 741.905768][T10486] ? __pfx_genl_rcv_msg+0x10/0x10 [ 741.905785][T10486] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 741.905809][T10486] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.905822][T10486] ? netlink_deliver_tap+0x2e/0x1b0 [ 741.905838][T10486] genl_rcv+0x28/0x40 [ 741.905852][T10486] netlink_unicast+0x843/0xa10 [ 741.905871][T10486] ? __pfx_netlink_unicast+0x10/0x10 [ 741.905885][T10486] ? netlink_sendmsg+0x642/0xb30 [ 741.905897][T10486] ? skb_put+0x11b/0x210 [ 741.905915][T10486] netlink_sendmsg+0x805/0xb30 [ 741.905936][T10486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.905958][T10486] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 741.905969][T10486] ? __pfx_netlink_sendmsg+0x10/0x10 [ 741.905984][T10486] __sock_sendmsg+0x219/0x270 [ 741.905999][T10486] ____sys_sendmsg+0x508/0x820 [ 741.906019][T10486] ? __pfx_____sys_sendmsg+0x10/0x10 [ 741.906041][T10486] ? import_iovec+0x74/0xa0 [ 741.906056][T10486] ___sys_sendmsg+0x21f/0x2a0 [ 741.906074][T10486] ? __pfx____sys_sendmsg+0x10/0x10 [ 741.906115][T10486] ? __fget_files+0x2a/0x420 [ 741.906130][T10486] ? __fget_files+0x3a6/0x420 [ 741.906152][T10486] __x64_sys_sendmsg+0x1a1/0x260 [ 741.906170][T10486] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 741.906198][T10486] ? do_syscall_64+0xbe/0x3b0 [ 741.906216][T10486] do_syscall_64+0xfa/0x3b0 [ 741.906229][T10486] ? lockdep_hardirqs_on+0x9c/0x150 [ 741.906243][T10486] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.906254][T10486] ? clear_bhb_loop+0x60/0xb0 [ 741.906269][T10486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.906280][T10486] RIP: 0033:0x7fadfc10ebe9 [ 741.906293][T10486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.906303][T10486] RSP: 002b:00007fadfa32c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 741.906317][T10486] RAX: ffffffffffffffda RBX: 00007fadfc336180 RCX: 00007fadfc10ebe9 [ 741.906326][T10486] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000008 [ 741.906334][T10486] RBP: 00007fadfc191e19 R08: 0000000000000000 R09: 0000000000000000 [ 741.906342][T10486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.906349][T10486] R13: 00007fadfc336218 R14: 00007fadfc336180 R15: 00007fff2c8e1ed8 [ 741.906369][T10486] [ 743.319614][ T5834] Bluetooth: hci4: command tx timeout [ 743.367914][ T9511] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 743.534360][ T9511] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 743.534398][ T9511] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 743.549503][ T9511] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 743.549533][ T9511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.549552][ T9511] usb 5-1: Product: syz [ 743.549565][ T9511] usb 5-1: Manufacturer: syz [ 743.549579][ T9511] usb 5-1: SerialNumber: syz [ 743.561680][ T9511] usb 5-1: config 0 descriptor?? [ 743.564731][T10523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.565040][T10523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.794455][T10523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 743.794762][T10523] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 744.399157][ T9511] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID [ 744.695343][T10503] chnl_net:caif_netlink_parms(): no params data found [ 745.398647][ T5834] Bluetooth: hci4: command tx timeout [ 745.498318][T10503] bridge0: port 1(bridge_slave_0) entered blocking state [ 745.498490][T10503] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.498761][T10503] bridge_slave_0: entered allmulticast mode [ 745.508349][T10503] bridge_slave_0: entered promiscuous mode [ 745.512145][T10503] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.520701][T10503] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.520910][T10503] bridge_slave_1: entered allmulticast mode [ 745.531002][T10503] bridge_slave_1: entered promiscuous mode [ 746.093790][ T9511] usb 5-1: USB disconnect, device number 44 [ 746.212679][T10503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 746.691366][T10503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 747.319241][T10503] team0: Port device team_slave_0 added [ 747.407579][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.407662][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.422123][T10503] team0: Port device team_slave_1 added [ 747.478046][ T5834] Bluetooth: hci4: command tx timeout [ 748.881511][T10140] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 748.929676][T10503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 748.929689][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 748.929705][T10503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 748.931045][T10140] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 749.298941][T10503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.298960][T10503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.298991][T10503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 749.562584][ T5834] Bluetooth: hci4: command tx timeout [ 749.575825][T10140] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 752.349410][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 752.470815][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 752.473430][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 752.475387][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 752.476482][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 753.983907][T10503] hsr_slave_0: entered promiscuous mode [ 753.985539][T10503] hsr_slave_1: entered promiscuous mode [ 755.480577][ T5152] Bluetooth: hci3: command tx timeout [ 755.659185][ T5834] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 755.688839][ T5834] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 755.690863][ T5834] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 755.692246][ T5834] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 755.693514][ T5834] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 757.594098][ T5152] Bluetooth: hci3: command tx timeout [ 758.701596][ T5152] Bluetooth: hci5: command tx timeout [ 760.225640][ T5834] Bluetooth: hci3: command tx timeout [ 760.776262][ T5834] Bluetooth: hci5: command tx timeout [ 762.278209][ T5834] Bluetooth: hci3: command tx timeout [ 762.928196][ T5834] Bluetooth: hci5: command tx timeout [ 765.842707][ T5834] Bluetooth: hci5: command tx timeout [ 766.195269][ T1178] bridge_slave_1: left allmulticast mode [ 766.195308][ T1178] bridge_slave_1: left promiscuous mode [ 766.195598][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.379031][ T1178] bridge_slave_0: left allmulticast mode [ 766.379057][ T1178] bridge_slave_0: left promiscuous mode [ 766.380348][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.218118][ T9511] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 771.381520][ T9511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.381579][ T9511] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 771.381604][ T9511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.393021][ T9511] usb 1-1: config 0 descriptor?? [ 771.617046][ T9511] usbhid 1-1:0.0: can't add hid device: -71 [ 771.617300][ T9511] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 771.635865][ T9511] usb 1-1: USB disconnect, device number 34 [ 771.843816][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 771.945207][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.022581][ T1178] bond0 (unregistering): Released all slaves [ 772.194895][ T9511] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 772.388275][ T9511] usb 1-1: Using ep0 maxpacket: 16 [ 772.391287][ T9511] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.391338][ T9511] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 772.391362][ T9511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.444674][ T9511] usb 1-1: config 0 descriptor?? [ 772.932414][ T9511] hid_parser_main: 1 callbacks suppressed [ 772.932441][ T9511] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 772.932472][ T9511] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 772.932498][ T9511] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 772.932532][ T9511] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 772.933664][ T9511] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 773.115673][ C0] usb 1-1: input irq status -75 received [ 773.292971][ T1178] hsr_slave_0: left promiscuous mode [ 773.374680][ T1178] hsr_slave_1: left promiscuous mode [ 773.375715][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 773.455187][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 773.525514][ T9511] usb 1-1: USB disconnect, device number 35 [ 776.420864][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 776.551951][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 780.352090][T10597] chnl_net:caif_netlink_parms(): no params data found [ 780.482412][ C1] vkms_vblank_simulate: vblank timer overrun [ 780.857905][ T9511] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 780.921661][T10623] chnl_net:caif_netlink_parms(): no params data found [ 781.012582][ T9511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.012613][ T9511] usb 5-1: config 0 has no interfaces? [ 781.012655][ T9511] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 781.012680][ T9511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.019688][ T9511] usb 5-1: config 0 descriptor?? [ 781.138032][ T9512] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 781.291531][ T9512] usb 1-1: Using ep0 maxpacket: 16 [ 781.308037][ T9512] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 781.308067][ T9512] usb 1-1: config 0 has no interface number 0 [ 781.308122][ T9512] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 781.312189][ T9512] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 781.312221][ T9512] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 781.312243][ T9512] usb 1-1: Product: syz [ 781.312258][ T9512] usb 1-1: SerialNumber: syz [ 781.322156][ T9512] usb 1-1: config 0 descriptor?? [ 781.385450][ T9512] cm109 1-1:0.8: invalid payload size 3, expected 4 [ 781.396809][ T9512] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input37 [ 781.406585][T10597] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.406734][T10597] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.407022][T10597] bridge_slave_0: entered allmulticast mode [ 781.429181][T10597] bridge_slave_0: entered promiscuous mode [ 781.558681][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 781.558945][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 781.560324][ T5961] usb 1-1: USB disconnect, device number 36 [ 781.560543][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 781.560569][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 781.616436][T10597] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.616685][T10597] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.616901][T10597] bridge_slave_1: entered allmulticast mode [ 781.661954][T10597] bridge_slave_1: entered promiscuous mode [ 781.665863][ T5961] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 781.882362][T10503] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 782.081633][T10503] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 782.152308][T10597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 782.351296][T10503] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 782.597966][ C1] vkms_vblank_simulate: vblank timer overrun [ 782.630427][T10597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.694574][ T9512] usb 5-1: USB disconnect, device number 45 [ 783.876422][T10623] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.876779][T10623] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.877474][T10623] bridge_slave_0: entered allmulticast mode [ 783.913182][T10623] bridge_slave_0: entered promiscuous mode [ 784.028077][T10503] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 790.771701][T10623] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.771873][T10623] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.772108][T10623] bridge_slave_1: entered allmulticast mode [ 790.776196][T10623] bridge_slave_1: entered promiscuous mode [ 791.054065][T10837] netlink: 'syz.4.1190': attribute type 10 has an invalid length. [ 791.291517][T10597] team0: Port device team_slave_0 added [ 791.312492][T10837] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 791.438231][T10597] team0: Port device team_slave_1 added [ 791.497701][T10623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 791.699579][ T9512] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 791.713199][T10623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 791.860061][ T9512] usb 5-1: Using ep0 maxpacket: 16 [ 791.863880][ T9512] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 791.863908][ T9512] usb 5-1: config 0 has no interface number 0 [ 791.863960][ T9512] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 791.872455][ T9512] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 791.872482][ T9512] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 791.872501][ T9512] usb 5-1: Product: syz [ 791.872514][ T9512] usb 5-1: SerialNumber: syz [ 791.889560][ T9512] usb 5-1: config 0 descriptor?? [ 791.930530][ T9512] cm109 5-1:0.8: invalid payload size 3, expected 4 [ 791.940106][ T9512] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input38 [ 792.323932][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.324203][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.325629][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.325893][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.326144][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.326402][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.326650][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.327292][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.327543][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.327879][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 