last executing test programs: 20m0.058086523s ago: executing program 4 (id=1274): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, 0x0, 0x0) 19m57.444835494s ago: executing program 4 (id=1283): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000140)=0x2c, 0x4) 19m56.368044121s ago: executing program 4 (id=1285): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f00000003c0)={0x0, 0x10, 0x3, "917fd4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 19m52.939396775s ago: executing program 4 (id=1296): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r0, 0x5) flock(0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r1, 0x2) 19m50.969332566s ago: executing program 4 (id=1306): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) timer_create(0x3, &(0x7f0000000100)={0x0, 0x2e, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000140)) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HWSYNC(r1, 0x4122, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x1fffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x400000000000, 0x9, 0x0, 0xf, 0x80000002, 0x2}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19m47.619195628s ago: executing program 4 (id=1312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}}, 0x0) 19m31.756970258s ago: executing program 32 (id=1312): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000008400"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) socket$netlink(0x10, 0x3, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_create1(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}]}}}]}, 0x40}}, 0x0) 16m44.346352644s ago: executing program 2 (id=1800): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) ioctl$sock_bt_hci(r0, 0x400448e6, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) bind$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x1, 0x3, 0x34b}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB=' '], 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 16m44.091743788s ago: executing program 2 (id=1802): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x3, 0x40) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000300)={0x3f, r4}) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) sendto$inet6(r6, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x400000000, 0xbd55, 0x2, 0x6}, 0x0, &(0x7f0000000280)={0x3ff, 0x5, 0x0, 0x400d, 0xfffffffffffffffc, 0x9, 0x466}, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) close_range(r1, 0xffffffffffffffff, 0x0) truncate(&(0x7f0000000140)='./file2\x00', 0x7) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, 0x0}) r8 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xd3, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r7, r8, r7}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000080)=ANY=[], 0xfe37, 0x0) symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') ioctl$VHOST_VDPA_GET_AS_NUM(r0, 0x8004af7a, &(0x7f0000000400)) 16m43.654329925s ago: executing program 2 (id=1804): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x7c, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cdg\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)='(', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000f00)='0', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="f61354896ddadd6dd551692941291945d2caf0abafead8cd7fd2f025a147883d47465e3249627f2b6d2b4369a2e4f351921ca1dc677d15439a9af8bfb6584ae738859237c725eca9fa90786a134c5eca039ee267ff15c8fa6256f89db34ac656eafeb770bb08cc8e70f3897c2be3cd0290", 0x71}], 0x1}}], 0x3, 0xc0) sendto$inet(r0, &(0x7f0000000040), 0x0, 0x4008841, 0x0, 0x0) 16m43.395819369s ago: executing program 2 (id=1806): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x7, 0x40040) syz_open_dev$vbi(0x0, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x70bd06, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 16m42.448603554s ago: executing program 2 (id=1809): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) r0 = dup(0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2582c5, 0x0) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[@ANYRES8, @ANYRESDEC=0x0, @ANYRES16, @ANYRES16, @ANYRES32=r0], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtaction={0x120, 0x30, 0x1, 0x0, 0x0, {}, [{0x10c, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_sample={0xc4, 0x17, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x400}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}]}, {0x80, 0x6, "d6942d08fa83dd16eb86f1c9baba35322e2fe9f3d4a38bd2d11aac9eb2acef548a68cd09bbaa4190e41d4cc9038075961bf359ebc4582ff6a5207c9e344928785351768495c65db86b9b53d75ac0737d9b7d0de89d867b950821cff8fe4655a06b98bf86ed666932303b9c3b060a56924a3fcef4fe85a53e69c74a0c"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) futex(0x0, 0xc, 0x1, 0x0, &(0x7f0000048000)=0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000080), 0x4804, &(0x7f0000000700)=ANY=[@ANYBLOB="71756f7494966c0a5261b3c6c83993b467adbb16747048fb7d621db92ee73a340701face59a6b6990a6f967bcd65faa2abe9a8a3397dd9dcbce226fe05adf46c073a953d41e827e6608dd9428668b6b8a2682392af3e5092547e1f5163956734b60fddd8340e697f66d99864e525c5869d4d71ef154c664d5eae5b0d7633e950cc07c246199c8957053d96d6d11b90e0fe8fb5583f4afdc28059ec658cc1d20cdf035e5648fc2ddda1344715bebb21eadf1994f304d392a211440352170849bca8ef7bd63500"/211]) r4 = openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0xaad82, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000030700002dbd7000000000000900020073797a30000000000800410073697700140033006c6f00"/55], 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) umount2(&(0x7f0000000100)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_off}, {@uuid_null}]}) 16m40.579199673s ago: executing program 2 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x10003, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 16m25.529146369s ago: executing program 33 (id=1811): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x10003, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 13m35.245229521s ago: executing program 1 (id=2311): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$pagemap(0x0, &(0x7f0000000080)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x103) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/diskstats\x00', 0x0, 0x0) syz_open_dev$sg(0x0, 0x7, 0x40040) syz_open_dev$vbi(0x0, 0x2, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x5c2, &(0x7f0000000400)={0x0, 0xfffffffe, 0x0, 0x3, 0x348}, &(0x7f00000001c0)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000004c0)=@IORING_OP_FALLOCATE={0x11, 0x2, 0x0, @fd_index=0x7, 0xfb2, 0x0, 0x6, 0x0, 0x1}) io_uring_enter(r2, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4000) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r0) sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x301, 0x70bd06, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 13m33.896088723s ago: executing program 1 (id=2315): r0 = timerfd_create(0x8, 0x0) timerfd_settime(r0, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setgroups(0x41b7, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]) 13m33.657429426s ago: executing program 1 (id=2316): r0 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x212, &(0x7f0000000440)="$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") syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @inquiry_info={{0x2, 0xf}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9, 0x98, 0x2, "afa355", 0x1ff}]}}}, 0x12) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) readv(r2, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r2, r2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xb, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000240)={0x20, 0x30, 0xf0, 0x640, 0x0, 0x1f, 0x32, 0x0, {0xfffffffe}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x200}, {}, 0x0, 0x40, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x16, 0x0, 0x0, 0x5}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) 13m32.445030745s ago: executing program 1 (id=2318): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x13, 0x5e, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "0200"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000000c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 13m27.71577018s ago: executing program 1 (id=2332): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xfff7fffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) pwritev(r1, &(0x7f0000000440)=[{&(0x7f0000000280)="2a4fb756fc84c5af6889c06a82fefd4cb027df690f9d8f695841c36ee8d5fd9785744cd6b591ed6e0ee816a9efd314d6fbba73abc0b42af4476be04e04901b36269b086d210033e46b2b7895f1473283bca5f67ed8e6ed0a98200680", 0x5c}], 0x1, 0x4, 0x9) 13m26.920207512s ago: executing program 1 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 13m11.525913714s ago: executing program 34 (id=2334): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000295000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad99b817fd98cd824498949714ffaac8a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb2c5ca683a4b6fc89398f2b9000f224891060017cfa6fa26fa7a34701008c61897d4a6148a1c11428607c40de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc6002084e5b52710800e835cf0d78e45f70983826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174bed9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632fd30bf05121438bb74e4670ab5dfe447a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffb426e1230bc1cd4c02c4c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd78a9f3fdc1f50c445e3f30e703cf05b90fbf940e6652d377474ed5f816f66ac3027460ae991e7f834dd7a7fc2a7003d1a6cf5478533584961c329fcf4fed5c9455640dcd28273dc9753cc979113f2915a3039c3ca60ec53bb1130c2d27fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc51177cce5ef265c92b7957a334ff7be2ca867fd94286e016febfdb5827efc7a6efb01d66a396f84c1ca75daa4ead099694ed03d449b185cc836bab1a41a61bd6f03a54fafcee554bbb52adf8f1d7ede9f9a711256fb45e6c3d12ff560ee69d68733d522d9bbecf52396f15976381c27015403778139808142b48ced145ca8a6da5f322d413d09cc38b832fa05dd3c799042588f9eea6f443baa759257a000000000000000000bed1dad228e11f80cfea5848e436acf6e89dfae0b3d95b911af1818e0081504811a5f3c5d1ced3e592224f1d2ca3bdb2cc89001605db6987899eb99f94265401a95ff0a5a266438f1db461b7ebedd419bc038f7d36bd2bd4b3f92cd1469b63b1ce456a96152d353a8ab65f8bae521db73ff00b5d5cac7a439ab40d97e57f23e703fd6395930b9c3485ab181a83ed568cade43111530ec584cfb48e0cc5d63e2807b2e98525a84f9ac59cf74f3ba279e228e2a0dc8da8017cba3996541008785ab8f041f0a8d1399d88a3a58765e5a0149b9d0ea54b323675149783ec057ec6d6e8e600b9eced07ddcc56b77d8ea08223"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x9, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1m48.15050052s ago: executing program 7 (id=3925): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="40140010"], 0x0, 0x0, 0x0, 0x0}) 1m28.785022651s ago: executing program 7 (id=3925): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="40140010"], 0x0, 0x0, 0x0, 0x0}) 1m12.937865127s ago: executing program 7 (id=3925): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="40140010"], 0x0, 0x0, 0x0, 0x0}) 48.675547674s ago: executing program 7 (id=3925): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="40140010"], 0x0, 0x0, 0x0, 0x0}) 26.002721155s ago: executing program 7 (id=3925): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="40140010"], 0x0, 0x0, 0x0, 0x0}) 13.019464187s ago: executing program 6 (id=4649): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x17, 0x6, 0x5, 0x1, 0x20, r0, 0xcccb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x29, 0x1a, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x4000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x4}, 'port1\x00', 0x89, 0x1044, 0x0, 0xfffffeff, 0x0, 0x6, 0x200000, 0x0, 0x4875c99660ff2b28}) r4 = syz_open_procfs(0x0, &(0x7f0000019100)='net/fib_trie\x00') pread64(r4, &(0x7f0000032140)=""/102344, 0x18fc8, 0x4000c2a) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x30, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x14000084}, 0x20004080) 11.979243054s ago: executing program 3 (id=4650): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40020000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 11.681936818s ago: executing program 5 (id=4651): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 10.94249824s ago: executing program 6 (id=4653): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) 9.925737885s ago: executing program 5 (id=4656): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) close(0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 9.437146853s ago: executing program 3 (id=4657): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9.175920667s ago: executing program 5 (id=4658): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000080)=0x5, 0x4) syz_emit_ethernet(0x137, &(0x7f00000007c0)={@link_local, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x125, 0x2, 0x0, 0x0, 0x73, 0x0, @private=0x302, @multicast1=0xac1414aa}, {0x0, 0x0, 0x111, 0x0, @gue={{0x2}, "7566bbc4c2197752496354719a873895cf7842ce0a83d98426b43add0607c56ee32c2a1614fd4b6814c8bc65908131198cc0a02077fad0e472ac83496b58c0d18778dd2b084c3fcedd26fea254b552dc951f70a90dde608387b21698601f0c875eb1d68e850abbf1e2fd7ac58499025c47ffe7442626d4971d85760b3d8a318a04003741fd002a7dc1946c419a436b5c23e7a6db478b4fb81018a263adeaad5973a76a785024005f10fb403bba0f69210f27e274a43405bc138065f8a70e32901d873a067aa20ce3e99dbe1591d36f6b2e34009e88dc0b6ce7cf67bf50b449ad43a24f9a41859d41ede3762b8d6159493c81d73347140a4e90e23087aa2828c45c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000780)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0x0, 0x0, 0x0, 0xfd], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x40, 0x1}}, @common=@inet=@socket3={{0x28}, 0x22434d1da5f3fe5d}]}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@local, @empty, [0xffffffff, 0x1ff000100, 0x0, 0xffffffff], [0xff, 0xffffff, 0x0, 0xffffff00], 'pimreg0\x00', 'wlan1\x00', {}, {}, 0x21, 0xb, 0x1, 0x16}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@mcast2, [0xffffff00, 0xff000000, 0x0, 0xffffff], 0x4e23, 0x4e22, 0x4e23, 0x4e20, 0xf81, 0x9, 0x500, 0x7ff, 0x200}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0xe, 0xa, 0x1, "020000000000005525052e8bd9e6660201000000000000000000000200", 0x31364d4e}) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, &(0x7f0000000ec0)={0x44, &(0x7f0000001180)={0x0, 0x11, 0x4, "28172044"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r4, 0x0, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, &(0x7f0000000580), &(0x7f00000005c0)=0x4) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x6}, 0x20, 0x0, 0x0) msgsnd(0x0, &(0x7f0000000100)=ANY=[], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYRES64=r0, @ANYRES64, @ANYRESHEX=0x0, @ANYBLOB="f2e56921b0ab0bb28aba2074bdf4ec3b6195121402511ec58a6d9842"], 0x34}}, 0x0) mknodat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x400, 0x40) chmod(&(0x7f0000000400)='./file0\x00', 0x140) 9.093540228s ago: executing program 0 (id=4659): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) r2 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x92e1, 0x8, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 9.034826709s ago: executing program 0 (id=4660): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d8}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 8.878943021s ago: executing program 7 (id=3925): r0 = syz_usb_connect(0x0, 0x1cb, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[@ANYBLOB="40140010"], 0x0, 0x0, 0x0, 0x0}) 6.614063957s ago: executing program 0 (id=4661): r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000400)=0xc) write$usbip_server(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0xfffffffffffffd8e) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x8, 0x4004, @fd, 0x8, 0x0, 0x0, 0x14}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)={@remote}, 0x14) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r4, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) sendmsg$netlink(r0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x80000001, 0x3, 0x5}}) openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") truncate(&(0x7f0000000000)='./file1\x00', 0x5e00) r6 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r6, &(0x7f0000001fc0)=""/184, 0xb8) 6.596560147s ago: executing program 6 (id=4662): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.596063757s ago: executing program 3 (id=4663): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000580)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCGKEY(r1, 0x80404518, 0x0) 6.595376237s ago: executing program 5 (id=4664): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getpgrp(0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x141) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCXONC(r1, 0x540a, 0x2) ioctl$TCXONC(r1, 0x540a, 0x1) r2 = mq_open(&(0x7f0000000800)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18J\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\";a~\n\x15\xaf.