last executing test programs: 17m32.11319715s ago: executing program 0 (id=125): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000140)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380), 0x0, 0x0, 0x0, 0x804c040}, 0x4000891) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, 0x0) 17m32.051476021s ago: executing program 0 (id=127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) 17m31.878577427s ago: executing program 0 (id=128): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000080)="00af230579af5d532e0b0e6645f8", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17m31.748675092s ago: executing program 0 (id=129): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001f40)={r3, r1, 0x25, 0x0, @val=@netkit}, 0x1c) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x40, 0x0, 0x1, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x1}}}}}}, 0x0) 17m31.370170863s ago: executing program 0 (id=132): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in=@empty}}, 0xe4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e23, 0x7, @mcast1, 0x4}, 0x1c) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000004c0)) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, 0x0, 0x4008004) close(r0) 17m30.859713991s ago: executing program 0 (id=134): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x10000) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 17m15.688093563s ago: executing program 32 (id=134): bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map, 0xffffffffffffffff, 0x7}, 0x20) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000180)=0x10000) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 7m41.506593914s ago: executing program 3 (id=3084): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="06000000040000004000000005"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) dup(r2) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r3], 0x20) 7m39.702810534s ago: executing program 3 (id=3087): syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006020000000100000000000000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/21], 0x50) gettid() r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) r5 = eventfd2(0x2, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="f406000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000100)="d268288681834943a939c081b78c0a13552b1ebb023af38c3ccd4c6551a269ecfd3ba4548a53b63bf5853767bca6f152113d46d7", 0x34, 0x5, 0x0, 0x1, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000003c0), 0x0, 0x42, 0x0, 0x2, r5}]) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2778) sendfile(0xffffffffffffffff, r0, 0x0, 0xfff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r7], 0x5c}, 0x1, 0xba01}, 0x0) close(r7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(r2, 0x0, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) 7m36.715883576s ago: executing program 3 (id=3094): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000325bd7000fbdbdf250400000008000100010000", @ANYRES64=r0], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20902, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x8) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x22180, 0x0) ppoll(&(0x7f00000006c0)=[{r2, 0x108}], 0x1, &(0x7f0000000240), 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x402, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001300)=""/102400, 0x19000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) socket$alg(0x26, 0x5, 0x0) msgget(0x3, 0x710) msgget(0x2, 0x624) msgget(0x1, 0x240) msgctl$IPC_RMID(0x0, 0x0) msgget(0x3, 0x693) syz_open_dev$sndmidi(0x0, 0x6, 0x18000) 7m35.474899871s ago: executing program 3 (id=3097): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x200, &(0x7f0000006680)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) fchown(r0, 0x0, 0x0) 7m35.014735559s ago: executing program 3 (id=3099): unshare(0x4000400) r0 = socket$inet(0x2, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_udplite(0xa, 0x2, 0x88) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_usb_connect$uac1(0x3, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r1], 0x7) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, 0x0) 7m31.880419506s ago: executing program 3 (id=3103): syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006020000000100000000000000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/21], 0x50) gettid() r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) r5 = eventfd2(0x2, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="f406000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000100)="d268288681834943a939c081b78c0a13552b1ebb023af38c3ccd4c6551a269ecfd3ba4548a53b63bf5853767bca6f152113d46d7", 0x34, 0x5, 0x0, 0x1, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000003c0), 0x0, 0x42, 0x0, 0x2, r5}]) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2778) sendfile(0xffffffffffffffff, r0, 0x0, 0xfff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r7], 0x5c}, 0x1, 0xba01}, 0x0) close(r7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(r2, 0x0, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) 7m15.736793921s ago: executing program 33 (id=3103): syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000006020000000100000000000000", @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff00"/21], 0x50) gettid() r0 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r0, 0x0, 0x0) socket$inet(0x2b, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) ioctl$EVIOCGRAB(r3, 0x40044590, 0x0) io_setup(0x1, &(0x7f0000000380)=0x0) r5 = eventfd2(0x2, 0x80800) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRES32, @ANYBLOB="f406000000000000000000000000000400000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0300"/28], 0x50) io_submit(r4, 0x2, &(0x7f0000000240)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000100)="d268288681834943a939c081b78c0a13552b1ebb023af38c3ccd4c6551a269ecfd3ba4548a53b63bf5853767bca6f152113d46d7", 0x34, 0x5, 0x0, 0x1, r5}, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x7, 0x4, r0, &(0x7f00000003c0), 0x0, 0x42, 0x0, 0x2, r5}]) write$char_usb(r3, &(0x7f0000000040)="e2", 0x2778) sendfile(0xffffffffffffffff, r0, 0x0, 0xfff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x1a, &(0x7f0000000080)=0x1ff, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000420000003c00128008000100677470003000028008000200", @ANYRES32=r7], 0x5c}, 0x1, 0xba01}, 0x0) close(r7) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) read(r2, 0x0, 0x0) r8 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x28002) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r8, 0x4112, 0x0) 6m43.91825669s ago: executing program 2 (id=3204): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 6m42.687131304s ago: executing program 2 (id=3207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x80000, {0x0, 0x0, 0x0, r5, {}, {0xffe6, 0xb}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}, 0x1, 0x0, 0x0, 0x850}, 0x4048080) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 6m27.96608596s ago: executing program 2 (id=3235): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) userfaultfd(0x80001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0xee01, &(0x7f0000000000)={0x10001, 0x5, 0x0, 0x4}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r2 = openat$btrfs_control(0xffffff9c, 0x0, 0x80000, 0x0) flock(r2, 0x9) write$cgroup_int(r1, &(0x7f0000000040)=0x3, 0x12) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) getsockopt$ax25_int(r3, 0x101, 0x5, &(0x7f0000000080), &(0x7f0000000040)=0x4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6m26.906184939s ago: executing program 2 (id=3236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000011c0)=@multiplanar_overlay={0xbc8c, 0xa, 0x4, 0x2000, 0x6, {0x0, 0xea60}, {0x3, 0x2, 0xf7, 0xa, 0x3, 0x80, "16d3973f"}, 0x4, 0x3, {0x0}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$SNDCTL_SEQ_GETOUTCOUNT(0xffffffffffffffff, 0x4004510d, &(0x7f0000000000)) syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) syz_open_procfs$pagemap(0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0xffe, 0xffff, 0x1000, 0x3a, 0x1000, 0x0, 0x7}, 0x1c) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000cc0)={'syz1\x00', {}, 0x3, [0xfffffffd, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3f9, 0x100, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, 0x3, 0xe, 0x721a2d63, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x63c, 0x10, 0xa, 0x7f, 0x0, 0x0, 0x5, 0x197a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xa46, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x71, 0x0, 0x0, 0x0, 0xffffffff, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4010000], [0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1000008, 0xc7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x3, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffd, 0x400, 0x0, 0xfffffffc, 0x40, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_DEV_SETUP(r1, 0x5501, 0x0) ioctl$UI_DEV_DESTROY(r1, 0x5502) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r2, 0xa, 0x13) fcntl$setlease(r2, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_io_uring_setup(0x41f, &(0x7f000000a9c0)={0x0, 0x46b0}, &(0x7f000000aa40), &(0x7f000000aa80)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r4, 0x2, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0}, 0x20) truncate(0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) 6m26.409312227s ago: executing program 2 (id=3237): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x3, 0xff) write$UHID_CREATE(r0, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x3, 0x4, 0x0, 0x0, 0xc08}}, 0x120) 6m24.64742033s ago: executing program 2 (id=3242): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6m9.420722071s ago: executing program 34 (id=3242): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 3m8.138951371s ago: executing program 4 (id=4355): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000004c0)=@newsa={0x184, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@local, @in=@empty, 0x4e23, 0x0, 0x2000, 0x8000, 0x0, 0x20, 0x0, 0x73}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in=@rand_addr=0x64010102, {0xfffffffffffffffe, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x7, 0x0, 0x4}, {0x0, 0x9}, 0x70bd27, 0x0, 0xa, 0x1, 0x6, 0x3}, [@algo_aead={0x4c, 0x12, {{'ccm_base(ecb(cast6-generic),xcbc(des))\x00'}, 0x0, 0x100}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 3m7.841739511s ago: executing program 4 (id=4357): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) 3m7.450935056s ago: executing program 4 (id=4359): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) syz_open_pts(r0, 0x0) readv(r0, &(0x7f00000021c0)=[{&(0x7f0000000140)=""/71, 0x47}], 0x1) 3m6.534307337s ago: executing program 4 (id=4360): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040), 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3m6.326123488s ago: executing program 4 (id=4361): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 3m6.116101539s ago: executing program 4 (id=4362): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x5, 0x7fffbfef}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x8, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, 0x0) 2m42.216126543s ago: executing program 5 (id=4418): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$inet6(0xa, 0x805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 2m41.942153962s ago: executing program 5 (id=4421): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) 2m39.993730125s ago: executing program 7 (id=4425): syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r0 = syz_io_uring_setup(0x106, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 2m39.835935888s ago: executing program 5 (id=4426): unshare(0x24020400) syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m38.454668642s ago: executing program 5 (id=4429): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726", 0x3f}], 0x1, 0x0, 0x0, 0x4}], 0x1, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m36.496361717s ago: executing program 5 (id=4431): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$9p_virtio(0x0, 0x0, 0x0, 0x800040, &(0x7f0000000200)=ANY=[@ANYBLOB='trans=virtio,noxattr,uname=^,noextend,']) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 2m35.857307283s ago: executing program 7 (id=4436): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200), 0x0}, 0x0) 2m32.488538257s ago: executing program 7 (id=4441): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0409"], 0x6) 2m32.154043384s ago: executing program 7 (id=4442): socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$llc(0x1a, 0x801, 0x0) socket$alg(0x26, 0x5, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$netlink(0x10, 0x3, 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x15) socket$inet6(0xa, 0x805, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/14], 0x48) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2000000004140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4008055}, 0x814) 2m31.964291767s ago: executing program 7 (id=4443): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0xbf48ce7, "1803c80980000000080000000003000000d600", 0xffffffffffffffff}) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x5, "fa00114001000000000000000000000000000100000000000000ffff00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecdc67c5e3126628168", r1, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000240)={0x10000, "8a6035ceeae3ecc42317afad010000000000000400"}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, 0x0) 2m31.805697673s ago: executing program 5 (id=4445): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x40048820) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0xffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r5, 0x66020000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 2m31.564864942s ago: executing program 7 (id=4447): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce822010009"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0xc70ba000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2m16.651051624s ago: executing program 35 (id=4445): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91524fc60", 0x14}], 0x1}, 0x40048820) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x208000c9, 0x101002) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000040)=0xffffffff) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) r5 = pidfd_getfd(r4, r4, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setns(r5, 0x66020000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100aa"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) 2m16.275717698s ago: executing program 36 (id=4447): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce822010009"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(0xffffffffffffffff) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000000), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r2, 0xc70ba000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x1c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 33.010911881s ago: executing program 6 (id=4716): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$can_j1939(0x1d, 0x2, 0x7) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(0xffffffffffffffff, 0x47bc, 0x0, 0x0, 0x0, 0x0) 32.878388666s ago: executing program 6 (id=4717): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x4, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfb, {{@in6=@rand_addr=' \x01\x00', @in6=@mcast2, 0x0, 0x2, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x8001, 0x2, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0xfffffffc, 0x3c}, 0x0, @in6=@empty, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}]}, 0xfc}}, 0x4080010) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 32.790060136s ago: executing program 6 (id=4718): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10b}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 32.593139233s ago: executing program 6 (id=4719): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000001f00)) sendmmsg(r0, &(0x7f0000005b40)=[{{0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f0000002b00)='.', 0x1}], 0x1}}], 0x1, 0x40000) 32.511907526s ago: executing program 6 (id=4720): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) pipe(&(0x7f0000000240)) pselect6(0x40, &(0x7f0000000100)={0x0, 0x4, 0x0, 0x1, 0x0, 0x200000007f}, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x572c, 0x0, 0x0, 0x0, "00769a7d8200010000001495595915303d6000"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCFLSH(r1, 0x540b, 0x2) 31.582406088s ago: executing program 6 (id=4721): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047456, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) 16.513597473s ago: executing program 37 (id=4721): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) keyctl$KEYCTL_CAPABILITIES(0x1f, &(0x7f0000000000)=""/21, 0xfffffe0d) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r0, 0x80047456, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r3) 3.448790037s ago: executing program 1 (id=4748): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @main=@item_4={0x3, 0x0, 0x9, "1088c20b"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f00000000c0)={0x2, 0x100, 0x2}) 1.474155509s ago: executing program 1 (id=4749): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7032}, 0x1c) 1.40559087s ago: executing program 1 (id=4750): r0 = epoll_create1(0x0) fcntl$dupfd(r0, 0x0, r0) epoll_create1(0x80000) epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x5, 0xb, &(0x7f0000000540)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES16, @ANYRES32=0x0, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_TRAP_GET(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00', @ANYRES16=r3, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) 1.321333004s ago: executing program 1 (id=4751): socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904000000", @ANYRES16=r0], 0x0) 44.724131ms ago: executing program 1 (id=4752): ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r0 = syz_io_uring_setup(0x235, &(0x7f0000001240)={0x0, 0x10008cc8, 0x10100, 0x2, 0x75}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x3b, 0x2, 0x1}) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0xfffffffffffffc76) 0s ago: executing program 1 (id=4753): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) tgkill(r1, r0, 0x33) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf000000}, 0x48) kernel console output (not intermixed with test programs): [ 926.599217][T17372] team0: Port device team_slave_0 added [ 926.615562][T17372] team0: Port device team_slave_1 added [ 926.853514][T17372] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.853535][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.853566][T17372] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.871932][T17372] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.871949][T17372] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 926.871975][T17372] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 927.146639][ T5118] Bluetooth: hci0: command tx timeout [ 927.432293][T17372] hsr_slave_0: entered promiscuous mode [ 927.444408][T17372] hsr_slave_1: entered promiscuous mode [ 927.455961][T16720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 927.475573][T11215] bridge_slave_1: left allmulticast mode [ 927.475613][T11215] bridge_slave_1: left promiscuous mode [ 927.475883][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.509660][T17596] input: syz1 as /devices/virtual/input/input44 [ 927.572861][T11215] bridge_slave_0: left allmulticast mode [ 927.572895][T11215] bridge_slave_0: left promiscuous mode [ 927.573165][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.866301][ T5118] Bluetooth: hci1: command tx timeout [ 927.921306][T17612] netlink: 168 bytes leftover after parsing attributes in process `syz.5.3807'. [ 929.299525][T11215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 929.377245][T11215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 929.420245][T11215] bond0 (unregistering): Released all slaves [ 929.948575][ T5118] Bluetooth: hci1: command tx timeout [ 930.976445][T11215] hsr_slave_0: left promiscuous mode [ 931.019874][T11215] hsr_slave_1: left promiscuous mode [ 931.021126][T11215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 931.077251][T11215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 931.882495][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.046150][ T5118] Bluetooth: hci1: command tx timeout [ 933.331949][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 933.597067][T11215] team0 (unregistering): Port device team_slave_1 removed [ 933.907311][T11215] team0 (unregistering): Port device team_slave_0 removed [ 936.675918][T17768] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 936.678760][T17773] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3885'. [ 936.755848][T16720] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.768227][T17495] chnl_net:caif_netlink_parms(): no params data found [ 937.083742][T11213] bridge0: port 1(bridge_slave_0) entered blocking state [ 937.083923][T11213] bridge0: port 1(bridge_slave_0) entered forwarding state [ 937.217588][T17904] ptrace attach of "./syz-executor exec"[6513] was attempted by "./syz-executor exec"[17904] [ 937.763657][T11213] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.763912][T11213] bridge0: port 2(bridge_slave_1) entered forwarding state [ 938.371620][T17495] bridge0: port 1(bridge_slave_0) entered blocking state [ 938.371837][T17495] bridge0: port 1(bridge_slave_0) entered disabled state [ 938.372084][T17495] bridge_slave_0: entered allmulticast mode [ 938.472859][T17495] bridge_slave_0: entered promiscuous mode [ 938.532712][T17495] bridge0: port 2(bridge_slave_1) entered blocking state [ 938.532830][T17495] bridge0: port 2(bridge_slave_1) entered disabled state [ 938.532998][T17495] bridge_slave_1: entered allmulticast mode [ 938.540304][T17495] bridge_slave_1: entered promiscuous mode [ 939.009814][T17495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 939.078371][T17495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 939.435002][T17495] team0: Port device team_slave_0 added [ 939.565973][T17495] team0: Port device team_slave_1 added [ 939.938866][T17495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.938887][T17495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 939.938917][T17495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.036400][T17495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.036421][T17495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.036449][T17495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.773198][T17495] hsr_slave_0: entered promiscuous mode [ 940.783098][T17495] hsr_slave_1: entered promiscuous mode [ 940.793512][T17495] debugfs: 'hsr0' already exists in 'hsr' [ 940.793543][T17495] Cannot create hsr debugfs directory [ 942.421058][T17372] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 942.889719][T17372] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 942.981156][T17372] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 943.035765][T16720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 943.049541][T17372] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 943.707210][T11215] bridge_slave_1: left allmulticast mode [ 943.707233][T11215] bridge_slave_1: left promiscuous mode [ 943.707410][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.767627][T11215] bridge_slave_0: left allmulticast mode [ 943.767649][T11215] bridge_slave_0: left promiscuous mode [ 943.767811][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 946.471654][T11215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.547167][T11215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.574308][T11215] bond0 (unregistering): Released all slaves [ 947.277831][T11215] hsr_slave_0: left promiscuous mode [ 947.317702][T15927] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 947.323674][T15927] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 947.325408][T15927] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 947.341428][T11215] hsr_slave_1: left promiscuous mode [ 947.342388][T11215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 947.371083][T15927] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 947.372032][T15927] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 947.400135][T11215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 949.518820][ T5118] Bluetooth: hci2: command tx timeout [ 949.598015][T11215] team0 (unregistering): Port device team_slave_1 removed [ 950.506977][T11215] team0 (unregistering): Port device team_slave_0 removed [ 951.548636][ T5118] Bluetooth: hci2: command tx timeout [ 954.487063][ T5118] Bluetooth: hci2: command tx timeout [ 956.584530][ T5118] Bluetooth: hci2: command tx timeout [ 957.726278][T16692] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 957.909458][T16692] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 957.909492][T16692] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.909514][T16692] usb 6-1: Product: syz [ 957.909529][T16692] usb 6-1: Manufacturer: syz [ 957.909544][T16692] usb 6-1: SerialNumber: syz [ 957.971703][T16692] usb 6-1: config 0 descriptor?? [ 958.004628][T16692] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 958.632870][T17372] 8021q: adding VLAN 0 to HW filter on device bond0 [ 958.856358][T17372] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.014363][T15244] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.014579][T15244] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.113364][T17563] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.114188][T17563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.189014][T17495] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 959.353233][T17495] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 959.431528][T17495] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 959.474465][T18116] chnl_net:caif_netlink_parms(): no params data found [ 959.830013][T17495] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 960.501856][T17416] usb 6-1: USB disconnect, device number 27 [ 960.980904][T18116] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.981133][T18116] bridge0: port 1(bridge_slave_0) entered disabled state [ 960.981378][T18116] bridge_slave_0: entered allmulticast mode [ 960.984393][T18116] bridge_slave_0: entered promiscuous mode [ 961.045877][T18116] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.053623][T18116] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.053871][T18116] bridge_slave_1: entered allmulticast mode [ 961.070785][T18116] bridge_slave_1: entered promiscuous mode [ 961.747904][T18116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 961.767349][T18116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 961.948393][T18116] team0: Port device team_slave_0 added [ 961.976684][T18116] team0: Port device team_slave_1 added [ 962.066429][T18116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 962.066450][T18116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.066479][T18116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 962.284206][T18116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 962.284226][T18116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 962.284257][T18116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 962.717872][T18116] hsr_slave_0: entered promiscuous mode [ 962.719418][T18116] hsr_slave_1: entered promiscuous mode [ 962.720485][T18116] debugfs: 'hsr0' already exists in 'hsr' [ 962.720512][T18116] Cannot create hsr debugfs directory [ 962.973271][T11215] bridge_slave_1: left allmulticast mode [ 962.973304][T11215] bridge_slave_1: left promiscuous mode [ 962.973579][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.090931][T11215] bridge_slave_0: left allmulticast mode [ 963.090965][T11215] bridge_slave_0: left promiscuous mode [ 963.091247][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.537547][T11215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 966.627213][T11215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 966.680916][T11215] bond0 (unregistering): Released all slaves [ 966.899610][T17495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 967.184420][T18513] input: syz1 as /devices/virtual/input/input47 [ 967.195678][T11215] hsr_slave_0: left promiscuous mode [ 967.275797][T11215] hsr_slave_1: left promiscuous mode [ 967.279530][T11215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 967.330973][T11215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 969.346177][T16692] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 969.518355][T16692] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.518419][T16692] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 969.518466][T16692] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 969.518491][T16692] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.525469][T16692] usb 6-1: config 0 descriptor?? [ 969.595507][T16692] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 970.167230][T11215] team0 (unregistering): Port device team_slave_1 removed [ 970.477078][T11215] team0 (unregistering): Port device team_slave_0 removed [ 972.140071][T15183] usb 6-1: USB disconnect, device number 28 [ 973.660834][T17372] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 973.746381][T15183] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 973.864850][T17495] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.902355][T15183] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 973.902389][T15183] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.902410][T15183] usb 6-1: Product: syz [ 973.902423][T15183] usb 6-1: Manufacturer: syz [ 973.902437][T15183] usb 6-1: SerialNumber: syz [ 973.947875][T15183] usb 6-1: config 0 descriptor?? [ 974.021962][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.022319][T11226] bridge0: port 1(bridge_slave_0) entered forwarding state [ 974.187053][T15183] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 974.330354][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.330512][T11226] bridge0: port 2(bridge_slave_1) entered forwarding state [ 975.585180][T17372] veth0_vlan: entered promiscuous mode [ 975.675047][T15183] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 975.691342][T15183] usb 6-1: USB disconnect, device number 29 [ 975.720203][T18264] udevd[18264]: setting mode of /dev/bus/usb/006/029 to 020664 failed: No such file or directory [ 975.720427][T18264] udevd[18264]: setting owner of /dev/bus/usb/006/029 to uid=0, gid=0 failed: No such file or directory [ 975.832807][T17372] veth1_vlan: entered promiscuous mode [ 975.920127][T17495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 976.111732][T18116] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 976.141929][T18116] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 976.195729][T18116] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 976.286645][T18116] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 976.447233][T17372] veth0_macvtap: entered promiscuous mode [ 976.549088][T17372] veth1_macvtap: entered promiscuous mode [ 976.742116][T17372] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 976.842845][T17372] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 976.933533][T17563] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.941189][T17563] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.949988][T17563] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 976.975445][T17563] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 977.071977][T17495] veth0_vlan: entered promiscuous mode [ 977.257402][T17495] veth1_vlan: entered promiscuous mode [ 977.453002][T18116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 977.532473][T11220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.532488][T11220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.582086][T18116] 8021q: adding VLAN 0 to HW filter on device team0 [ 977.685458][T11222] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.685547][T11222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 977.713381][T17495] veth0_macvtap: entered promiscuous mode [ 977.751269][T11220] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.751358][T11220] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.775476][T11220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 977.775491][T11220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 977.799475][T17495] veth1_macvtap: entered promiscuous mode [ 977.944664][T17495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 978.007661][T17495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 978.107918][T11215] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.115699][T17563] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.150733][T17563] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 978.174019][T17563] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.593403][T18817] ptrace attach of "./syz-executor exec"[17372] was attempted by "./syz-executor exec"[18817] [ 980.827256][T18822] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 980.894374][T11222] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.894399][T11222] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.025077][T18822] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 