last executing test programs: 29.908528423s ago: executing program 2 (id=52): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmsg$alg(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000002300)="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", 0xf11}], 0x2, &(0x7f0000001240)=[@op={0x10, 0x117, 0x3, 0x1}], 0x10, 0x8801}, 0x4000001) 29.653406729s ago: executing program 2 (id=55): ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000001200)={{}, 0x0, 0x10, @inherit={0x90, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000000900000000000000ffffffffffffffff00000000004000002000000000000000010000000000000aff7f00000000000004000000000000005938000000000000de3a00000000000000000080000000000800000000000000080000e6000000000300000000000000070000010000000000000003000000000061067000000000000001"]}, @subvolid=0x8}) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0400001", @ANYRES16=0x0, @ANYBLOB="000000000000000000001b000000200022801c000080080002000000000008000400000000000800050000000000050092000000000007002100616100007c002280340000800800030000000000080005000000000008000200000000000800030000000000080002000000000008000400000000004400008008000400000000000800070000000000080006000000000008000500000000000800010000000000080002"], 0xc0}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, &(0x7f0000000000/0xe000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000008000/0x2000)=nil, &(0x7f0000260000/0x4000)=nil, &(0x7f0000008000/0x3000)=nil, &(0x7f0000947000/0x1000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000969000/0x1000)=nil, &(0x7f0000663000/0x1000)=nil, &(0x7f000000c000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 29.26164414s ago: executing program 2 (id=59): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564bf02f13acaf"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) ioctl$KVM_RUN(r2, 0xae80, 0x0) 25.866182752s ago: executing program 2 (id=77): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000100)='./file0\x00', 0x1) 25.64767001s ago: executing program 2 (id=78): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xf}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') read$FUSE(r1, &(0x7f0000004dc0)={0x2020}, 0x2020) 25.193541596s ago: executing program 2 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 24.533405681s ago: executing program 32 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newtfilter={0x5c, 0x2c, 0xd27, 0x870b525, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 6.207506495s ago: executing program 4 (id=187): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2d50, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000001300)=ANY=[@ANYBLOB="000457"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="5400000f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.814209137s ago: executing program 1 (id=191): syz_open_dev$rtc(&(0x7f00000004c0), 0x0, 0x0) r0 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f00000003c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0) close(0x4) 5.760673516s ago: executing program 1 (id=192): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) write$char_usb(r2, &(0x7f00000001c0)='1', 0x1) syz_usb_disconnect(r1) close_range(r0, 0xffffffffffffffff, 0x0) 4.478174584s ago: executing program 5 (id=202): r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x150, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 4.139364725s ago: executing program 5 (id=204): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) creat(0x0, 0x124) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0xfffffffffffffede, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000001180)=ANY=[@ANYBLOB='@f@'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.739212588s ago: executing program 3 (id=206): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000271}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 3.72044406s ago: executing program 4 (id=207): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x800007, 0x38011, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = mmap$KVM_VCPU(&(0x7f0000000000/0x14000)=nil, 0x930, 0x3000003, 0x28031, 0xffffffffffffffff, 0x0) syz_memcpy_off$KVM_EXIT_HYPERCALL(r1, 0x20, &(0x7f0000000240)="fb4149dd033be3ac2cc4a22332fdaa8de0418df24200000000a6ab8031d1dfd92f0000000001ffffffff9610fbff77521ce10d8f6b69d22627e700", 0x0, 0xffffffffffffffca) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="88", 0x1}], 0x1) 3.487305445s ago: executing program 3 (id=208): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 3.237109888s ago: executing program 1 (id=210): r0 = socket(0x22, 0x2, 0x24) close(r0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 3.16711787s ago: executing program 3 (id=211): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, r0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, &(0x7f0000000080)=0x2) 2.877907811s ago: executing program 1 (id=213): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x8, 0x0, &(0x7f00000002c0)=[@increfs], 0x0, 0x0, 0x0}) 2.847373715s ago: executing program 3 (id=214): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x401, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[0x7], &(0x7f00000004c0)=[r3], &(0x7f00000000c0)}) 2.573055868s ago: executing program 1 (id=216): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001c00070cecfffffffde8df2507000000", @ANYRES32=r1, @ANYBLOB="0200640b0a000200aaaaaaaaaabb00000c000e80"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000}, 0x10000040) 2.507467355s ago: executing program 3 (id=217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000009c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="3715040000000303495164"], 0x0, 0x0, 0x0, 0x0}) 2.329599073s ago: executing program 0 (id=218): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x2, 0x8000000000000271}, 0x8) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 2.289997251s ago: executing program 1 (id=219): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4d8, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000040)='P') 2.153987793s ago: executing program 0 (id=220): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) read(r0, &(0x7f00000011c0)=""/221, 0x8) 2.024664979s ago: executing program 5 (id=221): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a", 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x1b, 0x0, &(0x7f0000000240)) 1.987366158s ago: executing program 0 (id=222): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r0, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000540)={0x0, 0x94e, 0x10100, 0x10}, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000500)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x31a0}}) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.796945115s ago: executing program 5 (id=223): r0 = syz_io_uring_setup(0x822, &(0x7f0000000480)={0x0, 0xbd08, 0x80, 0x1, 0xcb}, &(0x7f0000000080)=0x0, &(0x7f0000000000)=0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000200010000000000", @ANYRES32, @ANYBLOB="01"], 0x50) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index, 0x5f1, 0x0, 0x8}) io_uring_enter(r0, 0x47bc, 0x0, 0x21, 0x0, 0x0) 1.67881571s ago: executing program 0 (id=224): r0 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x1a3c65) write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r2, 0xc0884123, &(0x7f0000000040)={0x5, "1ecba770734ad99ec0ee51783b94f79f1e2b7ab21a5c49c680ec2331ed597888b37a2b3249d6b1354f726e47466a2880bd8e0b5f8f5de3e570b01db276053d15", {0x5, 0xfffffffffffffffc}}) 1.409439659s ago: executing program 0 (id=225): r0 = socket(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) r1 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 1.345830964s ago: executing program 5 (id=226): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) close(0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x4000009b, 0x0, 0xff}]}) 1.249447658s ago: executing program 4 (id=227): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 926.852936ms ago: executing program 5 (id=228): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f00000002c0)={0x3, 0xffffffff, 0x0, 0x4, 0x0, 0x9ff}) 915.898538ms ago: executing program 4 (id=229): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000100)='=', 0x1, 0x4fed3) 694.904209ms ago: executing program 4 (id=230): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0xb25, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0x838, 0xb2, 0x6ff5, 0x9f5, 0x5, 0x1000000, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x1, 0xd4a, 0xffefe87a, 0x1, 0x6, 0x9, 0x9, 0x8, 0x0, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x3ff, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x1df, 0xffff, 0x3, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x4, 0x4a, 0xf, 0xfffff32a, 0xfffffff7, 0x4c4, 0x400, 0x7f, 0x1, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x1, 0x1, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0xffffffff, 0x9, 0x6, 0xffff, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x74, 0x283, 0x2, 0x4d, 0x6, 0x6, 0x3ff, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x5, 0x8001, 0x7, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x1, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x400, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x8, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x6, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0xe, 0xee6, 0x0, 0x7, 0x3, 0x8241, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0x7, 0xf, 0x0, 0x3, 0x7, 0xd, 0x56be]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000a40)={'syz1\x00', {0x0, 0x0, 0x6}, 0x0, [0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x401, 0x0, 0x4, 0x20008001, 0x2000, 0x0, 0x0, 0x0, 0x80, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x90, 0x801, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x3, 0x0, 0x0, 0x5, 0x7], [0x0, 0x3, 0x6, 0x0, 0x0, 0x5, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6189fbd8, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x9e2b, 