\x82\xe4\xefa\\\xdd\x93\x81G\xb4\x1d_\xb7b\xb8\x06`\xcf\xefci#zd\x01\xb2j\x05\x13\x8f\x92\x01\x8aB\xc3\xf1\x9d\xc2\xee\xd3\xad\x84\xb5\x1e[R\xff\b\x86NC\xff\xc5\xd8 \xa8 \f`\xa4\x8a\xc1b\xc9q\xe8\xb0\tZ\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) syslog(0x2, 0x0, 0x0) syslog(0x4, 0x0, 0x0) setxattr$incfs_size(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000300), &(0x7f0000000340)=0xcff5, 0x8, 0x3) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@dev, @in6=@initdev}}, {{@in6=@mcast2}, 0x0, @in=@broadcast}}, &(0x7f0000000100)=0xe8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@broadcast, @empty, @void, {@llc={0x4, {@snap={0x0, 0x0, "e3", "ff782c"}}}}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x4}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x8]}]}]}, 0x30}}, 0x0) socket$key(0xf, 0x3, 0x2) 3.81192106s ago: executing program 6 (id=4665): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6879ce3c39314ddc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x40}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, {0x4}}]}]}, 0x6c}}, 0x0) 3.681314452s ago: executing program 5 (id=4666): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 3.637778763s ago: executing program 3 (id=4667): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x1000, 0xfffffffb, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r3 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x400000000001, 0x180, 0x20ff, 0x6, 0x89, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x1}}, {0x0, 0x13}}}, 0xa0) sendfile(r3, r3, &(0x7f0000000080), 0x7f03) close_range(r0, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000a9ffffff0000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.333779818s ago: executing program 3 (id=4668): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f0000000700)={0x40, 0xb, 0x4, "eb5f9bb9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.982414313s ago: executing program 0 (id=4669): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_io_uring_setup(0x2d0, &(0x7f0000000480)={0x0, 0x58dc, 0x80, 0x3, 0x200}, &(0x7f00000000c0), &(0x7f00000001c0)) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xffffffffffffff1a, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x22803) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x6, 0x8}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r3, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) dup3(r3, r4, 0x0) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0285629, 0x0) 2.981784963s ago: executing program 6 (id=4670): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001300)=""/241, 0xf1}], 0x1) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 2.131274176s ago: executing program 0 (id=4671): io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x16, 0x0, 0x1) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) read$dsp(r1, &(0x7f0000003200)=""/4105, 0x1009) syz_usb_connect(0x3, 0x24, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000f9de50083d1bcd010008010203010902"], 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) write$dsp(r0, &(0x7f0000002200)="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", 0x1000) 2.020018098s ago: executing program 6 (id=4672): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000480)=@framed, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x11d8}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x44040000}, 0x20000014) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x4c, 0x30, 0xb, 0x5, 0x0, {}, [{0x38, 0x1, [@m_ct={0x34, 0x1, 0x0, 0x0, {{0x7}, {0xc, 0x2, 0x0, 0x1, [@TCA_CT_MARK={0x8, 0x5, 0x9}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8890}, 0x40) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 872.690936ms ago: executing program 3 (id=4673): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\f\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}) 150.531747ms ago: executing program 0 (id=4674): socket$netlink(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x80400, 0x0) socket(0x10, 0x803, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xd, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGVERSION(r2, 0x80044801, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) close(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000600)={0x11, 0xfffffffffffffffc, 0x2, 0x9, 0x4, 0x0, 0xffffffff, 0x8}, 0x0, &(0x7f0000000080)={0x7fc, 0x2, 0x4000000000800000, 0xfffffffffffffffc, 0x0, 0xc3ad}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 5 (id=4675): socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000440)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 12][T13997] usb 6-1: USB disconnect, device number 114 [ 1494.411848][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1494.422973][T18984] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1494.423935][ T127] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1494.434414][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1494.442920][ T127] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1494.460366][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1494.471034][ T127] usb 1-1: config 0 descriptor?? [ 1494.479878][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1494.493026][T19912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1494.506549][T19912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.517088][T19912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1494.527794][T19912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.537947][T19912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1494.551345][T19912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.561448][T19912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1494.574365][T19912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1494.593735][T19912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1494.602547][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1494.627698][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1494.652089][T19912] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.668760][T19912] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.679981][T19912] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.689848][T19912] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1494.881779][ T127] usbhid 1-1:0.0: can't add hid device: -71 [ 1494.889251][ T127] usbhid: probe of 1-1:0.0 failed with error -71 [ 1494.929685][ T127] usb 1-1: USB disconnect, device number 117 [ 1494.961294][ T4467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.006844][ T4467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.039695][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1495.082330][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1495.091363][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1495.122190][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1496.547341][T18984] gspca_stk1135: reg_w 0x200 err -71 [ 1496.571440][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.587755][T18984] gspca_stk1135: Sensor write failed [ 1496.596746][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.633442][T18984] gspca_stk1135: Sensor write failed [ 1496.690166][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.720660][T18984] gspca_stk1135: Sensor read failed [ 1496.737199][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.746959][T18984] gspca_stk1135: Sensor read failed [ 1496.754107][T18984] gspca_stk1135: Detected sensor type unknown (0x0) [ 1496.761034][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.774362][T18984] gspca_stk1135: Sensor read failed [ 1496.779801][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.790383][T18984] gspca_stk1135: Sensor read failed [ 1496.799298][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.807726][T18984] gspca_stk1135: Sensor write failed [ 1496.817659][T18984] gspca_stk1135: serial bus timeout: status=0x00 [ 1496.824976][T18984] gspca_stk1135: Sensor write failed [ 1496.837681][T18984] stk1135: probe of 7-1:0.0 failed with error -71 [ 1496.863766][T18984] usb 7-1: USB disconnect, device number 100 [ 1497.183511][T13997] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 1497.373488][T13997] usb 6-1: Using ep0 maxpacket: 32 [ 1497.380814][T13997] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1497.399039][T13997] usb 6-1: config 0 has no interface number 0 [ 1497.406796][ T26] audit: type=1326 audit(1751008611.501:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1497.429317][T13997] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1497.447109][T13997] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1497.471322][T13997] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1497.481787][T13997] usb 6-1: Product: syz [ 1497.488987][T13997] usb 6-1: Manufacturer: syz [ 1497.495775][T13997] usb 6-1: SerialNumber: syz [ 1497.502035][T13997] usb 6-1: config 0 descriptor?? [ 1497.512375][T13997] smsc75xx v1.0.0 [ 1497.540596][ T26] audit: type=1326 audit(1751008611.531:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1497.613524][ T26] audit: type=1326 audit(1751008611.541:1227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1497.637156][ T26] audit: type=1326 audit(1751008611.541:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1497.661004][ T26] audit: type=1326 audit(1751008611.541:1229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1498.253767][ T26] audit: type=1326 audit(1751008611.541:1230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1498.283277][ T26] audit: type=1326 audit(1751008611.541:1231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1498.310971][ T26] audit: type=1326 audit(1751008611.541:1232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20053 comm="syz.3.4466" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1498.333015][T13997] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1498.344694][T13997] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1498.356627][T13997] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1498.366981][T13997] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 1498.873460][ T127] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1498.968123][T13997] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1499.084832][ T127] usb 4-1: config 0 has no interfaces? [ 1499.090415][ T127] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1499.099654][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.109559][ T127] usb 4-1: config 0 descriptor?? [ 1499.155076][T13997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1499.166266][T13997] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.176391][T13997] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1499.189468][T13997] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1499.198657][T13997] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1499.207740][T13997] usb 1-1: config 0 descriptor?? [ 1499.293612][ T4681] usb 7-1: new high-speed USB device number 101 using dummy_hcd [ 1499.322937][ T4457] usb 4-1: USB disconnect, device number 6 [ 1499.385994][ T75] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1499.484918][ T4681] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1499.494092][ T4681] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1499.504525][ T4681] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1499.513598][ T4681] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1499.524776][ T4681] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1499.540483][ T4681] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1499.549660][ T4681] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1499.557766][ T4681] usb 7-1: Product: syz [ 1499.561934][ T4681] usb 7-1: Manufacturer: syz [ 1499.571214][ T4681] cdc_wdm 7-1:1.0: skipping garbage [ 1499.576520][ T4681] cdc_wdm 7-1:1.0: skipping garbage [ 1499.582739][ T4681] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1499.588837][ T4681] cdc_wdm 7-1:1.0: Unknown control protocol [ 1499.622949][T13997] usbhid 1-1:0.0: can't add hid device: -71 [ 1499.629130][T13997] usbhid: probe of 1-1:0.0 failed with error -71 [ 1499.636652][T13997] usb 1-1: USB disconnect, device number 118 [ 1499.752339][ T4457] usb 6-1: USB disconnect, device number 115 [ 1499.777883][ T4681] usb 7-1: USB disconnect, device number 101 [ 1500.475510][ T75] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.542819][ T75] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.627348][ T75] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1500.983656][ T4329] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1501.183905][ T4329] usb 4-1: Using ep0 maxpacket: 32 [ 1501.199127][ T4329] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1501.278270][ T4329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.336532][ T4329] usb 4-1: Product: syz [ 1501.370610][ T4329] usb 4-1: Manufacturer: syz [ 1501.411529][ T4329] usb 4-1: SerialNumber: syz [ 1501.469528][ T4329] usb 4-1: config 0 descriptor?? [ 1501.627783][ T4329] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1501.764006][T19117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1501.803334][T19117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1501.817493][T19117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1501.827583][T19117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1501.837726][T19117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1501.847975][T19117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1502.309129][T20107] chnl_net:caif_netlink_parms(): no params data found [ 1502.430958][T20107] bridge0: port 1(bridge_slave_0) entered blocking state [ 1502.442596][T20107] bridge0: port 1(bridge_slave_0) entered disabled state [ 1502.454565][T20107] device bridge_slave_0 entered promiscuous mode [ 1502.466195][T20107] bridge0: port 2(bridge_slave_1) entered blocking state [ 1502.473724][T20107] bridge0: port 2(bridge_slave_1) entered disabled state [ 1502.486845][T20107] device bridge_slave_1 entered promiscuous mode [ 1502.493539][T18984] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1502.548149][T20107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1502.571713][T20107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1502.673568][T18984] usb 1-1: Using ep0 maxpacket: 8 [ 1502.696725][T18984] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1502.712901][T18984] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.721360][T18984] usb 1-1: Product: syz [ 1502.726065][T18984] usb 1-1: Manufacturer: syz [ 1502.730733][T18984] usb 1-1: SerialNumber: syz [ 1502.746432][T18984] usb 1-1: config 0 descriptor?? [ 1502.777051][T20107] team0: Port device team_slave_0 added [ 1502.786532][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 1502.786542][ T26] audit: type=1326 audit(1751008616.881:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1502.819028][ T26] audit: type=1326 audit(1751008616.911:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1502.843827][ T26] audit: type=1326 audit(1751008616.911:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1502.844455][T20107] team0: Port device team_slave_1 added [ 1502.916082][T20107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1502.923273][T20107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1502.958212][ T26] audit: type=1326 audit(1751008616.911:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1502.981237][T20107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1503.027551][T20107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1503.040262][T18984] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1503.051647][T20107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1503.053565][ T26] audit: type=1326 audit(1751008616.941:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1503.100333][T20107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1503.750936][ T26] audit: type=1326 audit(1751008616.941:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1503.903433][ T4329] gspca_stk1135: reg_w 0x200 err -71 [ 1503.943468][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1503.943620][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1503.993037][ T4329] gspca_stk1135: Sensor write failed [ 1504.017623][ T26] audit: type=1326 audit(1751008616.941:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1504.256547][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.293331][ T4329] gspca_stk1135: Sensor write failed [ 1504.306746][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.314692][ T4329] gspca_stk1135: Sensor read failed [ 1504.327429][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.334171][ T26] audit: type=1326 audit(1751008616.941:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1504.362703][ T4329] gspca_stk1135: Sensor read failed [ 1504.377348][ T4329] gspca_stk1135: Detected sensor type unknown (0x0) [ 1504.404145][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.453566][ T4329] gspca_stk1135: Sensor read failed [ 1504.468999][ T26] audit: type=1326 audit(1751008616.941:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1504.483472][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.515131][ T4329] gspca_stk1135: Sensor read failed [ 1504.520498][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.535965][ T4329] gspca_stk1135: Sensor write failed [ 1504.550988][ T4329] gspca_stk1135: serial bus timeout: status=0x00 [ 1504.557508][ T4329] gspca_stk1135: Sensor write failed [ 1504.558558][ T26] audit: type=1326 audit(1751008616.941:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20121 comm="syz.5.4478" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1504.564064][ T4329] stk1135: probe of 4-1:0.0 failed with error -71 [ 1504.621250][ T4329] usb 4-1: USB disconnect, device number 7 [ 1504.643884][T18984] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -32 [ 1504.749052][T20107] device hsr_slave_0 entered promiscuous mode [ 1504.777711][T20107] device hsr_slave_1 entered promiscuous mode [ 1504.787726][T20107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1504.799494][T20107] Cannot create hsr debugfs directory [ 1504.832859][ T75] device hsr_slave_0 left promiscuous mode [ 1504.839657][ T75] device hsr_slave_1 left promiscuous mode [ 1504.846869][ T4329] usb 1-1: USB disconnect, device number 119 [ 1504.853144][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1504.860749][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1504.869379][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.877132][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1504.885043][ T75] device bridge_slave_1 left promiscuous mode [ 1504.891228][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1504.900440][ T75] device bridge_slave_0 left promiscuous mode [ 1504.906921][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1504.933590][T18984] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 1504.942210][ T75] device veth1_macvtap left promiscuous mode [ 1504.948442][ T75] device veth0_macvtap left promiscuous mode [ 1504.954716][ T75] device veth1_vlan left promiscuous mode [ 1504.960551][ T75] device veth0_vlan left promiscuous mode [ 1505.043734][T13997] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 1505.094156][ T4681] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1505.153278][T18984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1505.169991][T18984] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1505.180931][T18984] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1505.200417][T18984] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1505.209796][T18984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1505.219539][T18984] usb 7-1: config 0 descriptor?? [ 1505.243484][T13997] usb 6-1: Using ep0 maxpacket: 32 [ 1505.250690][T13997] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1505.259033][T13997] usb 6-1: config 0 has no interface number 0 [ 1505.266244][T13997] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 1505.277122][T13997] usb 6-1: config 0 interface 1 has no altsetting 0 [ 1505.293885][T13997] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 1505.303201][T13997] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.314179][ T4681] usb 4-1: Using ep0 maxpacket: 32 [ 1505.319477][T13997] usb 6-1: Product: syz [ 1505.325430][ T4681] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1505.340068][T13997] usb 6-1: Manufacturer: syz [ 1505.346085][ T4681] usb 4-1: config 0 has no interface number 0 [ 1505.352236][T13997] usb 6-1: SerialNumber: syz [ 1505.374539][ T4681] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1505.388318][T13997] usb 6-1: config 0 descriptor?? [ 1505.400742][ T4681] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1505.416192][ T4681] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1505.443440][ T4681] usb 4-1: Product: syz [ 1505.447750][ T4681] usb 4-1: Manufacturer: syz [ 1505.452428][ T4681] usb 4-1: SerialNumber: syz [ 1505.459114][ T4681] usb 4-1: config 0 descriptor?? [ 1505.466270][ T4681] smsc75xx v1.0.0 [ 1505.510146][T20145] input: syz1 as /devices/virtual/input/input57 [ 1505.617255][T13997] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 1505.630863][T18984] usbhid 7-1:0.0: can't add hid device: -71 [ 1505.642713][T18984] usbhid: probe of 7-1:0.0 failed with error -71 [ 1505.710019][T13997] cx231xx 6-1:0.1: Failed to read PCB config [ 1505.710078][T13997] cx231xx: probe of 6-1:0.1 failed with error -71 [ 1505.713143][T13997] usb 6-1: USB disconnect, device number 116 [ 1505.735365][T18984] usb 7-1: USB disconnect, device number 102 [ 1505.876173][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1505.876192][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1505.876203][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1505.876273][ T4681] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 1506.001459][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1506.021889][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1506.074871][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1506.133341][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1506.238245][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1506.653726][ T4457] usb 7-1: new high-speed USB device number 103 using dummy_hcd [ 1506.863676][ T4457] usb 7-1: Using ep0 maxpacket: 8 [ 1507.099620][ T4457] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1507.278023][ T4457] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.353162][ T4457] usb 7-1: Product: syz [ 1507.369782][ T4457] usb 7-1: Manufacturer: syz [ 1507.375460][ T4457] usb 7-1: SerialNumber: syz [ 1507.396924][ T4457] usb 7-1: config 0 descriptor?? [ 1507.611524][ T4457] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1507.644025][T20168] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1507.669477][T20168] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1507.853881][T18984] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1507.912759][T15015] usb 4-1: USB disconnect, device number 8 [ 1508.064193][T18984] usb 1-1: Using ep0 maxpacket: 32 [ 1508.080476][T18984] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1508.090607][T18984] usb 1-1: config 0 has no interface number 0 [ 1508.093516][T19117] Bluetooth: hci2: command 0x040f tx timeout [ 1508.103619][T18984] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1508.164212][T18984] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1508.182757][T18984] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1508.216527][T18984] usb 1-1: Product: syz [ 1508.220921][T18984] usb 1-1: Manufacturer: syz [ 1508.225813][T18984] usb 1-1: SerialNumber: syz [ 1508.232414][T18984] usb 1-1: config 0 descriptor?? [ 1508.246990][ T4457] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 1508.250097][T18984] smsc75xx v1.0.0 [ 1508.259945][ T75] bond0 (unregistering): Released all slaves [ 1508.865774][T18984] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1508.879160][T18984] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1509.206189][T20107] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1509.222676][T20107] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1509.238722][T20107] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1509.250051][T20107] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1509.370909][T20107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1509.381175][ T4297] usb 7-1: USB disconnect, device number 103 [ 1509.400743][T14889] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1509.412297][T14889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1509.424988][T20107] 8021q: adding VLAN 0 to HW filter on device team0 [ 1509.436374][T14889] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1509.472656][T14889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1509.482529][T14889] bridge0: port 1(bridge_slave_0) entered blocking state [ 1509.489672][T14889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1509.497481][T18984] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 1509.509848][T18984] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 1509.523021][T18984] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1509.532784][T14889] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1509.541245][T18984] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 1509.569845][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1510.027806][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1510.055758][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 1510.062990][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1510.093728][T19117] Bluetooth: hci4: command 0x1003 tx timeout [ 1510.100347][ T48] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 1510.158542][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1510.173600][T19117] Bluetooth: hci2: command 0x0419 tx timeout [ 1510.193093][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1510.214209][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1510.248139][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1510.293001][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1510.301219][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1510.314648][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1510.343413][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1510.352169][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1510.370680][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1510.381938][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1510.543552][T15280] usb 7-1: new high-speed USB device number 104 using dummy_hcd [ 1510.805393][T15280] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.994349][T15280] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1511.006023][T15280] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1511.019057][T15280] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1511.053212][T15280] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1511.075299][T20109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1511.085741][T20109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1511.097950][ T127] usb 1-1: USB disconnect, device number 120 [ 1511.108934][T15280] usb 7-1: config 0 descriptor?? [ 1511.131080][T20107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1511.568269][T15280] usbhid 7-1:0.0: can't add hid device: -71 [ 1511.578791][T15280] usbhid: probe of 7-1:0.0 failed with error -71 [ 1511.597231][T15280] usb 7-1: USB disconnect, device number 104 [ 1511.832103][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1511.845137][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1511.867871][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1511.892672][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1511.909449][T20107] device veth0_vlan entered promiscuous mode [ 1511.944082][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1511.957169][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1512.003197][T20107] device veth1_vlan entered promiscuous mode [ 1512.139325][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 1512.139336][ T26] audit: type=1326 audit(1751008626.231:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.372439][ T26] audit: type=1326 audit(1751008626.271:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.397045][ T26] audit: type=1326 audit(1751008626.271:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.422115][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1512.442175][ T26] audit: type=1326 audit(1751008626.271:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.444906][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1512.480278][ T26] audit: type=1326 audit(1751008626.271:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.508026][ T26] audit: type=1326 audit(1751008626.271:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.673634][ T4681] usb 7-1: new high-speed USB device number 105 using dummy_hcd [ 1512.696436][ T26] audit: type=1326 audit(1751008626.271:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.743457][T18984] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 1512.749071][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1512.792909][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1512.821321][ T26] audit: type=1326 audit(1751008626.271:1350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.831857][T20107] device veth0_macvtap entered promiscuous mode [ 1512.868216][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1512.870792][ T26] audit: type=1326 audit(1751008626.271:1351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1512.899145][ T4681] usb 7-1: Using ep0 maxpacket: 32 [ 1512.907186][ T4681] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1512.955018][T20107] device veth1_macvtap entered promiscuous mode [ 1512.967777][T18984] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1513.000509][ T4681] usb 7-1: config 0 has no interface number 0 [ 1513.013615][T18984] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1513.029357][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1513.045345][ T4681] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1513.046604][ T26] audit: type=1326 audit(1751008626.361:1352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20222 comm="syz.0.4503" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f385798e929 code=0x7ffc0000 [ 1513.052378][T18984] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1513.088061][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.098467][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1513.111410][ T4681] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1513.121407][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.133029][ T4681] usb 7-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1513.146019][T18984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.154326][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1513.166237][ T4681] usb 7-1: Product: syz [ 1513.170590][ T4681] usb 7-1: Manufacturer: syz [ 1513.178010][T20220] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1513.197995][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.209642][ T4681] usb 7-1: SerialNumber: syz [ 1513.222601][ T4681] usb 7-1: config 0 descriptor?? [ 1513.228872][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1513.245590][ T4681] smsc75xx v1.0.0 [ 1513.249413][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.270282][T20107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1513.280586][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1513.292728][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1513.314016][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.369298][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.380452][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.391138][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.401842][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.429971][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.448262][T20107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1513.470700][T20107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1513.503651][T20107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1513.519689][T20109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1513.571585][T20109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1513.632763][T20107] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.648220][ T4681] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1513.693617][T20107] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.722940][ T4681] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1513.783465][T20107] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.792337][ T4681] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1513.859278][T20107] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1513.887453][ T4681] smsc75xx: probe of 7-1:0.184 failed with error -32 [ 1514.074925][ T4241] usb 6-1: USB disconnect, device number 117 [ 1514.282660][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.334336][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.352693][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1514.405819][T20106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1514.416986][T20106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1514.626528][T20109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1515.333212][ T4466] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.371034][T13997] usb 7-1: USB disconnect, device number 105 [ 1515.535948][ T4466] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.642472][ T4466] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1515.829941][ T4466] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.891599][ T4466] device hsr_slave_0 left promiscuous mode [ 1516.914953][ T4466] device hsr_slave_1 left promiscuous mode [ 1516.936212][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1516.976429][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1517.108005][ T4466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1517.122782][ T4466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1517.326960][ T4466] device bridge_slave_1 left promiscuous mode [ 1517.342443][ T4466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1517.370355][ T4466] device bridge_slave_0 left promiscuous mode [ 1517.391422][ T4466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.506986][ T4466] device veth1_macvtap left promiscuous mode [ 1517.522120][ T4466] device veth0_macvtap left promiscuous mode [ 1517.548847][ T4466] device veth1_vlan left promiscuous mode [ 1517.566965][ T4466] device veth0_vlan left promiscuous mode [ 1517.603509][ T4457] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 1517.925368][ T4457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1517.942892][ T4457] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1517.953198][ T4457] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1517.967458][ T4457] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1517.976825][ T4457] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1517.992446][T19117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1517.992447][ T4457] usb 1-1: config 0 descriptor?? [ 1518.014764][T19117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1518.023865][T19117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1518.033680][T19117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1518.041332][T19117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1518.048876][T19117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1518.411031][ T4457] usbhid 1-1:0.0: can't add hid device: -71 [ 1518.423739][ T4457] usbhid: probe of 1-1:0.0 failed with error -71 [ 1518.457292][ T4457] usb 1-1: USB disconnect, device number 121 [ 1519.578350][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 1519.578363][ T26] audit: type=1326 audit(1751008633.671:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.616112][ T26] audit: type=1326 audit(1751008633.671:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.644684][ T26] audit: type=1326 audit(1751008633.681:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.672664][ T26] audit: type=1326 audit(1751008633.681:1381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.700935][ T26] audit: type=1326 audit(1751008633.681:1382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.732609][ T26] audit: type=1326 audit(1751008633.681:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.772296][ T26] audit: type=1326 audit(1751008633.681:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.823073][ T26] audit: type=1326 audit(1751008633.681:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.846748][ T26] audit: type=1326 audit(1751008633.681:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1519.869406][ T26] audit: type=1326 audit(1751008633.681:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20287 comm="syz.3.4518" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1520.095378][T19117] Bluetooth: hci2: command 0x0409 tx timeout [ 1520.497984][ T4466] team0 (unregistering): Port device team_slave_1 removed [ 1520.515121][ T127] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1520.522936][ T4457] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 1520.575948][ T4466] team0 (unregistering): Port device team_slave_0 removed [ 1520.637367][ T4466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1520.700656][ T4466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1520.724158][ T4457] usb 6-1: Using ep0 maxpacket: 32 [ 1520.729540][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 1520.738057][ T4457] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1520.759448][ T127] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1520.767739][ T4457] usb 6-1: config 0 has no interface number 0 [ 1520.773917][ T127] usb 1-1: config 0 has no interface number 0 [ 1520.780133][ T127] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1520.787068][ T4457] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1520.824003][ T4457] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1520.833092][ T4457] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1520.841523][ T127] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1520.865323][ T127] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1520.873653][ T4457] usb 6-1: Product: syz [ 1520.877826][ T4457] usb 6-1: Manufacturer: syz [ 1520.882541][ T4457] usb 6-1: SerialNumber: syz [ 1520.887309][ T127] usb 1-1: Product: syz [ 1520.891480][ T127] usb 1-1: Manufacturer: syz [ 1520.896328][ T127] usb 1-1: SerialNumber: syz [ 1520.913181][ T4457] usb 6-1: config 0 descriptor?? [ 1520.919555][ T127] usb 1-1: config 0 descriptor?? [ 1520.928317][ T4457] smsc75xx v1.0.0 [ 1520.942906][ T127] smsc75xx v1.0.0 [ 1521.356279][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1521.367394][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1521.377447][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1521.387968][ T127] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 1521.546101][ T4457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1521.560522][ T4457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1521.584880][ T4457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1521.595996][ T4457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1521.606050][ T4457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1521.616385][ T4457] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1521.626009][ T4457] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 1521.635942][ T4457] usb 6-1: USB disconnect, device number 118 [ 1521.830048][ T4466] bond0 (unregistering): Released all slaves [ 1521.859997][T15015] Process accounting resumed [ 1522.052454][T20281] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4519'. [ 1522.183159][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 1522.610073][ T4457] usb 1-1: USB disconnect, device number 122 [ 1524.253500][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1525.875478][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 1525.875493][ T26] audit: type=1326 audit(1751008639.971:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1526.113795][ T4457] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1526.334570][ T4457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1526.413600][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1526.420125][ T4457] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1526.430237][ T4457] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1526.755082][ T4457] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1526.761801][T20275] chnl_net:caif_netlink_parms(): no params data found [ 1526.774882][ T4457] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.796562][ T4457] usb 4-1: config 0 descriptor?? [ 1526.810601][ T26] audit: type=1326 audit(1751008640.001:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1526.959836][ T26] audit: type=1326 audit(1751008640.011:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1526.992703][T20275] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.000012][T20275] bridge0: port 1(bridge_slave_0) entered disabled state [ 1527.008159][T20275] device bridge_slave_0 entered promiscuous mode [ 1527.016877][T20275] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.024220][T20275] bridge0: port 2(bridge_slave_1) entered disabled state [ 1527.032287][T20275] device bridge_slave_1 entered promiscuous mode [ 1527.091076][ T26] audit: type=1326 audit(1751008640.011:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1527.098449][T20275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1527.154867][T20275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1527.193605][ T26] audit: type=1326 audit(1751008640.011:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1527.249445][ T4457] usbhid 4-1:0.0: can't add hid device: -71 [ 1527.263644][ T4457] usbhid: probe of 4-1:0.0 failed with error -71 [ 1527.299112][ T4457] usb 4-1: USB disconnect, device number 9 [ 1527.323494][ T26] audit: type=1326 audit(1751008640.011:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1527.355543][T20275] team0: Port device team_slave_0 added [ 1527.385908][T20275] team0: Port device team_slave_1 added [ 1527.772268][T20275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1527.873940][T20275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.033258][ T26] audit: type=1326 audit(1751008640.011:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1528.070739][T20275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1528.184613][T20275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1528.198095][ T26] audit: type=1326 audit(1751008640.011:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1528.213504][T20275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.249298][ T26] audit: type=1326 audit(1751008640.011:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1528.273200][T20275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1528.363446][ T26] audit: type=1326 audit(1751008640.011:1423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20326 comm="syz.5.4532" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feac5f8e929 code=0x7ffc0000 [ 1528.407787][T20275] device hsr_slave_0 entered promiscuous mode [ 1528.431494][T20275] device hsr_slave_1 entered promiscuous mode [ 1528.443713][T20275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1528.459068][T20275] Cannot create hsr debugfs directory [ 1528.663460][ T4457] usb 7-1: new high-speed USB device number 106 using dummy_hcd [ 1528.825257][ T127] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1528.854506][ T4457] usb 7-1: Using ep0 maxpacket: 32 [ 1528.896755][ T4457] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1528.968719][ T4457] usb 7-1: config 0 has no interface number 0 [ 1529.017263][ T4457] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1529.079559][ T4457] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1529.089208][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 1529.098654][ T127] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1529.151204][ T127] usb 1-1: config 0 has no interface number 0 [ 1529.161696][ T4457] usb 7-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1529.199981][ T127] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1529.219700][ T4457] usb 7-1: Product: syz [ 1529.236142][ T4457] usb 7-1: Manufacturer: syz [ 1529.248625][ T127] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1529.274601][ T4457] usb 7-1: SerialNumber: syz [ 1529.304083][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.331289][ T4457] usb 7-1: config 0 descriptor?? [ 1529.360888][ T127] usb 1-1: Product: syz [ 1529.371517][ T4457] smsc75xx v1.0.0 [ 1529.388725][ T127] usb 1-1: Manufacturer: syz [ 1529.421292][ T127] usb 1-1: SerialNumber: syz [ 1529.486882][ T127] usb 1-1: config 0 descriptor?? [ 1529.552450][ T127] smsc75xx v1.0.0 [ 1529.778810][ T4457] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1529.814371][ T4457] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1529.824142][ T4457] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1529.849585][ T4457] smsc75xx: probe of 7-1:0.184 failed with error -32 [ 1530.152747][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1530.182655][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1530.202898][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1530.221157][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1530.232569][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1530.244355][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1530.255861][ T127] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 1530.280858][ T127] usb 1-1: USB disconnect, device number 123 [ 1530.805497][T20275] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1530.826936][T20275] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1531.497181][T20275] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1531.511985][T20275] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1531.700747][ T8986] usb 7-1: USB disconnect, device number 106 [ 1532.583530][T20275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1532.642127][T12858] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1532.650675][T12858] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1532.678328][T20275] 