981.025100][T18822] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.025112][T18822] usb 7-1: Product: syz [ 981.025121][T18822] usb 7-1: Manufacturer: syz [ 981.025129][T18822] usb 7-1: SerialNumber: syz [ 981.051109][T17563] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.051131][T17563] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.062538][T18822] usb 7-1: config 0 descriptor?? [ 981.283735][T18822] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 981.662152][T18116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.904539][T18822] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 981.973555][T18116] veth0_vlan: entered promiscuous mode [ 982.020357][T18116] veth1_vlan: entered promiscuous mode [ 982.155749][T18116] veth0_macvtap: entered promiscuous mode [ 982.199170][T18116] veth1_macvtap: entered promiscuous mode [ 983.860981][T18116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.902215][T18116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.963077][ T31] usb 7-1: USB disconnect, device number 2 [ 984.037234][ T3607] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.037674][ T3607] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.037718][ T3607] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.037753][ T3607] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.779934][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.779959][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.967161][T15244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.967184][T15244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 987.087931][ T6054] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 987.236137][ T6054] usb 2-1: Using ep0 maxpacket: 16 [ 987.238573][ T6054] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 987.238608][ T6054] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 987.362917][T18886] ptrace attach of "./syz-executor exec"[6513] was attempted by "./syz-executor exec"[18886] [ 987.926394][ T6054] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 987.926430][ T6054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 987.926451][ T6054] usb 2-1: Product: syz [ 987.926467][ T6054] usb 2-1: Manufacturer: syz [ 987.926482][ T6054] usb 2-1: SerialNumber: syz [ 987.992390][ T6054] usb 2-1: config 0 descriptor?? [ 988.020579][ T6054] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 988.020619][ T6054] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 988.445103][T15927] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 988.469022][T15927] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 988.471113][T15927] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 988.509949][T15927] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 988.528607][T15927] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 988.618806][ T6054] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 988.619537][ T6054] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 989.332065][ T6054] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 989.334018][ T6054] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 989.334933][ T6054] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 989.337686][ T6054] em28xx 2-1:0.0: couldn't setup AC97 register 6 [ 989.338158][ T6054] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 989.338636][ T6054] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 989.345556][ T6054] usb 2-1: USB disconnect, device number 16 [ 991.069134][T15927] Bluetooth: hci3: command tx timeout [ 991.144580][ T5118] block nbd0: Receive control failed (result -32) [ 991.340775][T18902] nbd0: detected capacity change from 0 to 63 [ 992.071053][T18264] block nbd0: Dead connection, failed to find a fallback [ 992.071085][T18264] block nbd0: shutting down sockets [ 992.071200][T18264] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071311][T18264] Buffer I/O error on dev nbd0, logical block 0, async page read [ 992.071493][T18264] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071521][T18264] Buffer I/O error on dev nbd0, logical block 1, async page read [ 992.071576][T18264] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071602][T18264] Buffer I/O error on dev nbd0, logical block 2, async page read [ 992.071655][T18264] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071678][T18264] Buffer I/O error on dev nbd0, logical block 3, async page read [ 992.071746][T18264] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071769][T18264] Buffer I/O error on dev nbd0, logical block 0, async page read [ 992.071823][T18264] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071848][T18264] Buffer I/O error on dev nbd0, logical block 1, async page read [ 992.071911][T18264] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.071937][T18264] Buffer I/O error on dev nbd0, logical block 2, async page read [ 992.071992][T18264] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.072025][T18264] Buffer I/O error on dev nbd0, logical block 3, async page read [ 992.072090][T18264] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.072115][T18264] Buffer I/O error on dev nbd0, logical block 0, async page read [ 992.072209][T18264] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 992.072236][T18264] Buffer I/O error on dev nbd0, logical block 1, async page read [ 992.073323][T18264] ldm_validate_partition_table(): Disk read failed. [ 992.074149][T18264] Dev nbd0: unable to read RDB block 0 [ 992.075674][T18264] nbd0: unable to read partition table [ 992.381280][T18264] ldm_validate_partition_table(): Disk read failed. [ 992.381703][T18264] Dev nbd0: unable to read RDB block 0 [ 992.382227][T18264] nbd0: unable to read partition table [ 992.890314][T18919] ptrace attach of "./syz-executor exec"[17495] was attempted by "./syz-executor exec"[18919] [ 993.151194][ T5118] Bluetooth: hci3: command tx timeout [ 993.577494][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.106438][ T6056] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 994.202487][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 994.202530][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.256134][ T6056] usb 8-1: Using ep0 maxpacket: 16 [ 994.260008][ T6056] usb 8-1: config 252 has an invalid interface number: 15 but max is 0 [ 994.260037][ T6056] usb 8-1: config 252 has no interface number 0 [ 994.260086][ T6056] usb 8-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 994.263584][ T6056] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 994.263615][ T6056] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.263637][ T6056] usb 8-1: Product: syz [ 994.263651][ T6056] usb 8-1: Manufacturer: syz [ 994.263668][ T6056] usb 8-1: SerialNumber: syz [ 994.469924][ T6056] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 994.609612][T11222] usb 8-1: Failed to submit usb control message: -71 [ 994.609663][T11222] usb 8-1: unable to send the bmi data to the device: -71 [ 994.609682][T11222] usb 8-1: unable to get target info from device [ 994.609697][T11222] usb 8-1: could not get target info (-71) [ 994.610086][T11222] usb 8-1: could not probe fw (-71) [ 994.668536][ T6056] usb 8-1: USB disconnect, device number 2 [ 995.246652][ T5118] Bluetooth: hci3: command tx timeout [ 997.148536][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 997.148576][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 997.211578][T18947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4382'. [ 997.306183][ T5118] Bluetooth: hci3: command tx timeout [ 997.359805][T18947] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4382'. [ 997.381459][T11213] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 997.406649][T11213] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 998.055441][T18957] ptrace attach of "./syz-executor exec"[17495] was attempted by "./syz-executor exec"[18957] [ 998.985009][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 998.985061][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.931507][T11213] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.934185][T11213] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1000.576178][ T6054] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1000.723910][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1000.723961][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.770408][ T6054] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.770475][ T6054] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1000.770501][ T6054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.831861][ T6054] usb 8-1: config 0 descriptor?? [ 1000.849743][ T6054] pwc: Askey VC010 type 2 USB webcam detected. [ 1000.916744][ T49] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 1001.084299][ T49] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1001.087572][ T49] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1001.087601][ T49] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.087619][ T49] usb 6-1: Product: syz [ 1001.087633][ T49] usb 6-1: Manufacturer: syz [ 1001.087647][ T49] usb 6-1: SerialNumber: syz [ 1001.097028][ T49] usb 6-1: config 0 descriptor?? [ 1001.248333][ T6054] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1001.252455][ T6054] pwc: recv_control_msg error -32 req 02 val 2700 [ 1001.253369][ T6054] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1001.254055][T18889] chnl_net:caif_netlink_parms(): no params data found [ 1001.255394][ T6054] pwc: recv_control_msg error -32 req 04 val 1000 [ 1001.256787][ T6054] pwc: recv_control_msg error -32 req 04 val 1300 [ 1001.257803][ T6054] pwc: recv_control_msg error -32 req 04 val 1400 [ 1001.277425][ T6054] pwc: recv_control_msg error -32 req 02 val 2000 [ 1001.315638][ T6054] pwc: recv_control_msg error -32 req 02 val 2100 [ 1001.316934][ T6054] pwc: recv_control_msg error -32 req 04 val 1500 [ 1001.324177][ T6054] pwc: recv_control_msg error -32 req 02 val 2500 [ 1001.546227][ T6054] pwc: recv_control_msg error -71 req 02 val 2600 [ 1001.546767][ T6054] pwc: recv_control_msg error -71 req 02 val 2900 [ 1001.547654][ T6054] pwc: recv_control_msg error -71 req 02 val 2800 [ 1001.549399][ T6054] pwc: recv_control_msg error -71 req 04 val 1100 [ 1001.549919][ T6054] pwc: recv_control_msg error -71 req 04 val 1200 [ 1001.568710][T16692] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1001.617244][ T6054] pwc: Registered as video103. [ 1001.632158][ T6054] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input48 [ 1001.729543][T16692] usb 7-1: Using ep0 maxpacket: 32 [ 1001.732742][T16692] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 1001.732773][T16692] usb 7-1: config 0 has no interface number 0 [ 1001.750657][T16692] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1001.750696][T16692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1001.750714][T16692] usb 7-1: Product: syz [ 1001.750727][T16692] usb 7-1: Manufacturer: syz [ 1001.750740][T16692] usb 7-1: SerialNumber: syz [ 1001.779877][T16692] usb 7-1: config 0 descriptor?? [ 1001.797059][ T6054] usb 8-1: USB disconnect, device number 3 [ 1001.850290][T16692] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1002.252537][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 102 [ 1002.353695][T16692] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1002.457361][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1002.498662][T16692] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1002.526252][T16692] usb 7-1: USB disconnect, device number 3 [ 1002.554485][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4392'. [ 1002.568580][T16692] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1002.608819][T16692] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1002.609969][T16692] quatech2 7-1:0.51: device disconnected [ 1002.675153][T18999] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4392'. [ 1002.816382][T18889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.816539][T18889] bridge0: port 1(bridge_slave_0) entered disabled state [ 1002.816781][T18889] bridge_slave_0: entered allmulticast mode [ 1002.851498][T18889] bridge_slave_0: entered promiscuous mode [ 1002.854782][T18889] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.870203][T18889] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.870462][T18889] bridge_slave_1: entered allmulticast mode [ 1002.889766][T18889] bridge_slave_1: entered promiscuous mode [ 1002.931915][T19003] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4393'. [ 1002.960872][ T13] bridge_slave_1: left allmulticast mode [ 1002.960905][ T13] bridge_slave_1: left promiscuous mode [ 1002.961160][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1002.991467][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4393'. [ 1003.031988][ T13] bridge_slave_0: left allmulticast mode [ 1003.032020][ T13] bridge_slave_0: left promiscuous mode [ 1003.032319][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.795394][ T6054] usb 6-1: USB disconnect, device number 30 [ 1003.943204][T19019] binder: 19018:19019 ioctl c0306201 200000000680 returned -14 [ 1004.053391][T19021] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4400'. [ 1004.726274][ T6054] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1004.971894][ T6054] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.971960][ T6054] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1004.971987][ T6054] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1005.019192][ T6054] usb 6-1: config 0 descriptor?? [ 1005.026513][ T6054] pwc: Askey VC010 type 2 USB webcam detected. [ 1005.447392][ T6054] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1005.749301][ T6054] pwc: recv_control_msg error -32 req 02 val 2700 [ 1005.762526][ T6054] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1005.864531][ T6054] pwc: recv_control_msg error -32 req 04 val 1000 [ 1005.865898][ T6054] pwc: recv_control_msg error -32 req 04 val 1300 [ 1005.882742][ T6054] pwc: recv_control_msg error -32 req 04 val 1400 [ 1006.028824][ T6054] pwc: recv_control_msg error -32 req 02 val 2000 [ 1006.029976][ T6054] pwc: recv_control_msg error -32 req 02 val 2100 [ 1006.031091][ T6054] pwc: recv_control_msg error -32 req 04 val 1500 [ 1006.031976][ T6054] pwc: recv_control_msg error -32 req 02 val 2500 [ 1006.236746][ T6054] pwc: recv_control_msg error -71 req 02 val 2600 [ 1006.237294][ T6054] pwc: recv_control_msg error -71 req 02 val 2900 [ 1006.237789][ T6054] pwc: recv_control_msg error -71 req 02 val 2800 [ 1006.238518][ T6054] pwc: recv_control_msg error -71 req 04 val 1100 [ 1006.239021][ T6054] pwc: recv_control_msg error -71 req 04 val 1200 [ 1006.256359][ T6054] pwc: Registered as video103. [ 1006.259584][ T6054] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input49 [ 1006.369521][ T6054] usb 6-1: USB disconnect, device number 31 [ 1007.428802][T18822] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1007.611519][T18822] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.611550][T18822] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1007.613141][T18822] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1007.613171][T18822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1007.613193][T18822] usb 6-1: SerialNumber: syz [ 1007.905578][T18822] usb 6-1: 0:2 : does not exist [ 1007.989266][T18822] usb 6-1: USB disconnect, device number 32 [ 1008.083544][T18264] udevd[18264]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1008.105601][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.177102][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.232097][ T13] bond0 (unregistering): Released all slaves [ 1008.279429][T19003] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4393'. [ 1008.335944][T19004] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4393'. [ 1008.887023][T18889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1008.919514][T18889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.370773][T18889] team0: Port device team_slave_0 added [ 1010.770724][T18889] team0: Port device team_slave_1 added [ 1010.816211][ T49] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 1010.826276][ T6054] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1010.927264][T16692] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1010.955854][T18889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1010.955874][T18889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.955913][T18889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.964690][T18889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.964707][T18889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.964731][T18889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.978810][ T6054] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1010.978839][ T6054] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1010.980584][ T6054] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1010.980614][ T6054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1010.980635][ T6054] usb 8-1: SerialNumber: syz [ 1011.018189][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1011.018224][ T49] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1011.018244][ T49] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1011.018284][ T49] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1011.018305][ T49] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.038109][ T49] usb 6-1: config 0 descriptor?? [ 1011.106156][T16692] usb 7-1: Using ep0 maxpacket: 16 [ 1011.109457][T16692] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1011.109556][T16692] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1011.109579][T16692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.187657][T16692] usb 7-1: config 0 descriptor?? [ 1011.469128][ T6054] usb 8-1: 0:2 : does not exist [ 1011.509470][ T6054] usb 8-1: USB disconnect, device number 4 [ 1011.697474][ T49] usbhid 6-1:0.0: can't add hid device: -71 [ 1011.697612][ T49] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1011.707373][ T49] usb 6-1: USB disconnect, device number 33 [ 1011.760086][T18264] udevd[18264]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1011.986467][T16692] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 1012.548073][T16692] usb 7-1: USB disconnect, device number 4 [ 1014.021556][T18889] hsr_slave_0: entered promiscuous mode [ 1014.047505][T18889] hsr_slave_1: entered promiscuous mode [ 1014.048522][T18889] debugfs: 'hsr0' already exists in 'hsr' [ 1014.048550][T18889] Cannot create hsr debugfs directory [ 1016.017258][ T13] hsr_slave_0: left promiscuous mode [ 1016.069613][ T13] hsr_slave_1: left promiscuous mode [ 1016.070684][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.070711][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.150118][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.150151][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.508911][T16692] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1016.736485][T16692] usb 2-1: Using ep0 maxpacket: 16 [ 1016.830499][T16692] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1016.830532][T16692] usb 2-1: config 252 has no interface number 0 [ 1016.830578][T16692] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1016.930045][T16692] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1016.930110][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.930157][T16692] usb 2-1: Product: syz [ 1016.930221][T16692] usb 2-1: Manufacturer: syz [ 1016.930234][T16692] usb 2-1: SerialNumber: syz [ 1017.050798][T16692] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1017.058173][ T13] veth1_macvtap: left promiscuous mode [ 1017.058279][ T13] veth0_macvtap: left promiscuous mode [ 1017.058527][ T13] veth1_vlan: left promiscuous mode [ 1017.058698][ T13] veth0_vlan: left promiscuous mode [ 1017.635054][T16692] usb 2-1: USB disconnect, device number 17 [ 1017.646171][T18958] usb 2-1: Failed to submit usb control message: -71 [ 1017.646210][T18958] usb 2-1: unable to send the bmi data to the device: -71 [ 1017.646227][T18958] usb 2-1: unable to get target info from device [ 1017.646242][T18958] usb 2-1: could not get target info (-71) [ 1017.646513][T18958] usb 2-1: could not probe fw (-71) [ 1017.660218][ T6054] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 1017.882363][ T6054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1017.882424][ T6054] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1017.882447][ T6054] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1017.882498][ T6054] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1017.882522][ T6054] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1017.908352][ T6054] usb 8-1: config 0 descriptor?? [ 1018.580932][ T6054] usbhid 8-1:0.0: can't add hid device: -71 [ 1018.581090][ T6054] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1018.585940][ T6054] usb 8-1: USB disconnect, device number 5 [ 1020.196257][ T6054] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1020.389856][ T6054] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1020.389887][ T6054] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1020.391504][T19177] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 1020.391531][T19177] CIFS mount error: No usable UNC path provided in device string! [ 1020.391531][T19177] [ 1020.391985][T19177] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1020.392231][ T6054] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1020.392258][ T6054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1020.392277][ T6054] usb 2-1: SerialNumber: syz [ 1020.623851][ T6054] usb 2-1: 0:2 : does not exist [ 1020.790926][ T6054] usb 2-1: USB disconnect, device number 18 [ 1021.257857][T18264] udevd[18264]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1021.676263][T16692] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1021.898707][T16692] usb 8-1: Using ep0 maxpacket: 32 [ 1021.901084][T16692] usb 8-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1021.904296][T16692] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1021.904325][T16692] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1021.904346][T16692] usb 8-1: Product: syz [ 1021.904361][T16692] usb 8-1: Manufacturer: syz [ 1023.427866][T16692] hub 8-1:4.0: bad descriptor, ignoring hub [ 1023.427912][T16692] hub 8-1:4.0: probe with driver hub failed with error -5 [ 1023.432934][T16692] usbhid 8-1:4.0: couldn't find an input interrupt endpoint [ 1024.020056][T19214] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4455'. [ 1024.154098][T19216] CIFS mount error: No usable UNC path provided in device string! [ 1024.154098][T19216] [ 1024.154124][T19216] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1024.206208][T16692] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 1024.460607][T16692] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1024.460640][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1024.460657][T16692] usb 2-1: Product: syz [ 1024.460666][T16692] usb 2-1: Manufacturer: syz [ 1024.460674][T16692] usb 2-1: SerialNumber: syz [ 1024.465978][T16692] usb 2-1: config 0 descriptor?? [ 1024.633190][T19220] binder: 19217:19220 ioctl c0306201 0 returned -14 [ 1025.427145][T16692] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1025.630543][T16692] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1027.003335][ T10] usb 2-1: USB disconnect, device number 19 [ 1028.983042][T19243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4466'. [ 1029.575200][T19251] binder: 19246:19251 ioctl c0306201 0 returned -14 [ 1031.176181][ T6054] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1032.124344][ T6054] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1032.124380][ T6054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1032.124401][ T6054] usb 2-1: Product: syz [ 1032.124416][ T6054] usb 2-1: Manufacturer: syz [ 1032.124431][ T6054] usb 2-1: SerialNumber: syz [ 1032.213378][ T6054] usb 2-1: config 0 descriptor?? [ 1032.376854][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1032.433654][ T6054] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1032.637310][ T6054] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1032.837095][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1033.921612][ T6054] usb 2-1: USB disconnect, device number 20 [ 1034.087430][T19278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4477'. [ 1034.590082][T19282] binder: 19279:19282 ioctl c0306201 0 returned -14 [ 1035.902651][T15927] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1035.932670][T15927] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1035.934470][T15927] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1035.950767][T15927] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1035.952219][T15927] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1036.397697][T15927] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1036.417762][T15927] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1036.420384][T15927] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1036.444655][T15927] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1036.445602][T15927] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1037.267628][T19299] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1037.320176][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1037.391044][T19299] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1037.435040][T19300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1037.530562][T11222] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1037.568994][T11222] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1037.629993][T11222] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1037.714390][T11222] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1038.026111][ T5118] Bluetooth: hci4: command tx timeout [ 1038.666302][ T5118] Bluetooth: hci6: command tx timeout [ 1039.766920][T16692] usb 8-1: USB disconnect, device number 6 [ 1040.110865][T15927] Bluetooth: hci4: command tx timeout [ 1040.749068][T15927] Bluetooth: hci6: command tx timeout [ 1041.466172][T15927] Bluetooth: hci0: command 0x0406 tx timeout [ 1042.188015][ T5118] Bluetooth: hci4: command tx timeout [ 1042.782233][ T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1042.826947][ T5118] Bluetooth: hci6: command tx timeout [ 1043.075388][T19294] chnl_net:caif_netlink_parms(): no params data found [ 1043.641598][ T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1043.847426][T19289] chnl_net:caif_netlink_parms(): no params data found [ 1044.089562][ T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1044.266385][ T5118] Bluetooth: hci4: command tx timeout [ 1044.908365][ T5118] Bluetooth: hci6: command tx timeout [ 1045.405435][ T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1045.644448][T19294] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.644603][T19294] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.644860][T19294] bridge_slave_0: entered allmulticast mode [ 1045.671792][T19294] bridge_slave_0: entered promiscuous mode [ 1045.709659][T19294] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.709815][T19294] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.710051][T19294] bridge_slave_1: entered allmulticast mode [ 1045.715050][T19294] bridge_slave_1: entered promiscuous mode [ 1045.922316][T19294] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.952317][T19289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.952445][T19289] bridge0: port 1(bridge_slave_0) entered disabled state [ 1045.952697][T19289] bridge_slave_0: entered allmulticast mode [ 1045.970146][T19289] bridge_slave_0: entered promiscuous mode [ 1046.007703][T19294] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.008928][T19289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.009077][T19289] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.009301][T19289] bridge_slave_1: entered allmulticast mode [ 1046.012676][T19289] bridge_slave_1: entered promiscuous mode [ 1046.023095][T18889] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1046.318316][T18889] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1046.708761][T18889] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1046.759016][T19294] team0: Port device team_slave_0 added [ 1046.762772][T19289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.766554][ T6056] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 1046.769181][T18889] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1046.818685][T19294] team0: Port device team_slave_1 added [ 1046.836251][T19289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.951333][ T6056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1046.951371][ T6056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.951395][ T6056] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1046.951440][ T6056] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1046.951465][ T6056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.960454][ T6056] usb 2-1: config 0 descriptor?? [ 1047.424700][T18889] kthread_run failed with err -4 [ 1047.447369][T19294] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.447390][T19294] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.447415][T19294] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.537188][T19289] team0: Port device team_slave_0 added [ 1047.645632][ T6056] usbhid 2-1:0.0: can't add hid device: -71 [ 1047.645768][ T6056] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1047.684931][ T6056] usb 2-1: USB disconnect, device number 21 [ 1047.751949][T15927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1047.775051][T19294] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.775071][T19294] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.775099][T19294] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.798941][T19289] team0: Port device team_slave_1 added [ 1047.823051][T15927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1047.826993][T15927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1047.861865][T15927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1047.870272][T15927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1048.471509][T19289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.472291][T19289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.472645][T19289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1049.531295][T19289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1049.531314][T19289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1049.531345][T19289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1049.635297][T19294] hsr_slave_0: entered promiscuous mode [ 1049.643335][T19294] hsr_slave_1: entered promiscuous mode [ 1049.644434][T19294] debugfs: 'hsr0' already exists in 'hsr' [ 1049.644459][T19294] Cannot create hsr debugfs directory [ 1049.942438][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4517'. [ 1049.946596][ T5118] Bluetooth: hci1: command tx timeout [ 1050.170063][T19462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4517'. [ 1050.288691][ T13] team0: left allmulticast mode [ 1050.288718][ T13] team_slave_0: left allmulticast mode [ 1050.288739][ T13] team_slave_1: left allmulticast mode [ 1050.288765][ T13] team0: left promiscuous mode [ 1050.288778][ T13] team_slave_0: left promiscuous mode [ 1050.289011][ T13] team_slave_1: left promiscuous mode [ 1050.289823][ T13] bridge0: port 3(team0) entered disabled state [ 1050.408459][ T13] bridge_slave_1: left allmulticast mode [ 1050.408493][ T13] bridge_slave_1: left promiscuous mode [ 1050.408818][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.497763][ T13] bridge_slave_0: left allmulticast mode [ 1050.497796][ T13] bridge_slave_0: left promiscuous mode [ 1050.498075][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.616160][T16692] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 1050.779783][T16692] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1050.779818][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.779838][T16692] usb 2-1: Product: syz [ 1050.779853][T16692] usb 2-1: Manufacturer: syz [ 1050.779868][T16692] usb 2-1: SerialNumber: syz [ 1050.824056][T16692] usb 2-1: config 0 descriptor?? [ 1051.026448][ T6054] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1051.043768][T16692] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1051.191796][ T6054] usb 7-1: device descriptor read/64, error -71 [ 1051.436705][ T6054] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 1051.566195][ T6054] usb 7-1: device descriptor read/64, error -71 [ 1051.701765][ T6054] usb usb7-port1: attempt power cycle [ 1051.703894][T16692] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1052.026623][ T5118] Bluetooth: hci1: command tx timeout [ 1052.056191][ T6054] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1052.085513][ T6054] usb 7-1: device descriptor read/8, error -71 [ 1052.316332][ T6054] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 1052.359456][ T6054] usb 7-1: device descriptor read/8, error -71 [ 1052.484744][ T6054] usb usb7-port1: unable to enumerate USB device [ 1052.647197][ T13] team0: Port device bridge1 removed [ 1052.831967][ T13] team0: Port device bridge2 removed [ 1053.337606][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1053.395395][T16692] usb 2-1: USB disconnect, device number 22 [ 