792.332539][ T9511] usb 5-1: USB disconnect, device number 46 [ 792.332640][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 792.996716][ T9511] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 793.281211][T10597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.281231][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.281261][T10597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.420272][T10597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.420293][T10597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 793.420338][T10597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.430786][T10623] team0: Port device team_slave_0 added [ 793.538345][ T9512] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 793.668846][T10856] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 793.668889][T10856] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 793.669597][T10856] vhci_hcd vhci_hcd.0: Device attached [ 793.795443][T10859] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 793.918232][ T5915] usb 41-1: new high-speed USB device number 3 using vhci_hcd [ 794.364572][ T9512] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 794.364612][ T9512] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 794.490483][T10857] vhci_hcd: connection reset by peer [ 794.504949][ T8027] vhci_hcd: stop threads [ 794.505012][ T8027] vhci_hcd: release socket [ 794.505197][ T8027] vhci_hcd: disconnect device [ 794.645947][T10623] team0: Port device team_slave_1 added [ 794.937834][ T9512] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 794.937870][ T9512] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.937891][ T9512] usb 1-1: Product: syz [ 794.937907][ T9512] usb 1-1: Manufacturer: syz [ 794.937923][ T9512] usb 1-1: SerialNumber: syz [ 795.017660][ T9512] usb 1-1: config 0 descriptor?? [ 795.024978][T10853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 795.025124][T10853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 795.701819][T10853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 795.722318][T10853] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 796.024997][T10623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 796.025017][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.025044][T10623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 796.197579][T10623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 796.197599][T10623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 796.197627][T10623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 796.266924][T10597] hsr_slave_0: entered promiscuous mode [ 796.288815][T10597] hsr_slave_1: entered promiscuous mode [ 796.289757][T10597] debugfs: 'hsr0' already exists in 'hsr' [ 796.289782][T10597] Cannot create hsr debugfs directory [ 796.645623][ T9512] dm9601 1-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 796.911974][ T9512] dm9601 1-1:0.0 eth14: register 'dm9601' at usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08 [ 796.935004][ T9512] usb 1-1: USB disconnect, device number 37 [ 796.975236][ T9512] dm9601 1-1:0.0 eth14: unregister 'dm9601' usb-dummy_hcd.0-1, Davicom DM96xx USB 10/100 Ethernet [ 797.255162][T10623] hsr_slave_0: entered promiscuous mode [ 797.265646][T10623] hsr_slave_1: entered promiscuous mode [ 797.271490][T10623] debugfs: 'hsr0' already exists in 'hsr' [ 797.271517][T10623] Cannot create hsr debugfs directory [ 797.832331][T10872] netlink: 'syz.0.1199': attribute type 10 has an invalid length. [ 799.732413][ T5915] vhci_hcd: vhci_device speed not set [ 800.038337][ C0] vkms_vblank_simulate: vblank timer overrun [ 800.425081][T10889] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 800.425129][T10889] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 800.441040][T10889] vhci_hcd vhci_hcd.0: Device attached [ 800.528605][T10889] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 800.717974][ T5915] usb 41-1: device descriptor read/64, error -110 [ 801.121671][ T5915] usb 41-1: new high-speed USB device number 4 using vhci_hcd [ 801.140377][T10891] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 801.157574][ T1116] vhci_hcd: stop threads [ 801.157627][ T1116] vhci_hcd: release socket [ 801.158698][ T1116] vhci_hcd: disconnect device [ 801.878696][ C0] vkms_vblank_simulate: vblank timer overrun [ 803.479004][ T6028] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 803.628235][ T6028] usb 1-1: Using ep0 maxpacket: 32 [ 803.644135][ T6028] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 803.644204][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 803.644291][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 803.644317][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 803.644345][ T6028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 803.696266][ T6028] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 803.696313][ T6028] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 803.696375][ T6028] usb 1-1: Product: syz [ 803.696391][ T6028] usb 1-1: Manufacturer: syz [ 803.696458][ T6028] usb 1-1: SerialNumber: syz [ 803.944305][ T6028] usb 1-1: config 0 descriptor?? [ 805.471947][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 805.477705][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.503578][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.506036][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.518883][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.638219][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.759299][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.781909][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.800212][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 805.835243][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.836759][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.855257][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.856375][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.888806][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.902788][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.915577][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.931314][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.935261][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.971602][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.973009][ T6028] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 805.973217][ T6028] input input39: Timeout waiting for response from device. [ 806.235929][ T6028] usb 1-1: USB disconnect, device number 38 [ 806.267934][ T5915] vhci_hcd: vhci_device speed not set [ 807.198827][T10906] netlink: 'syz.0.1207': attribute type 10 has an invalid length. [ 807.260579][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 807.279246][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 807.280901][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 807.290424][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 807.291289][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 809.249510][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.249601][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.413890][ T5152] Bluetooth: hci0: command tx timeout [ 811.477943][ T5152] Bluetooth: hci0: command tx timeout [ 812.422711][ T1178] bridge_slave_1: left allmulticast mode [ 812.422751][ T1178] bridge_slave_1: left promiscuous mode [ 812.423053][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.529815][ T1178] bridge_slave_0: left allmulticast mode [ 812.529855][ T1178] bridge_slave_0: left promiscuous mode [ 812.530181][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.603215][ T1178] bridge_slave_1: left allmulticast mode [ 812.603254][ T1178] bridge_slave_1: left promiscuous mode [ 812.603580][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.658046][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 812.676774][ T1178] bridge_slave_0: left allmulticast mode [ 812.676799][ T1178] bridge_slave_0: left promiscuous mode [ 812.676994][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.814427][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.814457][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 812.814499][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 812.814524][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.859838][ T9] usb 5-1: config 0 descriptor?? [ 813.190502][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 813.346348][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.405464][ T1178] bond0 (unregistering): Released all slaves [ 813.497937][ T5961] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 813.558007][ T5152] Bluetooth: hci0: command tx timeout [ 813.648021][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 813.651003][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 813.651035][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 813.651061][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 813.651085][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 813.651107][ T5961] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 813.657100][ T5961] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 813.657131][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.657151][ T5961] usb 1-1: Product: syz [ 813.657167][ T5961] usb 1-1: Manufacturer: syz [ 813.657182][ T5961] usb 1-1: SerialNumber: syz [ 813.679240][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 813.684342][ T5961] usb 1-1: config 0 descriptor?? [ 813.706949][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 813.712385][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 813.713642][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 813.714476][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 813.971436][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.049886][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.096521][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 814.096580][ T5961] input input40: Device does not respond to id packet M [ 814.097202][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 814.097231][ T5961] input input40: Device does not respond to id packet P [ 814.098672][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 814.098726][ T5961] input input40: Device does not respond to id packet B [ 814.099956][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 814.100000][ T5961] input input40: Device does not respond to id packet N [ 814.101451][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 814.101932][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 814.102425][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 814.102889][ T5961] iforce 1-1:0.0: usb_submit_urb failed: -71 [ 814.117710][ T5961] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input40 [ 814.134018][ T1178] bond0 (unregistering): Released all slaves [ 814.157456][ T5961] usb 1-1: USB disconnect, device number 39 [ 815.093697][ T5834] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 815.120016][ T5834] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 815.121550][ T5834] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 815.126393][ T5834] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 815.127300][ T5834] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 815.278298][T10947] netlink: 'syz.0.1216': attribute type 10 has an invalid length. [ 815.411391][ T1178] hsr_slave_0: left promiscuous mode [ 815.417492][ T6028] usb 5-1: USB disconnect, device number 47 [ 815.450239][ T1178] hsr_slave_1: left promiscuous mode [ 815.452832][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 815.501585][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 815.638262][ T5152] Bluetooth: hci0: command tx timeout [ 815.903070][ T5152] Bluetooth: hci4: command tx timeout [ 815.958474][ T1178] hsr_slave_0: left promiscuous mode [ 816.799026][ T1178] hsr_slave_1: left promiscuous mode [ 816.800162][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 817.013241][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 817.356120][ T5152] Bluetooth: hci6: command tx timeout [ 817.957921][ T5152] Bluetooth: hci4: command tx timeout [ 818.448833][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 818.578705][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 819.417019][ T5152] Bluetooth: hci6: command tx timeout [ 819.758702][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 819.890871][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 820.049122][ T5152] Bluetooth: hci4: command tx timeout [ 820.778454][T10907] chnl_net:caif_netlink_parms(): no params data found [ 821.504011][ T5152] Bluetooth: hci6: command tx timeout [ 822.137884][ T5152] Bluetooth: hci4: command tx timeout [ 823.585254][ T5152] Bluetooth: hci6: command tx timeout [ 828.796106][T10907] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.797197][T10907] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.797648][T10907] bridge_slave_0: entered allmulticast mode [ 828.807575][T10907] bridge_slave_0: entered promiscuous mode [ 828.929956][ T5834] Bluetooth: hci6: command 0x0405 tx timeout [ 829.953112][T10907] bridge0: port 2(bridge_slave_1) entered blocking state [ 829.953291][T10907] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.953550][T10907] bridge_slave_1: entered allmulticast mode [ 829.956808][T10907] bridge_slave_1: entered promiscuous mode [ 830.180240][T11004] netlink: 'syz.4.1227': attribute type 10 has an invalid length. [ 832.744391][T10907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.822357][T10907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 835.180424][T10907] team0: Port device team_slave_0 added [ 835.263380][T10907] team0: Port device team_slave_1 added [ 