8021q: adding VLAN 0 to HW filter on device team0 [ 1532.705085][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1532.725081][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1532.740025][T20103] bridge0: port 1(bridge_slave_0) entered blocking state [ 1532.747230][T20103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1532.784265][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1532.793004][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1532.802150][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1532.810844][T20103] bridge0: port 2(bridge_slave_1) entered blocking state [ 1532.817996][T20103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1532.829477][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1532.838994][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1532.859861][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1532.871800][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1532.882092][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1532.892084][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1532.901606][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1532.910402][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1532.926129][T20275] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1532.928542][T18984] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 1532.938155][T20275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1532.954280][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1532.970790][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1532.981104][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1533.033643][T15015] usb 7-1: new high-speed USB device number 107 using dummy_hcd [ 1533.136066][T18984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1533.157452][T18984] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1533.181896][T18984] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1533.197271][T18984] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1533.206496][T18984] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.218152][T18984] usb 6-1: config 0 descriptor?? [ 1533.225634][T15015] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.259413][T15015] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1533.293184][T15015] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1533.312545][T15015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1533.329718][T15015] usb 7-1: config 0 descriptor?? [ 1533.337717][T15015] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1533.863575][ T48] Bluetooth: hci2: command 0x0405 tx timeout [ 1533.887169][T18984] usbhid 6-1:0.0: can't add hid device: -71 [ 1534.136592][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1534.164984][T12310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1534.215525][T18984] usbhid: probe of 6-1:0.0 failed with error -71 [ 1534.223971][T18984] usb 6-1: USB disconnect, device number 119 [ 1534.248581][T20275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1535.623947][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1535.651527][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1535.660163][ T4241] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1535.723044][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1535.853533][ T4241] usb 1-1: Using ep0 maxpacket: 32 [ 1535.869753][ T4241] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1536.000679][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1536.029582][ T4241] usb 1-1: config 0 has no interface number 0 [ 1536.090354][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1536.122391][T15300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1536.181072][T20275] device veth0_vlan entered promiscuous mode [ 1536.188153][ T4241] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1536.194268][T20275] device veth1_vlan entered promiscuous mode [ 1536.214288][T18984] usb 7-1: USB disconnect, device number 107 [ 1536.222301][ T4241] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1536.252302][ T4241] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1536.287715][ T4241] usb 1-1: Product: syz [ 1536.291944][ T4241] usb 1-1: Manufacturer: syz [ 1536.298266][ T4241] usb 1-1: SerialNumber: syz [ 1536.316050][ T4241] usb 1-1: config 0 descriptor?? [ 1536.327871][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1536.348771][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1536.367641][ T4241] smsc75xx v1.0.0 [ 1536.389898][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1536.420094][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1536.454098][T20275] device veth0_macvtap entered promiscuous mode [ 1536.476420][T20275] device veth1_macvtap entered promiscuous mode [ 1537.137947][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.189153][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.200987][ T4241] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1537.211893][ T4241] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1537.221944][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.233197][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.244832][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.255717][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.265790][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1537.283730][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.305358][T20275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1537.313207][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1537.345410][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1537.381294][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1537.423633][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1537.525475][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1537.597826][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.631602][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1537.662628][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.682896][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1537.703258][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.715539][T20275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1537.726272][T20275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1537.763534][T20275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1537.788665][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1537.831682][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1537.877173][T20275] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.906701][T20275] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.918188][T20275] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1537.927330][T20275] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.035165][ T4241] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1538.055000][ T4241] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1538.075294][ T4241] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1538.086929][T15300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.095714][ T4241] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 1538.110095][T15300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.131446][T20108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1538.142534][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1538.156677][T20108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1538.179199][T20109] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1538.383718][ T4329] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 1539.166343][ T4241] usb 1-1: USB disconnect, device number 124 [ 1539.234064][ T4329] usb 6-1: Using ep0 maxpacket: 32 [ 1539.241884][ T4329] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1539.259710][ T4329] usb 6-1: config 0 has no interface number 0 [ 1539.266139][ T4329] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1539.275426][ T4329] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1539.290518][ T4329] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1539.299527][ T4329] usb 6-1: Product: syz [ 1539.304142][ T4329] usb 6-1: Manufacturer: syz [ 1539.308770][ T4329] usb 6-1: SerialNumber: syz [ 1539.315183][ T4329] usb 6-1: config 0 descriptor?? [ 1539.527601][T15015] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1539.822487][T15015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1540.140472][ T4329] smsc75xx v1.0.0 [ 1540.140490][T15015] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1540.167694][ T4329] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1540.203554][ T4329] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1540.213264][ T4329] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1540.224674][ T4329] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 1540.242485][T15015] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1540.268277][T15015] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1540.279611][T15015] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.299812][T15015] usb 4-1: config 0 descriptor?? [ 1540.332552][ T75] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.448010][ T75] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.536893][ T75] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.627846][ T75] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1540.912600][T15015] usbhid 4-1:0.0: can't add hid device: -71 [ 1540.918796][T15015] usbhid: probe of 4-1:0.0 failed with error -71 [ 1540.926946][T15015] usb 4-1: USB disconnect, device number 10 [ 1541.612615][ T75] device hsr_slave_0 left promiscuous mode [ 1541.619247][ T75] device hsr_slave_1 left promiscuous mode [ 1541.626716][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1541.634469][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1541.642337][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1541.649779][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1541.658023][ T75] device bridge_slave_1 left promiscuous mode [ 1541.664314][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 1541.672535][ T75] device bridge_slave_0 left promiscuous mode [ 1541.678915][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 1541.704620][ T75] device veth1_macvtap left promiscuous mode [ 1541.710651][ T75] device veth0_macvtap left promiscuous mode [ 1541.716993][ T75] device veth1_vlan left promiscuous mode [ 1541.723133][ T75] device veth0_vlan left promiscuous mode [ 1541.752768][ T4297] usb 6-1: USB disconnect, device number 120 [ 1542.143739][ T4329] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1542.953554][ T4329] usb 4-1: Using ep0 maxpacket: 32 [ 1542.963091][ T4329] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1542.991347][ T4329] usb 4-1: config 0 has no interface number 0 [ 1543.101438][ T4329] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1543.355504][ T4329] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1543.438564][ T4329] usb 4-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1543.463420][ T4329] usb 4-1: Product: syz [ 1543.468015][ T4329] usb 4-1: Manufacturer: syz [ 1543.496222][ T4329] usb 4-1: SerialNumber: syz [ 1543.517364][ T4329] usb 4-1: config 0 descriptor?? [ 1543.548573][ T4329] smsc75xx v1.0.0 [ 1543.850716][T19117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1543.877308][T19117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1543.893204][T19117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1543.907079][T19117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1543.917776][T19117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1543.925327][T19117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1543.957297][ T4329] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1543.984513][ T4329] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1544.110894][ T4329] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 1544.124730][ T4329] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 1544.383546][T15280] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 1544.433312][ T4329] usb 7-1: new high-speed USB device number 108 using dummy_hcd [ 1544.563500][T15280] usb 1-1: Using ep0 maxpacket: 32 [ 1544.570470][T15280] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1544.579072][T15280] usb 1-1: config 0 has no interface number 0 [ 1544.585531][T15280] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1544.604179][T15280] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1544.604503][ T75] team0 (unregistering): Port device team_slave_1 removed [ 1544.623867][T15280] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1544.632179][T15280] usb 1-1: Product: syz [ 1544.636584][T15280] usb 1-1: Manufacturer: syz [ 1544.641395][ T4329] usb 7-1: Using ep0 maxpacket: 32 [ 1544.649554][T15280] usb 1-1: SerialNumber: syz [ 1544.652200][ T4329] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 1544.674375][T15280] usb 1-1: config 0 descriptor?? [ 1544.683090][ T4329] usb 7-1: config 0 has no interface number 0 [ 1544.683646][T15280] smsc75xx v1.0.0 [ 1544.698559][ T4329] usb 7-1: config 0 interface 184 has no altsetting 0 [ 1544.737749][ T75] team0 (unregistering): Port device team_slave_0 removed [ 1544.746066][ T4329] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1544.770258][ T4329] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1544.778557][ T4329] usb 7-1: Product: syz [ 1544.782918][ T4329] usb 7-1: Manufacturer: syz [ 1544.788413][ T4329] usb 7-1: SerialNumber: syz [ 1544.817010][ T4329] usb 7-1: config 0 descriptor?? [ 1544.829475][ T4329] smsc75xx v1.0.0 [ 1544.864067][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1544.947848][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1545.231952][ T8986] usb 4-1: USB disconnect, device number 11 [ 1545.288372][T15280] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1545.317614][T15280] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1545.428759][ T4329] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1545.441679][ T4329] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1545.472324][ T4329] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1545.484570][ T4329] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1545.494440][ T4329] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1545.506565][ T4329] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1545.516396][ T4329] smsc75xx: probe of 7-1:0.184 failed with error -71 [ 1545.526412][ T4329] usb 7-1: USB disconnect, device number 108 [ 1545.866688][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.884905][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.021258][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 1546.023565][ T75] bond0 (unregistering): Released all slaves [ 1546.140482][T15280] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1546.173880][T15280] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1546.423538][T15280] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1546.563111][T15280] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 1547.513701][T15280] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 1547.569237][T15015] usb 1-1: USB disconnect, device number 125 [ 1547.780709][T20492] chnl_net:caif_netlink_parms(): no params data found [ 1547.885291][T15280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.903114][T15280] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1547.916353][T15280] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1548.133464][T19117] Bluetooth: hci2: command 0x041b tx timeout [ 1548.689122][T15280] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1548.704164][T15280] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.713968][T15280] usb 6-1: config 0 descriptor?? [ 1548.894604][T20492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1548.925205][T20492] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.071227][T20492] device bridge_slave_0 