last executing test programs: 10m33.368753226s ago: executing program 2 (id=3): syz_usb_connect(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="120100003b7431087d077a6201000102030109022400010000000009040000020338b20009050e0000000000000905b3"], 0x0) 10m28.858322549s ago: executing program 2 (id=16): openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) syz_emit_ethernet(0x46, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd60122d9200103afffe8000000000000000000000000020bbff02000000faffffffffffff008600907800"/70], 0x0) epoll_create1(0x0) socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x1ddd, &(0x7f0000000440)={0x0, 0x40000000, 0x0, 0x1, 0x8}) r4 = memfd_create(&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x04&\xb08\xd5\xb4\x04\xbb\xd8\x0f\xf8\xef\xf8\xff\x8e1T\x15\x04\xf6(Ud\xbfQ\xce\a\x00T\xa2v\x8a\x93\x80\x00\xd9\x12>&EN\x9a<\xad\x8d\x86\x15Q\x1a*\b\xc3\xa8\x81\xb6J\xdfW\n\xde\r&g\xd6\xaf\x02\xf6\x86\xd2&)\xdb\xaf90H\xd0C\xfch\x81j\x98\x19\x81\xbe\xfa\xe0S\xc8z\xf2bVj&^\xba^\xb5\b\xadf\x06\xf2\xeb\'\xe2\x00<\xe9m\x8e(\r\xebv}\xe9\xb7\xa4>\xd47)$\xac\x8cb\xebC\xday?\x91\xbea\r\x13\x06\xf1\xb1\x7fc\xc6)|\x00\x02\x00\x00\xf2R\xa3b<;\xedf+\xd3\xe6\x80\x05\x00\x00\x00\x00\x00\x00\x00{\xc3\xf0\x8e\x19P\xe1\x16\xc3E\xcc\x03Fd0GWe\x92\x06p\xd92.\x8a\x96Z\xc7\xbf\x00\x00\x00\x00\x00\x00CR7\x16\xc4Y\xce\xac\xb5\xb5+j)\xb3\xc5w>,\x93\xf0\xa0\xa8\'F\x86\t\xee\xdc\x05\x91\xe9\rKT\xa8H\x8d{-x}4\xc6V\x1b\xb9\xa8\x8b\xd6\xc8\xad\xb9o\xc4\x18U&\xc2\x98\x9b\xe7\x94\xe8\xc9\xa9\xa6\xeb\xfep\xb7\xd3\x88\xaax\\a@\x8c\xceVP[}B\n9\xe1\xc6\x8b}B\xa3\xae\xb4\x98\xe4\xfc\x13\x1dx\x00\xf3\x1d\xf0i\xd6\x13\x92\b\x97?_0\x89\f\x11\vb\x8e\x1b\xc9\xd1\xceU\xa1\xcdx\b\xdf\xe6f\xf7\x13_\xf1r\xdc\"\x00'/366, 0x6) lseek(r4, 0xfffffffffffffffe, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000740)={&(0x7f0000001000)={[{0x0}]}, 0x1}, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000"], 0x7c}}, 0x8000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001405000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x0) r6 = syz_open_dev$video4linux(&(0x7f0000000000), 0x6, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r6, 0xc038563b, &(0x7f0000010680)={0x0, 0x0, {0x0, 0xe, 0xd}}) 10m26.505469823s ago: executing program 2 (id=20): r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) signalfd4(r0, &(0x7f0000000340)={[0x1]}, 0x8, 0x80800) 10m26.391293624s ago: executing program 2 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r4 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x202) write$sndseq(r4, 0x0, 0x0) accept4$bt_l2cap(r3, 0x0, 0x0, 0x80800) shutdown(0xffffffffffffffff, 0x1) 10m25.177701424s ago: executing program 2 (id=23): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@local, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 10m6.707230505s ago: executing program 32 (id=23): socket$can_raw(0x1d, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x4e24, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in6=@local, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x3, 0x7, 0x200}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 8m20.11233195s ago: executing program 1 (id=182): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='>'], 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_ACCEPT={0xd, 0x8, 0x1, 0xffffffffffffffff, 0x0}) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) io_uring_enter(r3, 0x3516, 0xc2de, 0x8, 0x0, 0x0) 8m13.168820253s ago: executing program 1 (id=193): 8m12.807519178s ago: executing program 1 (id=195): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c53", 0xb, 0xfffffffffffffffe) 8m9.90819791s ago: executing program 1 (id=201): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000100)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7}}, 0x24) r3 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x151}, &(0x7f0000000140)=0x0, &(0x7f0000000200)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) landlock_restrict_self(0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m1.821689241s ago: executing program 1 (id=212): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) sendmmsg$inet(r0, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000680)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d271d30d1a5fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54", 0xae}], 0x2}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)="f600e21c", 0x4}], 0x1}}], 0x2, 0x2090) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m1.54175498s ago: executing program 1 (id=215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) 7m46.076081402s ago: executing program 33 (id=215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x1284, 0x80, 0x4, 0x304}, &(0x7f0000000340), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x10}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], 0x57) 1m13.773384032s ago: executing program 4 (id=684): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r0 = socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$msr(r1, 0x0, 0xffffffffffffff87) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) read$rfkill(r3, &(0x7f00000002c0), 0x8) socket(0x10, 0x2, 0x0) 1m12.870436153s ago: executing program 4 (id=685): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) r0 = socket(0x40000000015, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010028000000000000000400000020"], 0x34}}, 0x4040) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$msr(r1, 0x0, 0xffffffffffffff87) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r0) read$rfkill(r3, &(0x7f00000002c0), 0x8) socket(0x10, 0x2, 0x0) 1m11.593602819s ago: executing program 4 (id=686): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x501}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xcaf, &(0x7f0000000100)={0x0, 0xb601, 0x8, 0x5, 0x178}, &(0x7f0000000240)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f00000001c0)=[{0x0}], 0x1, 0x1e}) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) io_uring_enter(r4, 0x847ba, 0x20000000, 0xe, 0x0, 0x0) 1m6.805349935s ago: executing program 4 (id=692): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, 0xffffffffffffffff, 0x0, 0x88000cc, 0x0) write$eventfd(r4, &(0x7f0000000240), 0xffffff14) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m6.18827641s ago: executing program 4 (id=694): ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$sysfs(0xffffff9c, &(0x7f0000000300)='/sys/kernel/notes', 0xa980, 0x1c8) read$FUSE(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50) prctl$PR_SET_TIMERSLACK(0x1d, 0xffffffffffffffe1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbda}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) 1m3.765607252s ago: executing program 4 (id=696): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x400}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8894}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 48.285572768s ago: executing program 34 (id=696): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x4b, 0x89}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)={0x54, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x7}, {0xc, 0x90, 0x400}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8894}, 0x8000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000000)={0x0, 0x399a, 0x5, 0x1, 0x2}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000, 0x100, 0x1}, 0x20) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, 0x0, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140), 0x0) accept4(r0, 0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x2, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 29.644852955s ago: executing program 6 (id=734): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000069f74a20b810b41b6534010203010902240001000010000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f00000003c0)={0x20, 0x0, 0x1, "f0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000500)={0x20, 0x13, 0x9, "9912220d2e976386cf"}, 0x0, 0x0}) syz_usb_connect(0x3, 0x35, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) 26.691650449s ago: executing program 6 (id=735): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000040) mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 22.448074139s ago: executing program 6 (id=738): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(0x0, 0xc3, 0x48, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 20.626339841s ago: executing program 5 (id=740): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000240)={0xfe, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 19.579469911s ago: executing program 5 (id=741): r0 = syz_open_dev$usbfs(0x0, 0x76, 0x141b41) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, 0x0) memfd_secret(0xa51cd372813f45c5) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) r4 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x2fb}, &(0x7f0000000140)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0x6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 19.577388845s ago: executing program 6 (id=742): socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000240)={0xfe, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fea000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r7 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xd9}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000280)=0x0) ptrace$peek(0x2, r8, &(0x7f00000002c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) shutdown(r3, 0x2) 18.334200071s ago: executing program 6 (id=743): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f0000"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17.981153144s ago: executing program 3 (id=745): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000580)=ANY=[], 0x14}], 0x1, 0x0, 0x0, 0x8000000}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000100)={0xb}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mq_open(0x0, 0xc3, 0x48, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007a1ff00", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r6, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) 16.722663611s ago: executing program 0 (id=746): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c53", 0xb, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 14.595606208s ago: executing program 0 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x207, 0x0) semctl$GETALL(r4, 0x0, 0xd, 0xfffffffffffffffe) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000002c0)=@req3={0x10000, 0xfffffffd, 0x100, 0x100, 0x10, 0x0, 0xc2}, 0x1c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x3, 0x0, 0x10001}}, 0x30) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="880000000314230c2abd7000ffdbdf250900020073797a3100000000080041007369770014003300766972745f7769666930001a000000000900020073797a3200000000080041007278650014003300776732000000000000000000000000000900020073797a3100000000080041007369770014003300776c616e30000000"], 0x88}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) syz_open_dev$vbi(&(0x7f0000000040), 0x3, 0x2) fcntl$notify(r0, 0x402, 0x80000033) 10.705443246s ago: executing program 3 (id=748): getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000000104050000000000000000000a00000008000440000000000a000200000007400100000076184ba2540576272922dab855ba9aa8a34bcb98f73177665b70c85fedaa62cbcdd56e751859cc7d784300268f2193b398f885b383c6006917a75047c70f5df3e8c58c9d9a759a53d55b37f3a2d36677aac8f8356ecdf962c4c3485b74f131f3f750d244e7dd0a1521ad3d4a2de81852b951e0230c2119a4c00a199992811ab0a2b57eb2ba64a1f991582faa77d1081d505c88ab1edfacf4e06b24fca8cbce04ca7d77ebd37717c8373e622b13283ed6"], 0x28}, 0x1, 0x0, 0x0, 0x400c094}, 0x2000004) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x100000000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@mcast2, 0x0, 0x3c}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe}}, 0xe8) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newchain={0x4e4, 0x64, 0x400, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xffff, 0xe}, {0x8, 0xffef}, {0x4, 0x7}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x0, 0x1c}}, @TCA_RATE={0x6, 0x5, {0x9, 0xc0}}, @filter_kind_options=@f_fw={{0x7}, {0x4a0, 0x2, [@TCA_FW_ACT={0x2b8, 0x4, [@m_mirred={0x124, 0x6, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x4, 0x0, 0x0, 0x1}, 0x1, r6}}]}, {0xd6, 0x6, "9c7bdc9cdc6a7d762b83e6dec7880492307e885ebebadab64ce171adb0173f94e4feb55e91e9930fc07cdc1329db9ef6dd0d7b4d8b5b232b497a26de1a47d5964d3ef65d41402e700b574eef896732ffb64852cb0914607b24b301ae8e80630fe7fdc83b3580072310c145b9790e19989a14bb299b25b83166664251c0c7afb196364b565dfbcef64c744ddd333f0d3df48830b15ff05a0e997f9f2310612b56ee86eb81257c27099fed507e4a321cecd641f9f50f6b9a9ce0e8d1f9b017c73fe7147d0f0b96d42e15609ede66f1d87c22c4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0xb4, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x8c, 0x6, "c203a37daad9e7275539c1c8681a84b6376081be98a1d177448bbd22b86b068866b4d3f27bcc94cad4daf9c0f660b9d13643b011f6cf62fd96921f571213da06d72c26bde56b4acbd641e1a3f19d03eaeb78f1efc7a5faf20ed6b3258de154014961aae1de54f563680f43d019275565bb00e8472a3c4688bdaf878787e5ca57c5497b4563f1cdb0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_csum={0xdc, 0x17, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2630, 0xffffffff, 0x4}, 0x4a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x3d38, 0x0, 0x1, 0x3}, 0x6c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x10001, 0x20000003, 0x8000, 0x80}, 0x10}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8001, 0x6, 0x9, 0x401}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7fe000, 0x8, 0x5, 0xef32, 0x80000001}, 0x3d}}]}, {0x23, 0x6, "6f0f0562e0098b446a5586c1af9bcace5c1e32084d238abc74d4fc24feaec2"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_FW_MASK={0x8, 0x5, 0x4191}, @TCA_FW_MASK={0x8, 0x5, 0xa}, @TCA_FW_ACT={0x16c, 0x4, [@m_mpls={0x168, 0x16, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8906}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x3, 0x4, 0x9, 0x4}, 0x4}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb5fe9}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}, @TCA_MPLS_LABEL={0x8, 0x5, 0xec648}, @TCA_MPLS_TC={0x5, 0x6, 0x3}, @TCA_MPLS_TC={0x5, 0x6, 0x5}]}, {0xef, 0x6, "06747c71842b3a05e1f408cf4c9cf5376621df3f366aaa2b078a9b6e6109b8ea4c3a3c2f8028e03ba5911b8113cd531c53cef2dde23625093573e17027bea0d266e051b4b64bd1a266c2c37b1584b6c34272b992c69612126bd9d5591616402e3a39b7e074af5aa15ad6286605e31594a76b53892efcd90b3991b5066c58b3f949290fa1eddc7d281b3c273b57b6456d336cd0aef25551b436377c3f7067b5659fda4ef4783934d4946d340ad1210510a435c5cb58c20d4ad2424ca9f95770b604df90417f0d5faa0a6f56d5fce93853d60727e0ea4e9b68dab9e134654fa90fe9f5bad8032924e57c58cf"}, {0xc, 0x7, {0x1, 0x6795891015850456}}, {0xc, 0x8, {0x0, 0x1}}}}]}, @TCA_FW_POLICE={0x54, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x3}, @TCA_POLICE_TBF={0x3c, 0x1, {0x67, 0x6, 0x9000000, 0x2, 0x6, {0x7f, 0x0, 0x4, 0x5, 0x0, 0xea}, {0xa, 0x0, 0x9, 0x9, 0xd98, 0x5179}, 0x1, 0x6, 0x7ff}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffa}]}, @TCA_FW_INDEV={0x14, 0x3, 'pim6reg0\x00'}]}}]}, 0x4e4}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002f80)=@newtfilter={0x7c, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x44, 0x2, [@TCA_CGROUP_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0xffffffffffffffff, 0x800, 0x7, 0x8e, {0x81, 0x2, 0xe, 0x3}, {0x3, 0x2, 0x2828, 0x2, 0x43, 0x2000000}, 0xa, 0x7}}]}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x7c}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg$inet(r7, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008000) 10.588387437s ago: executing program 0 (id=749): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4008850) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x64, r3, 0x100, 0x70bd2d, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfe00}, {0x8, 0xb, 0x15}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24040000}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="7400000010000304020000000000000000000400", @ANYBLOB="0003000000000000540012800b0001006272696467650000440002800c001f00020000000000"], 0x74}, 0x1, 0x0, 0x0, 0x4}, 0x8044) syz_io_uring_setup(0x1efb, &(0x7f0000000140)={0x0, 0x729, 0x3010, 0x0, 0x1}, &(0x7f0000000100), &(0x7f0000000480)) r4 = epoll_create(0xaf2) epoll_pwait(r4, &(0x7f00000002c0)=[{}], 0x1, 0x80000001, 0x0, 0x0) 7.359208567s ago: executing program 3 (id=750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001000)="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", 0x100}], 