836.516750][T10907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 836.516768][T10907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.516784][T10907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.517701][T10933] chnl_net:caif_netlink_parms(): no params data found [ 836.633090][T10907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.633111][T10907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.633142][T10907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.719981][T11039] netlink: 'syz.0.1237': attribute type 10 has an invalid length. [ 840.139140][T10944] chnl_net:caif_netlink_parms(): no params data found [ 840.207911][ T8892] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 840.380064][ T8892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.380116][ T8892] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 840.380138][ T8892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.479245][ T8892] usb 1-1: config 0 descriptor?? [ 840.721851][ T8892] usbhid 1-1:0.0: can't add hid device: -71 [ 840.721996][ T8892] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 840.874865][ T8892] usb 1-1: USB disconnect, device number 40 [ 841.021257][T10907] hsr_slave_0: entered promiscuous mode [ 841.022770][T10907] hsr_slave_1: entered promiscuous mode [ 841.023865][T10907] debugfs: 'hsr0' already exists in 'hsr' [ 841.023891][T10907] Cannot create hsr debugfs directory [ 841.699920][ T8892] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 841.953316][ T8892] usb 1-1: Using ep0 maxpacket: 16 [ 841.964808][ T8892] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 841.964855][ T8892] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 841.964876][ T8892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.984121][ T8892] usb 1-1: config 0 descriptor?? [ 842.067308][T10933] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.067553][T10933] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.088055][T10933] bridge_slave_0: entered allmulticast mode [ 842.091302][T10933] bridge_slave_0: entered promiscuous mode [ 842.350569][T10933] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.350743][T10933] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.351014][T10933] bridge_slave_1: entered allmulticast mode [ 842.354360][T10933] bridge_slave_1: entered promiscuous mode [ 842.531268][ T8892] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 842.944637][ T8892] usb 1-1: USB disconnect, device number 41 [ 843.413168][T11078] netlink: 'syz.4.1246': attribute type 10 has an invalid length. [ 844.041508][T10933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 844.064278][T10944] bridge0: port 1(bridge_slave_0) entered blocking state [ 844.064448][T10944] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.064732][T10944] bridge_slave_0: entered allmulticast mode [ 844.079050][T10944] bridge_slave_0: entered promiscuous mode [ 844.117288][T10933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 844.123400][T10944] bridge0: port 2(bridge_slave_1) entered blocking state [ 844.123548][T10944] bridge0: port 2(bridge_slave_1) entered disabled state [ 844.123738][T10944] bridge_slave_1: entered allmulticast mode [ 844.148030][T10944] bridge_slave_1: entered promiscuous mode [ 844.381796][ T5915] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 844.566770][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.152143][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 845.152181][ T5915] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.152226][ T5915] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 845.152250][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.161511][ T5915] usb 5-1: config 0 descriptor?? [ 845.166681][ T5915] hub 5-1:0.0: USB hub found [ 845.350062][ C0] vkms_vblank_simulate: vblank timer overrun [ 845.597888][ T5915] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 846.011869][ T5915] usbhid 5-1:0.0: can't add hid device: -71 [ 846.012022][ T5915] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 846.058048][ T5915] usb 5-1: USB disconnect, device number 48 [ 846.091167][T10933] team0: Port device team_slave_0 added [ 846.126947][T10944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 846.391241][T10933] team0: Port device team_slave_1 added [ 846.405119][T10944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.415667][T10933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.415688][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.415719][T10933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 847.424611][T10944] team0: Port device team_slave_0 added [ 847.535874][T10933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 847.535894][T10933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 847.535925][T10933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 847.543626][T10944] team0: Port device team_slave_1 added [ 847.630000][ C0] vkms_vblank_simulate: vblank timer overrun [ 848.450459][ C0] vkms_vblank_simulate: vblank timer overrun [ 850.053963][T10944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.053982][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.054013][T10944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.059719][ T1178] bridge_slave_1: left allmulticast mode [ 850.059751][ T1178] bridge_slave_1: left promiscuous mode [ 850.060069][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.988833][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.149554][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.208569][ T1178] bridge_slave_0: left allmulticast mode [ 851.208605][ T1178] bridge_slave_0: left promiscuous mode [ 851.208920][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.325441][ T1178] bridge_slave_1: left allmulticast mode [ 851.325478][ T1178] bridge_slave_1: left promiscuous mode [ 851.325762][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.565575][ T9] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 851.602137][ T1178] bridge_slave_0: left allmulticast mode [ 851.602533][ T1178] bridge_slave_0: left promiscuous mode [ 851.603166][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.924582][ T1178] bridge_slave_1: left allmulticast mode [ 851.924759][ T1178] bridge_slave_1: left promiscuous mode [ 851.936222][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.038944][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 852.042211][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 852.197881][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 852.197915][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.197937][ T9] usb 1-1: Product: syz [ 852.197953][ T9] usb 1-1: Manufacturer: syz [ 852.197967][ T9] usb 1-1: SerialNumber: syz [ 852.205828][ T9] usb 1-1: config 0 descriptor?? [ 852.272766][ T1178] bridge_slave_0: left allmulticast mode [ 852.272804][ T1178] bridge_slave_0: left promiscuous mode [ 852.273095][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.414486][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 852.526590][T10992] udevd[10992]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 854.129878][ T37] audit: type=1326 audit(1756446933.702:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8787bfebe9 code=0x7ffc0000 [ 854.129943][ T37] audit: type=1326 audit(1756446933.712:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8787bfebe9 code=0x7ffc0000 [ 854.129991][ T37] audit: type=1326 audit(1756446933.712:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8787bfebe9 code=0x7ffc0000 [ 854.130040][ T37] audit: type=1326 audit(1756446933.712:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8787c00b07 code=0x7ffc0000 [ 854.130091][ T37] audit: type=1326 audit(1756446933.722:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8787c00a7c code=0x7ffc0000 [ 854.130141][ T37] audit: type=1326 audit(1756446933.722:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8787c009b4 code=0x7ffc0000 [ 854.130199][ T37] audit: type=1326 audit(1756446933.732:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f8787c009b4 code=0x7ffc0000 [ 854.130249][ T37] audit: type=1326 audit(1756446933.732:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8787bfd84a code=0x7ffc0000 [ 854.130297][ T37] audit: type=1326 audit(1756446933.742:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8787bfebe9 code=0x7ffc0000 [ 854.130346][ T37] audit: type=1326 audit(1756446933.742:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.4.1261" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f8787bfebe9 code=0x7ffc0000 [ 854.581709][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.658403][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.730332][ T1178] bond0 (unregistering): Released all slaves [ 855.277134][ T5915] usb 1-1: USB disconnect, device number 42 [ 855.786793][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.058978][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.412390][ T1178] bond0 (unregistering): Released all slaves [ 858.004347][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 858.100191][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 858.302968][ T1178] bond0 (unregistering): Released all slaves [ 859.635100][T10944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.635130][T10944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.635162][T10944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.958222][ T5915] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 860.140783][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 860.140822][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 860.140864][ T5915] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 860.140889][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.330603][ T5915] usb 1-1: config 0 descriptor?? [ 860.346307][ T5915] hub 1-1:0.0: USB hub found [ 861.128326][ T5915] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 861.173079][T10933] hsr_slave_0: entered promiscuous mode [ 861.187646][T10933] hsr_slave_1: entered promiscuous mode [ 861.205662][T10933] debugfs: 'hsr0' already exists in 'hsr' [ 861.205985][T10933] Cannot create hsr debugfs directory [ 861.625803][ T5915] usbhid 1-1:0.0: can't add hid device: -71 [ 861.625944][ T5915] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 861.698255][ T5915] usb 1-1: USB disconnect, device number 43 [ 861.757996][ T9512] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 861.926614][ T9512] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 861.926680][ T9512] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.930665][ T9512] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 861.930692][ T9512] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.930711][ T9512] usb 5-1: Product: syz [ 861.930725][ T9512] usb 5-1: Manufacturer: syz [ 861.930738][ T9512] usb 5-1: SerialNumber: syz [ 861.954481][ T9512] usb 5-1: config 0 descriptor?? [ 862.085704][ T9512] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 862.245517][T10992] udevd[10992]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 863.594668][T10944] hsr_slave_0: entered promiscuous mode [ 863.599220][T10944] hsr_slave_1: entered promiscuous mode [ 863.615965][T10944] debugfs: 'hsr0' already exists in 'hsr' [ 863.615997][T10944] Cannot create hsr debugfs directory [ 863.903550][ T1178] hsr_slave_0: left promiscuous mode [ 863.918083][ T1178] hsr_slave_1: left promiscuous mode [ 863.918786][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.971890][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.102923][ T1178] hsr_slave_0: left promiscuous mode [ 864.123471][ T1178] hsr_slave_1: left promiscuous mode [ 864.124086][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.159281][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.287948][ T1178] hsr_slave_0: left promiscuous mode [ 864.307973][ T1178] hsr_slave_1: left promiscuous mode [ 864.308664][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 864.362712][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 865.651491][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 865.669676][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 865.672576][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 865.674368][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 865.675827][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 866.750950][ T6028] usb 5-1: USB disconnect, device number 49 [ 867.280032][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 867.797908][ T5152] Bluetooth: hci3: command tx timeout [ 868.018698][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 869.110102][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 869.258872][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 869.877869][ T5152] Bluetooth: hci3: command tx timeout [ 870.291153][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.291265][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.548738][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 870.678996][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 871.957876][ T5152] Bluetooth: hci3: command tx timeout [ 874.255922][ T5152] Bluetooth: hci3: command tx timeout [ 878.028469][ T5915] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 878.210625][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 878.210662][ T5915] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 878.217604][ T5915] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 878.217636][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.217657][ T5915] usb 5-1: Product: syz [ 878.217672][ T5915] usb 5-1: Manufacturer: syz [ 878.217687][ T5915] usb 5-1: SerialNumber: syz [ 878.293136][ T5915] usb 5-1: config 0 descriptor?? [ 878.294618][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.294852][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.488422][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 