1053.406569][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1053.443818][ T13] bond0 (unregistering): Released all slaves [ 1053.463192][ T13] bond1 (unregistering): Released all slaves [ 1054.621242][ T5118] Bluetooth: hci1: command tx timeout [ 1054.752360][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.970105][T16692] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 1055.168309][T16692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1055.168359][T16692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1055.168418][T16692] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1055.168538][T16692] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1055.168607][T16692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.351537][T16692] usb 2-1: config 0 descriptor?? [ 1056.367530][T16692] usbhid 2-1:0.0: can't add hid device: -71 [ 1056.367668][T16692] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1056.415209][T19493] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1056.429373][T16692] usb 2-1: USB disconnect, device number 23 [ 1056.479552][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1056.519216][ T13] bond2 (unregistering): Released all slaves [ 1056.687945][ T5118] Bluetooth: hci1: command tx timeout [ 1057.753478][ T13] bond3 (unregistering): Released all slaves [ 1059.969375][ T13] bond4 (unregistering): Released all slaves [ 1060.939543][ T13] bond5 (unregistering): Released all slaves [ 1061.027954][T19493] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1061.051906][T19494] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4525'. [ 1061.071322][T19289] hsr_slave_0: entered promiscuous mode [ 1061.072865][T19289] hsr_slave_1: entered promiscuous mode [ 1061.073878][T19289] debugfs: 'hsr0' already exists in 'hsr' [ 1061.073917][T19289] Cannot create hsr debugfs directory [ 1061.132868][T11213] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.170539][T11213] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.231284][T11213] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.276650][T11213] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1061.666881][T16692] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1061.976123][T16692] usb 2-1: Using ep0 maxpacket: 32 [ 1061.978485][T16692] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1061.978536][T16692] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1061.978560][T16692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1062.039845][T16692] usb 2-1: config 0 descriptor?? [ 1062.092449][T16692] hub 2-1:0.0: USB hub found [ 1062.294945][T16692] hub 2-1:0.0: 1 port detected [ 1063.280982][ T6054] usb 2-1: USB disconnect, device number 24 [ 1064.016210][T16692] usb 7-1: new low-speed USB device number 9 using dummy_hcd [ 1064.169370][T16692] usb 7-1: No LPM exit latency info found, disabling LPM. [ 1064.170680][T16692] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1064.170704][T16692] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1064.170725][T16692] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.177243][T16692] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1064.177275][T16692] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.177296][T16692] usb 7-1: Product: 愠벥ꬖ媍칦ᚋདྷᚄꥫ㣤谍쏜侹사祥븪뷜랩컱픆泌툾喙뾈鯅䰙⺠穛㋇텾쳚൯듩᪘协 [ 1064.177316][T16692] usb 7-1: Manufacturer: 뉑嶭᷽虴렰裆瀀Ҥ漏᪬鲛䓃쟙樯䛇죃モⷰ퇐僀෇榱㘌❐韐쫫ꌣ袁鼘䋾砚珛嫰쇆囦癩贋娤詈厛巐᭛Ἠᷫﱰ뺲胍鱎䬩᤻拹⳯涹⯦郱些 [ 1064.177342][T16692] usb 7-1: SerialNumber: 껩㓣稜尚臭᜹᷿ゟ鿯脚샆밀B㭆炼襭힦ɟ酃ᤘ傥♡ﺁ [ 1064.306430][ T13] hsr_slave_0: left promiscuous mode [ 1064.346196][ T13] hsr_slave_1: left promiscuous mode [ 1064.347298][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.397085][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.568279][T16692] usb 7-1: 0:2 : does not exist [ 1064.703200][T16692] usb 7-1: USB disconnect, device number 9 [ 1064.877272][T19519] udevd[19519]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.046388][ T6054] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1065.214660][ T6054] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.214731][ T6054] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1065.214757][ T6054] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.224245][ T6054] usb 2-1: config 0 descriptor?? [ 1065.240506][ T6054] pwc: Askey VC010 type 2 USB webcam detected. [ 1065.653508][ T6054] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1065.654184][ T6054] pwc: recv_control_msg error -32 req 02 val 2700 [ 1065.654763][ T6054] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1065.655635][ T6054] pwc: recv_control_msg error -32 req 04 val 1000 [ 1065.667772][ T6054] pwc: recv_control_msg error -32 req 04 val 1300 [ 1065.672579][ T6054] pwc: recv_control_msg error -32 req 04 val 1400 [ 1065.674068][ T6054] pwc: recv_control_msg error -32 req 02 val 2000 [ 1065.674956][ T6054] pwc: recv_control_msg error -32 req 02 val 2100 [ 1065.675784][ T6054] pwc: recv_control_msg error -32 req 04 val 1500 [ 1065.677406][ T6054] pwc: recv_control_msg error -32 req 02 val 2500 [ 1065.882371][ T6054] pwc: recv_control_msg error -71 req 02 val 2600 [ 1065.884721][ T6054] pwc: recv_control_msg error -71 req 02 val 2900 [ 1065.885080][ T6054] pwc: recv_control_msg error -71 req 02 val 2800 [ 1065.885540][ T6054] pwc: recv_control_msg error -71 req 04 val 1100 [ 1065.885897][ T6054] pwc: recv_control_msg error -71 req 04 val 1200 [ 1065.891130][ T6054] pwc: Registered as video103. [ 1065.894384][ T6054] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 1065.905028][ T6054] usb 2-1: USB disconnect, device number 25 [ 1066.237623][T19569] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4539'. [ 1066.320284][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4539'. [ 1070.167032][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1070.551845][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1072.186231][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 1074.193569][T19569] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4539'. [ 1074.194355][T19570] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4539'. [ 1074.366636][T19294] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1074.519777][T19294] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1074.595377][T19438] chnl_net:caif_netlink_parms(): no params data found [ 1074.635256][T19294] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1074.992061][T19294] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1075.156237][T18888] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 1075.331855][T18888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1075.331894][T18888] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1075.331918][T18888] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1075.331965][T18888] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1075.331989][T18888] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.454558][T18888] usb 7-1: config 0 descriptor?? [ 1076.811671][T19438] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.811817][T19438] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.812081][T19438] bridge_slave_0: entered allmulticast mode [ 1076.815091][T19438] bridge_slave_0: entered promiscuous mode [ 1076.860550][T19289] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1077.090485][T18888] usbhid 7-1:0.0: can't add hid device: -71 [ 1077.093226][T18888] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1077.112697][T18888] usb 7-1: USB disconnect, device number 10 [ 1077.275490][T19438] bridge0: port 2(bridge_slave_1) entered blocking state [ 1077.275798][T19438] bridge0: port 2(bridge_slave_1) entered disabled state [ 1077.292169][T19438] bridge_slave_1: entered allmulticast mode [ 1077.295080][T19438] bridge_slave_1: entered promiscuous mode [ 1077.318973][T19289] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1077.425257][T19289] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1077.485688][T19289] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1077.496193][T18888] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1077.532595][T19438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1077.554543][T19438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1077.565639][ T13] IPVS: stop unused estimator thread 0... [ 1077.672826][T18888] usb 2-1: Using ep0 maxpacket: 16 [ 1077.681491][T18888] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1077.681518][T18888] usb 2-1: config 0 has no interfaces? [ 1077.684924][T18888] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1077.684951][T18888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.684969][T18888] usb 2-1: Product: syz [ 1077.684982][T18888] usb 2-1: Manufacturer: syz [ 1077.684995][T18888] usb 2-1: SerialNumber: syz [ 1077.694706][T18888] usb 2-1: config 0 descriptor?? [ 1077.807064][T19438] team0: Port device team_slave_0 added [ 1077.845083][T19438] team0: Port device team_slave_1 added [ 1077.857832][T19680] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1077.893253][T19680] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1077.911294][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1077.915499][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4560'. [ 1077.940428][T18888] usb 2-1: USB disconnect, device number 26 [ 1078.171863][T19438] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1078.171882][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.171908][T19438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1078.180165][T19438] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1078.180183][T19438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1078.180208][T19438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1081.296966][T19728] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4573'. [ 1081.744742][T19438] hsr_slave_0: entered promiscuous mode [ 1081.752305][T19438] hsr_slave_1: entered promiscuous mode [ 1081.753400][T19438] debugfs: 'hsr0' already exists in 'hsr' [ 1081.753427][T19438] Cannot create hsr debugfs directory [ 1084.156694][T19294] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.626280][T16692] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 1084.689914][T19294] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.718252][T19289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.788815][T16692] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1084.788847][T16692] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1084.795785][T16692] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1084.795821][T16692] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1084.795843][T16692] usb 7-1: SerialNumber: syz [ 1085.096252][ T13] bridge_slave_1: left allmulticast mode [ 1085.096281][ T13] bridge_slave_1: left promiscuous mode [ 1085.096465][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.125537][T16692] usb 7-1: 0:2 : does not exist [ 1085.159672][ T13] bridge_slave_0: left allmulticast mode [ 1085.159704][ T13] bridge_slave_0: left promiscuous mode [ 1085.159990][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.192362][T16692] usb 7-1: USB disconnect, device number 11 [ 1085.201081][T19775] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4581'. [ 1085.254585][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4581'. [ 1085.271682][T19660] udevd[19660]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1085.611412][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1085.747130][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1085.979738][ T13] bond0 (unregistering): Released all slaves [ 1086.002149][T19506] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.002236][T19506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.003093][T19775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4581'. [ 1086.003176][T19776] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4581'. [ 1086.233753][T18958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.233893][T18958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.249958][T19289] 8021q: adding VLAN 0 to HW filter on device team0 [ 1086.311898][T18958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1086.312058][T18958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1086.358154][T11222] bridge0: port 2(bridge_slave_1) entered blocking state [ 1086.358264][T11222] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1086.772427][ T13] hsr_slave_0: left promiscuous mode [ 1086.806425][ T13] hsr_slave_1: left promiscuous mode [ 1086.807222][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1086.836803][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1087.067284][ T31] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 1087.248567][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1087.250164][ T31] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1087.250201][ T31] usb 7-1: can't read configurations, error -71 [ 1087.921218][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1088.110313][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1088.968071][T19802] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1089.040986][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1089.591263][T19802] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1089.591920][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4591'. [ 1089.648085][ T49] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 1089.828553][ T49] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1089.829652][ T49] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1089.829691][ T49] usb 2-1: can't read configurations, error -71 [ 1090.087829][T19819] lo speed is unknown, defaulting to 1000 [ 1090.091026][T19819] lo speed is unknown, defaulting to 1000 [ 1090.168240][T19819] lo speed is unknown, defaulting to 1000 [ 1090.472432][T19819] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 1090.856153][T19819] lo speed is unknown, defaulting to 1000 [ 1090.876454][T19819] lo speed is unknown, defaulting to 1000 [ 1090.928574][T19819] lo speed is unknown, defaulting to 1000 [ 1090.957905][T19819] lo speed is unknown, defaulting to 1000 [ 1090.977739][T19819] lo speed is unknown, defaulting to 1000 [ 1091.077110][T19819] lo speed is unknown, defaulting to 1000 [ 1091.264370][T19294] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1091.336062][T19438] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1091.388496][T19438] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1091.444769][T19438] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1092.144652][T19289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.187240][T19438] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1092.454913][T19854] binder: BINDER_SET_CONTEXT_MGR already set [ 1092.454931][T19854] binder: 19853:19854 ioctl 4018620d 2000000002c0 returned -16 [ 1092.923676][T19438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1093.068406][T19438] 8021q: adding VLAN 0 to HW filter on device team0 [ 1093.143739][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.154632][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1093.219732][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.219822][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1093.250361][T19294] veth0_vlan: entered promiscuous mode [ 1093.301417][T19294] veth1_vlan: entered promiscuous mode [ 1093.494415][T19870] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1093.507168][T19870] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1093.512624][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1093.540301][T19870] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4603'. [ 1093.713383][T19289] veth0_vlan: entered promiscuous mode [ 1093.766853][T19294] veth0_macvtap: entered promiscuous mode [ 1093.846985][T19294] veth1_macvtap: entered promiscuous mode [ 1093.985652][T19289] veth1_vlan: entered promiscuous mode [ 1094.040932][T19294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.098265][T19294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1094.207229][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.212799][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.220987][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.230974][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1094.429171][T18888] usb 7-1: new low-speed USB device number 14 using dummy_hcd [ 1094.478953][T19289] veth0_macvtap: entered promiscuous mode [ 1094.559562][T19289] veth1_macvtap: entered promiscuous mode [ 1094.745034][T18888] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1094.835109][T18888] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 1094.835403][T18888] usb 7-1: can't read configurations, error -71 [ 