0x1, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000170100000300000001000000"], 0x18}], 0x1, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {0x0}], 0x2}, 0x0) 6.851392663s ago: executing program 5 (id=751): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffde6}], 0x3, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.851078099s ago: executing program 0 (id=752): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0cc5605, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x0, 0xfa11, 0xffffffff}, 0x0) lseek(0xffffffffffffffff, 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = epoll_create1(0x80000) r5 = fcntl$dupfd(r3, 0x406, r4) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000001c0)={0x10000014}) r6 = getpid() r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r8, &(0x7f0000000000)={0x10}, 0x10) kcmp$KCMP_EPOLL_TFD(r6, r7, 0x7, r5, &(0x7f0000000100)={r4, r5}) 5.692073885s ago: executing program 5 (id=753): openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0542, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x7, r1, 0x4}, 0x38) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffd000/0x1000)=nil) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKPBSZGET(0xffffffffffffffff, 0x127b, &(0x7f0000000340)) r3 = syz_open_dev$dvb_frontend(&(0x7f00000003c0), 0x0, 0xe82) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000000)={0x2e, &(0x7f0000000500)=[{0x33, '\x00', @st={0x4, [{0x2, @uvalue=0x2}, {0x2, @svalue=0xc653}, {0x3, @svalue=0x9}, {0x1, @uvalue=0x9}]}, 0xa}]}) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x77359400}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xff00000000000000, 0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x1000001000, 0x45}, 0x0, &(0x7f0000000080)={0x3ff, 0x4, 0x100000, 0x9, 0x0, 0x10, 0x80000002, 0xff00000000000000}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.430564972s ago: executing program 3 (id=754): socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xe6c, 0x30, 0xb, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x19040) semtimedop(0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) lsm_set_self_attr(0x69, &(0x7f00000000c0)={0x65, 0x1, 0x20}, 0x20, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x922, 0x12) 4.36553729s ago: executing program 5 (id=755): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0xe559) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) gettid() write$binfmt_format(0xffffffffffffffff, &(0x7f0000000180)='1\x00', 0x2) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.409545172s ago: executing program 6 (id=756): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c53", 0xb, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc020) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 2.983487016s ago: executing program 0 (id=757): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x24000040) mkdir(0x0, 0xfffffffffffffffe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x880, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40) flistxattr(0xffffffffffffffff, &(0x7f00000003c0)=""/224, 0xe0) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) 2.983043903s ago: executing program 3 (id=758): socket$nl_route(0x10, 0x3, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) setrlimit(0x4, &(0x7f0000000240)={0xfe, 0x4}) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) 236.364061ms ago: executing program 0 (id=759): socket(0x40000000015, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0xe6c, 0x30, 0xb, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x2, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x80003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x7, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xb, 0x7f, 0xfffff419, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0xf, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6b0, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0xe9, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x9}, {0x7f, 0x4, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0x7, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0xc, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0x1aca}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8b, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x4, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x1}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x1, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x19040) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x922, 0x12) 234.999147ms ago: executing program 3 (id=760): memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x141091, 0x0) rmdir(0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r3, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r3, r3, &(0x7f0000001000), 0xffff) 0s ago: executing program 5 (id=761): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x1ff, 0x2000) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100280000000000000004000000200001800d00010075"], 0x34}}, 0x4040) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @control={0x3, 0x5a, 0x93}}, {0x0, 0x0, 0x0, 0x2, @time={0x367f, 0xfffffffd}, {}, {0x80}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) read$msr(r0, 0x0, 0xffffffffffffff87) socket$inet6(0xa, 0x2, 0x0) read$rfkill(r2, &(0x7f00000002c0), 0x8) kernel console output (not intermixed with test programs): ll be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 292.181592][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.228059][ T6921] hsr_slave_0: entered promiscuous mode [ 293.232559][ T6921] hsr_slave_1: entered promiscuous mode [ 293.233177][ T6921] debugfs: 'hsr0' already exists in 'hsr' [ 293.233191][ T6921] Cannot create hsr debugfs directory [ 295.853955][ T87] bridge_slave_1: left allmulticast mode [ 295.853983][ T87] bridge_slave_1: left promiscuous mode [ 295.854229][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.971254][ T87] bridge_slave_0: left allmulticast mode [ 295.971282][ T87] bridge_slave_0: left promiscuous mode [ 295.971514][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.629246][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.707632][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.809563][ T87] bond0 (unregistering): Released all slaves [ 299.011773][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.284'. [ 299.376401][ T985] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 299.536461][ T5877] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 299.554251][ T985] usb 1-1: Using ep0 maxpacket: 16 [ 299.557992][ T985] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 299.558015][ T985] usb 1-1: config 0 has no interface number 0 [ 299.558055][ T985] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.558079][ T985] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.558113][ T985] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 299.558133][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.563636][ T985] usb 1-1: config 0 descriptor?? [ 299.666452][ T5877] usb 5-1: device descriptor read/64, error -71 [ 299.906385][ T5877] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 300.037380][ T5877] usb 5-1: device descriptor read/64, error -71 [ 300.124337][ T6781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.148230][ T5877] usb usb5-port1: attempt power cycle [ 300.392681][ T985] uclogic 0003:28BD:0071.0003: pen parameters not found [ 300.392698][ T985] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring [ 300.496515][ T5877] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 300.521329][ T5877] usb 5-1: device descriptor read/8, error -71 [ 300.562309][ T6921] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 300.659925][ T6921] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 300.756428][ T5877] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 300.777461][ T5877] usb 5-1: device descriptor read/8, error -71 [ 300.906836][ T5877] usb usb5-port1: unable to enumerate USB device [ 300.907685][ T87] hsr_slave_0: left promiscuous mode [ 300.969664][ T87] hsr_slave_1: left promiscuous mode [ 300.972361][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.972396][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.027264][ T87] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.027290][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.107600][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.109972][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.136440][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.138594][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.139323][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.195052][ T87] veth1_macvtap: left promiscuous mode [ 301.195156][ T87] veth0_macvtap: left promiscuous mode [ 301.195402][ T87] veth1_vlan: left promiscuous mode [ 301.195566][ T87] veth0_vlan: left promiscuous mode [ 302.098164][ T5938] usb 1-1: USB disconnect, device number 13 [ 303.446192][ T60] Bluetooth: hci0: command tx timeout [ 305.496770][ T60] Bluetooth: hci0: command tx timeout [ 309.557132][ T60] Bluetooth: hci0: command tx timeout [ 310.078387][ T7262] netlink: 60 bytes leftover after parsing attributes in process `syz.0.295'. [ 310.897596][ T87] team0 (unregistering): Port device team_slave_1 removed [ 311.158281][ T87] team0 (unregistering): Port device team_slave_0 removed [ 311.586483][ T5791] Bluetooth: hci0: command tx timeout [ 312.039652][ T6921] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 312.208708][ T6921] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 312.457771][ T7193] wlan0 speed is unknown, defaulting to 1000 [ 312.819178][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.0.298'. [ 315.176146][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.189499][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.254599][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.254688][ T7166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.574004][ T7193] chnl_net:caif_netlink_parms(): no params data found [ 316.608739][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.608877][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.025380][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.025446][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.468517][ T7320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.304'. [ 319.341050][ C0] llc_process_tmr_ev: timer called on closed connection [ 319.575023][ T7193] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.575205][ T7193] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.575387][ T7193] bridge_slave_0: entered allmulticast mode [ 319.624081][ T7193] bridge_slave_0: entered promiscuous mode [ 319.647721][ T7193] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.647843][ T7193] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.648043][ T7193] bridge_slave_1: entered allmulticast mode [ 319.650877][ T7193] bridge_slave_1: entered promiscuous mode [ 320.198473][ T7341] binder: 7334:7341 ioctl c0306201 2000000001c0 returned -22 [ 322.984531][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 323.010549][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 323.391220][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 323.434048][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 323.489901][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 323.908377][ T7193] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.685940][ T7193] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.826532][ T5791] Bluetooth: hci5: command tx timeout [ 326.793230][ T7193] team0: Port device team_slave_0 added [ 326.988245][ T7193] team0: Port device team_slave_1 added [ 327.472476][ T7389] process 'syz.3.314' launched './file0' with NULL argv: empty string added [ 327.871656][ T7354] wlan0 speed is unknown, defaulting to 1000 [ 327.879436][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.879451][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.879475][ T7193] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.906437][ T5791] Bluetooth: hci5: command tx timeout [ 327.937266][ T7193] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.937282][ T7193] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.937317][ T7193] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.299219][ T7397] netlink: 60 bytes leftover after parsing attributes in process `syz.3.315'. [ 329.186364][ T985] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 329.340091][ T985] usb 5-1: config index 0 descriptor too short (expected 65183, got 72) [ 329.342407][ T985] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.342433][ T985] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.342451][ T985] usb 5-1: Product: syz [ 329.342465][ T985] usb 5-1: Manufacturer: syz [ 329.342479][ T985] usb 5-1: SerialNumber: syz [ 329.427152][ T985] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.436213][ T7193] hsr_slave_0: entered promiscuous mode [ 329.458588][ T7193] hsr_slave_1: entered promiscuous mode [ 329.990335][ T5791] Bluetooth: hci5: command tx timeout [ 330.181092][ T808] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 330.417884][ T87] bridge_slave_1: left allmulticast mode [ 330.417910][ T87] bridge_slave_1: left promiscuous mode [ 330.418133][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.470557][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.472744][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.499109][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.501011][ T87] bridge_slave_0: left allmulticast mode [ 330.501033][ T87] bridge_slave_0: left promiscuous mode [ 330.501235][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.506029][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.762446][ T10] usb 5-1: USB disconnect, device number 16 [ 331.343515][ T808] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 331.358404][ T808] ath9k_htc: Failed to initialize the device [ 331.426368][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 331.777865][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 332.766397][ T5791] Bluetooth: hci5: command tx timeout [ 335.807179][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.959628][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.028434][ T87] bond0 (unregistering): Released all slaves [ 337.236381][ T5831] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 337.436166][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.436196][ T5831] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.436216][ T5831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 337.436349][ T5831] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 337.436370][ T5831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.466474][ T5831] usb 4-1: config 0 descriptor?? [ 338.517773][ T5831] usbhid 4-1:0.0: can't add hid device: -71 [ 338.517896][ T5831] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 338.659405][ T5831] usb 4-1: USB disconnect, device number 12 [ 338.677456][ T7451] netlink: 60 bytes leftover after parsing attributes in process `syz.0.325'. [ 338.776426][ T87] hsr_slave_0: left promiscuous mode [ 338.816429][ T87] hsr_slave_1: left promiscuous mode [ 338.819363][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.859480][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.501556][ T87] team0 (unregistering): Port device team_slave_1 removed [ 340.756266][ T7465] comedi: valid board names for 8255 driver are: [ 340.756283][ T7465] 8255 [ 340.756290][ T7465] comedi: valid board names for vmk80xx driver are: [ 340.756299][ T7465] vmk80xx [ 340.756305][ T7465] comedi: valid board names for usbduxsigma driver are: [ 340.756314][ T7465] usbduxsigma [ 340.756320][ T7465] comedi: valid board names for usbduxfast driver are: [ 340.756329][ T7465] usbduxfast [ 340.756342][ T7465] comedi: valid board names for usbdux driver are: [ 340.756350][ T7465] usbdux [ 340.756356][ T7465] comedi: valid board names for ni6501 driver are: [ 340.756364][ T7465] ni6501 [ 340.756371][ T7465] comedi: valid board names for dt9812 driver are: [ 340.756379][ T7465] dt9812 [ 340.756385][ T7465] comedi: valid board names for ni_labpc_cs driver are: [ 340.756393][ T7465] ni_labpc_cs [ 340.756400][ T7465] comedi: valid board names for ni_daq_700 driver are: [ 340.756408][ T7465] ni_daq_700 [ 340.756508][ T7465] comedi: valid board names for labpc_pci driver are: [ 340.756518][ T7465] labpc_pci [ 340.756524][ T7465] comedi: valid board names for adl_pci9118 driver are: [ 340.756533][ T7465] pci9118dg [ 340.756539][ T7465] pci9118hg [ 340.756546][ T7465] pci9118hr [ 340.756552][ T7465] comedi: valid board names for 8255_pci driver are: [ 340.756561][ T7465] 8255_pci [ 340.756567][ T7465] comedi: valid board names for s526 driver are: [ 340.756575][ T7465] s526 [ 340.756582][ T7465] comedi: valid board names for multiq3 driver are: [ 340.756590][ T7465] multiq3 [ 340.756596][ T7465] comedi: valid board names for pcmuio driver are: [ 340.756605][ T7465] pcmuio48 [ 340.756610][ T7465] pcmuio96 [ 340.756617][ T7465] comedi: valid board names for pcmmio driver are: [ 340.756625][ T7465] pcmmio [ 340.756631][ T7465] comedi: valid board names for pcmda12 driver are: [ 340.756640][ T7465] pcmda12 [ 340.756646][ T7465] comedi: valid board names for pcmad driver are: [ 340.756654][ T7465] pcmad12 [ 340.756660][ T7465] pcmad16 [ 340.756666][ T7465] comedi: valid board names for ni_labpc driver are: [ 340.756675][ T7465] lab-pc-1200 [ 340.756681][ T7465] lab-pc-1200ai [ 340.756687][ T7465] lab-pc+ [ 340.756694][ T7465] comedi: valid board names for atmio16 driver are: [ 340.756702][ T7465] atmio16 [ 340.756708][ T7465] atmio16d [ 340.756714][ T7465] comedi: valid board names for ni_at_ao driver are: [ 340.756722][ T7465] at-ao-6 [ 340.756728][ T7465] at-ao-10 [ 340.756734][ T7465] comedi: valid board names for ni_at_a2150 driver are: [ 340.756743][ T7465] ni_at_a2150 [ 340.756750][ T7465] comedi: valid board names for adq12b driver are: [ 340.756758][ T7465] adq12b [ 340.756764][ T7465] comedi: valid board names for mpc624 driver are: [ 340.756772][ T7465] mpc624 [ 340.756778][ T7465] comedi: valid board names for c6xdigio driver are: [ 340.756786][ T7465] c6xdigio [ 340.756792][ T7465] comedi: valid board names for aio_iiro_16 driver are: [ 340.756801][ T7465] aio_iiro_16 [ 340.756807][ T7465] comedi: valid board names for aio_aio12_8 driver are: [ 340.756815][ T7465] aio_aio12_8 [ 340.756822][ T7465] aio_ai12_8 [ 340.756828][ T7465] aio_ao12_4 [ 340.756834][ T7465] comedi: valid board names for fl512 driver are: [ 340.756842][ T7465] fl512 [ 340.756856][ T7465] comedi: valid board names for dmm32at driver are: [ 340.756865][ T7465] dmm32at [ 340.756871][ T7465] comedi: valid board names for dt282x driver are: [ 340.756879][ T7465] dt2821 [ 340.756885][ T7465] dt2821-f [ 340.756891][ T7465] dt2821-g [ 340.756897][ T7465] dt2823 [ 340.756904][ T7465] dt2824-pgh [ 340.756910][ T7465] dt2824-pgl [ 340.756916][ T7465] dt2825 [ 340.756922][ T7465] dt2827 [ 340.756928][ T7465] dt2828 [ 340.756934][ T7465] dt2829 [ 340.756940][ T7465] dt21-ez [ 340.756946][ T7465] dt23-ez [ 340.756952][ T7465] dt24-ez [ 340.756958][ T7465] dt24-ez-pgl [ 340.756965][ T7465] comedi: valid board names for dt2817 driver are: [ 340.756973][ T7465] dt2817 [ 340.756979][ T7465] comedi: valid board names for dt2815 driver are: [ 340.756987][ T7465] dt2815 [ 340.756993][ T7465] comedi: valid board names for dt2814 driver are: [ 340.757001][ T7465] dt2814 [ 340.757007][ T7465] comedi: valid board names for dt2811 driver are: [ 340.757015][ T7465] dt2811-pgh [ 340.757021][ T7465] dt2811-pgl [ 340.757027][ T7465] comedi: valid board names for dt2801 driver are: [ 340.757035][ T7465] dt2801 [ 340.757041][ T7465] comedi: valid board names for das6402 driver are: [ 340.757050][ T7465] das6402-12 [ 340.757056][ T7465] das6402-16 [ 340.757062][ T7465] comedi: valid board names for das1800 driver are: [ 340.757070][ T7465] das-1701st [ 340.757076][ T7465] das-1701st-da [ 340.757082][ T7465] das-1702st [ 340.757088][ T7465] das-1702st-da [ 340.757095][ T7465] das-1702hr [ 340.757101][ T7465] das-1702hr-da [ 340.757107][ T7465] das-1701ao [ 340.757113][ T7465] das-1702ao [ 340.757119][ T7465] das-1801st [ 340.757126][ T7465] das-1801st-da [ 340.757132][ T7465] das-1802st [ 340.757138][ T7465] das-1802st-da [ 340.757145][ T7465] das-1802hr [ 340.757151][ T7465] das-1802hr-da [ 340.757157][ T7465] das-1801hc [ 340.757163][ T7465] das-1802hc [ 340.757169][ T7465] das-1801ao [ 340.757175][ T7465] das-1802ao [ 340.757182][ T7465] comedi: valid board names for das800 driver are: [ 340.757190][ T7465] das-800 [ 340.757196][ T7465] cio-das800 [ 340.757202][ T7465] das-801 [ 340.757208][ T7465] cio-das801 [ 340.757214][ T7465] das-802 [ 340.757220][ T7465] cio-das802 [ 340.757226][ T7465] cio-das802/16 [ 340.757233][ T7465] comedi: valid board names for isa-das08 driver are: [ 340.757241][ T7465] isa-das08 [ 340.757246][ T7465] das08-pgm [ 340.757253][ T7465] das08-pgh [ 340.757259][ T7465] das08-pgl [ 340.757265][ T7465] das08-aoh [ 340.757271][ T7465] das08-aol [ 340.757277][ T7465] das08-aom [ 340.757283][ T7465] das08/jr-ao [ 340.757289][ T7465] das08jr-16-ao [ 340.757296][ T7465] pc104-das08 [ 340.757302][ T7465] das08jr/16 [ 340.757308][ T7465] comedi: valid board names for das16m1 driver are: [ 340.757316][ T7465] das16m1 [ 340.757323][ T7465] comedi: valid board names for dac02 driver are: [ 340.757331][ T7465] dac02 [ 340.757336][ T7465] comedi: valid board names for rti802 driver are: [ 340.757344][ T7465] rti802 [ 340.757350][ T7465] comedi: valid board names for rti800 driver are: [ 340.757358][ T7465] rti800 [ 340.757364][ T7465] rti815 [ 340.757370][ T7465] comedi: valid board names for pcm3724 driver are: [ 340.757378][ T7465] pcm3724 [ 340.757384][ T7465] comedi: valid board names for pcl818 driver are: [ 340.757391][ T7465] pcl818l [ 340.757397][ T7465] pcl818h [ 340.757404][ T7465] pcl818hd [ 340.757410][ T7465] pcl818hg [ 340.757416][ T7465] pcl818 [ 340.757422][ T7465] pcl718 [ 340.757428][ T7465] pcm3718 [ 340.757434][ T7465] comedi: valid board names for pcl816 driver are: [ 340.757442][ T7465] pcl816 [ 340.757448][ T7465] pcl814b [ 340.757454][ T7465] comedi: valid board names for pcl812 driver are: [ 340.757462][ T7465] pcl812 [ 340.757468][ T7465] pcl812pg [ 340.757474][ T7465] acl8112pg [ 340.757480][ T7465] acl8112dg [ 340.757486][ T7465] acl8112hg [ 340.757492][ T7465] a821pgl [ 340.757498][ T7465] a821pglnda [ 340.757504][ T7465] a821pgh [ 340.757510][ T7465] a822pgl [ 340.757516][ T7465] a822pgh [ 340.757522][ T7465] a823pgl [ 340.757527][ T7465] a823pgh [ 340.757533][ T7465] pcl813 [ 340.757624][ T7465] pcl813b [ 340.757631][ T7465] acl8113 [ 340.757637][ T7465] iso813 [ 340.757643][ T7465] acl8216 [ 340.757649][ T7465] a826pg [ 340.757656][ T7465] comedi: valid board names for pcl730 driver are: [ 340.757664][ T7465] pcl730 [ 340.757670][ T7465] iso730 [ 340.757676][ T7465] acl7130 [ 340.757682][ T7465] pcm3730 [ 340.757688][ T7465] pcl725 [ 340.757694][ T7465] p8r8dio [ 340.757700][ T7465] acl7225b [ 340.757706][ T7465] p16r16dio [ 340.757712][ T7465] pcl733 [ 340.757718][ T7465] pcl734 [ 340.757724][ T7465] opmm-1616-xt [ 340.757731][ T7465] pearl-mm-p [ 340.757737][ T7465] ir104-pbf [ 340.757743][ T7465] comedi: valid board names for pcl726 driver are: [ 340.757751][ T7465] pcl726 [ 340.757757][ T7465] pcl727 [ 340.757763][ T7465] pcl728 [ 340.757769][ T7465] acl6126 [ 340.757775][ T7465] acl6128 [ 340.757781][ T7465] comedi: valid board names for pcl724 driver are: [ 340.757789][ T7465] pcl724 [ 340.757795][ T7465] pcl722 [ 340.757801][ T7465] pcl731 [ 340.757807][ T7465] acl7122 [ 340.757813][ T7465] acl7124 [ 340.757819][ T7465] pet48dio [ 340.757825][ T7465] pcmio48 [ 340.757831][ T7465] onyx-mm-dio [ 340.757838][ T7465] comedi: valid board names for pcl711 driver are: [ 340.757846][ T7465] pcl711 [ 340.757861][ T7465] pcl711b [ 340.757867][ T7465] acl8112hg [ 340.757873][ T7465] acl8112dg [ 340.757879][ T7465] comedi: valid board names for amplc_pc263 driver are: [ 340.757888][ T7465] pc263 [ 340.757894][ T7465] comedi: valid board names for amplc_pc236 driver are: [ 340.757903][ T7465] pc36at [ 340.757909][ T7465] comedi: valid board names for amplc_dio200 driver are: [ 340.757917][ T7465] pc212e [ 340.757923][ T7465] pc214e [ 340.757930][ T7465] pc215e [ 340.757936][ T7465] pc218e [ 340.757942][ T7465] pc272e [ 340.757948][ T7465] comedi: valid board names for comedi_parport driver are: [ 340.757957][ T7465] comedi_parport [ 340.757964][ T7465] comedi: valid board names for comedi_test driver are: [ 340.757972][ T7465] comedi_test [ 340.757978][ T7465] comedi: valid board names for comedi_bond driver are: [ 340.757986][ T7465] comedi_bond [ 341.589235][ T87] team0 (unregistering): Port device team_slave_0 removed [ 342.135317][ T7354] chnl_net:caif_netlink_parms(): no params data found [ 343.196139][ T36] audit: type=1800 audit(1772423416.382:2): pid=7482 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.333" name="/" dev="fuse" ino=9 res=0 errno=0 [ 345.312364][ T7354] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.312478][ T7354] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.312684][ T7354] bridge_slave_0: entered allmulticast mode [ 345.336723][ T7354] bridge_slave_0: entered promiscuous mode [ 345.536749][ T7354] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.536877][ T7354] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.537113][ T7354] bridge_slave_1: entered allmulticast mode [ 345.542394][ T7354] bridge_slave_1: entered promiscuous mode [ 345.862285][ T7354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.866208][ T7354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.988814][ T7354] team0: Port device team_slave_0 added [ 346.195141][ T7354] team0: Port device team_slave_1 added [ 347.623362][ T7517] netlink: 60 bytes leftover after parsing attributes in process `syz.3.336'. [ 348.104739][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 348.104755][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.104780][ T7354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 348.166045][ T7354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 348.166059][ T7354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 348.166084][ T7354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.458468][ T7354] hsr_slave_0: entered promiscuous mode [ 348.459724][ T7354] hsr_slave_1: entered promiscuous mode [ 348.460694][ T7354] debugfs: 'hsr0' already exists in 'hsr' [ 348.460715][ T7354] Cannot create hsr debugfs directory [ 348.570456][ T7524] Zero length message leads to an empty skb [ 355.493348][ T7193] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 356.649761][ T7193] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 357.616423][ T5953] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 357.769569][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.769657][ T5953] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.769702][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.769813][ T5953] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.769836][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.775234][ T5953] usb 4-1: config 0 descriptor?? [ 357.879648][ T7193] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 357.995853][ T7193] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 358.210544][ T5953] usbhid 4-1:0.0: can't add hid device: -71 [ 358.210694][ T5953] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 358.244522][ T5953] usb 4-1: USB disconnect, device number 13 [ 360.348646][ T7612] netlink: 60 bytes leftover after parsing attributes in process `syz.0.355'. [ 360.521260][ T7615] netlink: 'syz.4.357': attribute type 5 has an invalid length. [ 360.860089][ T5953] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 360.956841][ T87] bridge_slave_1: left allmulticast mode [ 360.956869][ T87] bridge_slave_1: left promiscuous mode [ 360.957170][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.986485][ T5953] usb 5-1: device descriptor read/64, error -71 [ 361.159455][ T87] bridge_slave_0: left allmulticast mode [ 361.159482][ T87] bridge_slave_0: left promiscuous mode [ 361.159705][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.980181][ T5953] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 362.126417][ T5953] usb 5-1: device descriptor read/64, error -71 [ 362.228103][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 362.248896][ T5953] usb usb5-port1: attempt power cycle [ 362.268436][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 362.271888][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 362.285809][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 362.289974][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 362.697242][ T5953] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 362.781727][ T5953] usb 5-1: device descriptor read/8, error -71 [ 363.026412][ T5953] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 363.046860][ T5953] usb 5-1: device descriptor read/8, error -71 [ 363.157527][ T5953] usb usb5-port1: unable to enumerate USB device [ 365.221807][ T60] Bluetooth: hci3: command tx timeout [ 367.270821][ T60] Bluetooth: hci3: command tx timeout [ 369.341647][ T60] Bluetooth: hci3: command tx timeout [ 371.420136][ T60] Bluetooth: hci3: command tx timeout [ 371.794558][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.897600][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.918285][ T87] bond0 (unregistering): Released all slaves [ 372.424770][ T7656] input: syz0 as /devices/virtual/input/input6 [ 372.476372][ T808] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 372.597570][ T87] hsr_slave_0: left promiscuous mode [ 372.606404][ T808] usb 5-1: device descriptor read/64, error -71 [ 372.646569][ T87] hsr_slave_1: left promiscuous mode [ 372.647256][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.826938][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.666347][ T808] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 376.099069][ T808] usb 5-1: device descriptor read/64, error -71 [ 377.178408][ T808] usb usb5-port1: attempt power cycle [ 378.578168][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.580616][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.248717][ T87] team0 (unregistering): Port device team_slave_1 removed [ 381.428492][ T87] team0 (unregistering): Port device team_slave_0 removed [ 381.593308][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.607719][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.612341][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.613425][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.614104][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.736708][ T60] Bluetooth: hci0: command tx timeout [ 383.782274][ T7624] wlan0 speed is unknown, defaulting to 1000 [ 385.276377][ T5831] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 385.436376][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 385.437192][ T7714] input: syz0 as /devices/virtual/input/input7 [ 385.439278][ T5831] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 385.439300][ T5831] usb 1-1: config 0 has no interface number 0 [ 385.439337][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.439362][ T5831] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 385.439412][ T5831] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 385.439433][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.564843][ T5831] usb 1-1: config 0 descriptor?? [ 385.678777][ T7690] wlan0 speed is unknown, defaulting to 1000 [ 386.466124][ T60] Bluetooth: hci0: command tx timeout [ 387.037707][ T5831] uclogic 0003:28BD:0071.0004: pen parameters not found [ 387.037780][ T5831] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 387.641768][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 389.592298][ T60] Bluetooth: hci0: command tx timeout [ 389.823277][ T5904] usb 1-1: USB disconnect, device number 14 [ 391.121934][ T7690] chnl_net:caif_netlink_parms(): no params data found [ 392.561195][ T60] Bluetooth: hci0: command tx timeout [ 395.272602][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.285611][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.285843][ T7624] bridge_slave_0: entered allmulticast mode [ 395.316546][ T7624] bridge_slave_0: entered promiscuous mode [ 395.369353][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.369475][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.369686][ T7624] bridge_slave_1: entered allmulticast mode [ 395.382569][ T7624] bridge_slave_1: entered promiscuous mode [ 395.831926][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.832047][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.832284][ T7690] bridge_slave_0: entered allmulticast mode [ 395.854056][ T7690] bridge_slave_0: entered promiscuous mode [ 395.897467][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.898614][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.898679][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.898804][ T7690] bridge_slave_1: entered allmulticast mode [ 395.900197][ T7690] bridge_slave_1: entered promiscuous mode [ 396.033234][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.485517][ T7690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.756563][ T7809] binder: 7806:7809 ioctl c0306201 2000000001c0 returned -22 [ 397.547775][ T7624] team0: Port device team_slave_0 added [ 397.550191][ T7690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.556312][ T5831] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 397.675430][ T7624] team0: Port device team_slave_1 added [ 397.706355][ T5831] usb 5-1: Using ep0 maxpacket: 32 [ 397.708527][ T5831] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 397.708543][ T5831] usb 5-1: config 0 has no interface number 0 [ 397.713399][ T5831] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 397.713425][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.713450][ T5831] usb 5-1: Product: syz [ 397.713463][ T5831] usb 5-1: Manufacturer: syz [ 397.713477][ T5831] usb 5-1: SerialNumber: syz [ 398.505369][ T5831] usb 5-1: config 0 descriptor?? [ 399.054514][ T7690] team0: Port device team_slave_0 added [ 399.141507][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.141524][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.141548][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.160644][ T7690] team0: Port device team_slave_1 added [ 399.204252][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.204267][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.204291][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.398098][ T5831] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 399.398238][ T5831] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 399.500856][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.500872][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.500896][ T7690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.505127][ T87] bridge_slave_1: left allmulticast mode [ 399.505143][ T87] bridge_slave_1: left promiscuous mode [ 399.505308][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.600675][ T5831] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 399.601405][ T5831] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 399.640645][ T87] bridge_slave_0: left allmulticast mode [ 399.640670][ T87] bridge_slave_0: left promiscuous mode [ 399.640898][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.674520][ T5831] usb 5-1: USB disconnect, device number 25 [ 402.926317][ T5938] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 403.121646][ T5938] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 403.121674][ T5938] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 403.121692][ T5938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 403.121739][ T5938] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 403.121763][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 403.121787][ T5938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 403.123598][ T5938] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 403.123623][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 403.123642][ T5938] usb 5-1: Product: syz [ 403.123655][ T5938] usb 5-1: Manufacturer: syz [ 403.168832][ T7824] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 403.174909][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 403.174927][ T5938] cdc_wdm 5-1:1.0: skipping garbage [ 403.208563][ T5938] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 403.208658][ T5938] cdc_wdm 5-1:1.0: Unknown control protocol [ 403.297844][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.394696][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.394760][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.395659][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.395671][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.395859][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.395874][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.396075][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.396086][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.396473][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.396501][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.396721][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.396739][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.396955][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.396972][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.397188][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.397206][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.397428][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.397445][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.397659][ C0] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 403.397677][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 403.537916][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.596562][ T5938] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 403.600393][ T87] bond0 (unregistering): Released all slaves [ 403.662735][ T7690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.662753][ T7690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.663881][ T7690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.773219][ T5938] usb 4-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 403.773248][ T5938] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.773732][ T5938] usb 4-1: Product: syz [ 403.773742][ T5938] usb 4-1: Manufacturer: syz [ 403.773749][ T5938] usb 4-1: SerialNumber: syz [ 403.894724][ T7624] hsr_slave_0: entered promiscuous mode [ 403.896194][ T7624] hsr_slave_1: entered promiscuous mode [ 403.922480][ T7624] debugfs: 'hsr0' already exists in 'hsr' [ 403.922504][ T7624] Cannot create hsr debugfs directory [ 404.380359][ T87] hsr_slave_0: left promiscuous mode [ 404.436563][ T87] hsr_slave_1: left promiscuous mode [ 404.438601][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.048780][ C0] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 405.057561][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.079441][ T5870] usb 5-1: USB disconnect, device number 26 [ 405.481625][ T7838] binder: 7836:7838 ioctl c0306201 2000000001c0 returned -22 [ 405.737136][ T87] team0 (unregistering): Port device team_slave_1 removed [ 405.787068][ T87] team0 (unregistering): Port device team_slave_0 removed [ 406.186591][ T5938] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 406.186974][ T5938] usb 4-1: MIDIStreaming interface descriptor not found [ 406.191702][ T7690] hsr_slave_0: entered promiscuous mode [ 406.248054][ T7690] hsr_slave_1: entered promiscuous mode [ 407.425732][ T5938] usb 4-1: USB disconnect, device number 14 [ 410.660465][ T7706] udevd[7706]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.988285][ T7893] binder: 7890:7893 ioctl c0306201 2000000001c0 returned -22 [ 416.350888][ T7903] binder: 7894:7903 ioctl c0306201 2000000001c0 returned -22 [ 422.089713][ T87] bridge_slave_1: left allmulticast mode [ 422.089740][ T87] bridge_slave_1: left promiscuous mode [ 422.089985][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.352651][ T87] bridge_slave_0: left allmulticast mode [ 422.352670][ T87] bridge_slave_0: left promiscuous mode [ 422.352846][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.617614][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.716837][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.826660][ T87] bond0 (unregistering): Released all slaves [ 422.970408][ T5791] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.989752][ T5791] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.990945][ T5791] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.992299][ T5791] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.993692][ T5791] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 426.404848][ T5791] Bluetooth: hci5: command tx timeout [ 426.491776][ T7931] wlan0 speed is unknown, defaulting to 1000 [ 427.854462][ T7956] binder: 7953:7956 ioctl c0306201 2000000001c0 returned -22 [ 427.897085][ T87] hsr_slave_0: left promiscuous mode [ 427.936337][ T87] hsr_slave_1: left promiscuous mode [ 427.937295][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.987189][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.456475][ T60] Bluetooth: hci5: command tx timeout [ 430.211699][ T7975] binder: 7970:7975 ioctl c0306201 2000000001c0 returned -22 [ 430.536671][ T60] Bluetooth: hci5: command tx timeout [ 430.573671][ T87] team0 (unregistering): Port device team_slave_1 removed [ 430.838036][ T87] team0 (unregistering): Port device team_slave_0 removed [ 433.890982][ T60] Bluetooth: hci5: command tx timeout [ 434.530842][ T7690] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 435.622405][ T7690] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 435.653698][ T7690] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 435.738356][ T7690] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 435.834895][ T7931] chnl_net:caif_netlink_parms(): no params data found [ 435.915907][ T8014] 9pnet_fd: Insufficient options for proto=fd [ 436.074747][ T87] bridge_slave_1: left allmulticast mode [ 436.074772][ T87] bridge_slave_1: left promiscuous mode [ 436.074995][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.148568][ T87] bridge_slave_0: left allmulticast mode [ 436.148595][ T87] bridge_slave_0: left promiscuous mode [ 436.148839][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.032773][ T8039] binder: 8032:8039 ioctl c0306201 2000000001c0 returned -22 [ 438.076976][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.204395][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.281534][ T87] bond0 (unregistering): Released all slaves [ 439.886485][ T87] hsr_slave_0: left promiscuous mode [ 439.905141][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.905216][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.976412][ T87] hsr_slave_1: left promiscuous mode [ 439.977311][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.447083][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.531043][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 443.545413][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 443.554147][ T5791] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 443.564547][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 443.565469][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.138074][ T87] team0 (unregistering): Port device team_slave_1 removed [ 444.171356][ T87] team0 (unregistering): Port device team_slave_0 removed [ 445.659671][ T5791] Bluetooth: hci3: command tx timeout [ 445.779521][ T8085] sg_write: data in/out 187/14 bytes for SCSI command 0x0-- guessing data in; [ 445.779521][ T8085] program syz.4.440 not setting count and/or reply_len properly [ 447.737056][ T60] Bluetooth: hci3: command tx timeout [ 449.928171][ T7931] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.928292][ T7931] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.928481][ T7931] bridge_slave_0: entered allmulticast mode [ 449.939660][ T7931] bridge_slave_0: entered promiscuous mode [ 449.988198][ T7931] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.988319][ T7931] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.988490][ T7931] bridge_slave_1: entered allmulticast mode [ 450.021898][ T7931] bridge_slave_1: entered promiscuous mode [ 450.032122][ T60] Bluetooth: hci3: command tx timeout [ 450.087839][ T8095] binder: 8090:8095 ioctl c0306201 2000000001c0 returned -22 [ 450.207267][ T8076] wlan0 speed is unknown, defaulting to 1000 [ 450.228886][ T7931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.263652][ T7931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.563348][ T7931] team0: Port device team_slave_0 added [ 451.582163][ T7931] team0: Port device team_slave_1 added [ 451.669025][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.669043][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.669070][ T7931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.673249][ T7931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.673264][ T7931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 451.673298][ T7931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.056658][ T60] Bluetooth: hci3: command tx timeout [ 456.098928][ T7931] hsr_slave_0: entered promiscuous mode [ 456.100212][ T7931] hsr_slave_1: entered promiscuous mode [ 456.101096][ T7931] debugfs: 'hsr0' already exists in 'hsr' [ 456.101119][ T7931] Cannot create hsr debugfs directory [ 461.316867][ T8159] binder: 8153:8159 ioctl c0306201 2000000001c0 returned -22 [ 461.427286][ T8076] chnl_net:caif_netlink_parms(): no params data found [ 467.848742][ T8076] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.848881][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.849109][ T8076] bridge_slave_0: entered allmulticast mode [ 467.908973][ T8076] bridge_slave_0: entered promiscuous mode [ 470.653601][ T8076] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.653752][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.653976][ T8076] bridge_slave_1: entered allmulticast mode [ 470.659147][ T8076] bridge_slave_1: entered promiscuous mode [ 470.770987][ T8076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.790753][ T8076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 470.790840][ T7931] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 470.961946][ T7931] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.017064][ T8225] binder: 8218:8225 ioctl c0306201 2000000001c0 returned -22 [ 472.509174][ T7931] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 472.535374][ T8236] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 472.535404][ T8236] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 472.535439][ T8236] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 472.789414][ T8242] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 472.814670][ T8076] team0: Port device team_slave_0 added [ 472.825852][ T7931] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 472.893556][ T8076] team0: Port device team_slave_1 added [ 474.222526][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.222549][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.222572][ T8076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.226471][ T8076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.226484][ T8076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.226510][ T8076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.513011][ T87] bridge_slave_1: left allmulticast mode [ 477.513038][ T87] bridge_slave_1: left promiscuous mode [ 477.513366][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.629755][ T87] bridge_slave_0: left allmulticast mode [ 477.629781][ T87] bridge_slave_0: left promiscuous mode [ 477.630022][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.098992][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 478.218058][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 478.307974][ T87] bond0 (unregistering): Released all slaves [ 478.378979][ T8076] hsr_slave_0: entered promiscuous mode [ 478.380273][ T8076] hsr_slave_1: entered promiscuous mode [ 478.381179][ T8076] debugfs: 'hsr0' already exists in 'hsr' [ 478.381215][ T8076] Cannot create hsr debugfs directory [ 478.735884][ T8296] binder: 8293:8296 ioctl c0306201 2000000001c0 returned -22 [ 479.526383][ T87] hsr_slave_0: left promiscuous mode [ 479.566339][ T87] hsr_slave_1: left promiscuous mode [ 479.566933][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.705755][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.248694][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 488.263814][ T5791] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 488.264969][ T5791] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 488.275127][ T5791] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 488.276159][ T5791] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 488.436391][ T5904] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 488.586458][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 488.589197][ T5904] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 488.592619][ T5904] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 488.592645][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.592663][ T5904] usb 4-1: Product: syz [ 488.592677][ T5904] usb 4-1: Manufacturer: syz [ 488.592700][ T5904] usb 