878.526563][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.526706][T11225] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.548094][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 878.657971][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 878.735916][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 878.737042][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 878.864883][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 878.885047][ T5834] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 878.919089][ T5834] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 878.920390][ T5834] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 878.923861][ T5834] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 879.526780][ T5915] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 879.536577][ T5915] usb 5-1: USB disconnect, device number 50 [ 880.972005][ T5152] Bluetooth: hci0: command tx timeout [ 881.158089][ T5152] Bluetooth: hci4: command tx timeout [ 883.445619][ T5152] Bluetooth: hci0: command tx timeout [ 883.445660][ T5152] Bluetooth: hci4: command tx timeout [ 885.175846][T11180] chnl_net:caif_netlink_parms(): no params data found [ 885.477869][ T5841] Bluetooth: hci4: command tx timeout [ 885.477905][ T5841] Bluetooth: hci0: command tx timeout [ 886.266905][ T8892] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 887.022840][T11180] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.023096][T11180] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.023366][T11180] bridge_slave_0: entered allmulticast mode [ 887.026701][T11180] bridge_slave_0: entered promiscuous mode [ 887.258171][T11180] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.258377][T11180] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.258619][T11180] bridge_slave_1: entered allmulticast mode [ 887.261896][T11180] bridge_slave_1: entered promiscuous mode [ 887.649235][ T5841] Bluetooth: hci4: command tx timeout [ 887.653604][ T8892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 887.653636][ T8892] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 887.656765][ T8892] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 887.656791][ T8892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 887.656811][ T8892] usb 5-1: Product: syz [ 887.656826][ T8892] usb 5-1: Manufacturer: syz [ 887.656840][ T8892] usb 5-1: SerialNumber: syz [ 887.664024][ T8892] usb 5-1: config 0 descriptor?? [ 887.665198][T11282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 887.665389][T11282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 887.678260][ T5152] Bluetooth: hci0: command tx timeout [ 888.491612][T11282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 888.492244][T11282] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 889.209451][T11180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 889.381228][T11180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.384770][T11232] chnl_net:caif_netlink_parms(): no params data found [ 889.461285][T11228] chnl_net:caif_netlink_parms(): no params data found [ 889.499940][ T8892] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading MODE_CTRL [ 889.629772][ T8892] usb 5-1: USB disconnect, device number 51 [ 890.137688][T11180] team0: Port device team_slave_0 added [ 891.313118][T11299] Process accounting resumed [ 892.185057][T11180] team0: Port device team_slave_1 added [ 893.123588][T11180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.123608][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.123649][T11180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.391002][T11180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.391023][T11180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.391054][T11180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.084344][T11232] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.103424][T11232] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.229115][T11232] bridge_slave_0: entered allmulticast mode [ 894.293051][T11323] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 894.293210][T11323] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 894.606292][T11232] bridge_slave_0: entered promiscuous mode [ 894.613329][T11228] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.613494][T11228] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.613730][T11228] bridge_slave_0: entered allmulticast mode [ 894.617083][T11228] bridge_slave_0: entered promiscuous mode [ 894.737912][ T9511] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 894.814552][T11232] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.814719][T11232] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.814991][T11232] bridge_slave_1: entered allmulticast mode [ 894.818719][T11232] bridge_slave_1: entered promiscuous mode [ 894.821469][T11228] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.821622][T11228] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.821805][T11228] bridge_slave_1: entered allmulticast mode [ 894.824540][T11228] bridge_slave_1: entered promiscuous mode [ 894.887967][ T9511] usb 5-1: Using ep0 maxpacket: 8 [ 895.167342][ T9511] usb 5-1: unable to get BOS descriptor or descriptor too short [ 895.167446][ T9511] usb 5-1: no configurations [ 895.167460][ T9511] usb 5-1: can't read configurations, error -22 [ 895.348956][ T9511] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 896.247854][ T9511] usb 5-1: Using ep0 maxpacket: 8 [ 896.390805][ T9511] usb 5-1: unable to get BOS descriptor or descriptor too short [ 896.390908][ T9511] usb 5-1: no configurations [ 896.390922][ T9511] usb 5-1: can't read configurations, error -22 [ 896.391385][ T9511] usb usb5-port1: attempt power cycle [ 896.768535][ T9511] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 897.151211][ T9511] usb 5-1: Using ep0 maxpacket: 8 [ 897.790991][ T1178] bridge_slave_1: left allmulticast mode [ 897.791028][ T1178] bridge_slave_1: left promiscuous mode [ 897.791388][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.794137][ T9511] usb 5-1: device descriptor read/all, error -71 [ 897.886662][ T1178] bridge_slave_0: left allmulticast mode [ 897.886699][ T1178] bridge_slave_0: left promiscuous mode [ 897.887027][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.368696][ T1178] bridge_slave_1: left allmulticast mode [ 898.368751][ T1178] bridge_slave_1: left promiscuous mode [ 898.369048][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.409908][ T1178] bridge_slave_0: left allmulticast mode [ 898.409947][ T1178] bridge_slave_0: left promiscuous mode [ 898.410227][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.475475][ T1178] bridge_slave_1: left allmulticast mode [ 898.475513][ T1178] bridge_slave_1: left promiscuous mode [ 898.475810][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.530801][ T1178] bridge_slave_0: left allmulticast mode [ 898.530841][ T1178] bridge_slave_0: left promiscuous mode [ 898.531139][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.888943][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 898.958822][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.020515][ T1178] bond0 (unregistering): Released all slaves [ 899.238824][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.339429][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.382860][ T1178] bond0 (unregistering): Released all slaves [ 899.619021][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 899.728981][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.803248][ T1178] bond0 (unregistering): Released all slaves [ 900.197896][ T9511] usb 1-1: new full-speed USB device number 44 using dummy_hcd [ 900.328100][ T9511] usb 1-1: device descriptor read/64, error -71 [ 900.376054][T11232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.413717][T11180] hsr_slave_0: entered promiscuous mode [ 900.415261][T11180] hsr_slave_1: entered promiscuous mode [ 900.422289][T11232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.426328][T11228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 900.443585][T11228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 900.567990][ T9511] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 900.710817][ T9511] usb 1-1: device descriptor read/64, error -71 [ 900.822146][ T9511] usb usb1-port1: attempt power cycle [ 900.852503][T11232] team0: Port device team_slave_0 added [ 900.944284][T11228] team0: Port device team_slave_0 added [ 900.967066][T11232] team0: Port device team_slave_1 added [ 901.001778][T11228] team0: Port device team_slave_1 added [ 901.157955][ T9511] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 901.178993][ T9511] usb 1-1: device descriptor read/8, error -71 [ 901.417896][ T9511] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 901.438946][ T9511] usb 1-1: device descriptor read/8, error -71 [ 901.548810][ T9511] usb usb1-port1: unable to enumerate USB device [ 902.078206][ T1178] hsr_slave_0: left promiscuous mode [ 902.098083][ T1178] hsr_slave_1: left promiscuous mode [ 902.099130][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.139224][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.306075][ T1178] hsr_slave_0: left promiscuous mode [ 902.367903][ T1178] hsr_slave_1: left promiscuous mode [ 902.368966][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.392050][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 902.488088][ T1178] hsr_slave_0: left promiscuous mode [ 902.537893][ T1178] hsr_slave_1: left promiscuous mode [ 902.538946][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 902.570923][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 907.432404][ C0] vkms_vblank_simulate: vblank timer overrun [ 907.634025][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.539556][ C0] vkms_vblank_simulate: vblank timer overrun [ 908.751393][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 908.790333][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.135529][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.152394][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 909.191469][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.291566][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.409603][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.447054][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.497725][ C0] vkms_vblank_simulate: vblank timer overrun [ 909.756025][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.358839][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 910.391293][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.514762][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 910.552450][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.647866][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.698383][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.777823][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.898447][ C0] vkms_vblank_simulate: vblank timer overrun [ 910.948870][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.126978][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.207789][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.304667][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.627225][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 911.759039][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 912.740455][T11232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.740475][T11232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.740504][T11232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.769934][T11378] syz_tun: entered promiscuous mode [ 912.771663][T11378] batadv_slave_0: entered promiscuous mode [ 912.773605][T11378] hsr1: entered allmulticast mode [ 912.773621][T11378] syz_tun: entered allmulticast mode [ 912.773643][T11378] batadv_slave_0: entered allmulticast mode [ 912.777472][T11232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.777488][T11232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.777516][T11232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 912.779669][T11228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 912.779684][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.779711][T11228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 912.840437][T11228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 912.840455][T11228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 912.840480][T11228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 914.654488][T11232] hsr_slave_0: entered promiscuous mode [ 914.655997][T11232] hsr_slave_1: entered promiscuous mode [ 914.657022][T11232] debugfs: 'hsr0' already exists in 'hsr' [ 914.657050][T11232] Cannot create hsr debugfs directory [ 915.756394][T11407] netlink: 'syz.0.1322': attribute type 8 has an invalid length. [ 916.469582][T11228] hsr_slave_0: entered promiscuous mode [ 916.471592][T11228] hsr_slave_1: entered promiscuous mode [ 916.472676][T11228] debugfs: 'hsr0' already exists in 'hsr' [ 916.472711][T11228] Cannot create hsr debugfs directory [ 918.509386][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1324'. [ 920.561700][T11435] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1327'. [ 921.072565][T11180] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 921.353566][T11180] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 921.727989][T11180] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 922.171938][T11448] netlink: 'syz.0.1330': attribute type 8 has an invalid length. [ 922.628608][T11180] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 922.928952][ T6028] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 923.087931][ T6028] usb 5-1: Using ep0 maxpacket: 32 [ 923.097021][ T6028] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.097050][ T6028] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.112861][ T6028] usb 5-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.02 [ 923.112889][ T6028] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.112909][ T6028] usb 5-1: Product: syz [ 923.112923][ T6028] usb 5-1: Manufacturer: syz [ 923.112936][ T6028] usb 5-1: SerialNumber: syz [ 923.138393][ T6028] usb 5-1: config 0 descriptor?? [ 923.397360][T11228] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 923.539479][ T9511] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 923.720796][ T9511] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 923.720828][ T9511] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 923.720870][ T9511] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 923.720895][ T9511] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.682875][ T9511] usb 1-1: config 0 descriptor?? [ 924.740680][T11228] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 924.898167][ T5915] usb 5-1: USB disconnect, device number 56 [ 924.901264][T11228] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 925.155557][T11228] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 925.665822][T11232] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 925.707216][T11232] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 925.798180][T11232] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 925.883881][T11232] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 926.515071][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 926.561723][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 926.563393][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 926.582606][ T5915] usb 1-1: USB disconnect, device number 48 [ 926.584429][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 926.587592][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 928.062877][T11502] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1335'. [ 928.678174][ T5152] Bluetooth: hci3: command tx timeout [ 930.412689][T11514] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 930.430052][T11515] random: crng reseeded on system resumption [ 930.758614][ T5152] Bluetooth: hci3: command tx timeout [ 931.725205][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.725296][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.026841][T11522] Process accounting resumed [ 932.527868][ T992] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 932.694699][ T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.694753][ T992] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 932.694797][ T992] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 932.694828][ T992] usb 1-1: config 0 interface 0 has no altsetting 0 [ 932.694864][ T992] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 932.694890][ T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.725127][ T992] usb 1-1: config 0 descriptor?? [ 932.779156][ T992] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 932.837884][ T5152] Bluetooth: hci3: command tx timeout [ 932.967102][T11228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.099133][T11228] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.158118][T11232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.166430][T11490] chnl_net:caif_netlink_parms(): no params data found [ 934.339008][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.340166][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.869128][ T1178] bridge_slave_1: left allmulticast mode [ 934.869275][ T1178] bridge_slave_1: left promiscuous mode [ 934.869607][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.147188][ T5152] Bluetooth: hci3: command tx timeout [ 935.259588][ T1178] bridge_slave_0: left allmulticast mode [ 935.259636][ T1178] bridge_slave_0: left promiscuous mode [ 935.259937][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 935.322295][ T5915] usb 1-1: USB disconnect, device number 49 [ 935.652152][T11542] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1344'. [ 936.118943][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 936.135578][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 936.154940][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 936.156519][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 936.159842][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 936.161187][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 936.279181][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 936.345932][ T1178] bond0 (unregistering): Released all slaves [ 937.080860][ T1178] hsr_slave_0: left promiscuous mode [ 937.119706][ T1178] hsr_slave_1: left promiscuous mode [ 937.120411][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 937.168973][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 938.197910][ T5841] Bluetooth: hci0: command tx timeout [ 940.277863][ T5841] Bluetooth: hci0: command tx timeout [ 941.799072][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 941.799324][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 941.812344][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 941.812604][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 941.855660][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 941.871635][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 941.945919][ T5152] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 941.955080][ T5152] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 941.956597][ T5152] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 941.958909][ T5152] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 941.959896][ T5152] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 941.999852][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 942.000081][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 942.096580][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 942.096845][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 942.259394][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 942.259557][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 942.300356][T11556] ceph: No mds server is up or the cluster is laggy [ 942.332634][T11562] ceph: No mds server is up or the cluster is laggy [ 942.359997][ T5841] Bluetooth: hci0: command tx timeout [ 942.385457][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 942.615645][ T9511] libceph: connect (1)[c::]:6789 error -101 [ 942.615898][ T9511] libceph: mon0 (1)[c::]:6789 connect error [ 942.770257][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 944.047920][ T5841] Bluetooth: hci4: command tx timeout [ 944.437846][ T5841] Bluetooth: hci0: command tx timeout [ 944.463375][T11490] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.463629][T11490] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.463852][T11490] bridge_slave_0: entered allmulticast mode [ 944.490797][T11490] bridge_slave_0: entered promiscuous mode [ 944.561275][T11490] bridge0: port 2(bridge_slave_1) entered blocking state [ 944.561451][T11490] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.561694][T11490] bridge_slave_1: entered allmulticast mode [ 944.564923][T11490] bridge_slave_1: entered promiscuous mode [ 945.025006][T11490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 945.062290][T11490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 945.557929][ T9511] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 945.720724][ T9511] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 945.720772][ T9511] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 945.722548][ T9511] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 945.722581][ T9511] usb 5-1: config 0 interface 0 has no altsetting 0 [ 945.722618][ T9511] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 945.722643][ T9511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.796710][ T9511] usb 5-1: config 0 descriptor?? [ 945.804697][T11490] team0: Port device team_slave_0 added [ 945.824473][ T9511] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 945.914331][T11490] team0: Port device team_slave_1 added [ 946.117991][ T5841] Bluetooth: hci4: command tx timeout [ 946.223145][T11490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 946.223165][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.223195][T11490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.280513][T11490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.280532][T11490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.280562][T11490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.912278][T11586] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 946.912325][T11586] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 946.913862][T11586] vhci_hcd vhci_hcd.0: Device attached [ 947.020472][T11588] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 947.168088][ T9] usb 33-1: new high-speed USB device number 4 using vhci_hcd [ 947.634615][T11587] vhci_hcd: connection reset by peer [ 947.641734][ T3556] vhci_hcd: stop threads [ 947.641796][ T3556] vhci_hcd: release socket [ 947.643409][ T3556] vhci_hcd: disconnect device [ 948.197863][ T5841] Bluetooth: hci4: command tx timeout [ 948.341279][ T6028] usb 5-1: USB disconnect, device number 57 [ 948.446908][T11596] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1354'. [ 948.485042][T11490] hsr_slave_0: entered promiscuous mode [ 948.485966][T11490] hsr_slave_1: entered promiscuous mode [ 948.528065][ T9512] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 948.742234][ T9512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 948.742314][ T9512] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 948.742361][ T9512] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 948.742386][ T9512] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.813126][ T9512] usb 1-1: config 0 descriptor?? [ 949.054243][ T9512] hub 1-1:0.0: USB hub found [ 949.546300][ T9512] hub 1-1:0.0: 1 port detected [ 950.120665][ T9512] usb 1-1: USB disconnect, device number 50 [ 950.277944][ T5841] Bluetooth: hci4: command tx timeout [ 951.204978][ T5841] Bluetooth: hci1: unexpected event for opcode 0x200f [ 951.205610][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.315758][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.350391][ C0] vkms_vblank_simulate: vblank timer overrun [ 952.387948][ T9] vhci_hcd: vhci_device speed not set [ 953.500732][T11546] chnl_net:caif_netlink_parms(): no params data found [ 955.166042][T11568] chnl_net:caif_netlink_parms(): no params data found [ 955.622136][T11658] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 955.622225][T11658] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 955.622752][T11658] vhci_hcd vhci_hcd.0: Device attached [ 955.744658][T11661] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 955.888481][ T9511] usb 41-1: new high-speed USB device number 5 using vhci_hcd [ 956.391380][T11659] vhci_hcd: connection reset by peer [ 956.412557][ T1116] vhci_hcd: stop threads [ 956.412629][ T1116] vhci_hcd: release socket [ 956.413024][ T1116] vhci_hcd: disconnect device [ 957.361891][T11546] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.362156][T11546] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.362422][T11546] bridge_slave_0: entered allmulticast mode [ 957.413252][T11546] bridge_slave_0: entered promiscuous mode [ 957.438190][ T5915] usb 5-1: new full-speed USB device number 58 using dummy_hcd [ 957.469171][T11673] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1362'. [ 957.487378][T11546] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.487552][T11546] bridge0: port 2(bridge_slave_1) entered disabled state [ 957.502519][T11546] bridge_slave_1: entered allmulticast mode [ 957.505775][T11546] bridge_slave_1: entered promiscuous mode [ 957.601141][ T5915] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 957.601191][ T5915] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 957.601246][ T5915] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 957.601275][ T5915] usb 5-1: config 0 interface 0 has no altsetting 0 [ 957.601310][ T5915] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 957.601334][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.680373][ T5915] usb 5-1: config 0 descriptor?? [ 957.687319][ T5915] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 959.993384][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.052308][T11546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 960.300344][ C1] vkms_vblank_simulate: vblank timer overrun [ 960.389431][ T37] kauditd_printk_skb: 28 callbacks suppressed [ 960.389486][ T37] audit: type=1326 audit(1756447040.002:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11697 comm="syz.0.1366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadfc10ebe9 code=0x0 [ 961.051007][ C1] vkms_vblank_simulate: vblank timer overrun [ 961.177023][ T992] usb 5-1: USB disconnect, device number 58 [ 961.341368][ T9511] vhci_hcd: vhci_device speed not set [ 961.828797][T11711] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 961.828821][T11711] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 961.828886][T11711] vhci_hcd vhci_hcd.0: Device attached [ 961.906254][T11712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 961.919812][T11546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 962.066980][T11568] bridge0: port 1(bridge_slave_0) entered blocking state [ 962.067152][T11568] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.067390][T11568] bridge_slave_0: entered allmulticast mode [ 962.089600][T11568] bridge_slave_0: entered promiscuous mode [ 962.118016][ T992] usb 33-1: new high-speed USB device number 5 using vhci_hcd [ 962.435057][T11713] vhci_hcd: connection reset by peer [ 962.435529][ T7699] vhci_hcd: stop threads [ 962.435547][ T7699] vhci_hcd: release socket [ 962.435758][ T7699] vhci_hcd: disconnect device [ 962.507472][T11568] bridge0: port 2(bridge_slave_1) entered blocking state [ 