1095.449577][T19289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1095.475797][T19289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.504041][T19438] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1095.528396][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.528414][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1095.587028][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.592484][T15819] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.604717][T15819] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.641693][T15819] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.969259][ T3607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1095.969284][ T3607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.190708][T19918] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1096.207005][T19918] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1096.237734][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1096.255678][T19918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4611'. [ 1096.297024][T19920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4610'. [ 1096.590794][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1096.601006][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1096.605202][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1096.613950][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1096.615307][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1097.086136][ T6056] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1097.089998][T19926] lo speed is unknown, defaulting to 1000 [ 1097.263355][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1097.285701][ T6056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1097.285739][ T6056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1097.285761][ T6056] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1097.285803][ T6056] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1097.285825][ T6056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.343664][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1097.353969][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1097.365022][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1097.374731][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1097.377253][ T6056] usb 2-1: config 0 descriptor?? [ 1098.099071][ T6056] usbhid 2-1:0.0: can't add hid device: -71 [ 1098.099223][ T6056] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1098.177274][ T6056] usb 2-1: USB disconnect, device number 29 [ 1098.750459][T15927] Bluetooth: hci3: command tx timeout [ 1099.328165][T19935] lo speed is unknown, defaulting to 1000 [ 1099.466221][T15927] Bluetooth: hci5: command tx timeout [ 1099.558281][T11215] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.635725][T19438] veth0_vlan: entered promiscuous mode [ 1099.666239][T15183] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1099.853503][T15183] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1099.853535][T15183] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1099.854792][T15183] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1099.854810][T15183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1099.854822][T15183] usb 2-1: SerialNumber: syz [ 1099.924222][T11215] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.108401][T19968] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 1100.162431][T15183] usb 2-1: 0:2 : does not exist [ 1100.308675][T15183] usb 2-1: USB disconnect, device number 30 [ 1100.371803][T19660] udevd[19660]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1100.504200][T11215] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.537699][ T10] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1100.558205][T19438] veth1_vlan: entered promiscuous mode [ 1100.691118][ T10] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1100.691153][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.691175][ T10] usb 7-1: Product: syz [ 1100.691191][ T10] usb 7-1: Manufacturer: syz [ 1100.691205][ T10] usb 7-1: SerialNumber: syz [ 1100.699575][ T10] usb 7-1: config 0 descriptor?? [ 1100.742483][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1100.838647][T15927] Bluetooth: hci3: command tx timeout [ 1100.943582][T11215] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.049239][T19926] chnl_net:caif_netlink_parms(): no params data found [ 1101.511652][T19935] chnl_net:caif_netlink_parms(): no params data found [ 1101.549048][T19926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1101.549245][T19926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1101.549490][T19926] bridge_slave_0: entered allmulticast mode [ 1101.552292][T19926] bridge_slave_0: entered promiscuous mode [ 1101.560790][T15927] Bluetooth: hci5: command tx timeout [ 1101.701087][T19926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1101.701716][T19926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1101.701998][T19926] bridge_slave_1: entered allmulticast mode [ 1101.705705][T19926] bridge_slave_1: entered promiscuous mode [ 1101.755746][ T10] gspca_sunplus: reg_r err -32 [ 1101.755834][ T10] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 1101.932516][T19438] veth0_macvtap: entered promiscuous mode [ 1101.949356][T19926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1101.988566][T19926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.089016][T19438] veth1_macvtap: entered promiscuous mode [ 1102.178981][T19926] team0: Port device team_slave_0 added [ 1102.180362][T19935] bridge0: port 1(bridge_slave_0) entered blocking state [ 1102.180490][T19935] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.180626][T19935] bridge_slave_0: entered allmulticast mode [ 1102.182704][T19935] bridge_slave_0: entered promiscuous mode [ 1102.231845][T19926] team0: Port device team_slave_1 added [ 1102.232403][T19935] bridge0: port 2(bridge_slave_1) entered blocking state [ 1102.232539][T19935] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.232766][T19935] bridge_slave_1: entered allmulticast mode [ 1102.237944][T19935] bridge_slave_1: entered promiscuous mode [ 1102.247088][T11215] bridge_slave_1: left allmulticast mode [ 1102.247124][T11215] bridge_slave_1: left promiscuous mode [ 1102.247555][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.296238][T16692] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1102.357278][T11215] bridge_slave_0: left allmulticast mode [ 1102.357304][T11215] bridge_slave_0: left promiscuous mode [ 1102.357481][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.456119][T16692] usb 2-1: Using ep0 maxpacket: 32 [ 1102.458480][T16692] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1102.458509][T16692] usb 2-1: config 0 has no interface number 0 [ 1102.461134][T16692] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1102.461166][T16692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.461186][T16692] usb 2-1: Product: syz [ 1102.461200][T16692] usb 2-1: Manufacturer: syz [ 1102.461212][T16692] usb 2-1: SerialNumber: syz [ 1102.465054][T16692] usb 2-1: config 0 descriptor?? [ 1102.528739][T16692] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1102.697701][T16692] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1102.753699][T16692] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1102.916152][T15927] Bluetooth: hci3: command tx timeout [ 1103.410188][ T31] usb 7-1: USB disconnect, device number 16 [ 1103.653154][T15927] Bluetooth: hci5: command tx timeout [ 1104.986356][T15927] Bluetooth: hci3: command tx timeout [ 1105.029620][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1105.030348][ T31] usb 2-1: USB disconnect, device number 31 [ 1105.078100][ T31] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1105.103783][ T31] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1105.105032][ T31] quatech2 2-1:0.51: device disconnected [ 1105.586309][ T31] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1105.627814][T11215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1105.686908][T11215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1105.706219][T15927] Bluetooth: hci5: command tx timeout [ 1105.729786][T11215] bond0 (unregistering): Released all slaves [ 1105.752023][ T31] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1105.752047][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.752059][ T31] usb 2-1: Product: syz [ 1105.752068][ T31] usb 2-1: Manufacturer: syz [ 1105.752076][ T31] usb 2-1: SerialNumber: syz [ 1105.763689][ T31] usb 2-1: config 0 descriptor?? [ 1105.792052][ T31] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1106.124181][T20020] netlink: 48 bytes leftover after parsing attributes in process `syz.6.4643'. [ 1106.177257][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4643'. [ 1106.247028][T20020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4643'. [ 1106.252721][T19926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1106.252734][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.252937][T19926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1106.255436][T20021] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4643'. [ 1106.257699][T19935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.366626][T19926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1106.366639][T19926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1106.366656][T19926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1106.377527][T19935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.589227][T11215] hsr_slave_0: left promiscuous mode [ 1106.626253][T11215] hsr_slave_1: left promiscuous mode [ 1106.627319][T11215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1106.627347][T11215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1106.687812][T11215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1106.687843][T11215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1106.784299][T11215] veth1_macvtap: left promiscuous mode [ 1106.784422][T11215] veth0_macvtap: left promiscuous mode [ 1106.784707][T11215] veth1_vlan: left promiscuous mode [ 1106.784913][T11215] veth0_vlan: left promiscuous mode [ 1106.831857][ T31] gspca_sunplus: reg_r err -32 [ 1106.831953][ T31] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 1106.866128][ T10] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1107.075391][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1107.075433][ T10] usb 7-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1107.075448][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1107.111046][ T10] usb 7-1: config 0 descriptor?? [ 1107.525417][ C0] raw-gadget.1 gadget.6: ignoring, device is not running [ 1107.539571][ T10] usbhid 7-1:0.0: can't add hid device: -71 [ 1107.539660][ T10] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1107.543077][ T10] usb 7-1: USB disconnect, device number 17 [ 1107.908098][ T5118] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1107.942260][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1107.944477][ T5118] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1107.963458][ T5118] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1107.975823][ T5118] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1108.719778][T18888] usb 2-1: USB disconnect, device number 32 [ 1109.406275][ T31] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1109.556134][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 1109.558858][ T31] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 1109.558888][ T31] usb 2-1: config 252 has no interface number 0 [ 1109.558938][ T31] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1109.597418][ T31] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1109.597450][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.597469][ T31] usb 2-1: Product: syz [ 1109.597482][ T31] usb 2-1: Manufacturer: syz [ 1109.597495][ T31] usb 2-1: SerialNumber: syz [ 1109.665638][ T31] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1109.873464][ T57] usb 2-1: Failed to submit usb control message: -71 [ 1109.873505][ T57] usb 2-1: unable to send the bmi data to the device: -71 [ 1109.873524][ T57] usb 2-1: unable to get target info from device [ 1109.873539][ T57] usb 2-1: could not get target info (-71) [ 1109.873557][ T57] usb 2-1: could not probe fw (-71) [ 1109.873966][T18888] usb 2-1: USB disconnect, device number 33 [ 1110.173467][ T5118] Bluetooth: hci4: command tx timeout [ 1110.503960][T18888] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1111.433264][T18888] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1111.433300][T18888] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.433320][T18888] usb 7-1: Product: syz [ 1111.433336][T18888] usb 7-1: Manufacturer: syz [ 1111.433349][T18888] usb 7-1: SerialNumber: syz [ 1111.438833][T18888] usb 7-1: config 0 descriptor?? [ 1111.443467][T18888] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1111.742230][T20062] random: crng reseeded on system resumption [ 1112.186180][ T5118] Bluetooth: hci4: command tx timeout [ 1112.187488][T11215] team0 (unregistering): Port device team_slave_1 removed [ 1112.487520][T11215] team0 (unregistering): Port device team_slave_0 removed [ 1112.600901][T18888] gspca_sunplus: reg_r err -32 [ 1112.601012][T18888] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 1113.150073][T20069] 9p: Bad value for 'wfdno' [ 1113.238240][T20071] binder: 20070:20071 ioctl 4018620d 0 returned -22 [ 1113.670375][T18888] usb 7-1: USB disconnect, device number 18 [ 1113.747782][T15183] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1114.280552][ T5118] Bluetooth: hci4: command tx timeout [ 1114.509644][T15183] usb 2-1: Using ep0 maxpacket: 16 [ 1114.549984][T15183] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1114.550014][T15183] usb 2-1: config 0 has no interface number 0 [ 1114.572402][T15183] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1114.572433][T15183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1114.572448][T15183] usb 2-1: Product: syz [ 1114.572457][T15183] usb 2-1: Manufacturer: syz [ 1114.572465][T15183] usb 2-1: SerialNumber: syz [ 1114.584743][T15183] usb 2-1: config 0 descriptor?? [ 1116.200464][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.351375][ T5118] Bluetooth: hci4: command tx timeout [ 1116.450278][T15183] uvcvideo 2-1:0.105: probe with driver uvcvideo failed with error -22 [ 1116.503528][T15183] usb 2-1: USB disconnect, device number 34 [ 1116.890840][T20093] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 1117.058054][T19935] team0: Port device team_slave_0 added [ 1117.077216][T20095] binder: 20094:20095 ioctl 4018620d 0 returned -22 [ 1117.126696][T19935] team0: Port device team_slave_1 added [ 1117.241721][T19926] hsr_slave_0: entered promiscuous mode [ 1117.243204][T19926] hsr_slave_1: entered promiscuous mode [ 1117.244232][T19926] debugfs: 'hsr0' already exists in 'hsr' [ 1117.244259][T19926] Cannot create hsr debugfs directory [ 1117.354013][T19935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1117.354034][T19935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.354063][T19935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.487049][T19935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.487067][T19935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.487097][T19935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.503693][T20030] lo speed is unknown, defaulting to 1000 [ 1117.815301][T15183] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1117.905104][T19935] hsr_slave_0: entered promiscuous mode [ 1117.913562][T19935] hsr_slave_1: entered promiscuous mode [ 1117.914534][T19935] debugfs: 'hsr0' already exists in 'hsr' [ 1117.914559][T19935] Cannot create hsr debugfs directory [ 1117.986392][T15183] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 1117.986421][T15183] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.986433][T15183] usb 7-1: Product: syz [ 1117.986441][T15183] usb 7-1: Manufacturer: syz [ 1117.986449][T15183] usb 7-1: SerialNumber: syz [ 1117.998762][T15183] usb 7-1: config 0 descriptor?? [ 1118.025690][T15183] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 1119.065908][T15183] gspca_sunplus: reg_r err -32 [ 1119.066602][T15183] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 1120.573631][T18888] usb 7-1: USB disconnect, device number 19 [ 1122.154015][ T49] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1122.876821][ T49] usb 7-1: Using ep0 maxpacket: 16 [ 1122.892745][ T49] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1122.892778][ T49] usb 7-1: config 0 has no interface number 0 [ 1122.932005][ T49] usb 7-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 1122.932042][ T49] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.932063][ T49] usb 7-1: Product: syz [ 1122.932079][ T49] usb 7-1: Manufacturer: syz [ 1122.932094][ T49] usb 7-1: SerialNumber: syz [ 1122.985849][ T49] usb 7-1: config 0 descriptor?? [ 1123.321929][T20115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1123.321955][T20115] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1123.321971][T20115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1123.323574][T20115] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4676'. [ 1124.171627][T20030] chnl_net:caif_netlink_parms(): no params data found [ 1124.347157][T15183] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1124.546686][T15183] usb 2-1: Using ep0 maxpacket: 8 [ 1124.556329][T15183] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1124.556486][T15183] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1124.556512][T15183] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1124.556537][T15183] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1124.556621][T15183] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1124.556669][T15183] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1124.556692][T15183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.581213][ T49] uvcvideo 7-1:0.105: probe with driver uvcvideo failed with error -22 [ 1124.658030][ T49] usb 7-1: USB disconnect, device number 20 [ 1124.821687][T15183] usb 2-1: usb_control_msg returned -32 [ 1124.821745][T15183] usbtmc 2-1:16.0: can't read capabilities [ 1125.711422][T19935] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.176601][T19935] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.205464][T20030] bridge0: port 1(bridge_slave_0) entered blocking state [ 1126.205673][T20030] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.227631][T20030] bridge_slave_0: entered allmulticast mode [ 1126.229365][T20030] bridge_slave_0: entered promiscuous mode [ 1126.256973][T20030] bridge0: port 2(bridge_slave_1) entered blocking state [ 1126.257122][T20030] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.257311][T20030] bridge_slave_1: entered allmulticast mode [ 1126.262199][T20030] bridge_slave_1: entered promiscuous mode [ 1126.560080][T19935] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1126.705258][T20030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1126.903667][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1126.903685][T20140] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1126.903696][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1126.903721][T20140] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4684'. [ 1126.979780][T19935] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1127.040192][T15183] usb 2-1: USB disconnect, device number 35 [ 1127.084210][T20030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1127.218917][T20030] team0: Port device team_slave_0 added [ 1127.223475][T20030] team0: Port device team_slave_1 added [ 1127.269108][T20030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1127.269128][T20030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.269158][T20030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1127.271705][T20030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1127.271721][T20030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1127.271749][T20030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1127.429490][ T49] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1127.484237][T11215] bridge_slave_1: left allmulticast mode [ 1127.484272][T11215] bridge_slave_1: left promiscuous mode [ 1127.484533][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.486210][T15183] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1127.565708][T11215] bridge_slave_0: left allmulticast mode [ 1127.565732][T11215] bridge_slave_0: left promiscuous mode [ 1127.565924][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.579411][ T49] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.579469][ T49] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1127.579491][ T49] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.584881][ T49] usb 7-1: config 0 descriptor?? [ 1127.604164][ T49] pwc: Askey VC010 type 2 USB webcam detected. [ 1127.636306][T15183] usb 2-1: Using ep0 maxpacket: 16 [ 1127.639015][T15183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.639044][T15183] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1127.641534][T15183] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1127.641595][T15183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.641612][T15183] usb 2-1: Product: syz [ 1127.641620][T15183] usb 2-1: Manufacturer: syz [ 1127.641629][T15183] usb 2-1: SerialNumber: syz [ 1127.661382][T15183] usb 2-1: config 0 descriptor?? [ 1127.730716][T11215] bridge_slave_1: left allmulticast mode [ 1127.730749][T11215] bridge_slave_1: left promiscuous mode [ 1127.731064][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.797936][T11215] bridge_slave_0: left allmulticast mode [ 1127.797972][T11215] bridge_slave_0: left promiscuous mode [ 1127.801771][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.919755][T15183] usb 2-1: USB disconnect, device number 36 [ 1128.004410][ T49] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1128.005332][ T49] pwc: recv_control_msg error -32 req 02 val 2700 [ 1128.006325][ T49] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1128.007914][ T49] pwc: recv_control_msg error -32 req 04 val 1000 [ 1128.009551][ T49] pwc: recv_control_msg error -32 req 04 val 1300 [ 1128.010416][ T49] pwc: recv_control_msg error -32 req 04 val 1400 [ 1128.011235][ T49] pwc: recv_control_msg error -32 req 02 val 2000 [ 1128.011909][ T49] pwc: recv_control_msg error -32 req 02 val 2100 [ 1128.012747][ T49] pwc: recv_control_msg error -32 req 04 val 1500 [ 1128.013571][ T49] pwc: recv_control_msg error -32 req 02 val 2500 [ 1128.217284][ T49] pwc: recv_control_msg error -71 req 02 val 2600 [ 1128.217815][ T49] pwc: recv_control_msg error -71 req 02 val 2900 [ 1128.229181][ T49] pwc: recv_control_msg error -71 req 02 val 2800 [ 1128.229953][ T49] pwc: recv_control_msg error -71 req 04 val 1100 [ 1128.230417][ T49] pwc: recv_control_msg error -71 req 04 val 1200 [ 1128.239467][ T49] pwc: Registered as video103. [ 1128.242700][ T49] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input55 [ 1128.269663][ T49] usb 7-1: USB disconnect, device number 21 [ 1131.453591][T11215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1131.571699][T11215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1131.610170][T11215] bond0 (unregistering): Released all slaves [ 1133.320315][T20190] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4704'. [ 1133.367382][T11215] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.726157][T11215] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.895649][T11215] bond0 (unregistering): Released all slaves [ 1135.585610][T20030] hsr_slave_0: entered promiscuous mode [ 1135.587449][T20030] hsr_slave_1: entered promiscuous mode [ 1135.588461][T20030] debugfs: 'hsr0' already exists in 'hsr' [ 1135.588485][T20030] Cannot create hsr debugfs directory [ 1137.031928][T19926] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1137.186572][T19926] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1139.325709][T19926] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1139.442136][T19926] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1139.919915][T11215] hsr_slave_0: left promiscuous mode [ 1139.956194][T11215] hsr_slave_1: left promiscuous mode [ 1139.957440][T11215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.008310][T11215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.169361][T11215] hsr_slave_0: left promiscuous mode [ 1140.187696][T11215] hsr_slave_1: left promiscuous mode [ 1140.188576][T11215] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1140.188595][T11215] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1140.238219][T11215] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1140.238252][T11215] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1140.299054][ T6056] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1140.394179][T11215] veth1_macvtap: left promiscuous mode [ 1140.394252][T11215] veth0_macvtap: left promiscuous mode [ 1140.394409][T11215] veth1_vlan: left promiscuous mode [ 1140.394527][T11215] veth0_vlan: left promiscuous mode [ 1140.419354][T11215] veth1_macvtap: left promiscuous mode [ 1140.419422][T11215] veth0_macvtap: left promiscuous mode [ 1140.419580][T11215] veth1_vlan: left promiscuous mode [ 1140.419684][T11215] veth0_vlan: left promiscuous mode [ 1140.470284][ T6056] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1140.470428][ T6056] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1140.473722][ T6056] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1140.473743][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1140.473755][ T6056] usb 2-1: Product: syz [ 1140.473763][ T6056] usb 2-1: Manufacturer: syz [ 1140.473775][ T6056] usb 2-1: SerialNumber: syz [ 1140.538819][ T6056] cdc_mbim 2-1:1.0: skipping garbage [ 1140.751213][T20240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1141.376287][T20240] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1141.377259][ T6056] cdc_mbim 2-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 1141.377284][ T6056] cdc_mbim 2-1:1.0: setting rx_max = 2048 [ 1141.579900][ T6056] cdc_mbim 2-1:1.0: setting tx_max = 184 [ 1141.582026][ T6056] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1141.620046][ T6056] wwan wwan0: port wwan0mbim0 attached [ 1145.446801][T11215] team0 (unregistering): Port device team_slave_1 removed [ 1145.736682][T11215] team0 (unregistering): Port device team_slave_0 removed [ 1148.605731][T20265] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1152.457353][T11215] team0 (unregistering): Port device team_slave_1 removed [ 1152.738277][T11215] team0 (unregistering): Port device team_slave_0 removed [ 1155.540379][ T6056] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 2e:cf:96:75:ac:d6 [ 1155.589393][ T6056] usb 2-1: USB disconnect, device number 37 [ 1155.608985][ T6056] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1155.688268][T19935] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1155.936133][T19935] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1156.123549][ T6056] wwan wwan0: port wwan0mbim0 disconnected [ 1156.232905][T15927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1156.256355][T15927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1156.261396][T15927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1156.271009][T15927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1156.271917][T15927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1156.727500][ T6056] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1156.752674][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1156.762711][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1156.773979][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1156.775226][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1156.784697][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1156.855228][T19935] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1156.920463][ T6056] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1156.920490][ T6056] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.920502][ T6056] usb 2-1: Product: syz [ 1156.920510][ T6056] usb 2-1: Manufacturer: syz [ 1156.920518][ T6056] usb 2-1: SerialNumber: syz [ 1156.924584][ T6056] usb 2-1: config 0 descriptor?? [ 1157.223976][ T6056] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1157.610759][ T6056] usb 2-1: USB disconnect, device number 38 [ 1157.654583][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1157.673350][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1157.675410][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1157.696628][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1157.697662][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1157.698671][T20283] lo speed is unknown, defaulting to 1000 [ 1157.976073][T20290] lo speed is unknown, defaulting to 1000 [ 1159.091647][ T5118] Bluetooth: hci0: command tx timeout [ 1159.092398][ T5118] Bluetooth: hci1: command tx timeout [ 1159.946141][T15927] Bluetooth: hci6: command tx timeout [ 1160.225302][T20295] lo speed is unknown, defaulting to 1000 [ 1160.246259][ T6056] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 1160.450387][ T6056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1160.450419][ T6056] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1160.450432][ T6056] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1160.450459][ T6056] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1160.450473][ T6056] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1160.454901][ T6056] usb 2-1: config 0 descriptor?? [ 1161.077999][ T6056] usbhid 2-1:0.0: can't add hid device: -71 [ 1161.078137][ T6056] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1161.110842][ T6056] usb 2-1: USB disconnect, device number 39 [ 1161.146826][T15927] Bluetooth: hci1: command tx timeout [ 1161.146863][T15927] Bluetooth: hci0: command tx timeout [ 1161.294925][T20290] chnl_net:caif_netlink_parms(): no params data found [ 1161.357586][T20030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1161.409613][T20283] chnl_net:caif_netlink_parms(): no params data found [ 1161.430697][T20030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1161.502433][T20030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1161.570768][T20030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1161.646765][ T37] audit: type=1326 audit(1769808694.468:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.648106][ T37] audit: type=1326 audit(1769808694.478:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.655375][ T37] audit: type=1326 audit(1769808694.478:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.655894][ T37] audit: type=1326 audit(1769808694.478:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.749827][ T37] audit: type=1326 audit(1769808694.578:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.749888][ T37] audit: type=1326 audit(1769808694.578:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.752047][ T37] audit: type=1326 audit(1769808694.578:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1161.752094][ T37] audit: type=1326 audit(1769808694.578:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20316 comm="syz.1.4742" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f083440aeb9 code=0x7ffc0000 [ 1162.026169][ T5118] Bluetooth: hci6: command tx timeout [ 1162.124823][T20295] chnl_net:caif_netlink_parms(): no params data found [ 1162.140161][T20290] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.140465][T20290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.140627][T20290] bridge_slave_0: entered allmulticast mode [ 1162.142425][T20290] bridge_slave_0: entered promiscuous mode [ 1162.300327][T20290] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.300429][T20290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.300601][T20290] bridge_slave_1: entered allmulticast mode [ 1162.302414][T20290] bridge_slave_1: entered promiscuous mode [ 1162.592257][T20283] bridge0: port 1(bridge_slave_0) entered blocking state [ 1162.592347][T20283] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.592528][T20283] bridge_slave_0: entered allmulticast mode [ 1162.602257][T20283] bridge_slave_0: entered promiscuous mode [ 1162.655611][T20283] bridge0: port 2(bridge_slave_1) entered blocking state [ 1162.655829][T20283] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.657124][T20283] bridge_slave_1: entered allmulticast mode [ 1162.659946][T20283] bridge_slave_1: entered promiscuous mode [ 1162.838950][T20290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1162.914784][T20290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1162.941892][T20283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1163.236326][T15927] Bluetooth: hci1: command tx timeout [ 1163.236430][ T5118] Bluetooth: hci0: command tx timeout [ 1163.253550][T20283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1164.313805][ T5118] Bluetooth: hci6: command tx timeout [ 1164.381760][T20290] team0: Port device team_slave_0 added [ 1164.949275][T20290] team0: Port device team_slave_1 added [ 1164.950449][T20295] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.950667][T20295] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.951219][T20295] bridge_slave_0: entered allmulticast mode [ 1164.954561][T20295] bridge_slave_0: entered promiscuous mode [ 1164.997223][T20283] team0: Port device team_slave_0 added [ 