entered promiscuous mode [ 1549.100477][T20492] bridge0: port 2(bridge_slave_1) entered blocking state [ 1549.161517][T20492] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.212078][T20492] device bridge_slave_1 entered promiscuous mode [ 1549.329342][T15280] usbhid 6-1:0.0: can't add hid device: -71 [ 1549.336341][T15280] usbhid: probe of 6-1:0.0 failed with error -71 [ 1549.383302][T15280] usb 6-1: USB disconnect, device number 121 [ 1549.491026][T20492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1549.586266][T20492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1549.749214][T20492] team0: Port device team_slave_0 added [ 1549.782251][T20492] team0: Port device team_slave_1 added [ 1549.888944][T20492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1549.913679][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1549.970518][T20492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1550.020010][T20492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1550.028522][T20492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1550.154749][T20492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1550.173550][T19117] Bluetooth: hci2: command 0x040f tx timeout [ 1550.999359][T20492] device hsr_slave_0 entered promiscuous mode [ 1551.057251][T20492] device hsr_slave_1 entered promiscuous mode [ 1551.096613][T20492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1552.097711][T20492] Cannot create hsr debugfs directory [ 1552.253528][T19117] Bluetooth: hci2: command 0x0419 tx timeout [ 1552.483516][ T127] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 1552.631182][T20569] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1553.279607][T15280] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1553.318067][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 1553.372036][ T127] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1553.381554][ T127] usb 1-1: config 0 has no interface number 0 [ 1553.388055][ T127] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1553.414745][ T127] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1553.426168][ T127] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1553.434587][ T127] usb 1-1: Product: syz [ 1553.438917][ T127] usb 1-1: Manufacturer: syz [ 1553.443647][ T127] usb 1-1: SerialNumber: syz [ 1553.449587][ T127] usb 1-1: config 0 descriptor?? [ 1553.471431][ T127] smsc75xx v1.0.0 [ 1553.555002][T15280] usb 4-1: config 0 has no interfaces? [ 1553.560597][T15280] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1553.572994][T15280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.598170][T15280] usb 4-1: config 0 descriptor?? [ 1554.492514][ T4457] usb 4-1: USB disconnect, device number 12 [ 1554.691969][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1554.703658][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1554.961319][T20492] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1555.052432][T20492] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1555.105723][T20492] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1555.139530][T20492] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1555.360928][T20492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1555.379966][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1555.391644][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1555.416681][T20492] 8021q: adding VLAN 0 to HW filter on device team0 [ 1555.428210][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1555.438132][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1555.511916][T20099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1555.519127][T20099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1555.527243][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1555.571344][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1555.632316][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1555.666569][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1555.725962][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1555.737766][ T127] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 1555.812841][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1555.870724][T20099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1555.877948][T20099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1555.995746][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1556.150486][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1556.232851][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1556.290878][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1556.324375][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1556.353647][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1556.391327][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1556.407072][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1556.429183][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1556.577010][T20492] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1556.618794][ T4329] usb 1-1: USB disconnect, device number 126 [ 1556.637506][T20492] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1556.703099][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1556.731922][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1557.013599][ T4681] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1557.203875][ T4681] usb 4-1: Using ep0 maxpacket: 32 [ 1557.221539][ T4681] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1557.248238][ T4681] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 1557.308558][ T4681] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.350637][ T4681] usb 4-1: config 0 descriptor?? [ 1557.781040][ T4681] corsair-psu 0003:1B1C:1C09.0021: unknown main item tag 0x0 [ 1557.806760][ T4681] corsair-psu 0003:1B1C:1C09.0021: unknown main item tag 0x0 [ 1557.883738][ T4681] corsair-psu 0003:1B1C:1C09.0021: unknown main item tag 0x0 [ 1557.911651][ T4681] corsair-psu 0003:1B1C:1C09.0021: unknown main item tag 0x0 [ 1557.962283][ T4681] corsair-psu 0003:1B1C:1C09.0021: unknown main item tag 0x0 [ 1558.009863][ T4681] corsair-psu 0003:1B1C:1C09.0021: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 1558.094820][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1558.122733][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1558.160571][T20492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1558.209866][T20623] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 1558.216440][T20623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1558.264969][T20623] vhci_hcd vhci_hcd.0: Device attached [ 1558.270729][T20628] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 1558.277352][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1558.323486][ T4241] usb 7-1: new high-speed USB device number 109 using dummy_hcd [ 1558.339089][T20631] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 1558.345650][T20631] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1558.361808][T20631] vhci_hcd vhci_hcd.0: Device attached [ 1558.362950][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1558.374003][ T4681] corsair-psu 0003:1B1C:1C09.0021: unable to initialize device (-110) [ 1558.382389][T20623] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 1558.389001][T20623] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1558.417366][ T4681] corsair-psu: probe of 0003:1B1C:1C09.0021 failed with error -110 [ 1558.425533][T20631] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 1558.432222][T20631] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1558.445138][T20623] vhci_hcd vhci_hcd.0: Device attached [ 1558.483951][T20631] vhci_hcd vhci_hcd.0: Device attached [ 1558.498868][ T4681] usb 4-1: USB disconnect, device number 13 [ 1558.506145][T20623] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1558.516677][ T4241] usb 7-1: config 0 has no interfaces? [ 1558.522163][ T4241] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1558.546649][T20628] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(12) [ 1558.553288][T20628] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1558.564020][T18984] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 1558.581988][T20628] vhci_hcd vhci_hcd.0: Device attached [ 1558.587882][ T4241] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.601572][T20625] vhci_hcd: connection reset by peer [ 1558.601745][T20635] vhci_hcd: connection closed [ 1558.607172][T20633] vhci_hcd: connection closed [ 1558.612156][T20629] vhci_hcd: connection closed [ 1558.636263][ T75] vhci_hcd: stop threads [ 1558.640737][T20639] vhci_hcd: connection closed [ 1558.640979][ T75] vhci_hcd: release socket [ 1558.655120][T20637] vhci_hcd: connection closed [ 1558.657240][ T4241] usb 7-1: config 0 descriptor?? [ 1558.674212][ T75] vhci_hcd: disconnect device [ 1558.681344][ T75] vhci_hcd: stop threads [ 1558.692879][ T75] vhci_hcd: release socket [ 1558.697535][ T75] vhci_hcd: disconnect device [ 1558.702568][ T75] vhci_hcd: stop threads [ 1558.717078][ T75] vhci_hcd: release socket [ 1558.723328][ T75] vhci_hcd: disconnect device [ 1558.738963][ T75] vhci_hcd: stop threads [ 1558.743255][ T75] vhci_hcd: release socket [ 1558.759460][ T75] vhci_hcd: disconnect device [ 1558.779912][ T75] vhci_hcd: stop threads [ 1558.792818][ T75] vhci_hcd: release socket [ 1558.808772][ T75] vhci_hcd: disconnect device [ 1558.835861][ T75] vhci_hcd: stop threads [ 1558.853263][ T75] vhci_hcd: release socket [ 1558.858428][ T75] vhci_hcd: disconnect device [ 1558.875982][ T4681] usb 7-1: USB disconnect, device number 109 [ 1559.310111][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1559.329950][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1559.367666][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1559.376882][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1559.402973][T20492] device veth0_vlan entered promiscuous mode [ 1559.426244][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1559.471749][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1559.485562][T20492] device veth1_vlan entered promiscuous mode [ 1559.549420][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1559.582296][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1559.612736][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1559.654215][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1559.706599][T20492] device veth0_macvtap entered promiscuous mode [ 1559.739971][T20492] device veth1_macvtap entered promiscuous mode [ 1559.806792][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1559.853426][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.863646][ T127] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 1559.903435][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1559.937104][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1559.969815][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.021199][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.043423][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 1560.050893][ T127] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1560.103518][ T127] usb 1-1: config 0 has no interface number 0 [ 1560.109665][ T127] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1560.124059][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1560.163398][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.176598][ T127] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1560.194224][T20492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1560.202639][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1560.210377][ T127] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1560.226698][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1560.253519][ T127] usb 1-1: Product: syz [ 1560.257743][ T127] usb 1-1: Manufacturer: syz [ 1560.262354][ T127] usb 1-1: SerialNumber: syz [ 1560.267877][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1560.299808][T20099] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1560.358476][ T127] usb 1-1: config 0 descriptor?? [ 1560.430614][ T127] smsc75xx v1.0.0 [ 1560.477562][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.540966][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.853496][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.864197][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.874132][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.884855][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.894781][T20492] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1560.905585][T20492] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1560.921195][T20492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1560.933220][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1560.943202][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1560.962802][T20492] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.983001][T20492] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1560.992628][T20492] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.005330][T20492] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1561.131348][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.150315][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.191717][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1561.213859][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1561.215077][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1561.239515][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1561.276693][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1561.295137][T20103] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1562.193610][T12858] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.249483][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1562.261542][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1562.273405][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1562.292161][ T127] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 1562.381551][T12858] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.577574][T12858] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1562.706039][T12858] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.281590][ T4457] usb 1-1: USB disconnect, device number 127 [ 1563.700944][T18984] vhci_hcd: vhci_device speed not set [ 1563.900752][T12858] device hsr_slave_0 left promiscuous mode [ 1563.907126][T12858] device hsr_slave_1 left promiscuous mode [ 1563.913636][T12858] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1563.921054][T12858] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1563.929160][T12858] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1563.941653][T12858] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1563.949383][T12858] device bridge_slave_1 left promiscuous mode [ 1563.955953][T12858] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.964249][T12858] device bridge_slave_0 left promiscuous mode [ 1563.970442][T12858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.000637][T12858] device veth1_macvtap left promiscuous mode [ 1564.006748][T12858] device veth0_macvtap left promiscuous mode [ 1564.012803][T12858] device veth1_vlan left promiscuous mode [ 1564.018769][T12858] device veth0_vlan left promiscuous mode [ 1564.623820][T15280] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 1564.833744][T15280] usb 6-1: Using ep0 maxpacket: 8 [ 1564.851084][T15280] usb 6-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1564.965963][T15280] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1565.067839][T15280] usb 6-1: Product: syz [ 1565.085402][T15015] usb usb34-port1: attempt power cycle [ 1565.123342][T15280] usb 6-1: Manufacturer: syz [ 1565.167641][T15280] usb 6-1: SerialNumber: syz [ 1565.270269][T15280] usb 6-1: config 0 descriptor?? [ 