962.507652][T11568] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.514021][T11568] bridge_slave_1: entered allmulticast mode [ 962.522584][T11568] bridge_slave_1: entered promiscuous mode [ 963.102384][T11546] team0: Port device team_slave_0 added [ 963.321194][T11546] team0: Port device team_slave_1 added [ 963.482579][T11568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.089368][T11568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.862846][T11737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1370'. [ 964.932797][T11546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.932817][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 964.932849][T11546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.125168][T11546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.125188][T11546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 965.125228][T11546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.149330][T11568] team0: Port device team_slave_0 added [ 966.984298][T11568] team0: Port device team_slave_1 added [ 967.233663][ T992] vhci_hcd: vhci_device speed not set [ 967.888216][ T9] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 968.052566][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.052596][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 968.052622][ T9] usb 5-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 968.052638][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 968.052658][ T9] usb 5-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 968.052672][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 968.060717][ T9] usb 5-1: config 0 descriptor?? [ 968.166943][ T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 968.599081][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.716519][T11568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.716533][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 968.716550][T11568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 969.067054][T11568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 969.067068][T11568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 969.067084][T11568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 969.130930][T11546] hsr_slave_0: entered promiscuous mode [ 969.132113][T11546] hsr_slave_1: entered promiscuous mode [ 969.132928][T11546] debugfs: 'hsr0' already exists in 'hsr' [ 969.132945][T11546] Cannot create hsr debugfs directory [ 970.315961][ T9] usb 5-1: USB disconnect, device number 59 [ 970.580763][T11568] hsr_slave_0: entered promiscuous mode [ 970.582388][T11568] hsr_slave_1: entered promiscuous mode [ 970.608866][T11568] debugfs: 'hsr0' already exists in 'hsr' [ 970.608900][T11568] Cannot create hsr debugfs directory [ 970.857940][T11490] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 971.228358][T11490] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 971.325367][T11790] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 971.325395][T11790] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 971.325462][T11790] vhci_hcd vhci_hcd.0: Device attached [ 971.468131][T11793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 971.588811][ T9] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 971.706396][T11490] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 972.038306][T11791] vhci_hcd: connection reset by peer [ 972.044727][ T57] vhci_hcd: stop threads [ 972.044748][ T57] vhci_hcd: release socket [ 972.044843][ T57] vhci_hcd: disconnect device [ 972.252244][T11490] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 973.030427][T11807] random: crng reseeded on system resumption [ 973.133694][ T1178] bridge_slave_1: left allmulticast mode [ 973.133732][ T1178] bridge_slave_1: left promiscuous mode [ 973.134032][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.449510][ T1178] bridge_slave_0: left allmulticast mode [ 974.449549][ T1178] bridge_slave_0: left promiscuous mode [ 974.449844][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.838778][ T1178] bridge_slave_1: left allmulticast mode [ 974.838816][ T1178] bridge_slave_1: left promiscuous mode [ 974.839124][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 976.181391][ T1178] bridge_slave_0: left allmulticast mode [ 976.482304][ T5841] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 976.482444][ T1178] bridge_slave_0: left promiscuous mode [ 976.482770][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 976.678148][ T9] vhci_hcd: vhci_device speed not set [ 976.917820][ T5840] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 977.075373][ T5840] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.075421][ T5840] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 977.075465][ T5840] usb 1-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 977.075495][ T5840] usb 1-1: config 0 interface 0 has no altsetting 0 [ 977.075530][ T5840] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 977.075555][ T5840] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 977.095597][ T5840] usb 1-1: config 0 descriptor?? [ 977.119786][ T5840] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 978.803395][T11857] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 978.803496][T11857] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.803882][T11857] vhci_hcd vhci_hcd.0: Device attached [ 978.937621][T11860] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 979.247886][ T992] usb 41-1: new high-speed USB device number 7 using vhci_hcd [ 979.555308][T11858] vhci_hcd: connection reset by peer [ 979.556052][ T7364] vhci_hcd: stop threads [ 979.556067][ T7364] vhci_hcd: release socket [ 979.556425][ T7364] vhci_hcd: disconnect device [ 980.997757][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 981.079996][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.140658][ T1178] bond0 (unregistering): Released all slaves [ 982.785620][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.858549][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.930263][ T1178] bond0 (unregistering): Released all slaves [ 983.107478][ T5840] usb 1-1: USB disconnect, device number 51 [ 984.431470][ T992] vhci_hcd: vhci_device speed not set [ 984.478225][ T1178] hsr_slave_0: left promiscuous mode [ 984.528266][ T1178] hsr_slave_1: left promiscuous mode [ 984.532611][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.684297][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.775186][T11884] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 984.775218][T11884] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 984.795199][T11884] vhci_hcd vhci_hcd.0: Device attached [ 984.922226][T11887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 985.103134][ T1178] hsr_slave_0: left promiscuous mode [ 985.147908][ T1178] hsr_slave_1: left promiscuous mode [ 985.153177][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.180455][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.197878][ T9] usb 33-1: new high-speed USB device number 6 using vhci_hcd [ 985.447156][T11885] vhci_hcd: connection reset by peer [ 985.465198][ T43] vhci_hcd: stop threads [ 985.465219][ T43] vhci_hcd: release socket [ 985.465302][ T43] vhci_hcd: disconnect device [ 986.483023][T11891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 986.521185][T11891] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 986.833888][ T992] IPVS: starting estimator thread 0... [ 987.618151][T11892] IPVS: using max 6 ests per chain, 14400 per kthread [ 987.984790][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 989.179407][ T5152] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 989.200152][ T5152] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 989.201786][ T5152] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 989.224479][ T5152] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 989.225509][ T5152] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 989.356161][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 990.358084][ T9] vhci_hcd: vhci_device speed not set [ 991.470706][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 991.620648][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 992.039839][ T5841] Bluetooth: hci5: command tx timeout [ 993.165687][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.165778][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.941411][T11920] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 993.941509][T11920] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 993.944854][T11920] vhci_hcd vhci_hcd.0: Device attached [ 994.063776][T11923] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 994.117945][ T5841] Bluetooth: hci5: command tx timeout [ 994.269881][ T9511] usb 41-1: new high-speed USB device number 8 using vhci_hcd [ 994.729737][T11921] vhci_hcd: connection reset by peer [ 994.768025][ T7699] vhci_hcd: stop threads [ 994.768047][ T7699] vhci_hcd: release socket [ 994.768137][ T7699] vhci_hcd: disconnect device [ 996.335119][ T5841] Bluetooth: hci5: command tx timeout [ 998.969516][ T5841] Bluetooth: hci5: command tx timeout [ 999.437984][ T9511] vhci_hcd: vhci_device speed not set [ 1000.441054][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1000.502244][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1000.527875][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1000.542344][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1000.552310][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1000.574062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1000.897148][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1000.924969][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1000.926496][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1000.965437][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1000.983274][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1001.547045][T11901] chnl_net:caif_netlink_parms(): no params data found [ 1002.393845][ C1] vkms_vblank_simulate: vblank timer overrun [ 1002.678045][ T5841] Bluetooth: hci3: command tx timeout [ 1002.858539][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.078000][ T5841] Bluetooth: hci6: command tx timeout [ 1003.673170][T11983] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 1003.673202][T11983] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.676191][T11983] vhci_hcd vhci_hcd.0: Device attached [ 1003.762887][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.959328][ C1] vkms_vblank_simulate: vblank timer overrun [ 1003.998347][T11986] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1004.056059][ T5915] usb 33-1: new high-speed USB device number 7 using vhci_hcd [ 1004.327928][T11984] vhci_hcd: connection reset by peer [ 1004.332981][ T7364] vhci_hcd: stop threads [ 1004.333002][ T7364] vhci_hcd: release socket [ 1004.333096][ T7364] vhci_hcd: disconnect device [ 1004.758020][ T5841] Bluetooth: hci3: command tx timeout [ 1005.158129][ T5841] Bluetooth: hci6: command tx timeout [ 1005.253568][T11901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1005.253848][T11901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1005.254117][T11901] bridge_slave_0: entered allmulticast mode [ 1005.257361][T11901] bridge_slave_0: entered promiscuous mode [ 1005.324963][T11901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1005.325144][T11901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1005.325379][T11901] bridge_slave_1: entered allmulticast mode [ 1005.335354][T11901] bridge_slave_1: entered promiscuous mode [ 1005.411628][ T5961] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1005.562309][ T5961] usb 5-1: Using ep0 maxpacket: 16 [ 1005.564564][ T5961] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.564596][ T5961] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1005.564620][ T5961] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1005.564657][ T5961] usb 5-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00 [ 1005.564681][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.620133][ T5961] usb 5-1: config 0 descriptor?? [ 1006.164573][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164612][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164638][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164663][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164688][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164714][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164740][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164766][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164791][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.164817][ T5961] kye 0003:0458:0138.0009: unknown main item tag 0x0 [ 1006.255155][ T5961] kye 0003:0458:0138.0009: collection stack underflow [ 1006.255188][ T5961] kye 0003:0458:0138.0009: item 0 0 0 12 parsing failed [ 1006.256190][ T5961] kye 0003:0458:0138.0009: parse failed [ 1006.256270][ T5961] kye 0003:0458:0138.0009: probe with driver kye failed with error -22 [ 1006.483412][ T5961] usb 5-1: USB disconnect, device number 60 [ 1006.698444][T11901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.873916][ T5841] Bluetooth: hci3: command tx timeout [ 1007.953099][ T5841] Bluetooth: hci6: command tx timeout [ 1008.188949][T11901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1008.917920][ T5841] Bluetooth: hci3: command tx timeout [ 1009.167850][ T5915] vhci_hcd: vhci_device speed not set [ 1009.957768][ T5841] Bluetooth: hci6: command tx timeout [ 1013.814877][T11901] team0: Port device team_slave_0 added [ 1013.893608][T11901] team0: Port device team_slave_1 added [ 1015.046651][T12025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1422'. [ 