0x0, 0xfffffffd, 0x5, 0x7aae62b1, 0x100000, 0x0, 0x40002, 0xffffffff, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0xfd5], [0x0, 0x0, 0x0, 0xd1, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x3, 0x7, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x8000000, 0x8, 0x0, 0x0, 0x99, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x4bdf, 0x2, 0xf152, 0x0, 0x10004, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9bf, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x1, 0x0, 0x6, 0x8, 0x0, 0x735, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) 457.55239ms ago: executing program 4 (id=231): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0xfffffffffffffc70, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000007c9c0d224d324b9a7abb3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000180), 0x0, 0x80200) ioctl$HIDIOCGUSAGES(r1, 0xd01c4813, &(0x7f00000010c0)={{0x3, 0xffffffff, 0x5, 0x10fff, 0x1000, 0x9}, 0x242, [0x6, 0xdab, 0xb, 0x9, 0x0, 0xe8c, 0x200, 0x7fff, 0x0, 0x6, 0x81, 0x896b, 0x7, 0x4, 0x400, 0xff, 0xfffff000, 0x3a, 0x1, 0x9, 0x71, 0x9, 0xea70, 0x3ec1, 0x1, 0xd96c, 0x24000000, 0x1, 0x2, 0x2, 0x0, 0xa2, 0xeda, 0xef8, 0x65, 0xff, 0x100, 0x7, 0x8, 0x3, 0x6, 0x7, 0xd, 0x1, 0x344054a0, 0x3, 0x100, 0x2, 0x4, 0xe1, 0x0, 0xf80, 0x1b0, 0x1, 0x4, 0x1, 0x492, 0x88, 0x5, 0x10, 0x401, 0x9, 0x0, 0x8000, 0x81, 0x7ff, 0x3ff, 0x6, 0x7, 0x2, 0x0, 0x3, 0x5, 0x1, 0x6c, 0x8, 0x3, 0x6, 0x8, 0x8001, 0x3, 0x0, 0x2, 0x8, 0x0, 0x0, 0x7, 0x10000, 0x1, 0xa20, 0xffffffff, 0x0, 0x5, 0x8, 0x6, 0x800, 0xe1, 0x4, 0x4, 0xfff, 0x5, 0x2, 0x84, 0x10000, 0x100, 0x3, 0xfffffff9, 0xc, 0xfff, 0xfffffff6, 0x0, 0x63, 0xfffffffd, 0x0, 0xfffff000, 0x200, 0x5, 0x1, 0xfffffffe, 0xff, 0x8, 0xfffffff8, 0xfffffff7, 0x2, 0x9, 0x2008, 0x8c, 0x8, 0x2, 0x9, 0xffff, 0xffff, 0xff, 0x2, 0x7, 0x5, 0xf, 0x3, 0x8, 0x9, 0x0, 0xa, 0x9, 0x5, 0xf, 0x3, 0x1, 0x9, 0x40, 0x10000001, 0x5, 0x1, 0x9, 0xbc4, 0x4032, 0x400, 0x8, 0x80000001, 0x5, 0x8, 0x800, 0x2, 0x94c, 0xec48, 0x6, 0x81, 0x0, 0x8, 0x4, 0x8, 0x7, 0x5, 0x1, 0x3, 0xa, 0x80000001, 0x7, 0x8, 0xfffffff3, 0x2, 0xffffff6e, 0x2, 0x6, 0x7, 0x3, 0xf7ea, 0x80000001, 0x5, 0x0, 0x7fff, 0x7, 0x3, 0x6e2fc2f6, 0x0, 0x7ff, 0x50, 0x9, 0x180, 0x4, 0xcc, 0x7, 0x0, 0x6, 0x6e, 0x9, 0xe0000000, 0x9, 0x3b5e, 0x4, 0x0, 0xda, 0x4, 0x9, 0xd, 0x0, 0x1, 0x1, 0x7fffffff, 0xf88, 0x3, 0xa58, 0x5, 0x6, 0x4e7, 0x7, 0x8, 0xe2d7, 0xd, 0x2, 0x5, 0xffff50ca, 0x9, 0x3, 0x3af1f10, 0x3, 0x1, 0x7ff8000, 0x4, 0x9, 0x4faa, 0x2, 0xecf, 0x9, 0x1, 0x3, 0x101, 0x3f3, 0xa, 0xfffffffd, 0x8, 0x0, 0x800, 0x13, 0x1, 0x4, 0x9, 0x4, 0x0, 0x6, 0xe, 0x94, 0x5, 0x3, 0xf05, 0x80, 0x0, 0x7, 0xc, 0xffff, 0x0, 0x1000, 0xe6, 0x200, 0xf, 0x42f, 0x10001, 0x6, 0x6, 0x6, 0x1a1, 0xa96, 0x3, 0xa69, 0x5, 0x2, 0x6, 0x2, 0xdf46, 0x401, 0x1, 0x80, 0x3, 0x1, 0x2800000, 0x3, 0xffffffbc, 0xfffffc00, 0x3b2, 0x45db, 0xfff, 0xef, 0x6, 0x7, 0x2, 0x7, 0x5ad9b8de, 0x8, 0x4, 0xfffff001, 0x8, 0x200, 0x101, 0x9, 0x5, 0x8, 0x2, 0xd53, 0x2250, 0x1, 0x8, 0x8, 0x75d, 0xffffffff, 0x8, 0x3, 0x2d85, 0x3, 0x7ff, 0x8001, 0x0, 0x8, 0x7, 0x6, 0xe, 0x2, 0x2, 0xdf2a, 0x4, 0x10001, 0x7, 0x3, 0x0, 0x6, 0x3, 0x6, 0xfffffb04, 0x80000000, 0x1, 0x5, 0x100, 0xff, 0x7, 0xa8fb, 0x3, 0x2, 0x3, 0x5, 0x0, 0x8, 0x4, 0xfffffff9, 0x9, 0x3, 0x1000, 0x8, 0xd67, 0xffffffc0, 0x4, 0x1, 0x101, 0x43, 0x3, 0xf, 0x7, 0xffffffff, 0x95, 0xfff, 0x7, 0x57a8, 0x400, 0x74, 0xaa1, 0x2, 0x2, 0x4, 0x4, 0x1, 0x1000, 0x7, 0x4, 0x5, 0x2000000, 0x8, 0x5, 0x6d, 0x1, 0x5, 0x4080, 0x3, 0x5, 0xa372, 0xffffff81, 0x5, 0x5, 0x4d000000, 0x7, 0x9, 0x7ae, 0x2000, 0x7, 0xfffffffb, 0x4aa1, 0x7, 0x2, 0x0, 0x2, 0x298c, 0x989f, 0x1, 0x8, 0x1, 0x3, 0xfffffff7, 0x40, 0x2, 0xffff, 0x9, 0x200, 0x9, 0x3ff, 0x32c7, 0x400, 0x5, 0x7c1, 0x1f, 0x7, 0x7, 0x9, 0x8, 0x80000000, 0xd, 0x278e142d, 0x2, 0x5, 0x7f, 0xc0, 0x1, 0x3, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0xfff, 0x6, 0x4, 0xaf9, 0x1, 0x8, 0x1ff, 0x7, 0x8, 0x7, 0x5, 0x800, 0x7, 0x8, 0x7, 0x2, 0x400, 0x800, 0xffffffff, 0x9, 0x0, 0x5, 0x9, 0x5, 0x4, 0x3, 0x8, 0x400, 0x6, 0xfffffff9, 0x100, 0x2, 0x3c, 0x2b51, 0xe3, 0x6, 0x3, 0x3e0f, 0x5, 0x2, 0x2, 0x99, 0x80000000, 0x2a3, 0x5, 0x1, 0x2, 0xe, 0x7ff, 0x4, 0x4, 0x80, 0x401, 0x7, 0xa, 0x10, 0x1, 0x9, 0x7fff, 0x2, 0x6, 0x8001, 0x0, 0x804e, 0xcc, 0x8, 0x8, 0xa, 0x9, 0x87, 0x4, 0x8, 0x6, 0xfffffbff, 0x3, 0x8, 0xbec, 0x9, 0x9, 0xbbf6, 0x2, 0x2, 0x0, 0x2, 0x5, 0xffff, 0x7f, 0x2, 0x7, 0x0, 0x4, 0x2, 0x9, 0x2, 0x55, 0xfffffa90, 0x92bf, 0x1, 0x40000, 0x9, 0x4, 0x2, 0x2, 0x7, 0x0, 0x9, 0x7, 0x9, 0xf6, 0x8, 0x3, 0x9a27, 0x6, 0x0, 0x4, 0x4, 0x2000, 0x5, 0x96, 0x1, 0x9, 0x1, 0x6, 0xbf, 0x3, 0xffff, 0x10, 0x688, 0x40, 0x3491, 0x8, 0xffffffff, 0x1, 0x1, 0xffff8001, 0x2, 0x6, 0x6, 0xe86, 0x7fffffff, 0xe, 0x18000, 0x401, 0xc, 0x2, 0xfffffff9, 0x8, 0xacb, 0x8, 0x72c, 0x1000, 0x0, 0x10, 0x4, 0x1, 0xffffffff, 0x8, 0x4, 0x5, 0x7fffffff, 0x0, 0x5, 0x8b, 0x4, 0x2, 0x6, 0x1000, 0xeb3a, 0x0, 0x2, 0x0, 0x101, 0x4, 0xfffffff9, 0x8, 0x9, 0x5, 0xffff, 0xc, 0x9, 0xff, 0x0, 0x8792, 0xfffffffd, 0xce, 0x1000, 0x9, 0xbab, 0x2, 0x80, 0x9, 0x8, 0x8, 0x1, 0x0, 0x8, 0x2, 0x3, 0x2, 0x2, 0x3ff, 0x5, 0x9, 0x9603, 0x7, 0x5, 0x44, 0x9, 0x6, 0x52000000, 0x5, 0x1ff, 0x1, 0x81, 0x30, 0x3, 0x0, 0x9, 0x2, 0x6, 0x3ff, 0x6, 0x6df1, 0x0, 0x60b3, 0x0, 0xa, 0xffd, 0x2, 0x8, 0x2, 0x2, 0x8, 0x1000, 0x50, 0x8, 0x898, 0x3, 0x0, 0x79d8, 0x1d06, 0x7, 0x200, 0x8, 0x60, 0x5, 0x9, 0x6, 0x3ff, 0x8, 0xbd, 0x7, 0xd, 0x2, 0xff, 0xc39, 0xfffffa5f, 0x100, 0x5, 0x1, 0x5f66, 0xe, 0x0, 0x4, 0xfff, 0x8001, 0x9, 0x8, 0x1, 0x8001, 0x6, 0x8, 0x8001, 0x81, 0x68c, 0x5, 0x571, 0x2, 0x1, 0x3, 0x5, 0x5, 0x0, 0x1ff, 0x7, 0x3, 0x5, 0x600, 0x3, 0x10000, 0x3, 0x7ff, 0x401, 0x80, 0x6, 0x20, 0x8, 0xe, 0x1000, 0xffff, 0x101, 0x2, 0x1ff, 0x8001, 0x403, 0x7, 0x80000000, 0x24, 0xf5, 0x10000, 0xf7d4, 0x4, 0x1ff, 0x9, 0x2, 0xffff, 0x8, 0x2, 0x0, 0x1, 0x1cd, 0xffffffff, 0xd, 0x7, 0xac8f, 0xfffffffa, 0x9, 0x0, 0x3, 0xc1c3, 0x4, 0x1, 0x5, 0x5, 0x8, 0x8, 0x8, 0x1, 0x80000005, 0x7ff, 0x5, 0x7fff, 0xb, 0x6, 0x5, 0x5, 0x4, 0x9, 0x9, 0x1, 0x8001, 0x7f76, 0x8, 0x5, 0x1, 0x9, 0x0, 0x0, 0x800, 0x3, 0xe145, 0x9, 0xe94, 0x7, 0x8, 0x3, 0xfffffff7, 0x7, 0x100, 0x5, 0x5, 0x4, 0x723d3593, 0x40, 0x1, 0x5, 0x5dd3, 0x0, 0xfff, 0x4, 0x0, 0xe184, 0x7, 0x9, 0xe163, 0x4800000, 0xffffea27, 0x7f, 0x4, 0x80, 0x2a7f957d, 0x9, 0x6, 0x7ff, 0x1, 0xbc, 0x8, 0xe, 0x7f, 0x623, 0x5, 0x317b, 0x8001, 0x9, 0x3ff, 0x7fffffff, 0x1ff, 0x74b6, 0x9, 0x1, 0xb57, 0x6, 0x0, 0x800, 0xd, 0x400, 0x99, 0x2, 0x7fff, 0xb2, 0xfffffffe, 0xcd8, 0x80, 0xfffffffe, 0xfffffff7, 0x1000, 0xd, 0x4, 0x1, 0x1, 0x6, 0xfff, 0x4, 0x5, 0x7f, 0x7, 0x5, 0x0, 0xffffff01, 0xffffffff, 0x8, 0x8, 0x0, 0x8, 0xfffffff9, 0x7, 0x1, 0x35, 0xfffffffe, 0x7, 0x4, 0x1, 0x4, 0x1, 0x6, 0x8, 0x6, 0x8000, 0xd5, 0x7, 0x4, 0x5, 0x4, 0x359, 0x9, 0xaa90, 0x6, 0x101, 0x81, 0x1, 0x7, 0x1ab, 0x3, 0x10, 0x10000, 0xa, 0x80008, 0x8, 0x2, 0x1, 0x80, 0x4, 0x40, 0x4, 0x5e, 0xac2, 0x6911977, 0x0, 0xd2a, 0x2, 0x1c000, 0xf, 0x7, 0x11, 0x5, 0x7, 0x6, 0x4, 0x10001, 0x6, 0xffffffff, 0x4b8c70f6, 0xff5a, 0x301b, 0x8, 0xaa26, 0x5, 0x10, 0x6cfc, 0x2, 0xa00000, 0x2, 0x366, 0x5, 0x1800, 0x0, 0x800, 0x9, 0x1, 0xb, 0x479a74a, 0x6, 0x3b, 0x8, 0x2, 0x4, 0xfff, 0x98f, 0x0, 0x6, 0x36, 0x9, 0x10, 0x1, 0x1000, 0x3ff, 0x5, 0x9e6, 0x7, 0x200, 0xb1, 0x8, 0x9, 0x4, 0x3, 0x9, 0xffffffff, 0xa2, 0x40, 0x0, 0x8, 0x9, 0x7, 0x8c, 0x4, 0x3, 0xb8c, 0x8, 0x0, 0x5, 0x2, 0x7fff, 0x9400, 0x6, 0x0, 0x9, 0x7, 0x100]}) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4) 675.002µs ago: executing program 3 (id=232): r0 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000040)=@l={0x92, 0x0, 0xe0}) read(r0, &(0x7f00000011c0)=""/221, 0x8) 0s ago: executing program 0 (id=242): accept4$tipc(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000200)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) lsm_get_self_attr(0x64, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.79' (ED25519) to the list of known hosts. [ 80.486442][ T5817] cgroup: Unknown subsys name 'net' [ 80.618862][ T5817] cgroup: Unknown subsys name 'cpuset' [ 80.628912][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.385592][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.998783][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.008901][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.017530][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.025187][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.025556][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.034885][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.046370][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.054038][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.060645][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.061946][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.071218][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.076749][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.083921][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.091226][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.097309][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.104885][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.112609][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.119797][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.135718][ T5832] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.136278][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.178418][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.205509][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.217225][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.226266][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.256426][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.823538][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.000780][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.135968][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.143869][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.152240][ T5844] bridge_slave_0: entered allmulticast mode [ 