4-1: SerialNumber: syz [ 488.666629][ T5904] usb 4-1: config 0 descriptor?? [ 488.667642][ T8333] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 488.706561][ T5904] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 489.178820][ T8341] binder: 8338:8341 ioctl c0306201 2000000001c0 returned -22 [ 489.567318][ T87] team0 (unregistering): Port device team_slave_1 removed [ 489.627271][ T87] team0 (unregistering): Port device team_slave_0 removed [ 489.943475][ T985] usb 4-1: USB disconnect, device number 15 [ 489.943659][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 491.325743][ T60] Bluetooth: hci0: command tx timeout [ 493.226674][ T8334] wlan0 speed is unknown, defaulting to 1000 [ 493.346359][ T60] Bluetooth: hci0: command tx timeout [ 496.160080][ T60] Bluetooth: hci0: command tx timeout [ 498.216283][ T60] Bluetooth: hci0: command tx timeout [ 499.629640][ T8393] binder: 8392:8393 ioctl c0306201 2000000001c0 returned -22 [ 501.395584][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.396256][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.618282][ T985] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 501.917710][ T985] usb 1-1: Using ep0 maxpacket: 32 [ 503.325629][ T985] usb 1-1: unable to read config index 0 descriptor/all [ 503.325677][ T985] usb 1-1: can't read configurations, error -71 [ 503.691655][ T8419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 503.693940][ T8419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 503.697599][ T8419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 503.719197][ T8419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 503.720768][ T8419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 507.098436][ T8419] Bluetooth: hci5: command tx timeout [ 507.196782][ T8334] chnl_net:caif_netlink_parms(): no params data found [ 507.338931][ T8425] delete_channel: no stack [ 508.074504][ T8440] binder: 8439:8440 ioctl c0306201 2000000001c0 returned -22 [ 508.493576][ T985] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 508.557548][ T8416] wlan0 speed is unknown, defaulting to 1000 [ 508.672034][ T985] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 508.672053][ T985] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.672063][ T985] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 508.672088][ T985] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 508.678907][ T985] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 508.678925][ T985] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 508.678936][ T985] usb 4-1: Product: syz [ 508.678943][ T985] usb 4-1: Manufacturer: syz [ 508.846086][ T985] cdc_wdm 4-1:1.0: skipping garbage [ 508.846099][ T985] cdc_wdm 4-1:1.0: skipping garbage [ 508.846118][ T985] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 508.935374][ T985] usb 4-1: USB disconnect, device number 16 [ 509.176469][ T8419] Bluetooth: hci5: command tx timeout [ 509.709015][ T8449] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 511.566274][ T8419] Bluetooth: hci5: command tx timeout [ 513.552897][ T8458] delete_channel: no stack [ 513.576971][ T8419] Bluetooth: hci5: command tx timeout [ 514.564158][ T8334] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.564266][ T8334] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.564397][ T8334] bridge_slave_0: entered allmulticast mode [ 514.577900][ T8334] bridge_slave_0: entered promiscuous mode [ 517.377372][ T8334] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.377468][ T8334] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.377672][ T8334] bridge_slave_1: entered allmulticast mode [ 517.381660][ T8334] bridge_slave_1: entered promiscuous mode [ 517.656432][ T5938] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 517.702879][ T8334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.732242][ T8334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 519.196361][ T5938] usb 5-1: Using ep0 maxpacket: 32 [ 519.200264][ T5938] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 519.206606][ T5938] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 519.206633][ T5938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.206653][ T5938] usb 5-1: Product: syz [ 519.206666][ T5938] usb 5-1: Manufacturer: syz [ 519.206680][ T5938] usb 5-1: SerialNumber: syz [ 519.288796][ T5938] usb 5-1: config 0 descriptor?? [ 519.304545][ T8479] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 519.340839][ T5938] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 520.538116][ T8334] team0: Port device team_slave_0 added [ 520.583631][ T5904] usb 5-1: USB disconnect, device number 27 [ 520.583732][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 520.694336][ T8334] team0: Port device team_slave_1 added [ 521.317112][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 521.317129][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.317154][ T8334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 521.399786][ T8334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 521.399803][ T8334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 521.399830][ T8334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 521.596529][ T5904] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 521.780913][ T5904] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 521.780940][ T5904] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 521.780960][ T5904] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 521.781004][ T5904] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.790304][ T5904] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 521.790332][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 521.790351][ T5904] usb 5-1: Product: syz [ 521.790364][ T5904] usb 5-1: Manufacturer: syz [ 521.837963][ T5904] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 522.556599][ T5938] usb 5-1: USB disconnect, device number 28 [ 523.130750][ T8416] chnl_net:caif_netlink_parms(): no params data found [ 523.194980][ T8334] hsr_slave_0: entered promiscuous mode [ 523.234576][ T8334] hsr_slave_1: entered promiscuous mode [ 524.621905][ T87] bridge_slave_1: left allmulticast mode [ 524.621931][ T87] bridge_slave_1: left promiscuous mode [ 524.622146][ T87] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.676300][ T5904] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 524.787985][ T87] bridge_slave_0: left allmulticast mode [ 524.788010][ T87] bridge_slave_0: left promiscuous mode [ 524.788247][ T87] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.889907][ T5904] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 524.897561][ T5904] usb 4-1: config 0 has no interface number 0 [ 524.897630][ T5904] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 524.957654][ T5904] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 524.957672][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.957681][ T5904] usb 4-1: Product: syz [ 524.957689][ T5904] usb 4-1: Manufacturer: syz [ 524.957696][ T5904] usb 4-1: SerialNumber: syz [ 524.961226][ T5904] usb 4-1: config 0 descriptor?? [ 525.240950][ T5904] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 526.729089][ T5904] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 526.729226][ T5904] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -110 [ 527.317073][ T5938] usb 4-1: USB disconnect, device number 17 [ 529.166519][ T5870] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 529.229736][ T87] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 529.327819][ T87] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 529.346967][ T5870] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 529.352169][ T5870] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 529.352196][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.352215][ T5870] usb 4-1: Product: syz [ 529.352228][ T5870] usb 4-1: Manufacturer: syz [ 529.352238][ T5870] usb 4-1: SerialNumber: syz [ 529.414438][ T5870] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 529.426357][ T87] bond0 (unregistering): Released all slaves [ 529.446847][ T808] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 529.736616][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.755913][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.768507][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.792340][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 529.803948][ T8532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.817888][ T8532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.776317][ T808] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 530.776578][ T808] ath9k_htc: Failed to initialize the device [ 530.795341][ T43] usb 4-1: USB disconnect, device number 18 [ 530.816877][ T43] usb 4-1: ath9k_htc: USB layer deinitialized [ 530.830116][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 530.959592][ T8416] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.959779][ T8416] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.959957][ T8416] bridge_slave_0: entered allmulticast mode [ 530.962492][ T8416] bridge_slave_0: entered promiscuous mode [ 532.286392][ T87] hsr_slave_0: left promiscuous mode [ 533.566340][ T87] hsr_slave_1: left promiscuous mode [ 533.567256][ T87] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 533.760501][ T8552] evm: overlay not supported [ 534.787180][ T87] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.536280][ T5831] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 536.378946][ T5831] usb 4-1: config 0 has an invalid interface number: 172 but max is 0 [ 536.378977][ T5831] usb 4-1: config 0 has no interface number 0 [ 536.379020][ T5831] usb 4-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 536.384295][ T5831] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 536.384323][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.384343][ T5831] usb 4-1: Product: syz [ 536.384357][ T5831] usb 4-1: Manufacturer: syz [ 536.384371][ T5831] usb 4-1: SerialNumber: syz [ 536.456459][ T5831] usb 4-1: config 0 descriptor?? [ 536.465917][ T5831] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 536.659053][ T87] team0 (unregistering): Port device team_slave_1 removed [ 536.717061][ T87] team0 (unregistering): Port device team_slave_0 removed [ 536.964148][ T8416] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.964324][ T8416] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.964621][ T8416] bridge_slave_1: entered allmulticast mode [ 536.987951][ T8416] bridge_slave_1: entered promiscuous mode [ 537.077264][ T5831] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 537.077360][ T5831] gspca_pac7302 4-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 537.106983][ T5831] usb 4-1: USB disconnect, device number 19 [ 537.197260][ T8416] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.232048][ T8416] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.327194][ T8416] team0: Port device team_slave_0 added [ 537.345417][ T8416] team0: Port device team_slave_1 added [ 537.350250][ T8575] buffer_io_error: 18 callbacks suppressed [ 537.350268][ T8575] Buffer I/O error on dev loop9, logical block 1, async page read [ 537.351517][ C1] blk_print_req_error: 4 callbacks suppressed [ 537.351532][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.351561][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.351766][ T8575] Buffer I/O error on dev loop9, logical block 1, async page read [ 537.351937][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.351964][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.352162][ T8575] Buffer I/O error on dev loop9, logical block 1, async page read [ 537.352314][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.352341][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.352688][ T8575] Buffer I/O error on dev loop9, logical block 1, async page read [ 537.353481][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.353507][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.353811][ T8575] Buffer I/O error on dev loop9, logical block 1, async page read [ 537.353884][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.353910][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 537.354157][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.360131][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.361347][ T8575] ldm_validate_partition_table(): Disk read failed. [ 537.361577][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.362539][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.364217][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 537.364826][ T8575] Dev loop9: unable to read RDB block 0 [ 537.365484][ T8575] loop9: unable to read partition table [ 537.365709][ T8575] loop9: partition table beyond EOD, truncated [ 538.865915][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.866120][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.949507][ T8416] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.992172][ T8416] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.992190][ T8416] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 538.992228][ T8416] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 539.764080][ T8594] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 541.463303][ T8416] hsr_slave_0: entered promiscuous mode [ 541.464317][ T8416] hsr_slave_1: entered promiscuous mode [ 541.465044][ T8416] debugfs: 'hsr0' already exists in 'hsr' [ 541.465064][ T8416] Cannot create hsr debugfs directory [ 545.227331][ T8629] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 546.144079][ T3825] bridge_slave_1: left allmulticast mode [ 546.144107][ T3825] bridge_slave_1: left promiscuous mode [ 546.144331][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.224146][ T3825] bridge_slave_0: left allmulticast mode [ 546.224172][ T3825] bridge_slave_0: left promiscuous mode [ 546.232561][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.034520][ T60] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 548.044987][ T60] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 548.055457][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 548.059748][ T60] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 548.060484][ T60] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 548.236265][ T985] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 548.334516][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.510431][ T985] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 548.510516][ T985] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 548.510590][ T985] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 548.511036][ T985] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 548.783687][ T985] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 548.783794][ T985] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 548.783874][ T985] usb 5-1: Product: syz [ 548.783943][ T985] usb 5-1: Manufacturer: syz [ 548.835578][ T985] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 548.907011][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.987615][ T3825] bond0 (unregistering): Released all slaves [ 549.459424][ T10] usb 5-1: USB disconnect, device number 29 [ 550.111528][ T8647] wlan0 speed is unknown, defaulting to 1000 [ 550.146262][ T8419] Bluetooth: hci3: command tx timeout [ 550.296243][ T3825] hsr_slave_0: left promiscuous mode [ 550.336330][ T3825] hsr_slave_1: left promiscuous mode [ 550.336994][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 550.389786][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 550.804806][ T5863] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 550.986311][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 550.989620][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 550.989656][ T5863] usb 1-1: can't read configurations, error -61 [ 552.370076][ T8419] Bluetooth: hci3: command tx timeout [ 552.426299][ T5863] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 552.626319][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 552.635435][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 552.635470][ T5863] usb 1-1: can't read configurations, error -61 [ 552.635812][ T5863] usb usb1-port1: attempt power cycle [ 552.913433][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 552.979215][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 553.026277][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 553.050108][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 553.052426][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 