1015.985856][T11901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1015.985875][T11901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1015.985905][T11901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.069268][T11901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.069288][T11901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.069320][T11901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.051832][T11961] chnl_net:caif_netlink_parms(): no params data found [ 1017.451237][T12035] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1425'. [ 1018.558467][T11901] hsr_slave_0: entered promiscuous mode [ 1018.560110][T11901] hsr_slave_1: entered promiscuous mode [ 1018.561151][T11901] debugfs: 'hsr0' already exists in 'hsr' [ 1018.561179][T11901] Cannot create hsr debugfs directory [ 1018.563340][T11963] chnl_net:caif_netlink_parms(): no params data found [ 1019.211946][ T1178] bridge_slave_1: left allmulticast mode [ 1019.212112][ T1178] bridge_slave_1: left promiscuous mode [ 1019.212430][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.351284][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1426'. [ 1019.376490][T12044] IPVS: wlc: SCTP 172.20.20.187:0 - no destination available [ 1020.547817][T12047] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1020.547849][T12047] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1020.547950][T12047] vhci_hcd vhci_hcd.0: Device attached [ 1020.618668][T12052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1020.647280][ T1178] bridge_slave_0: left allmulticast mode [ 1020.647319][ T1178] bridge_slave_0: left promiscuous mode [ 1020.647735][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.858009][ T5961] usb 41-1: new high-speed USB device number 9 using vhci_hcd [ 1021.470142][T12048] vhci_hcd: connection reset by peer [ 1021.474411][ T1018] vhci_hcd: stop threads [ 1021.474433][ T1018] vhci_hcd: release socket [ 1021.475616][ T1018] vhci_hcd: disconnect device [ 1024.381642][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.137905][ T5961] vhci_hcd: vhci_device speed not set [ 1030.348379][T12070] vivid-001: disconnect [ 1030.547457][T12066] vivid-001: reconnect [ 1031.506747][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1031.676560][ T1178] bond0 (unregistering): Released all slaves [ 1033.396058][T12092] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1033.396091][T12092] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1033.422719][T12092] vhci_hcd vhci_hcd.0: Device attached [ 1034.558083][ T9] usb 41-1: new high-speed USB device number 10 using vhci_hcd [ 1037.098620][T12099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1038.288587][T12093] vhci_hcd: connection reset by peer [ 1038.289264][ T67] vhci_hcd: stop threads [ 1038.289282][ T67] vhci_hcd: release socket [ 1038.289356][ T67] vhci_hcd: disconnect device [ 1039.232277][T12111] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1443'. [ 1039.868079][ T9] vhci_hcd: vhci_device speed not set [ 1041.848483][ T1178] hsr_slave_0: left promiscuous mode [ 1041.878633][ T1178] hsr_slave_1: left promiscuous mode [ 1041.879717][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1042.197508][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1043.012468][T12127] Process accounting resumed [ 1043.427988][ T5961] usb 1-1: new full-speed USB device number 52 using dummy_hcd [ 1043.580351][ T5961] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1043.580407][ T5961] usb 1-1: config 0 interface 0 altsetting 254 has an invalid descriptor for endpoint zero, skipping [ 1043.580431][ T5961] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1043.580460][ T5961] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1043.580497][ T5961] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1043.580523][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.590277][ T5961] usb 1-1: config 0 descriptor?? [ 1043.668407][ T5961] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1044.328353][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 1044.552723][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 1045.365736][T12138] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1045.365766][T12138] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1045.368580][T12138] vhci_hcd vhci_hcd.0: Device attached [ 1045.553569][T12141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1046.027960][ T8892] usb 41-1: new high-speed USB device number 11 using vhci_hcd [ 1046.133162][T12139] vhci_hcd: connection reset by peer [ 1046.133882][ T13] vhci_hcd: stop threads [ 1046.134000][ T13] vhci_hcd: release socket [ 1046.134092][ T13] vhci_hcd: disconnect device [ 1046.328120][T11961] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.328290][T11961] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.328530][T11961] bridge_slave_0: entered allmulticast mode [ 1046.331802][T11961] bridge_slave_0: entered promiscuous mode [ 1046.413543][ T5961] usb 1-1: USB disconnect, device number 52 [ 1046.500576][T11961] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.516242][T11961] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.516508][T11961] bridge_slave_1: entered allmulticast mode [ 1046.579471][T11961] bridge_slave_1: entered promiscuous mode [ 1048.611812][ T5841] Bluetooth: hci1: Unable to find connection for big 0x00 [ 1049.020284][T11963] bridge0: port 1(bridge_slave_0) entered blocking state [ 1049.020616][T11963] bridge0: port 1(bridge_slave_0) entered disabled state [ 1049.020868][T11963] bridge_slave_0: entered allmulticast mode [ 1049.023771][T11963] bridge_slave_0: entered promiscuous mode [ 1049.356843][T11963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1049.356984][T11963] bridge0: port 2(bridge_slave_1) entered disabled state [ 1049.357152][T11963] bridge_slave_1: entered allmulticast mode [ 1049.364329][T11963] bridge_slave_1: entered promiscuous mode [ 1049.418291][T11961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1049.781213][T11961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1050.059961][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1050.088752][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1050.090506][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1050.096863][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1050.126033][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1051.772126][ T8892] vhci_hcd: vhci_device speed not set [ 1052.056989][T12164] Process accounting resumed [ 1052.207939][ T5152] Bluetooth: hci0: command tx timeout [ 1052.610461][T11963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.863585][T11963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.893231][T11961] team0: Port device team_slave_0 added [ 1053.019642][T11961] team0: Port device team_slave_1 added [ 1053.028020][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1053.208164][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1053.242995][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.243068][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1053.243114][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1053.243138][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.279377][ T9] usbtmc 5-1:16.0: bulk endpoints not found [ 1053.382162][T11963] team0: Port device team_slave_0 added [ 1053.596203][T11963] team0: Port device team_slave_1 added [ 1053.603729][T11961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.603748][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.603777][T11961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.771997][T11961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.772017][T11961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.772048][T11961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.797957][ T9] usb 1-1: new full-speed USB device number 53 using dummy_hcd [ 1053.954829][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1053.954863][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1053.954877][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1053.954892][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1053.954913][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1053.954927][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.964464][ T9] usb 1-1: config 0 descriptor?? [ 1053.978026][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1054.003343][T11963] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.003361][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.003387][T11963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1054.099411][T11963] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.099424][T11963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.099440][T11963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.277841][ T5152] Bluetooth: hci0: command tx timeout [ 1054.608449][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.608503][ T1324] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.812170][T11961] hsr_slave_0: entered promiscuous mode [ 1054.816765][T11961] hsr_slave_1: entered promiscuous mode [ 1055.297139][T11963] hsr_slave_0: entered promiscuous mode [ 1055.305751][T11963] hsr_slave_1: entered promiscuous mode [ 1055.315766][T11963] debugfs: 'hsr0' already exists in 'hsr' [ 1055.315790][T11963] Cannot create hsr debugfs directory [ 1055.762354][ T9] usb 5-1: USB disconnect, device number 61 [ 1056.321850][T12184] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1056.321879][T12184] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1056.357982][ T5152] Bluetooth: hci0: command tx timeout [ 1056.395726][T12184] vhci_hcd vhci_hcd.0: Device attached [ 1056.528342][T12186] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1056.627979][ T8892] usb 41-1: new high-speed USB device number 12 using vhci_hcd [ 1056.788022][T12185] vhci_hcd: connection reset by peer [ 1056.789049][ T3556] vhci_hcd: stop threads [ 1056.789067][ T3556] vhci_hcd: release socket [ 1056.789156][ T3556] vhci_hcd: disconnect device [ 1056.843543][ T5840] usb 1-1: USB disconnect, device number 53 [ 1058.440178][ T5152] Bluetooth: hci0: command tx timeout [ 1058.808048][ C1] vkms_vblank_simulate: vblank timer overrun [ 1058.957356][ C1] vkms_vblank_simulate: vblank timer overrun [ 1059.601812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.179092][ C1] vkms_vblank_simulate: vblank timer overrun [ 1060.265309][T12201] Process accounting resumed [ 1060.801268][T12157] chnl_net:caif_netlink_parms(): no params data found [ 1061.038733][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1061.045778][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1061.048968][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1061.063611][ T5841] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1061.070531][ T5841] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1061.270030][ T1178] bridge_slave_1: left allmulticast mode [ 1061.270069][ T1178] bridge_slave_1: left promiscuous mode [ 1061.270366][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.359738][ T1178] bridge_slave_0: left allmulticast mode [ 1061.359785][ T1178] bridge_slave_0: left promiscuous mode [ 1061.360130][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.451007][ T1178] bridge_slave_1: left allmulticast mode [ 1061.451032][ T1178] bridge_slave_1: left promiscuous mode [ 1061.451209][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.508873][ T1178] bridge_slave_0: left allmulticast mode [ 1061.508901][ T1178] bridge_slave_0: left promiscuous mode [ 1061.509083][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.586909][ T1178] bridge_slave_1: left allmulticast mode [ 1061.586948][ T1178] bridge_slave_1: left promiscuous mode [ 1061.587242][ T1178] bridge0: port 2(bridge_slave_1) entered disabled state [ 1061.649811][ T1178] bridge_slave_0: left allmulticast mode [ 1061.649849][ T1178] bridge_slave_0: left promiscuous mode [ 1061.650197][ T1178] bridge0: port 1(bridge_slave_0) entered disabled state [ 1061.707915][ T8892] vhci_hcd: vhci_device speed not set [ 1062.068283][ C1] vkms_vblank_simulate: vblank timer overrun [ 1062.137988][ T6028] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 1062.296205][ T6028] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1062.296239][ T6028] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1062.296253][ T6028] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1062.296269][ T6028] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1062.296290][ T6028] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1062.296304][ T6028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.412103][ T6028] usb 1-1: config 0 descriptor?? [ 1062.453022][ T6028] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1062.741132][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1062.744782][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1062.782008][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1062.794301][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1062.803902][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1063.540476][ T5841] Bluetooth: hci4: command tx timeout [ 1063.650255][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1063.749819][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1063.815981][ T1178] bond0 (unregistering): Released all slaves [ 1064.397343][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1064.578962][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1064.655365][ T1178] bond0 (unregistering): Released all slaves [ 1064.999962][ T5152] Bluetooth: hci3: command tx timeout [ 1065.281046][ T1178] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1065.557984][ T5152] Bluetooth: hci4: command tx timeout [ 1065.605251][ T1178] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.579862][ T1178] bond0 (unregistering): Released all slaves [ 1067.587888][ T5152] Bluetooth: hci3: command tx timeout [ 1067.790573][T12239] Process accounting resumed [ 1067.919417][ T5152] Bluetooth: hci4: command tx timeout [ 1068.492715][T12243] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1476'. [ 1068.492870][T12243] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 1069.008081][ T8892] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1069.118924][ T5961] usb 1-1: USB disconnect, device number 54 [ 1069.197932][ T8892] usb 5-1: Using ep0 maxpacket: 8 [ 1069.217365][ T8892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1069.219621][ T8892] usb 5-1: config 12 interface 0 altsetting 7 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1069.219651][ T8892] usb 5-1: config 12 interface 0 has no altsetting 0 [ 1069.223036][ T8892] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 1069.223067][ T8892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.223088][ T8892] usb 5-1: Product: syz [ 1069.223103][ T8892] usb 5-1: Manufacturer: syz [ 1069.223117][ T8892] usb 5-1: SerialNumber: syz [ 1069.642118][ T5152] Bluetooth: hci3: command tx timeout [ 1069.664473][ T8892] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1069.664541][ T8892] usb 5-1: selecting invalid altsetting 0 [ 1069.760777][ T1178] hsr_slave_0: left promiscuous mode [ 1069.803167][ T1178] hsr_slave_1: left promiscuous mode [ 1069.815530][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1069.844182][ T8892] usb 5-1: USB disconnect, device number 62 [ 1069.854829][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1069.988220][ T5152] Bluetooth: hci4: command tx timeout [ 1070.205668][T12254] udevd[12254]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:12.