86.162790][ T5844] bridge_slave_0: entered promiscuous mode [ 86.181600][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.192767][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.200085][ T5844] bridge_slave_1: entered allmulticast mode [ 86.207904][ T5844] bridge_slave_1: entered promiscuous mode [ 86.248061][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 86.287941][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 86.299050][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 86.319383][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.381153][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.468672][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.476033][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.483167][ T5846] bridge_slave_0: entered allmulticast mode [ 86.490586][ T5846] bridge_slave_0: entered promiscuous mode [ 86.524795][ T5844] team0: Port device team_slave_0 added [ 86.531205][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.538755][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.546219][ T5846] bridge_slave_1: entered allmulticast mode [ 86.553527][ T5846] bridge_slave_1: entered promiscuous mode [ 86.578959][ T5844] team0: Port device team_slave_1 added [ 86.687117][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.721993][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.729472][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.737690][ T5848] bridge_slave_0: entered allmulticast mode [ 86.745701][ T5848] bridge_slave_0: entered promiscuous mode [ 86.766405][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.773373][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.799428][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.813876][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.840064][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.847415][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.855071][ T5848] bridge_slave_1: entered allmulticast mode [ 86.862414][ T5848] bridge_slave_1: entered promiscuous mode [ 86.870139][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.877540][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.885062][ T5849] bridge_slave_0: entered allmulticast mode [ 86.892274][ T5849] bridge_slave_0: entered promiscuous mode [ 86.901006][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.908249][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.942777][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.996861][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.004035][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.011755][ T5847] bridge_slave_0: entered allmulticast mode [ 87.020117][ T5847] bridge_slave_0: entered promiscuous mode [ 87.047361][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.054956][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.062260][ T5849] bridge_slave_1: entered allmulticast mode [ 87.070926][ T5849] bridge_slave_1: entered promiscuous mode [ 87.093994][ T5846] team0: Port device team_slave_0 added [ 87.103821][ T5846] team0: Port device team_slave_1 added [ 87.110682][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.118430][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.126228][ T5847] bridge_slave_1: entered allmulticast mode [ 87.134362][ T5847] bridge_slave_1: entered promiscuous mode [ 87.235440][ T5839] Bluetooth: hci1: command tx timeout [ 87.241303][ T5839] Bluetooth: hci3: command tx timeout [ 87.242760][ T5841] Bluetooth: hci2: command tx timeout [ 87.247599][ T5837] Bluetooth: hci0: command tx timeout [ 87.284951][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.314720][ T5837] Bluetooth: hci4: command tx timeout [ 87.355560][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.367487][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.379717][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.395820][ T5844] hsr_slave_0: entered promiscuous mode [ 87.402246][ T5844] hsr_slave_1: entered promiscuous mode [ 87.409976][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.417076][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.443264][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.457034][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.481119][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.507317][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.514280][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.540934][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.626898][ T5848] team0: Port device team_slave_0 added [ 87.635057][ T5847] team0: Port device team_slave_0 added [ 87.650099][ T5849] team0: Port device team_slave_0 added [ 87.659551][ T5849] team0: Port device team_slave_1 added [ 87.667869][ T5848] team0: Port device team_slave_1 added [ 87.675512][ T5847] team0: Port device team_slave_1 added [ 87.815308][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.822334][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.848458][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.866475][ T5846] hsr_slave_0: entered promiscuous mode [ 87.872819][ T5846] hsr_slave_1: entered promiscuous mode [ 87.879300][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 87.885546][ T5846] Cannot create hsr debugfs directory [ 87.892204][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.899304][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.925727][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.937733][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.945271][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.971842][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.989010][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.996180][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.022250][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.043732][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.050877][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.077214][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.089041][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.096572][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.122866][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.282242][ T5849] hsr_slave_0: entered promiscuous mode [ 88.289002][ T5849] hsr_slave_1: entered promiscuous mode [ 88.295560][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 88.301314][ T5849] Cannot create hsr debugfs directory [ 88.364078][ T5847] hsr_slave_0: entered promiscuous mode [ 88.387056][ T5847] hsr_slave_1: entered promiscuous mode [ 88.393609][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 88.402764][ T5847] Cannot create hsr debugfs directory [ 88.440609][ T5848] hsr_slave_0: entered promiscuous mode [ 88.448412][ T5848] hsr_slave_1: entered promiscuous mode [ 88.455083][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 88.460839][ T5848] Cannot create hsr debugfs directory [ 88.873494][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.886619][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.930843][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.954610][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.038612][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.049895][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.080073][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.124043][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.217843][ T5847] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.228902][ T5847] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.241957][ T5847] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.253707][ T5847] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.288298][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.319015][ T5837] Bluetooth: hci3: command tx timeout [ 89.324702][ T5839] Bluetooth: hci0: command tx timeout [ 89.324753][ T5839] Bluetooth: hci2: command tx timeout [ 89.324790][ T5839] Bluetooth: hci1: command tx timeout [ 89.360065][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.395195][ T5837] Bluetooth: hci4: command tx timeout [ 89.404119][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.420641][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.431316][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.456973][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.471061][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.478531][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.523590][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.530855][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.583212][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.597616][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.610721][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.622764][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.711833][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.823101][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.854156][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.861389][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.887653][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.897766][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.905066][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.953857][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.967042][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.997398][ T2996] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.004636][ T2996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.031539][ T1157] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.038759][ T1157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.093873][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.185524][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.252864][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.278180][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.288151][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.307517][ T5844] veth0_vlan: entered promiscuous mode [ 90.317549][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.324849][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.356162][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.363317][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.377836][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.400707][ T5844] veth1_vlan: entered promiscuous mode [ 90.452543][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.459836][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.488720][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.521826][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.529071][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.556362][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.583720][ T5844] veth0_macvtap: entered promiscuous mode [ 90.607899][ T5844] veth1_macvtap: entered promiscuous mode [ 90.683486][ T5847] veth0_vlan: entered promiscuous mode [ 90.698610][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.719880][ T5846] veth0_vlan: entered promiscuous mode [ 90.737192][ T5846] veth1_vlan: entered promiscuous mode [ 90.748471][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.765283][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.784278][ T5847] veth1_vlan: entered promiscuous mode [ 90.818697][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.829881][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.854131][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.863602][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.902055][ T5846] veth0_macvtap: entered promiscuous mode [ 90.944419][ T5846] veth1_macvtap: entered promiscuous mode [ 91.003475][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.015925][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.059291][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.090306][ T5848] veth0_vlan: entered promiscuous mode [ 91.101447][ T5847] veth0_macvtap: entered promiscuous mode [ 91.109972][ T2996] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.119240][ T2996] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.141110][ T5847] veth1_macvtap: entered promiscuous mode [ 91.159265][ T2996] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.168833][ T2996] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.181846][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.192403][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.223726][ T5848] veth1_vlan: entered promiscuous mode [ 91.278403][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.316697][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.331661][ T5849] veth0_vlan: entered promiscuous mode [ 91.348375][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.358285][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.378037][ T66] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.395422][ T5837] Bluetooth: hci1: command tx timeout [ 91.396508][ T5839] Bluetooth: hci0: command tx timeout [ 91.401324][ T5148] Bluetooth: hci3: command tx timeout [ 91.406849][ T5841] Bluetooth: hci2: command tx timeout [ 91.440885][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.449931][ T66] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.460763][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.462590][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.485506][ T5841] Bluetooth: hci4: command tx timeout [ 91.500118][ T5849] veth1_vlan: entered promiscuous mode [ 91.530214][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.535566][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.599573][ T5848] veth0_macvtap: entered promiscuous mode [ 91.646564][ T5848] veth1_macvtap: entered promiscuous mode [ 91.660620][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.676343][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.778316][ T5849] veth0_macvtap: entered promiscuous mode [ 91.795017][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.805559][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.831597][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.850262][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.893225][ T5849] veth1_macvtap: entered promiscuous mode [ 91.941439][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.959273][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.978829][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.984810][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.988648][ T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.007413][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.023638][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.055389][ T43] cfg80211: failed to load regulatory.db [ 92.142594][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.176456][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 92.192324][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.209870][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.271986][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.299482][ T24] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 92.311297][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.320882][ T1109] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.330695][ T1109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.347813][ T24] usb 3-1: config 0 descriptor?? [ 92.362261][ T24] hub 3-1:0.0: USB hub found [ 92.386521][ T1109] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.425708][ T1109] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.441280][ T5935] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.447726][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.494941][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.585918][ T24] hub 3-1:0.0: 1 port detected [ 92.627756][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.655081][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.761206][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.780698][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.948862][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.960760][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.200967][ T5925] hub 3-1:0.0: activate --> -90 [ 93.443779][ T5950] process 'syz.3.4' launched './file1' with NULL argv: empty string added [ 93.477354][ T5839] Bluetooth: hci0: command tx timeout [ 93.477373][ T5837] Bluetooth: hci1: command tx timeout [ 93.477411][ T5837] Bluetooth: hci3: command tx timeout [ 93.482880][ T5841] Bluetooth: hci2: command tx timeout [ 93.555545][ T5841] Bluetooth: hci4: command tx timeout [ 93.611318][ T5888] usb 3-1: USB disconnect, device number 2 [ 94.359745][ T5973] team_slave_0: entered promiscuous mode [ 94.365776][ T5973] team_slave_1: entered promiscuous mode [ 94.411395][ T5973] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 94.461591][ T5976] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 95.334998][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.533874][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 95.562412][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.598998][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.664762][ T10] usb 5-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 95.713928][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.776199][ T10] usb 5-1: config 0 descriptor?? [ 96.224468][ T10] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 96.264395][ T10] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 96.298457][ T10] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 96.324338][ T10] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 96.345570][ T10] appleir 0003:05AC:8241.0001: unknown main item tag 0x0 [ 96.387991][ T10] appleir 0003:05AC:8241.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.4-1/input0 [ 96.615249][ T983] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.784705][ T983] usb 3-1: Using ep0 maxpacket: 16 [ 96.795570][ T983] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 96.804887][ T983] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.812894][ T983] usb 3-1: Product: syz [ 96.817354][ T983] usb 3-1: Manufacturer: syz [ 96.822167][ T983] usb 3-1: SerialNumber: syz [ 96.833063][ T983] r8152-cfgselector 3-1: Unknown version 0x0000 [ 96.841314][ T983] r8152-cfgselector 3-1: config 0 descriptor?? [ 96.924719][ T5829] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 97.093413][ T5829] usb 2-1: Using ep0 maxpacket: 8 [ 97.107505][ T5829] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.121303][ T5829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.132834][ T5829] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 97.143542][ T5829] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 97.163314][ T5829] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 97.172679][ T5829] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.358849][ T10] r8152-cfgselector 3-1: USB disconnect, device number 3 [ 97.400280][ T5829] usb 2-1: GET_CAPABILITIES returned 0 [ 97.410768][ T5829] usbtmc 2-1:16.0: can't read capabilities [ 97.494801][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.634079][ T980] usb 2-1: USB disconnect, device number 2 [ 97.664733][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 97.677519][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.699358][ T24] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 97.722071][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.754370][ T24] usb 4-1: config 0 descriptor?? [ 97.764115][ T24] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 97.894906][ T10] usb 5-1: reset high-speed USB device number 2 using dummy_hcd [ 98.804965][ T5897] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.959305][ T5888] usb 5-1: USB disconnect, device number 2 [ 98.967385][ T5897] usb 2-1: config 0 has no interfaces? [ 98.972916][ T5897] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 