553.052460][ T5863] usb 1-1: can't read configurations, error -61 [ 553.176955][ T5863] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 553.198585][ T5863] usb 1-1: Using ep0 maxpacket: 8 [ 553.200901][ T5863] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 553.200934][ T5863] usb 1-1: can't read configurations, error -61 [ 553.201335][ T5863] usb usb1-port1: unable to enumerate USB device [ 553.938216][ T8681] buffer_io_error: 18 callbacks suppressed [ 553.938236][ T8681] Buffer I/O error on dev loop9, logical block 1, async page read [ 553.938387][ C0] blk_print_req_error: 4 callbacks suppressed [ 553.938401][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.938429][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.938613][ T8681] Buffer I/O error on dev loop9, logical block 1, async page read [ 553.938683][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.938710][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.938883][ T8681] Buffer I/O error on dev loop9, logical block 1, async page read [ 553.938967][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.938993][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.939173][ T8681] Buffer I/O error on dev loop9, logical block 1, async page read [ 553.939247][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.939275][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.939537][ T8681] Buffer I/O error on dev loop9, logical block 1, async page read [ 553.941883][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.941913][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 553.942181][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.942398][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.942489][ T8681] ldm_validate_partition_table(): Disk read failed. [ 553.942646][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.942899][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.943204][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 553.943504][ T8681] Dev loop9: unable to read RDB block 0 [ 553.944147][ T8681] loop9: unable to read partition table [ 553.944427][ T8681] loop9: partition table beyond EOD, truncated [ 554.376418][ T8419] Bluetooth: hci3: command tx timeout [ 555.123439][ T8416] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 555.305409][ T8416] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 556.207168][ T8416] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 556.351166][ T8416] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 557.670721][ T8419] Bluetooth: hci3: command tx timeout [ 559.484458][ T8416] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.535066][ T8416] 8021q: adding VLAN 0 to HW filter on device team0 [ 560.620050][ T8720] overlayfs: failed to resolve './file0': -2 [ 561.151425][ T148] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.163627][ T148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.399997][ T8647] chnl_net:caif_netlink_parms(): no params data found [ 561.428189][ T148] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.428341][ T148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.780727][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.780831][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.972398][ T8647] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.972820][ T8647] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.973002][ T8647] bridge_slave_0: entered allmulticast mode [ 562.986391][ T8647] bridge_slave_0: entered promiscuous mode [ 562.990733][ T8647] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.990850][ T8647] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.991015][ T8647] bridge_slave_1: entered allmulticast mode [ 563.000141][ T8647] bridge_slave_1: entered promiscuous mode [ 564.195909][ T8419] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 564.216586][ T8419] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 564.254661][ T8419] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 564.255913][ T8419] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 564.275341][ T8419] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.029592][ T8738] overlayfs: overlapping lowerdir path [ 565.074789][ T8740] delete_channel: no stack [ 565.170084][ T8647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.192025][ T8647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 565.295912][ T8647] team0: Port device team_slave_0 added [ 565.367367][ T8647] team0: Port device team_slave_1 added [ 566.462592][ T60] Bluetooth: hci0: command tx timeout [ 566.898756][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.898779][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 566.898806][ T8647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.015953][ T8742] wlan0 speed is unknown, defaulting to 1000 [ 567.552487][ T8647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.552844][ T8647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.553065][ T8647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 568.887276][ T60] Bluetooth: hci0: command tx timeout [ 569.004419][ T3825] bridge_slave_1: left allmulticast mode [ 569.004446][ T3825] bridge_slave_1: left promiscuous mode [ 569.004671][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.757348][ T3825] bridge_slave_0: left allmulticast mode [ 570.757376][ T3825] bridge_slave_0: left promiscuous mode [ 570.757575][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.868868][ T8766] overlayfs: overlapping lowerdir path [ 570.936740][ T60] Bluetooth: hci0: command tx timeout [ 571.687057][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 571.814764][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.679318][ T3825] bond0 (unregistering): Released all slaves [ 572.923520][ T8647] hsr_slave_0: entered promiscuous mode [ 572.932560][ T8647] hsr_slave_1: entered promiscuous mode [ 572.942437][ T8647] debugfs: 'hsr0' already exists in 'hsr' [ 572.942462][ T8647] Cannot create hsr debugfs directory [ 573.210020][ T60] Bluetooth: hci0: command tx timeout [ 573.720849][ T3825] hsr_slave_0: left promiscuous mode [ 573.858689][ T3825] hsr_slave_1: left promiscuous mode [ 573.862217][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.134206][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.534017][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 577.008264][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 577.385240][ T8817] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 580.124889][ T8826] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 584.342214][ T8742] chnl_net:caif_netlink_parms(): no params data found [ 585.528261][ T8742] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.528378][ T8742] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.528603][ T8742] bridge_slave_0: entered allmulticast mode [ 585.531046][ T8742] bridge_slave_0: entered promiscuous mode [ 587.383620][ T5953] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 587.506273][ T8742] bridge0: port 2(bridge_slave_1) entered blocking state [ 587.506413][ T8742] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.506630][ T8742] bridge_slave_1: entered allmulticast mode [ 587.509199][ T8742] bridge_slave_1: entered promiscuous mode [ 587.568216][ T5953] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 587.568243][ T5953] usb 5-1: config 0 has no interface number 0 [ 587.568287][ T5953] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 587.571029][ T5953] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 587.571054][ T5953] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.571074][ T5953] usb 5-1: Product: syz [ 587.571087][ T5953] usb 5-1: Manufacturer: syz [ 587.571101][ T5953] usb 5-1: SerialNumber: syz [ 587.581419][ T5953] usb 5-1: config 0 descriptor?? [ 587.590521][ T5953] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 588.772867][ T5953] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 588.772963][ T5953] gspca_pac7302 5-1:0.172: probe with driver gspca_pac7302 failed with error -71 [ 588.803353][ T5953] usb 5-1: USB disconnect, device number 30 [ 588.839882][ T8845] udevd[8845]: setting owner of /dev/bus/usb/005/030 to uid=0, gid=0 failed: No such file or directory [ 588.916760][ T8742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.950035][ T8742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.689282][ T8742] team0: Port device team_slave_0 added [ 590.192722][ T8742] team0: Port device team_slave_1 added [ 590.462386][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.462397][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.462411][ T8742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.464282][ T8742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.464295][ T8742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 590.464318][ T8742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.479078][ T8647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 590.659489][ T8647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 591.719632][ T8647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 593.211376][ T808] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 593.556349][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 593.558665][ T808] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 593.558689][ T808] usb 1-1: config 0 has no interface number 0 [ 593.558732][ T808] usb 1-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 593.558773][ T808] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 593.558794][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.565216][ T808] usb 1-1: config 0 descriptor?? [ 593.651498][ T808] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 593.798967][ T8647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 594.567191][ T8742] hsr_slave_0: entered promiscuous mode [ 594.574919][ T8742] hsr_slave_1: entered promiscuous mode [ 595.449389][ T3825] bridge_slave_1: left allmulticast mode [ 595.449444][ T3825] bridge_slave_1: left promiscuous mode [ 595.452331][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.717235][ T8908] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 595.949064][ T3825] bridge_slave_0: left allmulticast mode [ 595.949093][ T3825] bridge_slave_0: left promiscuous mode [ 595.990786][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.348692][ T5831] usb 1-1: USB disconnect, device number 21 [ 597.776684][ T8911] zonefs (nullb0) ERROR: Not a zoned block device [ 600.137273][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 600.218384][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 600.454230][ T3825] bond0 (unregistering): Released all slaves [ 603.165521][ T3825] hsr_slave_0: left promiscuous mode [ 603.188161][ T8943] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 603.242936][ T3825] hsr_slave_1: left promiscuous mode [ 603.245739][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 603.341198][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.189839][ T8953] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 606.460966][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 606.497177][ T8960] zonefs (nullb0) ERROR: Not a zoned block device [ 606.535193][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 609.639610][ T8419] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 609.801364][ T8419] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 609.815285][ T8419] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 609.828377][ T8419] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 609.831808][ T8419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 611.001899][ T43] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 611.169769][ T8976] wlan0 speed is unknown, defaulting to 1000 [ 611.240991][ T43] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 611.243468][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 611.243495][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.243514][ T43] usb 4-1: Product: syz [ 611.243527][ T43] usb 4-1: Manufacturer: syz [ 611.243541][ T43] usb 4-1: SerialNumber: syz [ 611.387325][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 611.417894][ T808] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 612.747762][ T808] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 612.748014][ T808] ath9k_htc: Failed to initialize the device [ 612.776288][ T8419] Bluetooth: hci3: command tx timeout [ 612.815403][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.815929][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.932818][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.933908][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.980868][ T8985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.013564][ T8985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 613.050790][ T808] usb 4-1: ath9k_htc: USB layer deinitialized [ 613.069879][ T5953] usb 4-1: USB disconnect, device number 20 [ 613.576344][ T5953] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 613.726266][ T5953] usb 4-1: Using ep0 maxpacket: 32 [ 613.728236][ T5953] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 613.728265][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 613.728281][ T5953] usb 4-1: config 0 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 1 [ 613.728302][ T5953] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 613.728314][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.735263][ T5953] usb 4-1: config 0 descriptor?? [ 613.767270][ T5953] mos7840 4-1:0.0: required endpoints missing [ 614.680669][ T9019] overlayfs: failed to resolve './file0': -2 [ 615.676606][ T8419] Bluetooth: hci3: command tx timeout [ 615.823597][ T5831] usb 4-1: USB disconnect, device number 21 [ 616.150885][ T9025] zonefs (nullb0) ERROR: Not a zoned block device [ 616.283092][ T8976] chnl_net:caif_netlink_parms(): no params data found [ 616.380766][ T8742] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 616.493647][ T8742] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 616.790029][ T8742] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 616.855051][ T8742] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.149080][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.152209][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.152367][ T8976] bridge_slave_0: entered allmulticast mode [ 617.154612][ T8976] bridge_slave_0: entered promiscuous mode [ 617.217026][ T43] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 617.769697][ T8419] Bluetooth: hci3: command tx timeout [ 618.238695][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.238751][ T43] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 618.238775][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.244704][ T43] usb 4-1: config 0 descriptor?? [ 618.287275][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 618.694823][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 618.703195][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 618.704067][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 618.704990][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 618.705870][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 618.732648][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 618.734179][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 618.735024][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 618.735868][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 618.756237][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 618.773495][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 618.774315][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 618.775396][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 619.285938][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 619.294866][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 619.319722][ T43] pwc: Registered as video103. [ 619.323617][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 619.342212][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.342333][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.342565][ T8976] bridge_slave_1: entered allmulticast mode [ 619.408627][ T8976] bridge_slave_1: entered promiscuous mode [ 619.413789][ T43] usb 4-1: USB disconnect, device number 22 [ 620.066734][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.090020][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.192730][ T8976] team0: Port device team_slave_0 added [ 620.212742][ T8976] team0: Port device team_slave_1 added [ 620.216234][ T8419] Bluetooth: hci3: command tx timeout [ 620.636403][ T3825] bridge_slave_1: left allmulticast mode [ 620.636429][ T3825] bridge_slave_1: left promiscuous mode [ 620.636641][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.728291][ T3825] bridge_slave_0: left allmulticast mode [ 620.728317][ T3825] bridge_slave_0: left promiscuous mode [ 620.728562][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.360384][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.397231][ T9084] zonefs (nullb0) ERROR: Not a zoned block device [ 622.480058][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.656174][ T3825] bond0 (unregistering): Released all slaves [ 623.080558][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.080570][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 623.080584][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.286319][ T3825] hsr_slave_0: left promiscuous mode [ 623.336318][ T3825] hsr_slave_1: left promiscuous mode [ 623.337221][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 623.359451][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.819479][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 623.830288][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 623.831539][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 623.832723][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 623.833835][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 624.829460][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.829527][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.849253][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 624.886950][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 625.155632][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.155650][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 625.155675][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.379129][ T60] Bluetooth: hci0: command tx timeout [ 628.456762][ T60] Bluetooth: hci0: command tx timeout [ 628.972170][ T9097] wlan0 speed is unknown, defaulting to 1000 [ 628.978986][ T8976] hsr_slave_0: entered promiscuous mode [ 628.980180][ T8976] hsr_slave_1: entered promiscuous mode [ 628.980998][ T8976] debugfs: 'hsr0' already exists in 'hsr' [ 628.981019][ T8976] Cannot create hsr debugfs directory [ 629.314965][ T9135] /dev/nullb0: Can't open blockdev [ 630.853960][ T60] Bluetooth: hci0: command tx timeout [ 632.757755][ T5938] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 632.859477][ T60] Bluetooth: hci0: command tx timeout [ 632.926393][ T5938] usb 5-1: device descriptor read/64, error -71 [ 633.127453][ T9097] chnl_net:caif_netlink_parms(): no params data found [ 633.176301][ T5938] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 633.316988][ T5938] usb 5-1: device descriptor read/64, error -71 [ 633.437837][ T5938] usb usb5-port1: attempt power cycle [ 633.838791][ T5938] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 633.857102][ T5938] usb 5-1: device descriptor read/8, error -71 [ 634.220278][ T5938] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 634.236999][ T5938] usb 5-1: device descriptor read/8, error -71 [ 635.066274][ T5938] usb usb5-port1: unable to enumerate USB device [ 635.734683][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.734880][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.735100][ T9097] bridge_slave_0: entered allmulticast mode [ 635.763474][ T9097] bridge_slave_0: entered promiscuous mode [ 635.776722][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.776861][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.777036][ T9097] bridge_slave_1: entered allmulticast mode [ 635.779814][ T9097] bridge_slave_1: entered promiscuous mode [ 639.151643][ T9218] zonefs (nullb0) ERROR: Not a zoned block device [ 639.189716][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 639.214217][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 639.281828][ T9097] team0: Port device team_slave_0 added [ 639.286052][ T9097] team0: Port device team_slave_1 added [ 639.342480][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 639.342497][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.342520][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 639.415692][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 639.415709][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 639.415734][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.366346][ T9097] hsr_slave_0: entered promiscuous mode [ 642.577508][ T9097] hsr_slave_1: entered promiscuous mode [ 642.578621][ T9097] debugfs: 'hsr0' already exists in 'hsr' [ 642.578649][ T9097] Cannot create hsr debugfs directory [ 643.280193][ T8976] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 643.435273][ T8976] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 644.554710][ T8976] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 644.770879][ T8976] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 646.566229][ T43] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 646.698818][ T3825] bridge_slave_1: left allmulticast mode [ 646.698845][ T3825] bridge_slave_1: left promiscuous mode [ 646.699064][ T3825] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.733402][ T43] usb 4-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 646.733435][ T43] usb 4-1: config 1 interface 0 has no altsetting 0 [ 646.735734][ T43] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 646.735761][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.735780][ T43] usb 4-1: Product: syz [ 646.735793][ T43] usb 4-1: Manufacturer: syz [ 646.735807][ T43] usb 4-1: SerialNumber: syz [ 646.790403][ T9273] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 646.796241][ T808] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 646.820732][ T3825] bridge_slave_0: left allmulticast mode [ 646.820751][ T3825] bridge_slave_0: left promiscuous mode [ 646.821406][ T3825] bridge0: port 1(bridge_slave_0) entered disabled state [ 646.956550][ T808] usb 5-1: Using ep0 maxpacket: 8 [ 646.960711][ T808] usb 5-1: config 0 has no interfaces? [ 646.960743][ T808] usb 5-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00 [ 646.960766][ T808] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.059353][ T808] usb 5-1: config 0 descriptor?? [ 647.374009][ T9280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.374494][ T9280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.418896][ T10] usb 5-1: USB disconnect, device number 35 [ 647.466870][ T9286] zonefs (nullb0) ERROR: Not a zoned block device [ 647.686968][ T3825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 647.807892][ T3825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 647.895950][ T3825] bond0 (unregistering): Released all slaves [ 648.166695][ T43] usb 4-1: USB disconnect, device number 23 [ 650.947169][ T3825] hsr_slave_0: left promiscuous mode [ 651.008601][ T3825] hsr_slave_1: left promiscuous mode [ 651.017196][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.036696][ T43] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 651.068467][ T3825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.198807][ T5938] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 651.286576][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 651.295188][ T9306] delete_channel: no stack [ 651.329529][ T5938] usb 1-1: device descriptor read/64, error -71 [ 651.333334][ T43] usb 4-1: device descriptor read/all, error -71 [ 651.571477][ T5938] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 651.729145][ T5938] usb 1-1: device descriptor read/64, error -71 [ 652.146315][ T5938] usb usb1-port1: attempt power cycle [ 652.359747][ T3825] team0 (unregistering): Port device team_slave_1 removed [ 652.426991][ T3825] team0 (unregistering): Port device team_slave_0 removed [ 652.506345][ T5938] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 652.527197][ T5938] usb 1-1: device descriptor read/8, error -71 [ 653.046251][ T5938] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 653.157717][ T5938] usb 1-1: device descriptor read/8, error -71 [ 653.267748][ T5938] usb usb1-port1: unable to enumerate USB device [ 653.428482][ T9318] binder: 9308:9318 ioctl c0306201 2000000001c0 returned -22 [ 653.666667][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.863174][ T8976] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.893641][ T7241] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.893823][ T7241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.932478][ T3564] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.932608][ T3564] bridge0: port 2(bridge_slave_1) entered forwarding state [ 654.666463][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 654.866423][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 654.868469][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 654.868494][ T10] usb 1-1: config 0 has no interface number 0 [ 654.868537][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.868575][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 654.868597][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.873712][ T10] usb 1-1: config 0 descriptor?? [ 654.949881][ T10] usbhid 1-1:0.1: couldn't find an input interrupt endpoint [ 655.224786][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.427863][ T9344] zonefs (nullb0) ERROR: Not a zoned block device [ 655.496304][ T9097] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 655.540448][ T9097] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 655.605366][ T9097] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 655.667858][ T9097] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 657.140913][ T8976] veth0_vlan: entered promiscuous mode [ 657.173281][ T8976] veth1_vlan: entered promiscuous mode [ 657.257786][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.316332][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 657.357180][ T9097] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.400394][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.400567][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.401940][ T8976] veth0_macvtap: entered promiscuous mode [ 657.440256][ T8976] veth1_macvtap: entered promiscuous mode [ 657.452592][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.452794][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.466271][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 657.468476][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 657.468503][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 657.468540][ T10] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 657.468562][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.511374][ T10] usb 4-1: config 0 descriptor?? [ 657.582289][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 657.652683][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 657.671130][ T5831] usb 1-1: USB disconnect, device number 26 [ 657.759745][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.780369][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.800333][ T57] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.819729][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.027383][ T10] corsair 0003:1B1C:1B02.0005: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 658.178987][ T10] corsair 0003:1B1C:1B02.0005: Failed to get K90 initial state (error -71). [ 658.246261][ T5831] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 658.395862][ T10] usb 4-1: USB disconnect, device number 26 [ 658.416265][ T5831] usb 1-1: Using ep0 maxpacket: 32 [ 658.423981][ T5831] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 658.424007][ T5831] usb 1-1: config 0 has no interface number 0 [ 658.424053][ T5831] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 658.459437][ T5831] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 658.459466][ T5831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 658.459485][ T5831] usb 1-1: Product: syz [ 658.459498][ T5831] usb 1-1: Manufacturer: syz [ 658.459512][ T5831] usb 1-1: SerialNumber: syz [ 658.501979][ T5831] usb 1-1: config 0 descriptor?? [ 658.534855][ T9384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 658.617356][ T3825] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.617377][ T3825] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.732230][ T7244] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 658.732250][ T7244] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 658.735996][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 658.793722][ T9384] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 658.931648][ T9387] fido_id[9387]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 659.205730][ T5831] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 659.206231][ T5831] asix 1-1:0.188: probe with driver asix failed with error -61 [ 663.141644][ T10] usb 1-1: USB disconnect, device number 27 [ 663.366531][ T9428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.699'. [ 664.625599][ T9440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.699'. [ 664.682468][ T9097] veth0_vlan: entered promiscuous mode [ 664.695625][ T9097] veth1_vlan: entered promiscuous mode [ 664.746257][ T9097] veth0_macvtap: entered promiscuous mode [ 664.751195][ T9097] veth1_macvtap: entered promiscuous mode [ 664.841713][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 664.844505][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 664.982854][ T3564] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.009445][ T3564] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.025111][ T3564] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.060043][ T3564] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.267726][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 665.450625][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 665.450657][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 665.450677][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 665.450714][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 665.450736][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.659902][ T10] usb 4-1: config 0 descriptor?? [ 665.714376][ T3564] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.714396][ T3564] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.792136][ T5968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.792150][ T5968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.156000][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.156042][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.156070][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161797][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161831][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161860][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161888][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161915][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161942][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 666.161969][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 667.146665][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 667.553637][ T10] usb 4-1: USB disconnect, device number 27 [ 668.584300][ T9468] fido_id[9468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 671.626444][ T43] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 671.785966][ T43] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.786020][ T43] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 671.786041][ T43] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.858272][ T43] usb 7-1: config 0 descriptor?? [ 671.921536][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 672.163982][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 672.297976][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 672.299157][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 672.346747][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 672.347174][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 672.463098][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 672.497327][ T10] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 672.497362][ T10] usb 1-1: config 0 has no interface number 0 [ 672.497676][ T10] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 672.520890][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 672.534638][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 672.543615][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 672.546548][ T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 672.546576][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.546595][ T10] usb 1-1: Product: syz [ 672.546608][ T10] usb 1-1: Manufacturer: syz [ 672.546622][ T10] usb 1-1: SerialNumber: syz [ 672.556612][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 672.568368][ T10] usb 1-1: config 0 descriptor?? [ 672.571969][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 672.579207][ T9494] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 672.582588][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 672.588334][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 672.595599][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 672.604147][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 672.789009][ T9494] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 672.810661][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 672.831330][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 674.079831][ T10] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 674.088208][ T10] asix 1-1:0.188: probe with driver asix failed with error -61 [ 674.208694][ T43] pwc: Registered as video103. [ 674.601083][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11 [ 674.622629][ T43] usb 7-1: USB disconnect, device number 2 [ 674.889250][ T9503] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 676.917356][ T5953] usb 1-1: USB disconnect, device number 28 [ 678.216387][ T8419] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 678.237675][ T8419] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.242836][ T8419] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 678.243825][ T8419] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 678.244445][ T8419] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 678.699327][ T9523] wlan0 speed is unknown, defaulting to 1000 [ 681.097907][ T60] Bluetooth: hci5: command tx timeout [ 681.526576][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 681.690291][ T9] usb 1-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 681.690369][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 681.721980][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 681.722054][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.722123][ T9] usb 1-1: Product: syz [ 681.722160][ T9] usb 1-1: Manufacturer: syz [ 681.722195][ T9] usb 1-1: SerialNumber: syz [ 681.826174][ T9533] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 683.512438][ T60] Bluetooth: hci5: command tx timeout [ 683.690472][ T9] usb 1-1: USB disconnect, device number 29 [ 684.868994][ T43] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 685.118301][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.118356][ T43] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.118380][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.125673][ T43] usb 6-1: config 0 descriptor?? [ 685.197908][ T7244] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.202192][ T43] pwc: Askey VC010 type 2 USB webcam detected. [ 685.456241][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 685.489677][ T7244] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 685.568486][ T43] pwc: recv_control_msg error -32 req 02 val 2b00 [ 685.569254][ T43] pwc: recv_control_msg error -32 req 02 val 2700 [ 685.569908][ T43] pwc: recv_control_msg error -32 req 02 val 2c00 [ 685.570565][ T43] pwc: recv_control_msg error -32 req 04 val 1000 [ 685.571224][ T43] pwc: recv_control_msg error -32 req 04 val 1300 [ 685.578639][ T43] pwc: recv_control_msg error -32 req 04 val 1400 [ 685.578909][ T8419] Bluetooth: hci5: command tx timeout [ 685.579302][ T43] pwc: recv_control_msg error -32 req 02 val 2000 [ 685.587228][ T43] pwc: recv_control_msg error -32 req 02 val 2100 [ 685.589652][ T43] pwc: recv_control_msg error -32 req 04 val 1500 [ 685.610884][ T43] pwc: recv_control_msg error -32 req 02 val 2500 [ 685.626895][ T43] pwc: recv_control_msg error -32 req 02 val 2400 [ 685.650696][ T43] pwc: recv_control_msg error -32 req 02 val 2600 [ 685.657490][ T43] pwc: recv_control_msg error -32 req 02 val 2900 [ 685.677720][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.677802][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.687107][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 685.707594][ T10] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 685.707628][ T10] usb 4-1: config 0 has no interface number 0 [ 685.707673][ T10] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 685.710331][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 685.710356][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.710375][ T10] usb 4-1: Product: syz [ 685.710388][ T10] usb 4-1: Manufacturer: syz [ 685.710402][ T10] usb 4-1: SerialNumber: syz [ 685.749421][ T10] usb 4-1: config 0 descriptor?? [ 685.773494][ T9562] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 685.859596][ T43] pwc: recv_control_msg error -71 req 04 val 1100 [ 685.861721][ T43] pwc: recv_control_msg error -71 req 04 val 1200 [ 685.872626][ T43] pwc: Registered as video103. [ 685.875706][ T43] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12 [ 685.919694][ T43] usb 6-1: USB disconnect, device number 2 [ 685.993088][ T9562] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 686.153828][ T7244] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.324338][ T9567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.721'. [ 686.398039][ T10] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 686.398313][ T10] asix 4-1:0.188: probe with driver asix failed with error -61 [ 687.766512][ T8419] Bluetooth: hci5: command tx timeout [ 688.355518][ T7244] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 688.784498][ T9523] chnl_net:caif_netlink_parms(): no params data found [ 688.993802][ T9] usb 4-1: USB disconnect, device number 28 [ 689.715344][ T9578] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 690.768368][ T9523] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.768604][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.768832][ T9523] bridge_slave_0: entered allmulticast mode [ 690.801762][ T9523] bridge_slave_0: entered promiscuous mode [ 690.815215][ T9523] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.815355][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.815559][ T9523] bridge_slave_1: entered allmulticast mode [ 690.844843][ T9523] bridge_slave_1: entered promiscuous mode [ 690.906408][ T985] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 691.056342][ T985] usb 4-1: Using ep0 maxpacket: 16 [ 691.063048][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 691.063066][ T985] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 691.063088][ T985] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 691.063099][ T985] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.067733][ T985] usb 4-1: config 0 descriptor?? [ 691.922568][ T985] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 692.054605][ T985] corsair 0003:1B1C:1B02.0007: Failed to get K90 initial state (error -71). [ 693.126967][ T985] usb 4-1: USB disconnect, device number 29 [ 694.156625][ T9596] fido_id[9596]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 696.011666][ T9612] delete_channel: no stack [ 696.176319][ T5904] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 696.328481][ T5904] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.331425][ T5904] usb 7-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 696.331452][ T5904] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.331473][ T5904] usb 7-1: Product: syz [ 696.331487][ T5904] usb 7-1: Manufacturer: syz [ 696.331500][ T5904] usb 7-1: SerialNumber: syz [ 696.388959][ T5904] usb 7-1: config 0 descriptor?? [ 697.263167][ T5904] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 697.308325][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 697.309575][ T5904] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 697.309748][ T5904] usb 7-1: media controller created [ 697.312601][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.498268][ T5904] DVB: Unable to find symbol dib7000p_attach() [ 697.498280][ T5904] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 697.498288][ T5904] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 697.499207][ T5904] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 697.499242][ T5904] usb 7-1: media controller created [ 697.500761][ T5904] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 697.504742][ T5904] dib0700: the master dib7090 has to be initialized first [ 697.504751][ T5904] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 697.547536][ T985] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 697.686185][ T5904] rc_core: IR keymap rc-dib0700-rc5 not found [ 697.686205][ T5904] Registered IR keymap rc-empty [ 697.686948][ T5904] dvb-usb: could not initialize remote control. [ 697.686957][ T5904] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 697.726323][ T985] usb 1-1: config 1 interface 0 altsetting 245 bulk endpoint 0x1 has invalid maxpacket 1023 [ 697.726353][ T985] usb 1-1: config 1 interface 0 has no altsetting 0 [ 697.729153][ T985] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 697.729177][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.729196][ T985] usb 1-1: Product: syz [ 697.729210][ T985] usb 1-1: Manufacturer: syz [ 697.729223][ T985] usb 1-1: SerialNumber: syz [ 697.775328][ T9617] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 697.920097][ T5870] usb 7-1: USB disconnect, device number 3 [ 698.123078][ T5870] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 698.976648][ T9523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.013237][ T9523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.218841][ T985] usb 1-1: USB disconnect, device number 30 [ 702.743291][ T9523] team0: Port device team_slave_0 added [ 702.754264][ T9523] team0: Port device team_slave_1 added [ 704.181815][ T7244] bridge_slave_1: left allmulticast mode [ 704.181834][ T7244] bridge_slave_1: left promiscuous mode [ 704.181988][ T7244] bridge0: port 2(bridge_slave_1) entered disabled state [ 705.827655][ T7244] bridge_slave_0: left allmulticast mode [ 705.827674][ T7244] bridge_slave_0: left promiscuous mode [ 705.836373][ T7244] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.306296][ T5870] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 711.484645][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.484665][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.484676][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 711.484698][ T5870] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 711.484710][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.489264][ T5870] usb 7-1: config 0 descriptor?? [ 711.515942][ T7244] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 711.726724][ T7244] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 711.832280][ T7244] bond0 (unregistering): Released all slaves [ 711.927046][ T5870] hid_parser_main: 5 callbacks suppressed [ 711.927062][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927082][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927098][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927114][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927130][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927145][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927160][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927176][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927191][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 711.927206][ T5870] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 712.077870][ T5870] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 712.280333][ T5870] usb 7-1: USB disconnect, device number 4 [ 714.468473][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 714.468490][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.468516][ T9523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 719.803524][ T9523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 719.803535][ T9523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 719.803550][ T9523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 725.858397][ T8419] ================================================================== [ 725.858413][ T8419] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 725.858568][ T8419] Read of size 8 at addr ffffc9000e969008 by task kworker/u9:1/8419 [ 725.858584][ T8419] [ 725.858614][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.858642][ T8419] Tainted: [L]=SOFTLOCKUP [ 725.858649][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.858662][ T8419] Workqueue: hci0 hci_rx_work [ 725.858774][ T8419] Call Trace: [ 725.858789][ T8419] [ 725.858797][ T8419] dump_stack_lvl+0xe8/0x150 [ 725.858829][ T8419] print_report+0xba/0x230 [ 725.858853][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.858882][ T8419] kasan_report+0x117/0x150 [ 725.858967][ T8419] ? rt_spin_lock+0x20e/0x400 [ 725.859046][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.859079][ T8419] __list_del_entry_valid_or_report+0xb5/0x190 [ 725.859109][ T8419] kcov_remote_start+0x2af/0x710 [ 725.859133][ T8419] hci_rx_work+0x10f/0x1030 [ 725.859159][ T8419] ? process_scheduled_works+0xa25/0x1830 [ 725.859193][ T8419] process_scheduled_works+0xb02/0x1830 [ 725.859231][ T8419] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.859259][ T8419] ? assign_work+0x3d5/0x5e0 [ 725.859285][ T8419] worker_thread+0xa50/0xfc0 [ 725.859323][ T8419] kthread+0x388/0x470 [ 725.859342][ T8419] ? __pfx_worker_thread+0x10/0x10 [ 725.859368][ T8419] ? __pfx_kthread+0x10/0x10 [ 725.859388][ T8419] ret_from_fork+0x51e/0xb90 [ 725.859415][ T8419] ? __pfx_ret_from_fork+0x10/0x10 [ 725.859440][ T8419] ? __switch_to+0xc7d/0x1450 [ 725.859464][ T8419] ? __pfx_kthread+0x10/0x10 [ 725.859484][ T8419] ret_from_fork_asm+0x1a/0x30 [ 725.859509][ T8419] [ 725.859516][ T8419] [ 725.859521][ T8419] The buggy address belongs to a vmalloc virtual mapping [ 725.859537][ T8419] Memory state around the buggy address: [ 725.859547][ T8419] ffffc9000e968f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 725.859559][ T8419] ffffc9000e968f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 725.859573][ T8419] >ffffc9000e969000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 725.859583][ T8419] ^ [ 725.859593][ T8419] ffffc9000e969080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 725.859605][ T8419] ffffc9000e969100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 725.859615][ T8419] ================================================================== [ 725.859638][ T8419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 725.859653][ T8419] CPU: 1 UID: 0 PID: 8419 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 725.859678][ T8419] Tainted: [L]=SOFTLOCKUP [ 725.859685][ T8419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 725.859698][ T8419] Workqueue: hci0 hci_rx_work [ 725.859720][ T8419] Call Trace: [ 725.859728][ T8419] [ 725.859735][ T8419] vpanic+0x56c/0xa60 [ 725.859764][ T8419] ? __pfx_vpanic+0x10/0x10 [ 725.859795][ T8419] panic+0xc5/0xd0 [ 725.859821][ T8419] ? __pfx_panic+0x10/0x10 [ 725.859849][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.859882][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.859910][ T8419] check_panic_on_warn+0x89/0xb0 [ 725.859931][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.859960][ T8419] end_report+0x73/0x180 [ 725.859987][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.860015][ T8419] kasan_report+0x128/0x150 [ 725.860042][ T8419] ? rt_spin_lock+0x20e/0x400 [ 725.860062][ T8419] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 725.860096][ T8419] __list_del_entry_valid_or_report+0xb5/0x190 [ 725.860126][ T8419] kcov_remote_start+0x2af/0x710 [ 725.860149][ T8419] hci_rx_work+0x10f/0x1030 [ 725.860181][ T8419] ? process_scheduled_works+0xa25/0x1830 [ 725.860207][ T8419] process_scheduled_works+0xb02/0x1830 [ 725.860244][ T8419] ? __pfx_process_scheduled_works+0x10/0x10 [ 725.860272][ T8419] ? assign_work+0x3d5/0x5e0 [ 725.860299][ T8419] worker_thread+0xa50/0xfc0 [ 725.860336][ T8419] kthread+0x388/0x470 [ 725.860355][ T8419] ? __pfx_worker_thread+0x10/0x10 [ 725.860381][ T8419] ? __pfx_kthread+0x10/0x10 [ 725.860401][ T8419] ret_from_fork+0x51e/0xb90 [ 725.860428][ T8419] ? __pfx_ret_from_fork+0x10/0x10 [ 725.860453][ T8419] ? __switch_to+0xc7d/0x1450 [ 725.860476][ T8419] ? __pfx_kthread+0x10/0x10 [ 725.860496][ T8419] ret_from_fork_asm+0x1a/0x30 [ 725.860520][ T8419] [ 725.860773][ T8419] Kernel Offset: disabled