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1071.117915][ T1178] hsr_slave_0: left promiscuous mode [ 1071.167999][ T1178] hsr_slave_1: left promiscuous mode [ 1071.169033][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1071.275948][T12262] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 1071.275975][T12262] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1071.276041][T12262] vhci_hcd vhci_hcd.0: Device attached [ 1071.322906][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1071.558184][ T8892] usb 41-1: new high-speed USB device number 13 using vhci_hcd [ 1071.717952][ T5152] Bluetooth: hci3: command tx timeout [ 1072.297316][T12263] vhci_hcd: connection reset by peer [ 1072.344323][ T6256] vhci_hcd: stop threads [ 1072.344382][ T6256] vhci_hcd: release socket [ 1072.344576][ T6256] vhci_hcd: disconnect device [ 1072.459003][ T1178] hsr_slave_0: left promiscuous mode [ 1072.524788][ T1178] hsr_slave_1: left promiscuous mode [ 1072.553552][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1072.899399][ T1178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1075.117590][T12273] Process accounting resumed [ 1075.146458][ T9] usb 1-1: new full-speed USB device number 55 using dummy_hcd [ 1075.353593][T12276] 9pnet_fd: Insufficient options for proto=fd [ 1075.373161][ T9] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1075.373220][ T9] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.373245][ T9] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1075.373275][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1075.373312][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1075.373336][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.400246][ T9] usb 1-1: config 0 descriptor?? [ 1075.406333][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1077.228851][ T8892] vhci_hcd: vhci_device speed not set [ 1078.580749][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 1078.728921][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 1080.103814][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 1080.260089][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 1081.618794][ T1178] team0 (unregistering): Port device team_slave_1 removed [ 1081.801772][ T1178] team0 (unregistering): Port device team_slave_0 removed [ 1082.636853][ T8892] usb 1-1: USB disconnect, device number 55 [ 1082.683675][T12157] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.683850][T12157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1082.684096][T12157] bridge_slave_0: entered allmulticast mode [ 1082.703081][T12157] bridge_slave_0: entered promiscuous mode [ 1082.788268][T12157] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.788457][T12157] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.788716][T12157] bridge_slave_1: entered allmulticast mode [ 1082.811162][T12157] bridge_slave_1: entered promiscuous mode [ 1083.196702][T12157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1083.250396][T12157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.837117][T12157] team0: Port device team_slave_0 added [ 1085.030110][T12307] 9pnet_fd: Insufficient options for proto=fd [ 1085.705090][T12157] team0: Port device team_slave_1 added [ 1086.069356][T12314] delete_channel: no stack [ 1086.657935][ T8892] usb 1-1: new full-speed USB device number 56 using dummy_hcd [ 1086.754264][T12157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.754283][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.754327][T12157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.795167][T12157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.795183][T12157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1086.795208][T12157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.820210][ T8892] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1086.820268][ T8892] usb 1-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1086.820293][ T8892] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1086.820320][ T8892] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1086.820354][ T8892] usb 1-1: New USB device found, idVendor=5543, idProduct=004d, bcdDevice= 0.00 [ 1086.820378][ T8892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.956583][ T8892] usb 1-1: config 0 descriptor?? [ 1086.969981][ T8892] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1088.553309][T12157] hsr_slave_0: entered promiscuous mode [ 1088.554915][T12157] hsr_slave_1: entered promiscuous mode [ 1088.555999][T12157] debugfs: 'hsr0' already exists in 'hsr' [ 1088.556024][T12157] Cannot create hsr debugfs directory [ 1088.590137][T12332] 9pnet_fd: Insufficient options for proto=fd [ 1088.915136][T12206] chnl_net:caif_netlink_parms(): no params data found [ 1089.075366][T12219] chnl_net:caif_netlink_parms(): no params data found [ 1089.543543][ T8892] usb 1-1: USB disconnect, device number 56 [ 1092.806940][T12371] comedi comedi3: c6xdigio: I/O port conflict (0x4f27,3) [ 1092.807050][T12371] ------------[ cut here ]------------ [ 1092.807062][T12371] Unexpected driver unregister! [ 1092.807781][T12371] WARNING: CPU: 1 PID: 12371 at drivers/base/driver.c:273 driver_unregister+0x94/0xb0 [ 1092.807823][T12371] Modules linked in: [ 1092.807843][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.0.1510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.807869][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1092.807883][T12371] RIP: 0010:driver_unregister+0x94/0xb0 [ 1092.807908][T12371] Code: 6f d5 fc 48 89 df 5b 41 5e 41 5f e9 c6 54 ff ff e8 d1 b2 3f fc eb 05 e8 ca b2 3f fc 90 48 c7 c7 80 a6 79 8b e8 4d 85 04 fc 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 3e 56 7b 05 cc cc cc cc cc cc cc cc [ 1092.807928][T12371] RSP: 0018:ffffc90004257a40 EFLAGS: 00010246 [ 1092.807948][T12371] RAX: fa4c84f056f8e000 RBX: ffffffff8eb8f4e0 RCX: 0000000000080000 [ 1092.807965][T12371] RDX: ffffc9000f0cd000 RSI: 0000000000000a84 RDI: 0000000000000a85 [ 1092.807981][T12371] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1092.807996][T12371] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff88814cc38038 [ 1092.808013][T12371] R13: ffffffff8eb8f430 R14: 0000000000000000 R15: dffffc0000000000 [ 1092.808029][T12371] FS: 00007fadfa34d6c0(0000) GS:ffff8881269c2000(0000) knlGS:0000000000000000 [ 1092.808050][T12371] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1092.808065][T12371] CR2: 000000110c2ab47c CR3: 0000000055a6a000 CR4: 00000000003526f0 [ 1092.808088][T12371] Call Trace: [ 1092.808099][T12371] [ 1092.808112][T12371] comedi_device_detach_locked+0x175/0x750 [ 1092.808156][T12371] comedi_device_attach+0x5d4/0x720 [ 1092.808195][T12371] comedi_unlocked_ioctl+0x605/0x1020 [ 1092.808231][T12371] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1092.808274][T12371] ? __pfx_smack_log+0x10/0x10 [ 1092.808309][T12371] ? smk_access+0x14c/0x4e0 [ 1092.808350][T12371] ? smk_tskacc+0x2fc/0x370 [ 1092.808390][T12371] ? smack_file_ioctl+0x24d/0x340 [ 1092.808418][T12371] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1092.808455][T12371] ? __fget_files+0x2a/0x420 [ 1092.808496][T12371] ? __fget_files+0x3a6/0x420 [ 1092.808526][T12371] ? __fget_files+0x2a/0x420 [ 1092.808559][T12371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1092.808586][T12371] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1092.808609][T12371] __se_sys_ioctl+0xfc/0x170 [ 1092.808639][T12371] do_syscall_64+0xfa/0x3b0 [ 1092.808668][T12371] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.808695][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.808718][T12371] ? clear_bhb_loop+0x60/0xb0 [ 1092.808747][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.808769][T12371] RIP: 0033:0x7fadfc10ebe9 [ 1092.808788][T12371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.808807][T12371] RSP: 002b:00007fadfa34d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.808830][T12371] RAX: ffffffffffffffda RBX: 00007fadfc336090 RCX: 00007fadfc10ebe9 [ 1092.808847][T12371] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1092.808862][T12371] RBP: 00007fadfc191e19 R08: 0000000000000000 R09: 0000000000000000 [ 1092.808877][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.808891][T12371] R13: 00007fadfc336128 R14: 00007fadfc336090 R15: 00007fff2c8e1ed8 [ 1092.808929][T12371] [ 1092.808939][T12371] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1092.808955][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.0.1510 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1092.808980][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1092.808993][T12371] Call Trace: [ 1092.809003][T12371] [ 1092.809012][T12371] dump_stack_lvl+0x99/0x250 [ 1092.809046][T12371] ? __asan_memcpy+0x40/0x70 [ 1092.809071][T12371] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1092.809103][T12371] ? __pfx__printk+0x10/0x10 [ 1092.809145][T12371] vpanic+0x281/0x750 [ 1092.809177][T12371] ? __pfx__printk+0x10/0x10 [ 1092.809202][T12371] ? __pfx_vpanic+0x10/0x10 [ 1092.809235][T12371] ? is_bpf_text_address+0x26/0x2b0 [ 1092.809288][T12371] panic+0xb9/0xc0 [ 1092.809320][T12371] ? __pfx_panic+0x10/0x10 [ 1092.809371][T12371] __warn+0x31b/0x4b0 [ 1092.809402][T12371] ? driver_unregister+0x94/0xb0 [ 1092.809429][T12371] ? driver_unregister+0x94/0xb0 [ 1092.809453][T12371] report_bug+0x2be/0x4f0 [ 1092.809479][T12371] ? driver_unregister+0x94/0xb0 [ 1092.809512][T12371] ? driver_unregister+0x94/0xb0 [ 1092.809533][T12371] ? driver_unregister+0x96/0xb0 [ 1092.809555][T12371] handle_bug+0x84/0x160 [ 1092.809587][T12371] exc_invalid_op+0x1a/0x50 [ 1092.809618][T12371] asm_exc_invalid_op+0x1a/0x20 [ 1092.809639][T12371] RIP: 0010:driver_unregister+0x94/0xb0 [ 1092.809662][T12371] Code: 6f d5 fc 48 89 df 5b 41 5e 41 5f e9 c6 54 ff ff e8 d1 b2 3f fc eb 05 e8 ca b2 3f fc 90 48 c7 c7 80 a6 79 8b e8 4d 85 04 fc 90 <0f> 0b 90 90 5b 41 5e 41 5f e9 3e 56 7b 05 cc cc cc cc cc cc cc cc [ 1092.809681][T12371] RSP: 0018:ffffc90004257a40 EFLAGS: 00010246 [ 1092.809701][T12371] RAX: fa4c84f056f8e000 RBX: ffffffff8eb8f4e0 RCX: 0000000000080000 [ 1092.809717][T12371] RDX: ffffc9000f0cd000 RSI: 0000000000000a84 RDI: 0000000000000a85 [ 1092.809734][T12371] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 1092.809747][T12371] R10: dffffc0000000000 R11: ffffed1017124863 R12: ffff88814cc38038 [ 1092.809764][T12371] R13: ffffffff8eb8f430 R14: 0000000000000000 R15: dffffc0000000000 [ 1092.809805][T12371] comedi_device_detach_locked+0x175/0x750 [ 1092.809846][T12371] comedi_device_attach+0x5d4/0x720 [ 1092.809886][T12371] comedi_unlocked_ioctl+0x605/0x1020 [ 1092.809921][T12371] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1092.809965][T12371] ? __pfx_smack_log+0x10/0x10 [ 1092.810000][T12371] ? smk_access+0x14c/0x4e0 [ 1092.810041][T12371] ? smk_tskacc+0x2fc/0x370 [ 1092.810080][T12371] ? smack_file_ioctl+0x24d/0x340 [ 1092.810108][T12371] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1092.810146][T12371] ? __fget_files+0x2a/0x420 [ 1092.810177][T12371] ? __fget_files+0x3a6/0x420 [ 1092.810207][T12371] ? __fget_files+0x2a/0x420 [ 1092.810241][T12371] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1092.810265][T12371] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 1092.810289][T12371] __se_sys_ioctl+0xfc/0x170 [ 1092.810318][T12371] do_syscall_64+0xfa/0x3b0 [ 1092.810347][T12371] ? lockdep_hardirqs_on+0x9c/0x150 [ 1092.810375][T12371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.810397][T12371] ? clear_bhb_loop+0x60/0xb0 [ 1092.810425][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1092.810446][T12371] RIP: 0033:0x7fadfc10ebe9 [ 1092.810465][T12371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1092.810483][T12371] RSP: 002b:00007fadfa34d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1092.810515][T12371] RAX: ffffffffffffffda RBX: 00007fadfc336090 RCX: 00007fadfc10ebe9 [ 1092.810530][T12371] RDX: 00002000000000c0 RSI: 0000000040946400 RDI: 0000000000000003 [ 1092.810545][T12371] RBP: 00007fadfc191e19 R08: 0000000000000000 R09: 0000000000000000 [ 1092.810559][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1092.810574][T12371] R13: 00007fadfc336128 R14: 00007fadfc336090 R15: 00007fff2c8e1ed8 [ 1092.810611][T12371] [ 1092.810869][T12371] Kernel Offset: disabled