1565.352769][T15280] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1565.637644][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1565.648874][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1565.658698][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1565.675910][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1565.689773][ T8809] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1565.697702][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1565.763864][T15015] usb usb34-port1: unable to enumerate USB device [ 1565.955990][T12858] team0 (unregistering): Port device team_slave_1 removed [ 1566.031422][T12858] team0 (unregistering): Port device team_slave_0 removed [ 1566.063491][T15015] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 1566.116025][T12858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1566.191179][T12858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1566.272992][T15015] usb 1-1: config 0 has no interfaces? [ 1566.278950][T15015] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1566.288119][T15015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1566.298123][T15015] usb 1-1: config 0 descriptor?? [ 1566.453700][ T8983] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1566.667963][ T8983] usb 4-1: Using ep0 maxpacket: 32 [ 1566.690895][ T8983] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1566.707687][ T8983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1566.716257][ T8983] usb 4-1: Product: syz [ 1566.720483][ T8983] usb 4-1: Manufacturer: syz [ 1566.725294][ T8983] usb 4-1: SerialNumber: syz [ 1566.732404][ T8983] usb 4-1: config 0 descriptor?? [ 1566.740530][ T8983] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1566.941993][T12858] bond0 (unregistering): Released all slaves [ 1567.040513][T20694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4621'. [ 1567.179553][T15280] gspca_sonixj: reg_r err -32 [ 1567.243632][T15280] sonixj: probe of 6-1:0.0 failed with error -32 [ 1567.341588][T20694] team0 (unregistering): Port device team_slave_0 removed [ 1567.367859][T20694] team0 (unregistering): Port device team_slave_1 removed [ 1567.428121][T15280] usb 1-1: USB disconnect, device number 2 [ 1567.577014][T20713] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1567.661443][T20700] chnl_net:caif_netlink_parms(): no params data found [ 1567.757722][T20700] bridge0: port 1(bridge_slave_0) entered blocking state [ 1567.769947][T20700] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.773660][T19117] Bluetooth: hci2: command 0x0409 tx timeout [ 1567.778350][T20700] device bridge_slave_0 entered promiscuous mode [ 1567.792144][T20700] bridge0: port 2(bridge_slave_1) entered blocking state [ 1567.804966][T20700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1567.813077][T20700] device bridge_slave_1 entered promiscuous mode [ 1567.846610][T20700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1567.859712][T20700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1567.905957][T20700] team0: Port device team_slave_0 added [ 1567.916881][T20700] team0: Port device team_slave_1 added [ 1567.960617][T20700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1567.974320][T20700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.000854][T20700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1568.028425][T20700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1568.036655][T20700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1568.070436][T20700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1568.213939][T20700] device hsr_slave_0 entered promiscuous mode [ 1568.222036][T20700] device hsr_slave_1 entered promiscuous mode [ 1568.229102][T20700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1568.236802][T20700] Cannot create hsr debugfs directory [ 1568.271647][T18984] usb 6-1: USB disconnect, device number 122 [ 1568.609979][ T8983] gspca_stk1135: reg_w 0x200 err -71 [ 1568.869981][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1568.876813][ T8983] gspca_stk1135: Sensor write failed [ 1568.882337][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1568.889386][ T8983] gspca_stk1135: Sensor write failed [ 1568.922061][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1568.928729][ T8983] gspca_stk1135: Sensor read failed [ 1568.934117][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1569.025095][ T8983] gspca_stk1135: Sensor read failed [ 1569.030776][ T8983] gspca_stk1135: Detected sensor type unknown (0x0) [ 1569.037932][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1569.044338][ T8983] gspca_stk1135: Sensor read failed [ 1569.049567][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1569.056371][ T8983] gspca_stk1135: Sensor read failed [ 1569.061607][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1569.068037][ T8983] gspca_stk1135: Sensor write failed [ 1569.073408][ T8983] gspca_stk1135: serial bus timeout: status=0x00 [ 1569.079760][ T8983] gspca_stk1135: Sensor write failed [ 1569.085260][ T8983] stk1135: probe of 4-1:0.0 failed with error -71 [ 1569.093324][ T8983] usb 4-1: USB disconnect, device number 14 [ 1569.855215][T19117] Bluetooth: hci2: command 0x041b tx timeout [ 1570.013647][T18984] usb 6-1: new high-speed USB device number 123 using dummy_hcd [ 1570.057157][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 1570.057172][ T26] audit: type=1326 audit(1751008684.152:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.092517][ T26] audit: type=1326 audit(1751008684.182:1499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.231860][ T26] audit: type=1326 audit(1751008684.222:1500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.296952][ T26] audit: type=1326 audit(1751008684.222:1501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.332135][ T26] audit: type=1326 audit(1751008684.222:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.753704][ T26] audit: type=1326 audit(1751008684.222:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.776674][ T26] audit: type=1326 audit(1751008684.222:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.799269][T18984] usb 6-1: Using ep0 maxpacket: 32 [ 1570.804626][ T26] audit: type=1326 audit(1751008684.222:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.827541][ T26] audit: type=1326 audit(1751008684.222:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.851237][ T26] audit: type=1326 audit(1751008684.222:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20733 comm="syz.6.4634" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1570.877704][T18984] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1570.978511][T18984] usb 6-1: config 0 has no interface number 0 [ 1570.994451][T18984] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1571.023704][T18984] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1571.043990][T18984] usb 6-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 1571.058495][T18984] usb 6-1: Product: syz [ 1571.068497][T18984] usb 6-1: Manufacturer: syz [ 1571.073150][T18984] usb 6-1: SerialNumber: syz [ 1571.084360][T18984] usb 6-1: config 0 descriptor?? [ 1571.104436][T18984] smsc75xx v1.0.0 [ 1571.108349][T20746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1571.118074][T20746] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1571.138097][T20746] device batadv1 entered promiscuous mode [ 1571.357907][T20700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1571.374322][T20700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1571.385996][T20700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1571.439598][T20700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1571.591775][T20700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1571.648188][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1571.667915][T20102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1571.684508][T20700] 8021q: adding VLAN 0 to HW filter on device team0 [ 1571.698016][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1571.708010][T18984] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1571.719319][T18984] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1571.722175][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1571.737971][ T5132] bridge0: port 1(bridge_slave_0) entered blocking state [ 1571.745127][ T5132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1571.766779][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1571.784500][ T4297] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1571.787196][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1571.807763][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1571.817871][ T5132] bridge0: port 2(bridge_slave_1) entered blocking state [ 1571.825029][ T5132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1571.934859][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 1572.243116][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1572.274541][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1572.294324][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1572.312499][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1572.322344][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1572.346240][ T4297] usb 4-1: config 0 has no interfaces? [ 1572.351950][ T4297] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1572.365132][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1572.373521][ T4297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1572.383111][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1572.393035][ T4297] usb 4-1: config 0 descriptor?? [ 1572.401895][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1572.414254][T20108] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1572.426836][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1572.437415][ T5132] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1572.556242][T20700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1573.421551][ T4297] usb 4-1: USB disconnect, device number 15 [ 1573.605046][T18984] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1574.348992][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 1574.355514][T18984] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 1574.365246][T18984] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 1574.374799][T18984] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 1574.440688][ T4681] usb 6-1: USB disconnect, device number 123 [ 1574.536697][T20781] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 1575.087222][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 1575.087237][ T26] audit: type=1326 audit(1751008689.182:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1575.318021][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1575.324238][ T26] audit: type=1326 audit(1751008689.212:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1575.359044][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1575.373242][T20700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1576.266628][ T26] audit: type=1326 audit(1751008689.282:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1576.357955][ T26] audit: type=1326 audit(1751008689.282:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1576.459617][ T26] audit: type=1326 audit(1751008689.352:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1577.005569][ T26] audit: type=1326 audit(1751008689.362:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1577.076216][ T26] audit: type=1326 audit(1751008689.362:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1577.196208][ T26] audit: type=1326 audit(1751008689.372:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1577.299585][ T26] audit: type=1326 audit(1751008689.412:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1577.401475][ T26] audit: type=1326 audit(1751008689.412:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20790 comm="syz.3.4648" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdb0f18e929 code=0x7ffc0000 [ 1577.447217][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1577.467632][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1577.506376][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1577.558578][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1577.572137][T20700] device veth0_vlan entered promiscuous mode [ 1577.583455][ T127] usb 7-1: new high-speed USB device number 110 using dummy_hcd [ 1577.586299][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1577.603573][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1577.620416][T20700] device veth1_vlan entered promiscuous mode [ 1577.673252][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1577.686977][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1577.708825][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1577.728009][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1577.751433][T20700] device veth0_macvtap entered promiscuous mode [ 1577.766996][T20700] device veth1_macvtap entered promiscuous mode [ 1577.793850][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.806057][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.821478][ T127] usb 7-1: no configurations [ 1577.830725][ T127] usb 7-1: can't read configurations, error -22 [ 1577.856980][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.870838][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.881595][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.897101][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.908602][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1577.924745][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1577.948718][T20700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1577.971206][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1577.987080][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1578.012393][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1578.023480][ T127] usb 7-1: new high-speed USB device number 111 using dummy_hcd [ 1578.028202][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1578.046242][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.059689][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.071711][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.090312][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.110552][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.130800][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.149240][T20700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1578.161171][T20700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1578.191385][T20700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1578.202460][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1578.220111][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1578.232852][T20700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.245733][ T127] usb 7-1: no configurations [ 1578.250601][ T127] usb 7-1: can't read configurations, error -22 [ 1578.268962][T20700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.271398][ T127] usb usb7-port1: attempt power cycle [ 1578.282290][T20700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.312816][T20700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1578.435961][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.455615][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.529027][T20106] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1578.554239][T20106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1578.564064][T20106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1578.600708][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1578.723570][ T127] usb 7-1: new high-speed USB device number 112 using dummy_hcd [ 1578.797021][ T127] usb 7-1: no configurations [ 1578.820448][ T127] usb 7-1: can't read configurations, error -22 [ 1578.904619][T20828] xt_socket: unknown flags 0x58 [ 1578.973478][ T127] usb 7-1: new high-speed USB device number 113 using dummy_hcd [ 1579.014586][ T127] usb 7-1: no