99.000950][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.009886][ T24] gspca_vc032x: reg_w err -71 [ 99.015811][ T24] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 99.037765][ T24] usb 4-1: USB disconnect, device number 2 [ 99.047762][ T5897] usb 2-1: config 0 descriptor?? [ 99.237922][ T6081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.64'. [ 99.448386][ T5888] usb 2-1: USB disconnect, device number 3 [ 99.673353][ T6086] fuse: Bad value for 'fd' [ 99.971339][ T6096] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.986970][ T6096] netlink: 'syz.3.70': attribute type 12 has an invalid length. [ 99.994989][ T6096] netlink: 'syz.3.70': attribute type 29 has an invalid length. [ 100.002738][ T6096] netlink: 148 bytes leftover after parsing attributes in process `syz.3.70'. [ 100.011875][ T6096] netlink: 'syz.3.70': attribute type 2 has an invalid length. [ 100.019593][ T6096] netlink: 'syz.3.70': attribute type 3 has an invalid length. [ 100.027489][ T6096] netlink: 15 bytes leftover after parsing attributes in process `syz.3.70'. [ 100.834853][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.834900][ T6066] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.658040][ T6066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.670158][ T6066] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.678779][ T6066] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 101.684998][ T6066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.692064][ T6066] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.703164][ T6066] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 101.709294][ T6066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.719076][ T6066] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 101.726324][ T6066] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 101.732496][ T6066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.740653][ T6066] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 101.750316][ T6066] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 101.757519][ T6066] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 101.765580][ T6066] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 102.025855][ T5829] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.207591][ T5829] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 102.232321][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.251673][ T5829] usb 2-1: Product: syz [ 102.256179][ T5829] usb 2-1: Manufacturer: syz [ 102.260817][ T5829] usb 2-1: SerialNumber: syz [ 102.286554][ T5829] usb 2-1: config 0 descriptor?? [ 102.736378][ T5829] usb 2-1: Firmware: major: 192, minor: 178, hardware type: UNKNOWN (61) [ 102.798005][ T1109] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.927553][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 102.952098][ T5829] usb 2-1: no permanent extended address found, random address set [ 102.982196][ T5829] usb 2-1: atusb_probe: initialization failed, error = -524 [ 103.010929][ T1109] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.045854][ T5829] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 103.194440][ T5829] usb 2-1: USB disconnect, device number 4 [ 103.208705][ T1109] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.380664][ T1109] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.717625][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 103.751544][ T1109] bridge_slave_1: left allmulticast mode [ 103.761975][ T1109] bridge_slave_1: left promiscuous mode [ 103.770644][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.794680][ T5839] Bluetooth: hci3: command 0x0c1a tx timeout [ 103.801298][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 103.835210][ T1109] bridge_slave_0: left allmulticast mode [ 103.840925][ T1109] bridge_slave_0: left promiscuous mode [ 103.864300][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.294007][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.302991][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.311006][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.319237][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.327605][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 104.474755][ T5829] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.648091][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.681381][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.700601][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 104.735159][ T5829] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 104.744288][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.796498][ T5829] usb 5-1: config 0 descriptor?? [ 105.005886][ T5839] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.013905][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.052544][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.073314][ T1109] bond0 (unregistering): Released all slaves [ 105.270673][ T5829] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 105.323043][ T5829] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 105.574643][ T5888] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 105.640950][ T5829] usb 5-1: USB disconnect, device number 4 [ 105.767823][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.798219][ T5839] Bluetooth: hci2: command 0x0c1a tx timeout [ 105.806838][ T5888] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.829971][ T5888] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 105.874940][ T5839] Bluetooth: hci4: command 0x0c1a tx timeout [ 105.881222][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 105.898247][ T5888] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 105.924802][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.945260][ T5888] usb 1-1: config 0 descriptor?? [ 106.094050][ T1109] hsr_slave_0: left promiscuous mode [ 106.144614][ T1109] hsr_slave_1: left promiscuous mode [ 106.167040][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.192201][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.274853][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.307507][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.354834][ T5841] Bluetooth: hci1: command tx timeout [ 106.400762][ T1109] veth1_macvtap: left promiscuous mode [ 106.415751][ T1109] veth0_macvtap: left promiscuous mode [ 106.424176][ T1109] veth1_vlan: left promiscuous mode [ 106.435205][ T5888] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 106.454981][ T1109] veth0_vlan: left promiscuous mode [ 106.726542][ T5897] usb 1-1: USB disconnect, device number 2 [ 106.934633][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 107.136088][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.154767][ T5888] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 107.163871][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.223911][ T5888] usb 2-1: config 0 descriptor?? [ 107.699066][ T5888] keytouch 0003:0926:3333.0004: fixing up Keytouch IEC report descriptor [ 107.731921][ T5888] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0004/input/input6 [ 107.874985][ T5841] Bluetooth: hci2: command 0x0c1a tx timeout [ 107.937913][ T5888] keytouch 0003:0926:3333.0004: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 107.954773][ T5841] Bluetooth: hci3: command 0x0c1a tx timeout [ 107.960944][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout [ 108.400551][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 108.435146][ T5839] Bluetooth: hci1: command tx timeout [ 108.555334][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 108.903697][ T6212] netlink: 'syz.4.103': attribute type 1 has an invalid length. [ 109.611439][ T6144] chnl_net:caif_netlink_parms(): no params data found [ 109.873571][ T5888] usb 2-1: USB disconnect, device number 5 [ 110.135519][ T6233] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.166854][ T6144] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.188722][ T6144] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.198291][ T6233] netlink: 'syz.1.107': attribute type 6 has an invalid length. [ 110.210041][ T6144] bridge_slave_0: entered allmulticast mode [ 110.216638][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.107'. [ 110.237125][ T6144] bridge_slave_0: entered promiscuous mode [ 110.253742][ T6144] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.266091][ T6144] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.277263][ T6144] bridge_slave_1: entered allmulticast mode [ 110.288985][ T6144] bridge_slave_1: entered promiscuous mode [ 110.460395][ T6144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.506701][ T6240] syzkaller1: entered promiscuous mode [ 110.512239][ T6240] syzkaller1: entered allmulticast mode [ 110.517992][ T5839] Bluetooth: hci1: command tx timeout [ 110.576144][ T6144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.934854][ T5888] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 110.998124][ T6144] team0: Port device team_slave_0 added [ 111.030886][ T6144] team0: Port device team_slave_1 added [ 111.114923][ T5888] usb 2-1: Using ep0 maxpacket: 32 [ 111.149631][ T5888] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 111.163232][ T5888] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 111.173041][ T5888] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 111.187895][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.198743][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.226545][ T6144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.245115][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 111.257103][ T6144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.264865][ T5888] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 111.275341][ T5888] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 111.294453][ T5888] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 111.294680][ T6144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 111.331002][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.368226][ T5888] usb 2-1: config 0 descriptor?? [ 111.429089][ T6144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.591411][ T6245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.603414][ T6262] binder: 6261:6262 ioctl c0306201 80000000 returned -14 [ 111.636712][ T5888] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 111.654933][ T6245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 111.688668][ T6144] hsr_slave_0: entered promiscuous mode [ 111.699115][ T6144] hsr_slave_1: entered promiscuous mode [ 111.793171][ T5925] usb 2-1: USB disconnect, device number 6 [ 111.841476][ T5925] usblp0: removed [ 112.595362][ T5839] Bluetooth: hci1: command tx timeout [ 113.253165][ T6144] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.485531][ T5888] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 113.579024][ T6144] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.620710][ T6144] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.693178][ T6144] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.732109][ T5888] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 113.749848][ T5888] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.785359][ T5888] usb 1-1: config 0 descriptor?? [ 114.187278][ T6144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.286320][ T6144] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.333928][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.341258][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.440930][ T2996] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.448171][ T2996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.777967][ T6144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.948916][ T6144] veth0_vlan: entered promiscuous mode [ 114.967172][ T6144] veth1_vlan: entered promiscuous mode [ 115.016855][ T5888] pegasus 1-1:0.0: can't reset MAC [ 115.023516][ T5888] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 115.042045][ T6144] veth0_macvtap: entered promiscuous mode [ 115.045383][ T5888] usb 1-1: USB disconnect, device number 3 [ 115.064730][ T6348] capability: warning: `syz.1.140' uses deprecated v2 capabilities in a way that may be insecure [ 115.071265][ T6144] veth1_macvtap: entered promiscuous mode [ 115.153400][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.173895][ T6144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.232681][ T2996] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.263094][ T2996] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.312586][ T6352] syz.4.142 uses obsolete (PF_INET,SOCK_PACKET) [ 115.325358][ T2996] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.339955][ T2996] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.442940][ T2996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.459509][ T2996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.509220][ T2996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.517610][ T2996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.751868][ T5888] IPVS: starting estimator thread 0... [ 116.884806][ T6388] IPVS: using max 23 ests per chain, 55200 per kthread [ 117.494701][ T5925] psmouse serio2: Failed to reset mouse on : -5 [ 118.000252][ T6417] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 118.040880][ T6417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.074677][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 118.093215][ T6417] bond1: (slave geneve2): making interface the new active one [ 118.104297][ T6417] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 118.254848][ T5829] usb 4-1: Using ep0 maxpacket: 32 [ 118.266906][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.280500][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.316135][ T5829] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 118.325815][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.338786][ T5829] usb 4-1: config 0 descriptor?? [ 118.356088][ T5829] hub 4-1:0.0: USB hub found [ 118.561846][ T5829] hub 4-1:0.0: 1 port detected [ 118.571614][ T6431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'. [ 119.190197][ T5829] hub 4-1:0.0: activate --> -90 [ 119.582897][ T980] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.602880][ T24] usb 4-1: USB disconnect, device number 3 [ 119.609088][ T5829] usb 4-1-port1: config error [ 119.740794][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 119.754217][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.766521][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.777215][ T980] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 119.786584][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.811662][ T980] usb 5-1: config 0 descriptor?? [ 119.833003][ T980] hub 5-1:0.0: USB hub found [ 120.036911][ T980] hub 5-1:0.0: 1 port detected [ 120.144717][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 120.314716][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 120.323301][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.336566][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.360287][ T10] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 120.383302][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.412962][ T10] usb 1-1: config 0 descriptor?? [ 120.564331][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.183'. [ 120.573264][ T6467] netlink: 'syz.3.183': attribute type 21 has an invalid length. [ 120.589091][ T6467] Zero length message leads to an empty skb [ 120.672875][ T5897] hub 5-1:0.0: activate --> -90 [ 120.876698][ T10] ft260 0003:0403:6030.0005: unknown main item tag 0x7 [ 121.042784][ T10] ft260 0003:0403:6030.0005: chip code: 6424 8183 [ 121.085409][ T5829] usb 5-1: USB disconnect, device number 5 [ 121.091575][ T5897] usb 5-1-port1: cannot reset (err = -71) [ 121.105630][ T5897] usb 5-1-port1: attempt power cycle [ 121.245620][ T10] ft260 0003:0403:6030.0005: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 121.265039][ T5925] misc userio: Buffer overflowed, userio client isn't keeping up [ 121.649015][ T10] ft260 0003:0403:6030.0005: failed to retrieve status: -71 [ 121.670586][ T10] ft260 0003:0403:6030.0005: failed to reset I2C controller: -71 [ 121.701820][ T10] usb 1-1: USB disconnect, device number 4 [ 121.914746][ T5829] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 122.080067][ T5829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.096216][ T983] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.109233][ T5829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 122.127525][ T5829] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 122.136742][ T5829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.148581][ T5829] usb 5-1: config 0 descriptor?? [ 122.281608][ T983] usb 4-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 122.291516][ T983] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.300679][ T983] usb 4-1: Product: syz [ 122.306653][ T983] usb 4-1: Manufacturer: syz [ 122.311383][ T983] usb 4-1: SerialNumber: syz [ 122.338809][ T5925] input: PS/2 Generic Mouse as /devices/serio2/input/input7 [ 122.344685][ T5897] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 122.346498][ T983] usb 4-1: config 0 descriptor?? [ 122.530815][ T5897] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 122.545407][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.558184][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.570823][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.580699][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.594763][ T5925] psmouse serio2: Failed to enable mouse on [ 122.597425][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.603708][ T5829] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.619544][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.626220][ T983] usb 4-1: ignoring: probably an ADSL modem [ 122.630015][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.638817][ T5829] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.662085][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.679269][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.693779][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.694038][ T5829] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.713632][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.736437][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.750240][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.764468][ T5829] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.771835][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.771870][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.773467][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.773520][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.773547][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.774946][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.774997][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.775034][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.783195][ T5897] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 122.817646][ T5829] kovaplus 0003:1E7D:2D50.0006: unknown main item tag 0x0 [ 122.828774][ T5897] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 122.908559][ T5829] kovaplus 0003:1E7D:2D50.