1165.013956][T20295] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.014114][T20295] bridge0: port 2(bridge_slave_1) entered disabled state [ 1165.014353][T20295] bridge_slave_1: entered allmulticast mode [ 1165.022301][T20295] bridge_slave_1: entered promiscuous mode [ 1165.030895][T20345] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1165.070202][T20283] team0: Port device team_slave_1 added [ 1165.181084][T20290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.181111][T20290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.181126][T20290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.316341][ T5118] Bluetooth: hci0: command tx timeout [ 1165.316380][ T5118] Bluetooth: hci1: command tx timeout [ 1165.507410][T20290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.507430][T20290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.507460][T20290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.512154][T20295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1165.618054][T20283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.618068][T20283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.618084][T20283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1165.637188][T20295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1165.649038][T20283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1165.649055][T20283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.649081][T20283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1165.787265][T20295] team0: Port device team_slave_0 added [ 1165.832364][T20295] team0: Port device team_slave_1 added [ 1165.844399][T20290] hsr_slave_0: entered promiscuous mode [ 1165.845887][T20290] hsr_slave_1: entered promiscuous mode [ 1165.850326][T20290] debugfs: 'hsr0' already exists in 'hsr' [ 1165.850360][T20290] Cannot create hsr debugfs directory [ 1165.947547][T20283] hsr_slave_0: entered promiscuous mode [ 1165.948967][T20283] hsr_slave_1: entered promiscuous mode [ 1165.949942][T20283] debugfs: 'hsr0' already exists in 'hsr' [ 1165.949967][T20283] Cannot create hsr debugfs directory [ 1165.952483][T20295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1165.952496][T20295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1165.952512][T20295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.046810][T15183] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1166.064768][T20295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.064783][T20295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.064799][T20295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.196192][T15183] usb 2-1: Using ep0 maxpacket: 32 [ 1166.204383][T15183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1166.204414][T15183] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1166.204447][T15183] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1166.204461][T15183] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1166.214456][T15183] usb 2-1: config 0 descriptor?? [ 1166.349553][T15927] Bluetooth: hci6: command tx timeout [ 1166.448189][T20295] hsr_slave_0: entered promiscuous mode [ 1166.449093][T20295] hsr_slave_1: entered promiscuous mode [ 1166.449709][T20295] debugfs: 'hsr0' already exists in 'hsr' [ 1166.449732][T20295] Cannot create hsr debugfs directory [ 1167.637456][T20030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1168.039781][T20357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1168.048925][T20357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1168.065654][T20357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1168.076924][T20357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1168.078742][T20357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1168.244954][T20355] lo speed is unknown, defaulting to 1000 [ 1168.858658][ T49] usb 2-1: USB disconnect, device number 40 [ 1169.332641][ T49] usb 2-1: new full-speed USB device number 41 using dummy_hcd [ 1169.371283][T11215] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.371311][T11215] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1169.512010][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1169.512041][ T49] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.512054][ T49] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1169.512081][ T49] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1169.512095][ T49] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1169.515426][ T49] usb 2-1: config 0 descriptor?? [ 1169.893084][T11215] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1169.893123][T11215] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.117137][T15927] Bluetooth: hci3: command tx timeout [ 1170.135751][ T49] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1170.244835][ T10] usb 2-1: USB disconnect, device number 41 [ 1170.262334][T20385] fido_id[20385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 1170.444850][T11215] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.444890][T11215] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.783221][T11215] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.783263][T11215] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1170.877393][T20355] chnl_net:caif_netlink_parms(): no params data found [ 1171.327341][ T5795] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1171.419498][T20355] bridge0: port 1(bridge_slave_0) entered blocking state [ 1171.419636][T20355] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.419896][T20355] bridge_slave_0: entered allmulticast mode [ 1171.422423][T20355] bridge_slave_0: entered promiscuous mode [ 1171.486157][ T5795] usb 2-1: Using ep0 maxpacket: 16 [ 1171.493419][ T5795] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1171.493454][ T5795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.493475][ T5795] usb 2-1: Product: syz [ 1171.493490][ T5795] usb 2-1: Manufacturer: syz [ 1171.493515][ T5795] usb 2-1: SerialNumber: syz [ 1171.501191][ T5795] usb 2-1: config 0 descriptor?? [ 1171.504976][ T5795] ums-onetouch 2-1:0.0: USB Mass Storage device detected [ 1171.724004][ T49] usb 2-1: USB disconnect, device number 42 [ 1171.893170][T20355] bridge0: port 2(bridge_slave_1) entered blocking state [ 1171.893296][T20355] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.893558][T20355] bridge_slave_1: entered allmulticast mode [ 1171.906536][T20355] bridge_slave_1: entered promiscuous mode [ 1172.153118][T20355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1172.165878][T20355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1172.186224][T15927] Bluetooth: hci3: command tx timeout [ 1172.192278][T11215] bridge_slave_1: left allmulticast mode [ 1172.192310][T11215] bridge_slave_1: left promiscuous mode [ 1172.192579][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.272310][T11215] bridge_slave_0: left allmulticast mode [ 1172.272343][T11215] bridge_slave_0: left promiscuous mode [ 1172.272637][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.358998][T11215] bridge_slave_1: left allmulticast mode [ 1172.359023][T11215] bridge_slave_1: left promiscuous mode [ 1172.359190][T11215] bridge0: port 2(bridge_slave_1) entered disabled state [ 1172.617759][T11215] bridge_slave_0: left allmulticast mode [ 1172.617794][T11215] bridge_slave_0: left promiscuous mode [ 1172.618085][T11215] bridge0: port 1(bridge_slave_0) entered disabled state [ 1172.649117][T20432] ------------[ cut here ]------------ [ 1172.649134][T20432] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x0, 0x0] s64=[0x0, 0x0] u32=[0x80632f4, 0x0] s32=[0x0, 0x0] var_off=(0x0, 0x0) [ 1172.649172][T20432] WARNING: kernel/bpf/verifier.c:2748 at reg_bounds_sanity_check+0x201/0xc30, CPU#0: syz.1.4753/20432 [ 1172.649414][T20432] Modules linked in: [ 1172.649438][T20432] CPU: 0 UID: 0 PID: 20432 Comm: syz.1.4753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1172.649469][T20432] Tainted: [L]=SOFTLOCKUP [ 1172.649477][T20432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1172.649491][T20432] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 1172.649517][T20432] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 1172.649536][T20432] RSP: 0018:ffffc900041a6eb0 EFLAGS: 00010246 [ 1172.649556][T20432] RAX: dffffc0000000000 RBX: 1ffff11005692e58 RCX: 0000000000000000 [ 1172.649573][T20432] RDX: ffffffff8b3487a0 RSI: ffffffff8b351240 RDI: ffffffff8f4bb760 [ 1172.649589][T20432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.649603][T20432] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802b4972c0 [ 1172.649618][T20432] R13: 0000000000000000 R14: 1ffff11005692e57 R15: 0000000000000000 [ 1172.649633][T20432] FS: 00007f08326246c0(0000) GS:ffff8881265c9000(0000) knlGS:0000000000000000 [ 1172.649653][T20432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1172.649669][T20432] CR2: 00007f0832623ff8 CR3: 00000000326da000 CR4: 00000000003526f0 [ 1172.649690][T20432] Call Trace: [ 1172.649700][T20432] [ 1172.649743][T20432] reg_set_min_max+0x264/0x340 [ 1172.649777][T20432] check_cond_jmp_op+0x1db5/0x3180 [ 1172.649817][T20432] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1172.649847][T20432] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 1172.649875][T20432] do_check+0x5eeb/0xf260 [ 1172.649962][T20432] ? __pfx_do_check+0x10/0x10 [ 1172.649993][T20432] ? init_func_state+0x1ab2/0x28d0 [ 1172.650033][T20432] do_check_common+0x19cc/0x25b0 [ 1172.650083][T20432] bpf_check+0x5f4a/0x1c4d0 [ 1172.650116][T20432] ? try_to_take_rt_mutex+0x840/0xb00 [ 1172.650271][T20432] ? __lock_acquire+0x6b5/0x2cf0 [ 1172.650330][T20432] ? __lock_acquire+0x6b5/0x2cf0 [ 1172.650359][T20432] ? do_raw_spin_lock+0x12b/0x2f0 [ 1172.650398][T20432] ? css_rstat_updated+0x23a/0x530 [ 1172.650473][T20432] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 1172.650554][T20432] ? __pfx_bpf_check+0x10/0x10 [ 1172.650586][T20432] ? ktime_get_with_offset+0x93/0x2a0 [ 1172.650627][T20432] ? ktime_get_with_offset+0x93/0x2a0 [ 1172.650654][T20432] ? __asan_memset+0x22/0x50 [ 1172.650714][T20432] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1172.650744][T20432] ? security_bpf_prog_load+0x125/0x3c0 [ 1172.650871][T20432] bpf_prog_load+0x1484/0x1ae0 [ 1172.650930][T20432] ? __pfx_bpf_prog_load+0x10/0x10 [ 1172.650963][T20432] ? __might_fault+0xaf/0x130 [ 1172.651055][T20432] ? bpf_lsm_bpf+0x9/0x20 [ 1172.651077][T20432] ? security_bpf+0x7e/0x2d0 [ 1172.651113][T20432] __sys_bpf+0x570/0x920 [ 1172.651147][T20432] ? __pfx___sys_bpf+0x10/0x10 [ 1172.651176][T20432] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1172.651226][T20432] ? kfree+0x4d/0x8f0 [ 1172.651309][T20432] ? __pfx_kcov_ioctl+0x10/0x10 [ 1172.651346][T20432] __x64_sys_bpf+0x7c/0x90 [ 1172.651376][T20432] do_syscall_64+0xe2/0xf80 [ 1172.651467][T20432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.651519][T20432] ? trace_irq_disable+0x37/0x100 [ 1172.651555][T20432] ? clear_bhb_loop+0x60/0xb0 [ 1172.651582][T20432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.651606][T20432] RIP: 0033:0x7f083440aeb9 [ 1172.651628][T20432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.651647][T20432] RSP: 002b:00007f0832624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1172.651671][T20432] RAX: ffffffffffffffda RBX: 00007f0834686180 RCX: 00007f083440aeb9 [ 1172.651687][T20432] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1172.651702][T20432] RBP: 00007f0834478c1f R08: 0000000000000000 R09: 0000000000000000 [ 1172.651716][T20432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.651729][T20432] R13: 00007f0834686218 R14: 00007f0834686180 R15: 00007ffd94ada488 [ 1172.651765][T20432] [ 1172.651777][T20432] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1172.651796][T20432] CPU: 0 UID: 0 PID: 20432 Comm: syz.1.4753 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1172.651836][T20432] Tainted: [L]=SOFTLOCKUP [ 1172.651850][T20432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1172.651864][T20432] Call Trace: [ 1172.651874][T20432] [ 1172.651883][T20432] vpanic+0x1e0/0x670 [ 1172.651945][T20432] panic+0xc5/0xd0 [ 1172.651976][T20432] ? __pfx_panic+0x10/0x10 [ 1172.652025][T20432] __warn+0x315/0x4a0 [ 1172.652055][T20432] ? reg_bounds_sanity_check+0x201/0xc30 [ 1172.652096][T20432] ? reg_bounds_sanity_check+0x201/0xc30 [ 1172.652122][T20432] __report_bug+0x29a/0x540 [ 1172.652179][T20432] ? __pfx_stack_trace_save+0x10/0x10 [ 1172.652221][T20432] ? reg_bounds_sanity_check+0x201/0xc30 [ 1172.652246][T20432] ? __pfx___report_bug+0x10/0x10 [ 1172.652281][T20432] ? check_cond_jmp_op+0x1c55/0x3180 [ 1172.652301][T20432] ? do_check+0x5eeb/0xf260 [ 1172.652330][T20432] ? do_check_common+0x19cc/0x25b0 [ 1172.652359][T20432] ? bpf_check+0x5f4a/0x1c4d0 [ 1172.652382][T20432] ? bpf_prog_load+0x1484/0x1ae0 [ 1172.652413][T20432] ? __sys_bpf+0x570/0x920 [ 1172.652439][T20432] ? __x64_sys_bpf+0x7c/0x90 [ 1172.652464][T20432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.652493][T20432] report_bug_entry+0x19a/0x290 [ 1172.652524][T20432] ? reg_bounds_sanity_check+0x3e6/0xc30 [ 1172.652546][T20432] ? reg_bounds_sanity_check+0x3eb/0xc30 [ 1172.652568][T20432] handle_bug+0xca/0x200 [ 1172.652603][T20432] exc_invalid_op+0x1a/0x50 [ 1172.652638][T20432] asm_exc_invalid_op+0x1a/0x20 [ 1172.652658][T20432] RIP: 0010:reg_bounds_sanity_check+0x3e6/0xc30 [ 1172.652683][T20432] Code: 98 00 00 00 4c 8b 8c 24 88 00 00 00 41 ff 34 24 41 57 55 41 55 ff b4 24 f0 00 00 00 ff b4 24 a8 00 00 00 ff b4 24 c0 00 00 00 <67> 48 0f b9 3a 48 83 c4 38 49 bf 00 00 00 00 00 fc ff df 48 8b 84 [ 1172.652702][T20432] RSP: 0018:ffffc900041a6eb0 EFLAGS: 00010246 [ 1172.652721][T20432] RAX: dffffc0000000000 RBX: 1ffff11005692e58 RCX: 0000000000000000 [ 1172.652737][T20432] RDX: ffffffff8b3487a0 RSI: ffffffff8b351240 RDI: ffffffff8f4bb760 [ 1172.652752][T20432] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1172.652766][T20432] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88802b4972c0 [ 1172.652780][T20432] R13: 0000000000000000 R14: 1ffff11005692e57 R15: 0000000000000000 [ 1172.652847][T20432] reg_set_min_max+0x264/0x340 [ 1172.652878][T20432] check_cond_jmp_op+0x1db5/0x3180 [ 1172.652917][T20432] ? __pfx_check_cond_jmp_op+0x10/0x10 [ 1172.652945][T20432] ? bpf_reset_stack_write_marks+0x1eb/0x260 [ 1172.652974][T20432] do_check+0x5eeb/0xf260 [ 1172.653079][T20432] ? __pfx_do_check+0x10/0x10 [ 1172.653110][T20432] ? init_func_state+0x1ab2/0x28d0 [ 1172.653154][T20432] do_check_common+0x19cc/0x25b0 [ 1172.653211][T20432] bpf_check+0x5f4a/0x1c4d0 [ 1172.653245][T20432] ? try_to_take_rt_mutex+0x840/0xb00 [ 1172.653292][T20432] ? __lock_acquire+0x6b5/0x2cf0 [ 1172.653331][T20432] ? __lock_acquire+0x6b5/0x2cf0 [ 1172.653360][T20432] ? do_raw_spin_lock+0x12b/0x2f0 [ 1172.653398][T20432] ? css_rstat_updated+0x23a/0x530 [ 1172.653458][T20432] ? pcpu_memcg_post_alloc_hook+0x77/0x580 [ 1172.653482][T20432] ? __pfx_bpf_check+0x10/0x10 [ 1172.653513][T20432] ? ktime_get_with_offset+0x93/0x2a0 [ 1172.653546][T20432] ? ktime_get_with_offset+0x93/0x2a0 [ 1172.653572][T20432] ? __asan_memset+0x22/0x50 [ 1172.653599][T20432] ? bpf_lsm_bpf_prog_load+0x9/0x20 [ 1172.653622][T20432] ? security_bpf_prog_load+0x125/0x3c0 [ 1172.653661][T20432] bpf_prog_load+0x1484/0x1ae0 [ 1172.653710][T20432] ? __pfx_bpf_prog_load+0x10/0x10 [ 1172.653742][T20432] ? __might_fault+0xaf/0x130 [ 1172.653795][T20432] ? bpf_lsm_bpf+0x9/0x20 [ 1172.653816][T20432] ? security_bpf+0x7e/0x2d0 [ 1172.653851][T20432] __sys_bpf+0x570/0x920 [ 1172.653885][T20432] ? __pfx___sys_bpf+0x10/0x10 [ 1172.653912][T20432] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1172.653953][T20432] ? kfree+0x4d/0x8f0 [ 1172.653987][T20432] ? __pfx_kcov_ioctl+0x10/0x10 [ 1172.654024][T20432] __x64_sys_bpf+0x7c/0x90 [ 1172.654052][T20432] do_syscall_64+0xe2/0xf80 [ 1172.654083][T20432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.654103][T20432] ? trace_irq_disable+0x37/0x100 [ 1172.654132][T20432] ? clear_bhb_loop+0x60/0xb0 [ 1172.654159][T20432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1172.654181][T20432] RIP: 0033:0x7f083440aeb9 [ 1172.654206][T20432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1172.654224][T20432] RSP: 002b:00007f0832624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1172.654247][T20432] RAX: ffffffffffffffda RBX: 00007f0834686180 RCX: 00007f083440aeb9 [ 1172.654264][T20432] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 1172.654278][T20432] RBP: 00007f0834478c1f R08: 0000000000000000 R09: 0000000000000000 [ 1172.654293][T20432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1172.654306][T20432] R13: 00007f0834686218 R14: 00007f0834686180 R15: 00007ffd94ada488 [ 1172.654341][T20432] [ 1172.654724][T20432] Kernel Offset: disabled