configurations [ 1579.019234][ T127] usb 7-1: can't read configurations, error -22 [ 1579.033608][ T127] usb usb7-port1: unable to enumerate USB device [ 1579.043628][T15280] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1579.185633][ T4329] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 1579.242505][T20106] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1579.393840][ T4329] usb 6-1: Using ep0 maxpacket: 32 [ 1579.430080][ T4329] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1579.511494][ T4329] usb 6-1: config 0 has no interface number 0 [ 1579.618727][ T4329] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1579.708737][ T4329] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1579.790821][ T4329] usb 6-1: Product: syz [ 1579.829674][ T4329] usb 6-1: Manufacturer: syz [ 1579.857916][ T4329] usb 6-1: SerialNumber: syz [ 1579.874444][ T4329] usb 6-1: config 0 descriptor?? [ 1579.875070][T15280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1579.898044][ T4329] smsc95xx v2.0.0 [ 1579.903532][T15280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1579.923435][T15280] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1579.949337][T15280] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1579.968322][T15280] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.987987][T15280] usb 4-1: config 0 descriptor?? [ 1580.208663][T20106] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.598679][T15280] usbhid 4-1:0.0: can't add hid device: -71 [ 1580.604798][T15280] usbhid: probe of 4-1:0.0 failed with error -71 [ 1580.612890][T15280] usb 4-1: USB disconnect, device number 16 [ 1580.693231][ T4329] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1580.707858][ T4329] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1580.717267][ T4329] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1580.728410][ T4329] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 1580.737766][ T4329] usb 6-1: USB disconnect, device number 124 [ 1580.968348][T20106] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1581.034176][T20106] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1582.804870][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4661'. [ 1584.283101][ T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1584.294280][ T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1584.302810][ T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1584.312631][ T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1584.320220][ T48] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1584.327469][ T48] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1584.723531][ T127] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 1584.899371][T20845] team0 (unregistering): Port device team_slave_0 removed [ 1584.922342][T20845] team0 (unregistering): Port device team_slave_1 removed [ 1584.941414][ T127] usb 6-1: Using ep0 maxpacket: 32 [ 1584.951754][ T127] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1584.968905][ T127] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1584.977084][ T127] usb 6-1: Product: syz [ 1584.981359][ T127] usb 6-1: Manufacturer: syz [ 1584.995977][ T127] usb 6-1: SerialNumber: syz [ 1585.004725][ T127] usb 6-1: config 0 descriptor?? [ 1585.012696][ T127] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1585.054063][ T4681] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1585.185377][T20867] serio: Serial port ptm1 [ 1585.254312][ T4681] usb 4-1: Using ep0 maxpacket: 32 [ 1585.306406][ T4681] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 1585.320680][ T4681] usb 4-1: config 0 has no interface number 0 [ 1585.330475][ T4681] usb 4-1: config 0 interface 184 has no altsetting 0 [ 1585.374989][ T4681] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1585.389476][ T4681] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.398987][ T4681] usb 4-1: Product: syz [ 1585.403719][ T4681] usb 4-1: Manufacturer: syz [ 1585.409590][ T4681] usb 4-1: SerialNumber: syz [ 1585.432754][ T4681] usb 4-1: config 0 descriptor?? [ 1585.515672][ T4681] smsc75xx v1.0.0 [ 1586.067528][ T26] kauditd_printk_skb: 63 callbacks suppressed [ 1586.067544][ T26] audit: type=1326 audit(1751008700.162:1615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.104629][ T26] audit: type=1326 audit(1751008700.162:1616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.127373][ T26] audit: type=1326 audit(1751008700.162:1617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.178042][ T26] audit: type=1326 audit(1751008700.162:1618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.200943][ T26] audit: type=1326 audit(1751008700.162:1619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.224554][ T26] audit: type=1326 audit(1751008700.162:1620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.247315][ T26] audit: type=1326 audit(1751008700.162:1621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.270214][ T26] audit: type=1326 audit(1751008700.162:1622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.297186][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 1586.318364][ T26] audit: type=1326 audit(1751008700.162:1623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.345510][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1586.346537][ T26] audit: type=1326 audit(1751008700.162:1624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20873 comm="syz.6.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0bf4b8e929 code=0x7ffc0000 [ 1586.366704][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1586.388650][ T4297] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1586.397481][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1586.407610][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1586.413701][T19117] Bluetooth: hci2: command 0x0409 tx timeout [ 1586.418314][ T4681] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1586.438951][T20106] device hsr_slave_0 left promiscuous mode [ 1586.439504][ T4681] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 1586.480854][ T4681] usb 4-1: USB disconnect, device number 17 [ 1586.593605][ T4297] usb 1-1: Using ep0 maxpacket: 8 [ 1586.608837][ T4297] usb 1-1: config 0 has no interfaces? [ 1586.702832][ T4297] usb 1-1: New USB device found, idVendor=1b3d, idProduct=01cd, bcdDevice= 8.00 [ 1586.785456][ T4297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.862058][ T4297] usb 1-1: Product: syz [ 1586.890932][ T4297] usb 1-1: Manufacturer: syz [ 1586.917941][ T4297] usb 1-1: SerialNumber: syz [ 1586.931434][T20106] device hsr_slave_1 left promiscuous mode [ 1586.944105][T20106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1586.952091][T20106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1586.960581][ T127] gspca_stk1135: reg_w 0xf err -110 [ 1586.966922][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1586.967127][ T4297] usb 1-1: config 0 descriptor?? [ 1586.973248][ T127] gspca_stk1135: Sensor write failed [ 1586.973272][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1586.973283][ T127] gspca_stk1135: Sensor write failed [ 1586.973305][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1587.002062][ T127] gspca_stk1135: Sensor read failed [ 1587.002640][T20106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.007469][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1587.015126][T20106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.027228][ T127] gspca_stk1135: Sensor read failed [ 1587.034284][ T127] gspca_stk1135: Detected sensor type unknown (0x0) [ 1587.035202][T20106] device bridge_slave_1 left promiscuous mode [ 1587.040973][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1587.040988][ T127] gspca_stk1135: Sensor read failed [ 1587.041011][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1587.041020][ T127] gspca_stk1135: Sensor read failed [ 1587.041041][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1587.052521][T20106] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.053819][ T127] gspca_stk1135: Sensor write failed [ 1587.089243][ T127] gspca_stk1135: serial bus timeout: status=0x00 [ 1587.095659][ T127] gspca_stk1135: Sensor write failed [ 1587.096128][T20106] device bridge_slave_0 left promiscuous mode [ 1587.100982][ T127] stk1135: probe of 6-1:0.0 failed with error -110 [ 1587.119198][T20106] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.145524][T20106] device veth1_macvtap left promiscuous mode [ 1587.151557][T20106] device veth0_macvtap left promiscuous mode [ 1587.157914][T20106] device veth1_vlan left promiscuous mode [ 1587.164055][T20106] device veth0_vlan left promiscuous mode [ 1587.233173][ T4681] usb 1-1: USB disconnect, device number 3 [ 1587.523567][ T127] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1587.723586][ T127] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1587.741793][ T127] usb 4-1: config 0 has no interfaces? [ 1587.749008][ T127] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1587.758343][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1587.768261][ T127] usb 4-1: config 0 descriptor?? [ 1587.821234][T20106] team0 (unregistering): Port device team_slave_1 removed [ 1587.875908][T20106] team0 (unregistering): Port device team_slave_0 removed [ 1587.954199][T20106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1588.031927][ T127] usb 6-1: USB disconnect, device number 125 [ 1588.041266][T20106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1588.208187][T20886] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 1588.231956][T20886] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1588.249683][ T4681] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1588.259584][T20886] ------------[ cut here ]------------ [ 1588.265393][T20886] WARNING: CPU: 1 PID: 20886 at arch/x86/kvm/x86.c:11214 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.275764][T20886] Modules linked in: [ 1588.279655][T20886] CPU: 1 PID: 20886 Comm: syz.5.4675 Not tainted 6.1.141-syzkaller #0 [ 1588.287837][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1588.297938][T20886] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.304371][T20886] Code: e8 c7 85 c2 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 8c 85 c2 00 e9 ce e5 ff ff e8 f2 0c 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 1588.324028][T20886] RSP: 0018:ffffc90003ae7c48 EFLAGS: 00010283 [ 1588.330127][T20886] RAX: ffffffff810fc97e RBX: ffff88807d8a0000 RCX: 0000000000080000 [ 1588.338145][T20886] RDX: ffffc9001bfa5000 RSI: 00000000000003d4 RDI: 00000000000003d5 [ 1588.346143][T20886] RBP: ffff888066a4b000 R08: dffffc0000000000 R09: fffffbfff2117069 [ 1588.354125][T20886] R10: fffffbfff2117069 R11: 1ffffffff2117068 R12: ffff88807d8a02ec [ 1588.362083][T20886] R13: ffff88807d8a00d8 R14: dffffc0000000000 R15: 0000000000000000 [ 1588.370064][T20886] FS: 00007feac6d376c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1588.379003][T20886] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.385598][T20886] CR2: 00005555737a5808 CR3: 00000000669df000 CR4: 00000000003526e0 [ 1588.393577][T20886] Call Trace: [ 1588.396842][T20886] [ 1588.399761][T20886] ? mutex_lock_nested+0x10/0x10 [ 1588.404713][T20886] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 1588.410431][T20886] kvm_vcpu_ioctl+0x887/0xb80 [ 1588.415118][T20886] ? xa_release+0x50/0x50 [ 1588.419477][T20886] ? __fget_files+0x28/0x4d0 [ 1588.424088][T20886] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1588.429008][T20886] ? security_file_ioctl+0x7c/0xa0 [ 1588.434124][T20886] ? xa_release+0x50/0x50 [ 1588.438443][T20886] __se_sys_ioctl+0xfa/0x170 [ 1588.443024][T20886] do_syscall_64+0x4c/0xa0 [ 1588.447454][T20886] ? clear_bhb_loop+0x60/0xb0 [ 1588.452117][T20886] ? clear_bhb_loop+0x60/0xb0 [ 1588.456805][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.462692][T20886] RIP: 0033:0x7feac5f8e929 [ 1588.467124][T20886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.486747][T20886] RSP: 002b:00007feac6d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1588.495171][T20886] RAX: ffffffffffffffda RBX: 00007feac61b5fa0 RCX: 00007feac5f8e929 [ 1588.503129][T20886] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1588.511196][T20886] RBP: 00007feac6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1588.519179][T20886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.527185][T20886] R13: 0000000000000000 R14: 00007feac61b5fa0 R15: 00007ffe7fe06f18 [ 1588.535190][T20886] [ 1588.538226][T20886] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1588.545490][T20886] CPU: 1 PID: 20886 Comm: syz.5.4675 Not tainted 6.1.141-syzkaller #0 [ 1588.553620][T20886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1588.563657][T20886] Call Trace: [ 1588.566918][T20886] [ 1588.569830][T20886] dump_stack_lvl+0x168/0x22e [ 1588.574498][T20886] ? memcpy+0x3c/0x60 [ 1588.578464][T20886] ? show_regs_print_info+0x12/0x12 [ 1588.583649][T20886] ? load_image+0x3b0/0x3b0 [ 1588.588142][T20886] panic+0x2c9/0x710 [ 1588.592022][T20886] ? bpf_jit_dump+0xd0/0xd0 [ 1588.596513][T20886] __warn+0x2f8/0x4f0 [ 1588.600477][T20886] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.606268][T20886] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.612062][T20886] report_bug+0x2ba/0x4f0 [ 1588.616384][T20886] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.622205][T20886] handle_bug+0x3a/0x70 [ 1588.626353][T20886] exc_invalid_op+0x16/0x40 [ 1588.630842][T20886] asm_exc_invalid_op+0x16/0x20 [ 1588.635694][T20886] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.642094][T20886] Code: e8 c7 85 c2 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 8c 85 c2 00 e9 ce e5 ff ff e8 f2 0c 71 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 1588.661683][T20886] RSP: 0018:ffffc90003ae7c48 EFLAGS: 00010283 [ 1588.667734][T20886] RAX: ffffffff810fc97e RBX: ffff88807d8a0000 RCX: 0000000000080000 [ 1588.675685][T20886] RDX: ffffc9001bfa5000 RSI: 00000000000003d4 RDI: 00000000000003d5 [ 1588.683635][T20886] RBP: ffff888066a4b000 R08: dffffc0000000000 R09: fffffbfff2117069 [ 1588.691585][T20886] R10: fffffbfff2117069 R11: 1ffffffff2117068 R12: ffff88807d8a02ec [ 1588.699539][T20886] R13: ffff88807d8a00d8 R14: dffffc0000000000 R15: 0000000000000000 [ 1588.707499][T20886] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.713298][T20886] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 1588.719084][T20886] ? mutex_lock_nested+0x10/0x10 [ 1588.724023][T20886] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 1588.729737][T20886] kvm_vcpu_ioctl+0x887/0xb80 [ 1588.734400][T20886] ? xa_release+0x50/0x50 [ 1588.738715][T20886] ? __fget_files+0x28/0x4d0 [ 1588.743295][T20886] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1588.748235][T20886] ? security_file_ioctl+0x7c/0xa0 [ 1588.753336][T20886] ? xa_release+0x50/0x50 [ 1588.757657][T20886] __se_sys_ioctl+0xfa/0x170 [ 1588.762234][T20886] do_syscall_64+0x4c/0xa0 [ 1588.766637][T20886] ? clear_bhb_loop+0x60/0xb0 [ 1588.771296][T20886] ? clear_bhb_loop+0x60/0xb0 [ 1588.775953][T20886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1588.781831][T20886] RIP: 0033:0x7feac5f8e929 [ 1588.786229][T20886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1588.805820][T20886] RSP: 002b:00007feac6d37038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1588.814212][T20886] RAX: ffffffffffffffda RBX: 00007feac61b5fa0 RCX: 00007feac5f8e929 [ 1588.822253][T20886] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 1588.830213][T20886] RBP: 00007feac6010b39 R08: 0000000000000000 R09: 0000000000000000 [ 1588.838167][T20886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.846119][T20886] R13: 0000000000000000 R14: 00007feac61b5fa0 R15: 00007ffe7fe06f18 [ 1588.854081][T20886] [ 1588.857372][T20886] Kernel Offset: disabled [ 1588.861763][T20886] Rebooting in 86400 seconds..