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0 [ 122.911550][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0 [ 122.969116][ T5897] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 122.978656][ T5897] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 122.987211][ T5897] usb 2-1: Product: syz [ 122.991990][ T5897] usb 2-1: Manufacturer: syz [ 123.000168][ T5897] usb 2-1: SerialNumber: syz [ 123.041394][ T983] cxacru 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 123.045964][ T5897] usb 2-1: config 0 descriptor?? [ 123.088107][ T5897] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.331726][ T983] usb 4-1: USB disconnect, device number 4 [ 123.366895][ T5829] kovaplus 0003:1E7D:2D50.0006: couldn't init struct kovaplus_device [ 123.378670][ T5829] kovaplus 0003:1E7D:2D50.0006: couldn't install mouse [ 123.402865][ T5829] kovaplus 0003:1E7D:2D50.0006: probe with driver kovaplus failed with error -71 [ 123.438178][ T5829] usb 5-1: USB disconnect, device number 10 [ 123.655787][ T6519] netdevsim netdevsim0: Direct firmware load for . [ 123.655787][ T6519] failed with error -2 [ 123.671006][ T6519] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 123.671006][ T6519] [ 123.709593][ C0] usb 2-1: yurex_control_callback - control failed: -71 [ 123.710035][ T5829] usb 2-1: USB disconnect, device number 7 [ 123.747511][ T5829] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 123.994701][ T5897] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.156614][ T5897] usb 6-1: Using ep0 maxpacket: 16 [ 124.177226][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.205657][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.234690][ T5897] usb 6-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 124.245986][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.278618][ T5897] usb 6-1: config 0 descriptor?? [ 124.712486][ T5897] ntrig 0003:1B96:0008.0007: unknown main item tag 0x0 [ 124.735529][ T5897] ntrig 0003:1B96:0008.0007: unknown main item tag 0x0 [ 124.749360][ T5897] ntrig 0003:1B96:0008.0007: unknown main item tag 0x0 [ 124.757254][ T5897] ntrig 0003:1B96:0008.0007: unknown main item tag 0x0 [ 124.802638][ T6546] delete_channel: no stack [ 124.815908][ T5897] ntrig 0003:1B96:0008.0007: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.5-1/input0 [ 124.910177][ T5897] ntrig 0003:1B96:0008.0007: Firmware version: 0.0.0.0.0 (0000 0000) [ 125.221482][ T983] usb 6-1: USB disconnect, device number 2 [ 125.419575][ T6561] netlink: 8 bytes leftover after parsing attributes in process `syz.1.216'. [ 125.724741][ T980] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.885632][ T983] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.894910][ T980] usb 4-1: Using ep0 maxpacket: 32 [ 125.909443][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.920687][ T980] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.934935][ T980] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 125.944191][ T980] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.970025][ T980] usb 4-1: config 0 descriptor?? [ 125.987861][ T980] hub 4-1:0.0: USB hub found [ 126.068756][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.110445][ T983] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 126.149569][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.212333][ T980] hub 4-1:0.0: 1 port detected [ 126.212625][ T983] usb 2-1: config 0 descriptor?? [ 126.483025][ T983] usbhid 2-1:0.0: can't add hid device: -71 [ 126.494771][ T983] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 126.539101][ T983] usb 2-1: USB disconnect, device number 8 [ 126.848036][ T980] hub 4-1:0.0: activate --> -90 [ 127.094633][ T983] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 127.200828][ T6592] input: syz1 as /devices/virtual/input/input8 [ 127.266483][ T983] usb 2-1: Using ep0 maxpacket: 16 [ 127.301377][ T983] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.305162][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 127.330411][ T983] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 127.355220][ T983] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.391110][ T5829] usb 4-1: USB disconnect, device number 5 [ 127.398393][ T983] usb 2-1: config 0 descriptor?? [ 127.499332][ T10] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.524606][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.537068][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 127.574215][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.601226][ T10] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.613668][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.627558][ T10] usb 6-1: config 0 descriptor?? [ 127.694723][ T5888] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 127.848202][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.852344][ T983] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 127.876770][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.912652][ T5888] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.961821][ T5888] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.981678][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.003950][ T5888] usb 5-1: config 0 descriptor?? [ 128.027333][ C1] ================================================================== [ 128.035835][ C1] BUG: KASAN: slab-out-of-bounds in mcp2221_raw_event+0x106a/0x1240 [ 128.043866][ C1] Read of size 1 at addr ffff888056937fff by task syz.1.219/6568 [ 128.051625][ C1] [ 128.053981][ C1] CPU: 1 UID: 0 PID: 6568 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(full) [ 128.054008][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 128.054021][ C1] Call Trace: [ 128.054031][ C1] [ 128.054041][ C1] dump_stack_lvl+0x189/0x250 [ 128.054072][ C1] ? __kasan_check_byte+0x12/0x40 [ 128.054095][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.054123][ C1] ? lock_release+0x4b/0x3e0 [ 128.054148][ C1] ? __virt_addr_valid+0x4a5/0x5c0 [ 128.054179][ C1] print_report+0xca/0x240 [ 128.054203][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 128.054233][ C1] kasan_report+0x118/0x150 [ 128.054254][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 128.054289][ C1] mcp2221_raw_event+0x106a/0x1240 [ 128.054321][ C1] ? down_trylock+0x50/0xb0 [ 128.054350][ C1] hid_input_report+0x40a/0x520 [ 128.054377][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 128.054409][ C1] hid_irq_in+0x47e/0x6d0 [ 128.054432][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 128.054460][ C1] dummy_timer+0x85f/0x44c0 [ 128.054504][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 128.054525][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 128.054543][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 128.054562][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 128.054585][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 128.054622][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 128.054643][ C1] ? read_tsc+0x9/0x20 [ 128.054672][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 128.054697][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 128.054724][ C1] handle_softirqs+0x286/0x870 [ 128.054749][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 128.054771][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 128.054795][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 128.054825][ C1] __irq_exit_rcu+0xca/0x1f0 [ 128.054891][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 128.054915][ C1] irq_exit_rcu+0x9/0x30 [ 128.054935][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 128.054962][ C1] [ 128.054970][ C1] [ 128.054978][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 128.055002][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 128.055036][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 6f 9c b7 09 e8 aa b9 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 128.055053][ C1] RSP: 0018:ffffc90003e5f798 EFLAGS: 00000282 [ 128.055073][ C1] RAX: 0a5459f4fbf68200 RBX: 0000000000000000 RCX: 0a5459f4fbf68200 [ 128.055089][ C1] RDX: 0000000000000000 RSI: ffffffff8d70bf1d RDI: ffffffff8bbf05e0 [ 128.055103][ C1] RBP: ffffc90003e5f7f0 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 128.055119][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff888029d31e40 [ 128.055136][ C1] R13: dffffc0000000000 R14: ffff88802f980000 R15: ffff8880b893abd8 [ 128.055160][ C1] ? finish_task_switch+0x266/0x950 [ 128.055193][ C1] __schedule+0x17a0/0x4cc0 [ 128.055223][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 128.055249][ C1] ? __pfx___schedule+0x10/0x10 [ 128.055275][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 128.055303][ C1] ? rcu_is_watching+0x15/0xb0 [ 128.055328][ C1] ? preempt_schedule+0xae/0xc0 [ 128.055351][ C1] preempt_schedule_common+0x83/0xd0 [ 128.055376][ C1] preempt_schedule+0xae/0xc0 [ 128.055401][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 128.055427][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 128.055452][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 128.055478][ C1] preempt_schedule_thunk+0x16/0x30 [ 128.055502][ C1] try_to_wake_up+0x82b/0x12b0 [ 128.055533][ C1] wake_up_q+0x85/0xd0 [ 128.055556][ C1] futex_wake+0x4a0/0x560 [ 128.055580][ C1] ? __pfx_futex_wake+0x10/0x10 [ 128.055601][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 128.055626][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 128.055651][ C1] do_futex+0x395/0x420 [ 128.055683][ C1] ? __pfx_do_futex+0x10/0x10 [ 128.055713][ C1] ? count_memcg_event_mm+0x21/0x260 [ 128.055743][ C1] __se_sys_futex_time32+0x360/0x3e0 [ 128.055774][ C1] ? handle_mm_fault+0x64f/0x8e0 [ 128.055802][ C1] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 128.055845][ C1] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 128.055874][ C1] ? __ia32_sys_futex_time32+0x21/0xf0 [ 128.055896][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 128.055923][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 128.055950][ C1] do_fast_syscall_32+0x34/0x80 [ 128.055979][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 128.056004][ C1] RIP: 0023:0xf702d539 [ 128.056023][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 128.056040][ C1] RSP: 002b:00000000f751faec EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 128.056060][ C1] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000081 [ 128.056073][ C1] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 128.056087][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 128.056099][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 128.056111][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 128.056129][ C1] [ 128.056136][ C1] [ 128.570470][ C1] Allocated by task 1157: [ 128.575070][ C1] kasan_save_track+0x3e/0x80 [ 128.579862][ C1] __kasan_kmalloc+0x93/0xb0 [ 128.584488][ C1] __kmalloc_noprof+0x411/0x7f0 [ 128.589349][ C1] fib6_info_alloc+0x30/0xf0 [ 128.594060][ C1] ip6_route_info_create+0x142/0x860 [ 128.599438][ C1] ip6_route_add+0x49/0x1b0 [ 128.604064][ C1] addrconf_add_linklocal+0x45f/0x6c0 [ 128.609440][ C1] addrconf_addr_gen+0x490/0x580 [ 128.614562][ C1] addrconf_init_auto_addrs+0x62d/0xa30 [ 128.620117][ C1] addrconf_notify+0xacc/0x1010 [ 128.625070][ C1] notifier_call_chain+0x1b6/0x3e0 [ 128.630289][ C1] netif_state_change+0x284/0x3a0 [ 128.635414][ C1] linkwatch_do_dev+0x117/0x170 [ 128.640289][ C1] __linkwatch_run_queue+0x56a/0x7e0 [ 128.645579][ C1] linkwatch_event+0x4c/0x60 [ 128.652050][ C1] process_scheduled_works+0xae1/0x17b0 [ 128.657624][ C1] worker_thread+0x8a0/0xda0 [ 128.662270][ C1] kthread+0x711/0x8a0 [ 128.666449][ C1] ret_from_fork+0x4bc/0x870 [ 128.671046][ C1] ret_from_fork_asm+0x1a/0x30 [ 128.675900][ C1] [ 128.678225][ C1] The buggy address belongs to the object at ffff888056937c00 [ 128.678225][ C1] which belongs to the cache kmalloc-512 of size 512 [ 128.692286][ C1] The buggy address is located 719 bytes to the right of [ 128.692286][ C1] allocated 304-byte region [ffff888056937c00, ffff888056937d30) [ 128.707040][ C1] [ 128.709367][ C1] The buggy address belongs to the physical page: [ 128.715779][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x56934 [ 128.724716][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 128.733410][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 128.740958][ C1] page_type: f5(slab) [ 128.745042][ C1] raw: 00fff00000000040 ffff88801a026c80 ffffea0001ee7400 dead000000000002 [ 128.753640][ C1] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 128.762242][ C1] head: 00fff00000000040 ffff88801a026c80 ffffea0001ee7400 dead000000000002 [ 128.770913][ C1] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 128.779759][ C1] head: 00fff00000000002 ffffea00015a4d01 00000000ffffffff 00000000ffffffff [ 128.788517][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 128.797616][ C1] page dumped because: kasan: bad access detected [ 128.804032][ C1] page_owner tracks the page as allocated [ 128.809793][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5846, tgid 5846 (syz-executor), ts 91799472354, free_ts 28271568425 [ 128.831452][ C1] post_alloc_hook+0x240/0x2a0 [ 128.836233][ C1] get_page_from_freelist+0x2365/0x2440 [ 128.841781][ C1] __alloc_frozen_pages_noprof+0x181/0x370 [ 128.847587][ C1] alloc_pages_mpol+0x232/0x4a0 [ 128.852443][ C1] allocate_slab+0x96/0x350 [ 128.857038][ C1] ___slab_alloc+0xe94/0x18a0 [ 128.861722][ C1] __slab_alloc+0x65/0x100 [ 128.866135][ C1] __kmalloc_cache_noprof+0x411/0x6f0 [ 128.871524][ C1] cgrp_css_alloc+0x46/0x60 [ 128.876027][ C1] cgroup_apply_control_enable+0x3d4/0xa80 [ 128.882017][ C1] cgroup_mkdir+0xd06/0xf60 [ 128.886524][ C1] kernfs_iop_mkdir+0x211/0x350 [ 128.891384][ C1] vfs_mkdir+0x306/0x510 [ 128.895720][ C1] do_mkdirat+0x247/0x590 [ 128.900072][ C1] __ia32_sys_mkdirat+0x87/0xa0 [ 128.904949][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 128.910098][ C1] page last free pid 1 tgid 1 stack trace: [ 128.916197][ C1] __free_frozen_pages+0xbc4/0xd30 [ 128.921324][ C1] free_contig_range+0x1bd/0x4a0 [ 128.926294][ C1] destroy_args+0x69/0x660 [ 128.930730][ C1] debug_vm_pgtable+0x39f/0x3b0 [ 128.935686][ C1] do_one_initcall+0x236/0x820 [ 128.940561][ C1] do_initcall_level+0x104/0x190 [ 128.945517][ C1] do_initcalls+0x59/0xa0 [ 128.949939][ C1] kernel_init_freeable+0x334/0x4b0 [ 128.955244][ C1] kernel_init+0x1d/0x1d0 [ 128.959685][ C1] ret_from_fork+0x4bc/0x870 [ 128.964293][ C1] ret_from_fork_asm+0x1a/0x30 [ 128.969072][ C1] [ 128.971495][ C1] Memory state around the buggy address: [ 128.977290][ C1] ffff888056937e80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.985469][ C1] ffff888056937f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 128.993725][ C1] >ffff888056937f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 129.002064][ C1] ^ [ 129.010070][ C1] ffff888056938000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.018159][ C1] ffff888056938080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 129.026312][ C1] ================================================================== [ 129.034466][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 129.041753][ C1] CPU: 1 UID: 0 PID: 6568 Comm: syz.1.219 Not tainted syzkaller #0 PREEMPT(full) [ 129.051130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 129.061286][ C1] Call Trace: [ 129.064606][ C1] [ 129.067466][ C1] dump_stack_lvl+0x99/0x250 [ 129.072246][ C1] ? __asan_memcpy+0x40/0x70 [ 129.076944][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 129.082160][ C1] ? __pfx__printk+0x10/0x10 [ 129.086758][ C1] vpanic+0x237/0x6d0 [ 129.090838][ C1] ? __pfx_vpanic+0x10/0x10 [ 129.095353][ C1] panic+0xb9/0xc0 [ 129.099123][ C1] ? __pfx_panic+0x10/0x10 [ 129.103838][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.109751][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 129.115220][ C1] check_panic_on_warn+0x89/0xb0 [ 129.120174][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 129.125470][ C1] end_report+0x78/0x160 [ 129.129809][ C1] kasan_report+0x129/0x150 [ 129.134316][ C1] ? mcp2221_raw_event+0x106a/0x1240 [ 129.139639][ C1] mcp2221_raw_event+0x106a/0x1240 [ 129.144766][ C1] ? down_trylock+0x50/0xb0 [ 129.149294][ C1] hid_input_report+0x40a/0x520 [ 129.154152][ C1] ? __pfx_mcp2221_raw_event+0x10/0x10 [ 129.159717][ C1] hid_irq_in+0x47e/0x6d0 [ 129.164059][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 129.169703][ C1] dummy_timer+0x85f/0x44c0 [ 129.174235][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 129.179184][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 129.184138][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 129.189103][ C1] __hrtimer_run_queues+0x52c/0xc60 [ 129.194465][ C1] ? ktime_get_update_offsets_now+0x67/0x3d0 [ 129.200568][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 129.206468][ C1] ? read_tsc+0x9/0x20 [ 129.211157][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 129.217089][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 129.222394][ C1] handle_softirqs+0x286/0x870 [ 129.227171][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 129.231951][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 129.237245][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 129.242537][ C1] __irq_exit_rcu+0xca/0x1f0 [ 129.247408][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 129.252740][ C1] irq_exit_rcu+0x9/0x30 [ 129.257003][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 129.262744][ C1] [ 129.265692][ C1] [ 129.268838][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 129.274836][ C1] RIP: 0010:finish_task_switch+0x26b/0x950 [ 129.280713][ C1] Code: 0f 84 3c 01 00 00 48 85 db 0f 85 63 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 6f 9c b7 09 e8 aa b9 36 00 fb 4c 8b 65 c0 <49> 8d bc 24 58 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 129.300347][ C1] RSP: 0018:ffffc90003e5f798 EFLAGS: 00000282 [ 129.306436][ C1] RAX: 0a5459f4fbf68200 RBX: 0000000000000000 RCX: 0a5459f4fbf68200 [ 129.314420][ C1] RDX: 0000000000000000 RSI: ffffffff8d70bf1d RDI: ffffffff8bbf05e0 [ 129.322668][ C1] RBP: ffffc90003e5f7f0 R08: ffffffff8f7cd477 R09: 1ffffffff1ef9a8e [ 129.330649][ C1] R10: dffffc0000000000 R11: fffffbfff1ef9a8f R12: ffff888029d31e40 [ 129.338892][ C1] R13: dffffc0000000000 R14: ffff88802f980000 R15: ffff8880b893abd8 [ 129.346878][ C1] ? finish_task_switch+0x266/0x950 [ 129.352105][ C1] __schedule+0x17a0/0x4cc0 [ 129.356630][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 129.362107][ C1] ? __pfx___schedule+0x10/0x10 [ 129.366972][ C1] ? __cgroup_account_cputime+0xe5/0x120 [ 129.372724][ C1] ? rcu_is_watching+0x15/0xb0 [ 129.377577][ C1] ? preempt_schedule+0xae/0xc0 [ 129.382528][ C1] preempt_schedule_common+0x83/0xd0 [ 129.387920][ C1] preempt_schedule+0xae/0xc0 [ 129.392697][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 129.398163][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 129.404241][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 129.410577][ C1] preempt_schedule_thunk+0x16/0x30 [ 129.415784][ C1] try_to_wake_up+0x82b/0x12b0 [ 129.420564][ C1] wake_up_q+0x85/0xd0 [ 129.424647][ C1] futex_wake+0x4a0/0x560 [ 129.429009][ C1] ? __pfx_futex_wake+0x10/0x10 [ 129.433872][ C1] ? css_rstat_updated+0x23a/0x4f0 [ 129.438992][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 129.444469][ C1] do_futex+0x395/0x420 [ 129.448651][ C1] ? __pfx_do_futex+0x10/0x10 [ 129.453335][ C1] ? count_memcg_event_mm+0x21/0x260 [ 129.458719][ C1] __se_sys_futex_time32+0x360/0x3e0 [ 129.464199][ C1] ? handle_mm_fault+0x64f/0x8e0 [ 129.469252][ C1] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 129.475080][ C1] ? syscall_enter_from_user_mode_prepare+0x8f/0x110 [ 129.481766][ C1] ? __ia32_sys_futex_time32+0x21/0xf0 [ 129.487245][ C1] __do_fast_syscall_32+0xb6/0x2b0 [ 129.492455][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 129.497935][ C1] do_fast_syscall_32+0x34/0x80 [ 129.502797][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 129.509225][ C1] RIP: 0023:0xf702d539 [ 129.513393][ C1] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 129.533175][ C1] RSP: 002b:00000000f751faec EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 129.541692][ C1] RAX: ffffffffffffffda RBX: 00000000f73f4f88 RCX: 0000000000000081 [ 129.549669][ C1] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000000000000000 [ 129.557819][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 129.565968][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 129.574295][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 129.582361][ C1] [ 129.585543][ C1] Kernel Offset: disabled [ 129.589891][ C1] Rebooting in 86400 seconds..